$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa File: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (raw, json) Hash identifier: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I= Subject key identifier: BD:FD:13:FD:C3:08:27:A2:D6:DC:CF:88:C4:18:77:CD:B8:D6:03:8B Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 343FFF9C17D696E1E2FBD440F78402A2596972F2 Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa Signing time: Sun 05 Oct 2025 22:31:18 +0000 ROA not before: Sun 05 Oct 2025 22:26:18 +0000 ROA not after: Sun 04 Oct 2026 22:31:18 +0000 asID: 23961 IP address blocks: 2407:b9c0:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 19:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:3f:ff:9c:17:d6:96:e1:e2:fb:d4:40:f7:84:02:a2:59:69:72:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Oct 5 22:26:18 2025 GMT Not After : Oct 4 22:31:18 2026 GMT Subject: CN=BDFD13FDC30827A2D6DCCF88C41877CDB8D6038B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:09:01:77:36:ee:59:45:a7:4b:c9:74:23: ca:0b:c5:84:80:a1:c7:3d:9a:8e:3f:b1:6a:d2:79: 8a:88:62:e0:7f:15:51:18:a5:cb:d3:a3:c6:7d:12: e7:b3:8a:83:37:49:92:1d:0b:6e:ea:a9:08:ec:24: 91:a1:bf:fb:a6:50:ed:7b:f5:0a:01:94:74:8a:b5: 75:6d:42:d3:6d:79:e2:35:2f:50:e6:29:72:d1:1c: d0:54:ba:45:28:77:f5:16:88:20:5b:a1:83:53:32: 71:8f:e9:d1:aa:b2:bd:a2:fd:e3:57:d2:28:a9:8b: d1:2b:96:b6:16:16:29:7b:b4:61:95:d7:ec:2d:2c: ad:32:ca:32:b2:01:95:14:67:49:a3:1d:7a:08:3b: 1a:66:53:cc:5f:d9:73:a5:0a:47:e5:8a:99:ea:5e: 51:a5:4e:0e:e2:ab:fe:28:c2:0a:ab:3e:6c:ed:20: 28:d4:19:68:60:14:c3:44:88:50:c4:61:56:d8:4a: c8:45:b9:d0:65:57:9e:c1:df:01:cb:93:0a:b7:8e: 49:c3:19:97:fb:8b:ae:4d:27:2b:34:33:b8:b6:a6: 50:d2:a5:0f:6e:00:dc:29:48:62:57:c8:4c:66:1f: 3f:4e:80:8a:71:01:33:37:0a:fc:2e:53:45:00:16: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FD:13:FD:C3:08:27:A2:D6:DC:CF:88:C4:18:77:CD:B8:D6:03:8B X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b9c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 3c:2d:f6:4b:a2:61:b4:84:b5:69:af:b6:ee:10:55:80:95:38: 45:de:94:c7:28:cd:31:41:6a:9c:33:a0:d6:9e:21:d9:a0:b4: ff:89:5f:38:0e:96:cc:8f:c9:d2:0f:28:fb:5d:e3:26:39:a0: 31:59:d6:83:50:26:c9:60:f9:a0:a5:69:ee:0c:c5:03:07:52: 7a:03:46:f7:f6:e5:fb:9a:59:36:cd:ed:57:43:46:0a:f7:53: cb:45:32:d7:09:bf:52:6e:0d:a2:46:76:f6:3e:c1:b0:c3:58: a1:61:31:89:64:9a:3d:a7:12:ca:0a:82:0b:60:29:fc:bd:be: b2:3c:1c:f1:11:fe:fd:8f:8d:af:f3:16:54:65:bc:93:e5:fc: 1c:3c:e9:ba:f7:88:d5:c0:3a:1c:5d:9f:d1:66:bb:67:fa:79: 83:d6:80:88:29:61:0b:64:3f:a8:e5:ff:1d:12:c5:aa:bc:57: 66:74:cd:8f:1b:f6:83:6f:ab:ab:d0:be:c7:aa:94:2d:b0:62: ee:a8:c2:ed:72:b0:19:94:25:16:8d:47:a0:a6:24:69:6e:c1: a6:58:d1:e1:e9:c2:90:bf:e0:83:79:c7:b7:76:68:0d:48:4b: d2:83:09:fe:37:73:60:27:94:8c:da:ef:b7:ef:b2:e1:c8:0d: ff:f8:18:21 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUND//nBfWluHi+9RA94QCollpcvIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI1MTAwNTIyMjYxOFoX DTI2MTAwNDIyMzExOFowMzExMC8GA1UEAxMoQkRGRDEzRkRDMzA4MjdBMkQ2REND Rjg4QzQxODc3Q0RCOEQ2MDM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKOCQF3Nu5ZRadLyXQjygvFhIChxz2ajj+xatJ5iohi4H8VURily9Ojxn0S 57OKgzdJkh0LbuqpCOwkkaG/+6ZQ7Xv1CgGUdIq1dW1C02154jUvUOYpctEc0FS6 RSh39RaIIFuhg1MycY/p0aqyvaL941fSKKmL0SuWthYWKXu0YZXX7C0srTLKMrIB lRRnSaMdegg7GmZTzF/Zc6UKR+WKmepeUaVODuKr/ijCCqs+bO0gKNQZaGAUw0SI UMRhVthKyEW50GVXnsHfAcuTCreOScMZl/uLrk0nKzQzuLamUNKlD24A3ClIYlfI TGYfP06AinEBMzcK/C5TRQAWtU8CAwEAAaOCAfkwggH1MB0GA1UdDgQWBBS9/RP9 wwgnotbcz4jEGHfNuNYDizAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjCBggYIKwYBBQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JzeW5j LnJwLmtpL3JlcG8vbWlzYWthaW8vMC8zMjM0MzAzNzNhNjIzOTYzMzAzYTY2MzAz MDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzMzM5MzYzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG BCQHucDwMA0GCSqGSIb3DQEBCwUAA4IBAQA8LfZLomG0hLVpr7buEFWAlThF3pTH KM0xQWqcM6DWniHZoLT/iV84DpbMj8nSDyj7XeMmOaAxWdaDUCbJYPmgpWnuDMUD B1J6A0b39uX7mlk2ze1XQ0YK91PLRTLXCb9Sbg2iRnb2PsGww1ihYTGJZJo9pxLK CoILYCn8vb6yPBzxEf79j42v8xZUZbyT5fwcPOm694jVwDocXZ/RZrtn+nmD1oCI KWELZD+o5f8dEsWqvFdmdM2PG/aDb6ur0L7HqpQtsGLuqMLtcrAZlCUWjUegpiRp bsGmWNHh6cKQv+CDece3dmgNSEvSgwn+N3NgJ5SM2u+377LhyA3/+Bgh -----END CERTIFICATE-----Generated at Fri Oct 24 03:36:45 2025 by rpki-client