$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa File: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (raw, json) Hash identifier: nBiVyk+hSUYptzUCKKVHuojqXhq6+jenhf7H97IcXhc= Subject key identifier: A7:3B:D3:FA:0C:36:AC:13:E7:7C:B9:BE:68:12:CC:AC:85:47:A7:9E Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 6C474EEAD81D7903B46C2857766117D128DBB33C Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa Signing time: Sun 06 Sep 2026 22:47:55 +0000 ROA not before: Sun 06 Sep 2026 22:42:55 +0000 ROA not after: Sun 05 Sep 2027 22:47:55 +0000 asID: 23961 IP address blocks: 2407:b9c0:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:47:4e:ea:d8:1d:79:03:b4:6c:28:57:76:61:17:d1:28:db:b3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Sep 6 22:42:55 2026 GMT Not After : Sep 5 22:47:55 2027 GMT Subject: CN=A73BD3FA0C36AC13E77CB9BE6812CCAC8547A79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:b6:1d:d1:35:dc:58:bf:1e:83:8b:38:cf: 7d:6b:f2:9a:c5:28:e7:0d:40:78:76:71:84:9a:2f: c7:d7:35:2b:17:64:fb:cb:90:0c:d6:98:1a:3e:4c: 30:7d:4c:4d:26:f3:09:58:86:f7:c2:0d:98:17:23: ec:06:eb:d2:88:6c:e2:2d:ed:21:9f:12:1f:2e:5d: a5:e6:43:a5:55:6a:09:dd:05:6b:70:fc:a4:2b:ed: 35:17:2b:ee:07:f4:8f:76:fa:ae:e5:c9:07:d2:0e: 5f:44:49:21:66:40:03:95:d9:85:2b:77:d2:d0:96: db:fb:28:c2:48:b6:8e:6c:9f:61:89:31:75:4f:4f: 64:3c:46:d2:89:f1:32:e5:21:6a:87:c6:3e:eb:a1: 48:e6:c3:75:13:c0:04:1a:e0:91:14:7d:28:ea:c4: ba:ce:40:d6:b7:a5:4d:45:2b:4f:b4:8f:d1:f9:2a: 39:c8:90:cd:8c:fd:68:81:60:44:e1:e0:44:9a:d6: 7c:85:3c:4e:d4:44:fe:d8:13:98:25:41:db:88:47: be:aa:a4:c4:e0:fe:8c:bc:52:cf:ee:60:05:40:56: 35:7c:eb:96:38:0c:d8:c4:22:0c:3b:1f:5e:b9:c3: fb:17:48:3a:4a:e8:80:8d:1d:06:52:22:c1:01:b6: de:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3B:D3:FA:0C:36:AC:13:E7:7C:B9:BE:68:12:CC:AC:85:47:A7:9E X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b9c0:b000::/36 Signature Algorithm: sha256WithRSAEncryption 05:67:dd:d8:a8:b8:58:2c:a9:66:c2:c7:14:b0:8a:d9:19:30: ec:a6:93:31:0e:d5:53:22:7c:02:2e:3e:69:1d:cd:73:5e:ce: 9f:c2:d3:cc:af:2d:eb:79:f5:e3:3d:20:b1:07:08:fe:a6:b4: 01:60:8b:2e:60:d6:b1:ef:3f:a9:c6:4d:ee:79:dd:da:47:de: de:b6:14:60:bc:bf:f3:96:69:79:79:ef:62:fb:f5:19:f9:2f: 51:bb:4c:6c:d3:d8:3b:9a:bb:85:72:a0:98:35:0b:66:12:11: 65:06:75:72:46:ff:0a:ca:34:3b:a8:ef:7c:f6:ab:fa:3b:43: ae:f1:26:c0:ed:7b:dc:3f:4a:b1:fc:43:2d:3c:8a:96:9f:2d: 60:23:bf:ff:3a:13:2b:62:0a:fe:3e:f2:b4:2c:11:19:2e:39: 65:bf:d1:ee:14:e2:41:54:6b:36:b9:0a:24:0d:d5:7f:44:0e: a7:cb:7b:f6:86:31:90:ea:b2:bc:94:53:c3:d9:c2:ad:66:39: 4d:7e:7a:89:51:7a:08:31:59:82:e0:ca:57:e8:0d:46:6f:92: 0c:14:7d:78:ba:e9:ab:e3:a1:c5:f3:db:ba:d8:6b:54:ba:e1: 62:c6:d0:c9:f6:19:d9:70:c7:01:e2:31:c5:17:f6:c8:21:86: 93:ed:62:d7 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUbEdO6tgdeQO0bChXdmEX0SjbszwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI2MDkwNjIyNDI1NVoX DTI3MDkwNTIyNDc1NVowMzExMC8GA1UEAxMoQTczQkQzRkEwQzM2QUMxM0U3N0NC OUJFNjgxMkNDQUM4NTQ3QTc5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9bth3RNdxYvx6DizjPfWvymsUo5w1AeHZxhJovx9c1Kxdk+8uQDNaYGj5M MH1MTSbzCViG98INmBcj7Abr0ohs4i3tIZ8SHy5dpeZDpVVqCd0Fa3D8pCvtNRcr 7gf0j3b6ruXJB9IOX0RJIWZAA5XZhSt30tCW2/sowki2jmyfYYkxdU9PZDxG0onx MuUhaofGPuuhSObDdRPABBrgkRR9KOrEus5A1relTUUrT7SP0fkqOciQzYz9aIFg ROHgRJrWfIU8TtRE/tgTmCVB24hHvqqkxOD+jLxSz+5gBUBWNXzrljgM2MQiDDsf XrnD+xdIOkrogI0dBlIiwQG23k8CAwEAAaOCAfkwggH1MB0GA1UdDgQWBBSnO9P6 DDasE+d8ub5oEsyshUennjAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjCBggYIKwYBBQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JzeW5j LnJwLmtpL3JlcG8vbWlzYWthaW8vMC8zMjM0MzAzNzNhNjIzOTYzMzAzYTYyMzAz MDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzMzM5MzYzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG BCQHucCwMA0GCSqGSIb3DQEBCwUAA4IBAQAFZ93YqLhYLKlmwscUsIrZGTDsppMx DtVTInwCLj5pHc1zXs6fwtPMry3refXjPSCxBwj+prQBYIsuYNax7z+pxk3ued3a R97ethRgvL/zlml5ee9i+/UZ+S9Ru0xs09g7mruFcqCYNQtmEhFlBnVyRv8KyjQ7 qO989qv6O0Ou8SbA7XvcP0qx/EMtPIqWny1gI7//OhMrYgr+PvK0LBEZLjllv9Hu FOJBVGs2uQokDdV/RA6ny3v2hjGQ6rK8lFPD2cKtZjlNfnqJUXoIMVmC4MpX6A1G b5IMFH14uumr46HF89u62GtUuuFixtDJ9hnZcMcB4jHFF/bIIYaT7WLX -----END CERTIFICATE-----Generated at Thu Sep 10 20:24:07 2026 by rpki-client