$ rpki-client -vvf repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/323430373a396363303a3a2f33322d3332203d3e20313431393833.roa File: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (raw, json) Hash identifier: QLawy/JoU9dF3OpTqDQLfk1eRjEWgB8j8LAqMF/DItA= Subject key identifier: 72:D9:8B:C5:D6:9D:D3:E1:7D:48:FD:B0:EB:39:01:B8:72:8B:BD:A8 Certificate issuer: /CN=D85F6D41E807D8825356A681A7518FA27664A965 Certificate serial: 673B332307B3FAD1354D483FBE25D71DF7096EAD Authority key identifier: D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/323430373a396363303a3a2f33322d3332203d3e20313431393833.roa Signing time: Fri 03 Apr 2026 05:02:54 +0000 ROA not before: Fri 03 Apr 2026 04:57:54 +0000 ROA not after: Fri 02 Apr 2027 05:02:54 +0000 asID: 141983 IP address blocks: 2407:9cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3b:33:23:07:b3:fa:d1:35:4d:48:3f:be:25:d7:1d:f7:09:6e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F6D41E807D8825356A681A7518FA27664A965 Validity Not Before: Apr 3 04:57:54 2026 GMT Not After : Apr 2 05:02:54 2027 GMT Subject: CN=72D98BC5D69DD3E17D48FDB0EB3901B8728BBDA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:5a:ef:1c:14:56:19:ec:7f:90:74:24:79: 0d:9e:96:93:34:40:19:73:12:d0:3e:08:a6:88:b0: c0:12:5d:84:e0:3c:47:30:66:c4:c7:3d:8a:f8:eb: 21:5c:a7:e9:42:33:98:98:27:bb:8b:4e:51:2f:22: 38:f3:ad:44:b5:05:f4:44:26:48:20:63:ee:b6:1b: 43:ab:04:7c:56:28:8d:cd:ea:95:20:5b:82:f0:9b: 0b:62:c1:97:2c:67:87:75:72:01:18:42:9f:bf:3f: ad:78:2e:3c:5e:26:a9:96:f4:b8:53:f6:ca:ed:17: 0b:7a:72:d0:40:3a:a0:14:b4:01:fd:1e:d4:96:44: d6:77:52:65:84:41:01:2e:5a:54:a1:54:3f:64:12: 81:b1:b4:0c:a9:ef:20:cd:c7:ab:7d:70:1a:0e:7d: 33:dd:e3:d4:7e:ee:46:d8:f6:f7:1c:56:be:18:d8: 6f:99:3e:ef:e6:28:3e:e6:61:11:2e:80:bb:5f:80: 98:50:c4:de:30:20:e6:0c:a4:04:77:b0:fa:bf:64: 58:9c:b4:25:3b:93:1d:c9:ef:70:2b:46:52:af:40: d3:cb:97:3d:de:bc:f2:94:db:4d:8b:e3:4e:5d:bd: 48:8c:a1:20:82:d5:7b:e8:89:3d:c9:93:75:dd:02: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D9:8B:C5:D6:9D:D3:E1:7D:48:FD:B0:EB:39:01:B8:72:8B:BD:A8 X509v3 Authority Key Identifier: keyid:D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/323430373a396363303a3a2f33322d3332203d3e20313431393833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9cc0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:de:e5:4a:42:f2:4a:cf:32:fe:f0:25:76:d4:59:13:a1:b5: 2e:b3:d6:14:11:fe:d5:b0:1d:74:bd:56:03:95:6f:53:a2:5f: 49:34:2f:33:05:c6:cf:6b:b7:a2:e4:8e:36:5e:5f:6f:e1:15: ce:63:f5:4f:41:3b:b7:87:1d:30:d9:01:be:4c:fb:f6:75:dd: 86:57:40:df:17:86:eb:27:97:92:f5:9d:e6:f6:e0:d4:89:f7: 80:ef:3b:48:3b:8c:76:86:9a:9a:d1:cb:06:97:4e:03:40:32: 53:36:e6:6d:f9:e2:53:a2:48:95:54:1e:12:d5:54:da:6b:4c: 2c:76:0b:be:ca:cc:f9:a2:40:c8:03:c3:39:48:fb:cd:fb:a6: f7:41:61:ca:9f:a4:d1:15:ea:2e:34:ac:28:00:6e:26:5b:9f: 0b:2e:c1:30:d9:50:31:a6:38:e7:1d:ec:33:94:0b:9a:e8:19: 17:f6:f1:ae:3b:1e:20:41:40:73:e1:fd:65:f0:2a:53:12:65: 07:9b:42:ad:5a:94:bb:10:ef:f4:a6:54:c8:18:18:a5:bf:a5: 3f:ce:3e:a5:ee:56:ba:2e:64:aa:c5:48:7a:90:e4:3a:20:b2: b2:5d:ae:ed:56:00:59:24:6c:84:38:b4:3a:30:47:e4:c3:d5: 33:ff:37:0d -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUZzszIwez+tE1TUg/viXXHfcJbq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3 NjY0QTk2NTAeFw0yNjA0MDMwNDU3NTRaFw0yNzA0MDIwNTAyNTRaMDMxMTAvBgNV BAMTKDcyRDk4QkM1RDY5REQzRTE3RDQ4RkRCMEVCMzkwMUI4NzI4QkJEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NlrvHBRWGex/kHQkeQ2elpM0 QBlzEtA+CKaIsMASXYTgPEcwZsTHPYr46yFcp+lCM5iYJ7uLTlEvIjjzrUS1BfRE JkggY+62G0OrBHxWKI3N6pUgW4LwmwtiwZcsZ4d1cgEYQp+/P614LjxeJqmW9LhT 9srtFwt6ctBAOqAUtAH9HtSWRNZ3UmWEQQEuWlShVD9kEoGxtAyp7yDNx6t9cBoO fTPd49R+7kbY9vccVr4Y2G+ZPu/mKD7mYREugLtfgJhQxN4wIOYMpAR3sPq/ZFic tCU7kx3J73ArRlKvQNPLlz3evPKU202L405dvUiMoSCC1XvoiT3Jk3XdAkHXAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUctmLxdad0+F9SP2w6zkBuHKLvagwHwYDVR0j BBgwFoAU2F9tQegH2IJTVqaBp1GPonZkqWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmJlZGYzYS1kN2QxLTQ5YTYtOTNlZC1iMjc3ZjFmN2E2ZWIvMC9EODVGNkQ0MUU4 MDdEODgyNTM1NkE2ODFBNzUxOEZBMjc2NjRBOTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3NjY0 QTk2NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2YmVkZjNhLWQ3ZDEtNDlhNi05 M2VkLWIyNzdmMWY3YTZlYi8wLzMyMzQzMDM3M2EzOTYzNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTM5MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHnMAwDQYJKoZI hvcNAQELBQADggEBAH3e5UpC8krPMv7wJXbUWROhtS6z1hQR/tWwHXS9VgOVb1Oi X0k0LzMFxs9rt6LkjjZeX2/hFc5j9U9BO7eHHTDZAb5M+/Z13YZXQN8Xhusnl5L1 neb24NSJ94DvO0g7jHaGmprRywaXTgNAMlM25m354lOiSJVUHhLVVNprTCx2C77K zPmiQMgDwzlI+837pvdBYcqfpNEV6i40rCgAbiZbnwsuwTDZUDGmOOcd7DOUC5ro GRf28a47HiBBQHPh/WXwKlMSZQebQq1alLsQ7/SmVMgYGKW/pT/OPqXuVrouZKrF SHqQ5DogsrJdru1WAFkkbIQ4tDowR+TD1TP/Nw0= -----END CERTIFICATE-----Generated at Fri Apr 17 20:21:57 2026 by rpki-client