$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: Qc27SwkOs0YfW/ztzPB1WKphcMOFgPy1Jbk8nC9mGIs= Subject key identifier: A6:80:38:4F:0F:13:47:53:49:D8:18:1E:EA:40:31:83:34:C3:FC:E5 Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 4249038A02325219C11729CAF10EC5586EC5B7AF Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 05 Apr 2026 16:00:02 +0000 ROA not before: Sun 05 Apr 2026 15:55:02 +0000 ROA not after: Sun 04 Apr 2027 16:00:02 +0000 asID: 140413 IP address blocks: 2406:13c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:49:03:8a:02:32:52:19:c1:17:29:ca:f1:0e:c5:58:6e:c5:b7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Apr 5 15:55:02 2026 GMT Not After : Apr 4 16:00:02 2027 GMT Subject: CN=A680384F0F13475349D8181EEA40318334C3FCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:64:2b:50:b2:1d:b4:a0:88:d9:e3:5d:b2:08: 68:c3:3a:ab:76:59:7b:24:a7:0c:b2:ca:f1:b5:3e: 73:61:d2:ed:9c:7b:ee:28:a2:14:82:a8:6c:99:a2: d7:af:5c:1a:c6:35:73:bf:c3:13:87:83:fd:0a:a2: 7e:a8:3e:33:f3:0e:4c:e3:99:d0:0a:a8:5e:91:09: f9:b2:6e:2d:24:35:2f:68:e6:4e:b1:5b:02:aa:6b: 42:9b:a4:03:64:25:a5:22:77:64:77:a5:17:58:bc: 8d:dc:02:08:a6:9f:bc:15:85:ce:7e:05:b6:15:c8: fd:0f:bf:97:15:00:30:ba:ee:38:26:cf:e8:b5:ba: 90:ad:35:5c:a9:e0:e7:b8:21:86:74:4e:66:11:17: e5:9b:a1:57:d3:61:8d:36:d0:1e:a3:47:42:38:38: db:bd:5d:87:f0:60:5a:5f:2e:9d:0e:2c:da:3a:19: 1c:4c:d5:51:1c:5f:df:86:6e:75:b2:be:d9:f3:ed: b5:0b:89:99:44:1b:f4:70:ab:db:1f:c5:3c:65:89: 4b:18:0f:4c:95:04:7d:bb:54:c2:56:66:ad:22:cb: 77:eb:b4:f0:f2:24:40:c2:e7:78:5b:e1:90:50:ad: 35:67:71:f4:7c:a1:d4:9c:2e:65:83:7c:a3:0c:56: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:80:38:4F:0F:13:47:53:49:D8:18:1E:EA:40:31:83:34:C3:FC:E5 X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a323a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:2::/48 Signature Algorithm: sha256WithRSAEncryption 9f:a9:22:5e:70:72:75:50:dc:01:05:72:03:17:66:9a:3b:2b: 72:e6:6d:bc:69:b1:de:d8:c5:90:00:b6:11:35:8d:83:15:23: 7e:1c:a3:68:df:4c:75:a3:2e:ca:09:60:01:a4:7b:9c:c3:5b: 58:30:57:45:04:91:cb:8b:3f:ff:12:72:58:07:cb:2e:d3:bb: 99:82:68:dc:24:4a:82:56:7a:f2:09:54:51:e0:7f:ea:65:1e: a3:aa:70:2a:d6:ee:eb:73:6a:e5:44:fe:de:d4:8b:42:77:03: ec:14:8c:7c:69:0f:bc:7b:25:9f:54:ed:a0:99:f9:22:9e:ac: 0f:5b:43:07:4f:a5:3a:7d:f1:a7:3f:d7:55:6e:8f:c1:85:1b: 46:25:3d:5a:32:72:6a:4a:80:cd:ed:a2:53:f8:29:20:e1:7d: b7:ac:aa:26:70:bc:68:92:32:8b:b3:ce:5e:1a:66:5d:fd:75: 75:36:c8:fd:d3:ff:ed:a1:7b:45:d3:7c:a6:e8:5e:91:55:ba: 08:10:51:61:56:d0:59:14:fa:07:15:7b:2a:c5:6a:68:da:4a: e3:ae:1b:1d:ea:3b:6a:70:1f:eb:a2:8a:03:87:11:fd:fc:14: 1a:80:82:64:43:84:5f:5a:f2:a7:d0:90:fc:b1:35:99:47:50: 66:95:fd:09 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQkkDigIyUhnBFynK8Q7FWG7Ft68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNjA0MDUxNTU1MDJaFw0yNzA0MDQxNjAwMDJaMDMxMTAvBgNV BAMTKEE2ODAzODRGMEYxMzQ3NTM0OUQ4MTgxRUVBNDAzMTgzMzRDM0ZDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZCtQsh20oIjZ412yCGjDOqt2 WXskpwyyyvG1PnNh0u2ce+4oohSCqGyZotevXBrGNXO/wxOHg/0Kon6oPjPzDkzj mdAKqF6RCfmybi0kNS9o5k6xWwKqa0KbpANkJaUid2R3pRdYvI3cAgimn7wVhc5+ BbYVyP0Pv5cVADC67jgmz+i1upCtNVyp4Oe4IYZ0TmYRF+WboVfTYY020B6jR0I4 ONu9XYfwYFpfLp0OLNo6GRxM1VEcX9+GbnWyvtnz7bULiZlEG/Rwq9sfxTxliUsY D0yVBH27VMJWZq0iy3frtPDyJEDC53hb4ZBQrTVncfR8odScLmWDfKMMVi7jAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUpoA4Tw8TR1NJ2Bge6kAxgzTD/OUwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAIw DQYJKoZIhvcNAQELBQADggEBAJ+pIl5wcnVQ3AEFcgMXZpo7K3Lmbbxpsd7YxZAA thE1jYMVI34co2jfTHWjLsoJYAGke5zDW1gwV0UEkcuLP/8SclgHyy7Tu5mCaNwk SoJWevIJVFHgf+plHqOqcCrW7utzauVE/t7Ui0J3A+wUjHxpD7x7JZ9U7aCZ+SKe rA9bQwdPpTp98ac/11Vuj8GFG0YlPVoycmpKgM3tolP4KSDhfbesqiZwvGiSMouz zl4aZl39dXU2yP3T/+2he0XTfKboXpFVuggQUWFW0FkU+gcVeyrFamjaSuOuGx3q O2pwH+uiigOHEf38FBqAgmRDhF9a8qfQkPyxNZlHUGaV/Qk= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:58 2026 by rpki-client