$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa File: 323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa (raw, json) Hash identifier: LcQ4CetZUkMH7Rvj9sVRz+nMJ5rJbPUeEXrVNt9jxkA= Subject key identifier: 92:A1:AE:19:35:E5:DC:BB:41:26:59:FC:D8:C3:4F:14:BC:B8:B9:27 Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 0CD3F9D4AD7E17439395B72A9418A7D6891AD7C7 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa Signing time: Mon 06 Apr 2026 06:00:00 +0000 ROA not before: Mon 06 Apr 2026 05:55:00 +0000 ROA not after: Mon 05 Apr 2027 06:00:00 +0000 asID: 45305 IP address blocks: 2001:df1:6380::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d3:f9:d4:ad:7e:17:43:93:95:b7:2a:94:18:a7:d6:89:1a:d7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Apr 6 05:55:00 2026 GMT Not After : Apr 5 06:00:00 2027 GMT Subject: CN=92A1AE1935E5DCBB412659FCD8C34F14BCB8B927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:15:e7:60:94:17:01:fd:f9:c8:99:0f:76: 3f:a9:9e:28:b5:67:03:e7:4e:80:24:a0:48:0b:be: af:d2:f8:2d:3a:62:1a:1e:9e:5c:c0:56:e3:46:b5: bc:09:b7:8a:c8:59:2a:22:6c:ea:8a:98:0f:ce:89: ad:05:8c:89:00:d2:e9:7a:b2:b1:7e:f3:58:14:89: 6c:32:5a:e0:cf:14:18:a7:09:eb:fa:f6:44:cf:0a: 6d:89:94:eb:53:74:25:5e:73:25:d0:37:b5:98:ea: db:92:3b:ea:ac:1b:7e:3f:be:b5:ca:56:32:80:23: 87:c7:1a:20:f4:5a:07:67:38:33:d9:3c:1c:8d:eb: 2f:ab:67:0e:a0:04:7b:a8:f0:b6:16:6e:b6:17:89: 45:50:63:ca:d3:ae:af:ef:45:d1:e1:e5:2c:4f:a1: 2b:17:b1:b6:ca:fc:80:61:d4:e2:56:f0:7f:fb:e4: 33:06:42:93:82:5b:4d:eb:cd:6e:78:95:40:02:d7: f7:96:54:01:8b:f4:3a:1f:5c:a9:84:8f:1e:f9:1f: 82:b8:1d:89:38:ac:d4:f7:6a:3f:98:35:46:ac:cf: da:23:ab:56:d5:7e:c0:c8:04:92:e6:93:f3:40:3a: 36:dc:cd:81:84:93:68:a0:a7:84:ba:af:c0:1b:08: b2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A1:AE:19:35:E5:DC:BB:41:26:59:FC:D8:C3:4F:14:BC:B8:B9:27 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/323030313a6466313a363338303a3a2f34382d3438203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:6380::/48 Signature Algorithm: sha256WithRSAEncryption 6b:88:3c:a2:7a:21:60:78:06:d6:19:b0:80:5c:af:53:8a:f8: 01:c5:c1:84:a7:aa:8f:c2:12:f1:59:df:c7:d4:0b:39:5d:1d: 0d:e7:d4:de:c1:b9:5f:86:36:ab:c7:7c:da:a1:39:8d:8e:4d: 45:d9:ea:14:94:b8:99:d6:ef:07:e7:3e:d0:0c:06:91:5c:b4: 78:ef:43:f1:27:29:7f:21:3e:c5:43:5c:f0:a5:40:04:84:f3: fb:be:24:a6:5f:3f:1f:a5:bb:05:06:84:74:80:42:9d:d0:68: 4f:11:f7:f2:4f:12:dd:fa:6e:72:97:91:f0:df:01:84:be:1d: df:ad:ce:70:50:2d:fa:76:a8:22:fa:10:1f:80:bc:f5:22:4d: 70:70:c5:59:3a:75:72:7d:bc:ad:e0:db:d9:0c:0b:29:39:f3: 93:b4:d1:e9:a6:e9:9f:05:b7:30:25:28:c5:f2:b5:0c:75:bb: 46:c0:f3:57:1c:31:b8:74:16:ab:41:c0:81:13:8f:9e:d8:b8: fc:b1:c7:5b:59:df:eb:97:55:9b:a7:60:56:39:7b:75:20:47: 9b:12:10:6a:5d:7e:b3:e0:bd:79:cf:c2:c4:d4:7a:1c:db:de: 1c:77:c1:ca:08:91:dd:2e:cf:27:e1:98:0e:40:6d:cb:ab:fe: 45:7f:05:b6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUDNP51K1+F0OTlbcqlBin1oka18cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNjA0MDYwNTU1MDBaFw0yNzA0MDUwNjAwMDBaMDMxMTAvBgNV BAMTKDkyQTFBRTE5MzVFNURDQkI0MTI2NTlGQ0Q4QzM0RjE0QkNCOEI5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYShXnYJQXAf35yJkPdj+pnii1 ZwPnToAkoEgLvq/S+C06YhoenlzAVuNGtbwJt4rIWSoibOqKmA/Oia0FjIkA0ul6 srF+81gUiWwyWuDPFBinCev69kTPCm2JlOtTdCVecyXQN7WY6tuSO+qsG34/vrXK VjKAI4fHGiD0WgdnODPZPByN6y+rZw6gBHuo8LYWbrYXiUVQY8rTrq/vRdHh5SxP oSsXsbbK/IBh1OJW8H/75DMGQpOCW03rzW54lUAC1/eWVAGL9DofXKmEjx75H4K4 HYk4rNT3aj+YNUasz9ojq1bVfsDIBJLmk/NAOjbczYGEk2igp4S6r8AbCLL5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkqGuGTXl3LtBJln82MNPFLy4uScwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMyMzAzMDMxM2E2NDY2MzEzYTM2MzMzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfFj gDANBgkqhkiG9w0BAQsFAAOCAQEAa4g8onohYHgG1hmwgFyvU4r4AcXBhKeqj8IS 8Vnfx9QLOV0dDefU3sG5X4Y2q8d82qE5jY5NRdnqFJS4mdbvB+c+0AwGkVy0eO9D 8ScpfyE+xUNc8KVABITz+74kpl8/H6W7BQaEdIBCndBoTxH38k8S3fpucpeR8N8B hL4d363OcFAt+naoIvoQH4C89SJNcHDFWTp1cn28reDb2QwLKTnzk7TR6abpnwW3 MCUoxfK1DHW7RsDzVxwxuHQWq0HAgROPnti4/LHHW1nf65dVm6dgVjl7dSBHmxIQ al1+s+C9ec/CxNR6HNveHHfBygiR3S7PJ+GYDkBty6v+RX8Ftg== -----END CERTIFICATE-----Generated at Sat Apr 18 06:18:09 2026 by rpki-client