$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa File: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (raw, json) Hash identifier: MO784yIIV7U51Tb2lyJRinggaCk22EcI9qQq6Cn0qMM= Subject key identifier: 93:10:4A:DF:16:6B:71:62:43:7B:D5:29:B9:3E:46:94:59:EB:F5:F0 Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Certificate serial: 08E08A57AB02CBD769CA6996B38CAEF1F9DCD94F Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa Signing time: Mon 13 Apr 2026 12:00:03 +0000 ROA not before: Mon 13 Apr 2026 11:55:03 +0000 ROA not after: Mon 12 Apr 2027 12:00:03 +0000 asID: 152770 IP address blocks: 2001:df3:da40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e0:8a:57:ab:02:cb:d7:69:ca:69:96:b3:8c:ae:f1:f9:dc:d9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637 Validity Not Before: Apr 13 11:55:03 2026 GMT Not After : Apr 12 12:00:03 2027 GMT Subject: CN=93104ADF166B7162437BD529B93E469459EBF5F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:af:ca:c4:02:e8:13:1e:aa:35:5d:ba:9c: 10:29:e1:3a:51:af:c9:d1:a2:7d:db:b6:ea:3c:9a: be:ae:a2:d3:df:85:11:38:51:63:56:59:93:eb:07: 90:a2:f9:53:6b:18:57:69:24:e7:9e:93:33:29:8d: 84:36:8f:89:fa:e8:ee:79:10:59:13:d2:ce:e1:85: 1f:fd:0b:00:36:95:b1:94:c7:5b:b2:0d:07:2a:25: a4:ea:88:9e:c3:e4:c0:18:c6:f7:86:f1:4e:76:17: 3f:ee:80:03:19:f0:ef:3d:74:fa:4f:81:5a:fd:de: d9:c2:56:9e:16:2b:d2:07:a4:b5:54:22:78:1b:4a: 4e:74:8e:5a:47:a8:39:19:ef:ab:09:5b:0a:fc:c6: a3:02:d4:dd:01:cd:d4:0f:a9:53:82:13:4c:77:ef: 62:6b:86:d6:45:0c:51:ed:1a:41:ac:a1:ba:60:c4: c8:9c:cf:e0:32:14:2a:84:6b:99:15:0c:8b:04:ba: a0:38:83:75:af:48:3e:48:7c:96:6b:b1:d7:56:7a: 01:29:dc:dd:19:a7:86:8b:7a:ab:70:65:62:f9:fa: 60:cd:59:60:a9:ce:3d:72:13:65:3d:3f:c7:27:d8: 50:4c:ad:1c:64:c3:03:d7:9d:6b:19:bc:07:f9:a8: 86:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:10:4A:DF:16:6B:71:62:43:7B:D5:29:B9:3E:46:94:59:EB:F5:F0 X509v3 Authority Key Identifier: keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:da40::/48 Signature Algorithm: sha256WithRSAEncryption 77:49:f9:47:2e:8e:99:be:50:c4:f5:9e:5d:38:0e:fa:77:6c: 81:1b:f4:ab:5c:75:80:b3:41:5f:9b:c2:ef:d0:79:47:2a:48: 1f:3a:72:29:99:aa:6d:a5:e5:96:71:b4:92:1a:77:5f:6c:2f: d0:41:76:e8:ec:61:a7:8a:22:b1:10:f3:e0:93:6b:d1:79:cc: 68:0b:b0:2c:e9:77:5e:84:da:63:3e:d2:60:c5:ce:8a:19:6c: 12:aa:0d:ff:8c:54:1a:05:6f:c0:ff:68:5e:89:da:99:33:69: b5:fd:49:92:ae:2e:3c:7c:54:4d:ae:ed:98:44:77:d8:8e:9a: e2:28:02:11:0f:5c:c7:dc:a0:0a:26:38:b6:f6:5e:f4:7a:2c: 9e:92:f9:14:3c:d8:17:42:bb:71:2e:d3:62:c5:c9:da:f6:11: 65:70:48:93:e0:e2:d6:32:2e:34:3e:dc:71:8a:4a:f5:79:46: 2a:c0:18:2f:98:bd:ea:99:1a:64:2e:e4:ec:50:23:27:62:ae: 09:3c:80:16:be:57:0b:6f:dc:ef:4c:9d:73:7b:40:20:99:ba: 36:67:a4:69:74:33:81:d7:e0:f0:3b:3f:ea:46:95:3f:92:b5: 50:dd:6f:97:ba:4d:2d:48:30:22:6d:01:6e:2b:43:02:f8:98: a9:81:65:3d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCOCKV6sCy9dpymmWs4yu8fnc2U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEw QTc5RTYzNzAeFw0yNjA0MTMxMTU1MDNaFw0yNzA0MTIxMjAwMDNaMDMxMTAvBgNV BAMTKDkzMTA0QURGMTY2QjcxNjI0MzdCRDUyOUI5M0U0Njk0NTlFQkY1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSoK/KxALoEx6qNV26nBAp4TpR r8nRon3btuo8mr6uotPfhRE4UWNWWZPrB5Ci+VNrGFdpJOeekzMpjYQ2j4n66O55 EFkT0s7hhR/9CwA2lbGUx1uyDQcqJaTqiJ7D5MAYxveG8U52Fz/ugAMZ8O89dPpP gVr93tnCVp4WK9IHpLVUIngbSk50jlpHqDkZ76sJWwr8xqMC1N0BzdQPqVOCE0x3 72JrhtZFDFHtGkGsobpgxMicz+AyFCqEa5kVDIsEuqA4g3WvSD5IfJZrsddWegEp 3N0Zp4aLeqtwZWL5+mDNWWCpzj1yE2U9P8cn2FBMrRxkwwPXnWsZvAf5qIZ7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUkxBK3xZrcWJDe9UpuT5GlFnr9fAwHwYDVR0j BBgwFoAUzkFgy3AA8t3pyHKR+Q1xwQp55jcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMS9DRTQxNjBDQjcw MDBGMkRERTlDODcyOTFGOTBENzFDMTBBNzlFNjM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U0MTYwQ0I3MDAwRjJEREU5Qzg3MjkxRjkwRDcxQzEwQTc5 RTYzNy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkZTJkMDkwLTQ3NjYtNDc1Yy05 Y2VmLTdiZWI1ODVjZjI0MS8xLzMyMzAzMDMxM2E2NDY2MzMzYTY0NjEzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzczNzMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89pAMA0GCSqGSIb3DQEBCwUAA4IBAQB3SflHLo6ZvlDE9Z5dOA76d2yBG/SrXHWA s0Ffm8Lv0HlHKkgfOnIpmaptpeWWcbSSGndfbC/QQXbo7GGniiKxEPPgk2vRecxo C7As6XdehNpjPtJgxc6KGWwSqg3/jFQaBW/A/2heidqZM2m1/UmSri48fFRNru2Y RHfYjpriKAIRD1zH3KAKJji29l70eiyekvkUPNgXQrtxLtNixcna9hFlcEiT4OLW Mi40Ptxxikr1eUYqwBgvmL3qmRpkLuTsUCMnYq4JPIAWvlcLb9zvTJ1ze0Agmbo2 Z6RpdDOB1+DwOz/qRpU/krVQ3W+Xuk0tSDAibQFuK0MC+JipgWU9 -----END CERTIFICATE-----Generated at Sat Apr 18 08:56:23 2026 by rpki-client