$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20393137.roa File: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (raw, json) Hash identifier: buB7BeNJJpfUqSepABWtofQu4tnwgLSJabt42xNftz0= Subject key identifier: 80:15:C2:26:DC:55:07:FF:44:92:32:C8:F7:31:CE:49:BD:6E:59:B7 Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 67299533A80610B0081E01BA9641FD8A748E8D97 Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20393137.roa Signing time: Sun 06 Sep 2026 22:47:54 +0000 ROA not before: Sun 06 Sep 2026 22:42:54 +0000 ROA not after: Sun 05 Sep 2027 22:47:54 +0000 asID: 917 IP address blocks: 2407:b9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:29:95:33:a8:06:10:b0:08:1e:01:ba:96:41:fd:8a:74:8e:8d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Sep 6 22:42:54 2026 GMT Not After : Sep 5 22:47:54 2027 GMT Subject: CN=8015C226DC5507FF449232C8F731CE49BD6E59B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:a3:55:9a:cc:ac:b6:12:d5:f6:f3:41:a3: 8d:87:05:7c:bc:c7:59:2c:a8:96:14:04:2f:6d:26: e0:ce:25:d8:e3:db:09:b1:9d:0d:c1:6a:7c:8e:fc: 54:0c:15:60:8f:d3:03:d1:73:32:a1:a5:01:0f:99: 28:ea:4b:20:1a:52:24:1e:c6:d7:e5:84:4e:0c:40: fb:33:5a:8a:58:e8:70:f9:68:29:4b:90:08:7c:e9: cc:7e:47:6e:35:01:64:99:e0:a9:ca:41:cf:29:3c: 2d:1d:28:23:db:04:7c:52:9a:d0:07:6e:86:ac:43: 15:4a:5b:2e:b1:a5:a1:02:56:88:08:24:24:b2:4d: 51:d8:4d:51:fb:2d:44:cd:d3:6f:ac:79:fd:5a:cf: 8d:54:4a:dd:19:71:c0:bc:e3:3f:f0:4a:6b:99:79: d8:c2:83:e9:66:25:02:70:a4:a5:b1:66:7b:cd:53: ab:07:c1:1a:06:e9:b4:ef:8e:58:08:46:9f:39:68: 0a:f4:44:34:9d:09:4f:3b:e5:63:8d:4b:80:f8:f9: 45:96:46:89:8a:5a:b5:1d:da:b4:c1:d0:13:58:e6: fb:36:a9:ee:24:2e:5a:c5:c1:66:e0:9f:ba:f0:04: 80:3f:85:82:e8:02:a1:15:13:f8:21:62:4a:1b:6c: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:15:C2:26:DC:55:07:FF:44:92:32:C8:F7:31:CE:49:BD:6E:59:B7 X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a3a2f33322d3438203d3e20393137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b9c0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:0d:28:40:90:dc:3f:d5:42:51:dd:a7:47:8c:f8:4f:eb:40: 37:f5:42:69:ae:62:17:d7:ba:af:9c:f6:22:a9:79:4e:b8:d7: 1c:34:ae:a6:84:bd:29:65:3e:2b:d9:2f:ce:70:43:c7:43:a1: 53:bd:09:55:1e:2f:92:18:64:05:8b:f1:71:44:88:1f:09:15: f0:41:8c:72:4c:2a:28:e0:01:47:79:7d:6c:e7:d8:96:53:74: cf:f0:90:1b:32:ca:e6:05:f4:9f:5a:18:2b:fd:8b:a3:af:9e: e1:a7:46:ec:70:98:0b:61:ef:9b:0a:a1:62:9e:e2:8b:0d:f3: ac:7a:b4:14:76:1a:e0:0a:48:7a:7b:42:14:ec:35:4e:e0:6a: c1:1c:86:f9:66:dc:58:9e:2a:67:89:77:0b:66:1e:b2:46:2a: 9e:c8:9f:9c:b1:0d:fa:92:9c:36:8e:41:a1:a5:c4:85:77:77: b1:8e:c8:f8:75:cb:d3:91:b4:82:f6:5e:bf:06:4a:91:cc:e3: 24:93:c6:52:5b:4a:d5:67:4f:61:b9:27:96:ce:d6:a0:e1:53: 98:d4:fe:19:dc:b7:4c:d3:33:86:09:63:d0:2f:28:d8:ef:bf: 53:fa:95:dc:b6:3a:64:cf:ea:95:0b:0b:b9:06:4f:81:e5:87: 84:ce:3b:c2 -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUZymVM6gGELAIHgG6lkH9inSOjZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI2MDkwNjIyNDI1NFoX DTI3MDkwNTIyNDc1NFowMzExMC8GA1UEAxMoODAxNUMyMjZEQzU1MDdGRjQ0OTIz MkM4RjczMUNFNDlCRDZFNTlCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqxo1WazKy2EtX280GjjYcFfLzHWSyolhQEL20m4M4l2OPbCbGdDcFqfI78 VAwVYI/TA9FzMqGlAQ+ZKOpLIBpSJB7G1+WETgxA+zNailjocPloKUuQCHzpzH5H bjUBZJngqcpBzyk8LR0oI9sEfFKa0AduhqxDFUpbLrGloQJWiAgkJLJNUdhNUfst RM3Tb6x5/VrPjVRK3RlxwLzjP/BKa5l52MKD6WYlAnCkpbFme81TqwfBGgbptO+O WAhGnzloCvRENJ0JTzvlY41LgPj5RZZGiYpatR3atMHQE1jm+zap7iQuWsXBZuCf uvAEgD+FgugCoRUT+CFiShtsDTUCAwEAAaOCAekwggHlMB0GA1UdDgQWBBSAFcIm 3FUH/0SSMsj3Mc5JvW5ZtzAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjB0BggrBgEFBQcBCwRoMGYwZAYIKwYBBQUHMAuGWHJzeW5jOi8vcnN5bmMu cnAua2kvcmVwby9taXNha2Fpby8wLzMyMzQzMDM3M2E2MjM5NjMzMDNhM2EyZjMz MzIyZDM0MzgyMDNkM2UyMDM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHucAwDQYJKoZIhvcN AQELBQADggEBAA4NKECQ3D/VQlHdp0eM+E/rQDf1QmmuYhfXuq+c9iKpeU641xw0 rqaEvSllPivZL85wQ8dDoVO9CVUeL5IYZAWL8XFEiB8JFfBBjHJMKijgAUd5fWzn 2JZTdM/wkBsyyuYF9J9aGCv9i6OvnuGnRuxwmAth75sKoWKe4osN86x6tBR2GuAK SHp7QhTsNU7gasEchvlm3FieKmeJdwtmHrJGKp7In5yxDfqSnDaOQaGlxIV3d7GO yPh1y9ORtIL2Xr8GSpHM4ySTxlJbStVnT2G5J5bO1qDhU5jU/hnct0zTM4YJY9Av KNjvv1P6ldy2OmTP6pULC7kGT4Hlh4TOO8I= -----END CERTIFICATE-----Generated at Thu Sep 10 20:23:37 2026 by rpki-client