$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: PWM0lPkbAP0xRMCpXkDlVWzP6ea2WwdwLRUG8q+LayE= Subject key identifier: ED:DC:EB:F8:DA:07:28:ED:4E:A0:83:A5:98:EE:D3:19:7B:3D:16:F0 Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 01BA71658D392C417155282AAAFD6309C4546172 Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 05 Apr 2026 16:00:01 +0000 ROA not before: Sun 05 Apr 2026 15:55:01 +0000 ROA not after: Sun 04 Apr 2027 16:00:01 +0000 asID: 140413 IP address blocks: 2406:13c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ba:71:65:8d:39:2c:41:71:55:28:2a:aa:fd:63:09:c4:54:61:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Apr 5 15:55:01 2026 GMT Not After : Apr 4 16:00:01 2027 GMT Subject: CN=EDDCEBF8DA0728ED4EA083A598EED3197B3D16F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:45:80:d1:4a:0e:4c:9b:21:ff:4c:e5:26: 38:2e:c4:e1:4e:90:e1:81:cb:d2:07:3e:6a:0c:c2: 4f:a1:6a:a1:d6:22:09:50:b0:bc:3e:97:a2:71:2e: 9d:26:1c:eb:14:d7:35:47:df:ff:fe:ef:25:5c:94: bd:67:eb:26:03:ae:78:ee:bb:31:d8:6e:78:07:57: 5d:14:33:db:38:9a:96:ca:1c:2d:b8:a0:4e:4e:68: 00:12:10:d0:a0:6a:26:38:c9:3a:71:69:69:13:42: 93:8a:2b:a6:7a:d5:3f:33:58:bc:cf:60:62:01:4b: 7c:50:dd:05:d4:7d:0c:1b:97:66:31:cb:7e:93:39: 6e:24:22:47:c5:40:73:0f:9b:32:40:22:c6:f8:5d: c4:ee:8b:2e:c7:d9:c5:05:9e:95:56:46:ff:bd:65: e4:2b:78:a8:5c:c0:96:2a:d7:3f:00:43:b6:67:44: 6a:6f:2c:d6:e7:6c:b0:78:c9:29:dc:e4:ba:e8:dd: 49:84:8b:1c:c0:0a:83:cf:dc:e8:06:18:b9:c9:7b: 2e:e0:ea:1b:c3:fa:e7:a7:96:b6:cc:08:9a:cd:3d: a2:7d:b0:5f:d0:a7:df:28:c7:5d:8f:b8:a5:fa:5b: 42:e7:20:ce:62:06:7b:ec:8f:21:db:b3:10:57:c1: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DC:EB:F8:DA:07:28:ED:4E:A0:83:A5:98:EE:D3:19:7B:3D:16:F0 X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a333a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:3::/48 Signature Algorithm: sha256WithRSAEncryption 19:18:ac:5e:ca:6a:f6:90:c8:e7:2c:20:2d:a4:5a:b6:8e:2d: 4e:df:02:75:ed:31:73:c5:5a:2c:3a:47:d9:34:fa:58:42:89: 23:ce:b1:13:b1:f4:2d:12:3c:b2:a3:a2:27:50:58:da:19:06: d4:2f:e2:46:82:9c:b9:4a:75:97:23:29:53:6b:36:ba:a9:8e: 0d:d0:b6:f4:ee:25:fc:d7:1f:23:75:62:d1:bf:6f:f9:7c:a8: 60:97:b6:aa:db:dd:5b:55:a4:20:36:31:6f:20:9e:f5:29:2e: e4:3e:99:ee:e9:0b:ce:f1:c3:6d:ac:b0:c6:13:66:1c:a8:d4: 26:79:f3:d8:96:ae:d4:66:35:d6:ac:8f:b6:a6:41:48:9f:65: c5:6a:74:d3:e4:ad:cf:27:19:56:14:17:90:52:cb:1b:45:ea: 75:29:d8:96:7f:b1:26:78:05:ec:62:eb:b0:3d:c2:5f:d4:cb: 85:00:22:70:a2:aa:ff:e2:e6:1f:ea:b6:d3:ec:97:49:c1:cd: 41:2e:3d:b3:71:09:bb:f6:69:32:91:4c:cd:d6:20:06:54:26: 86:43:2d:0e:0a:36:fa:ba:f4:ca:3b:c3:2a:9f:28:ed:a7:9f: 56:f6:30:2c:bd:ad:df:c9:d0:11:84:29:60:14:37:28:1f:df: fe:69:c2:d6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAbpxZY05LEFxVSgqqv1jCcRUYXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNjA0MDUxNTU1MDFaFw0yNzA0MDQxNjAwMDFaMDMxMTAvBgNV BAMTKEVERENFQkY4REEwNzI4RUQ0RUEwODNBNTk4RUVEMzE5N0IzRDE2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurUWA0UoOTJsh/0zlJjguxOFO kOGBy9IHPmoMwk+haqHWIglQsLw+l6JxLp0mHOsU1zVH3//+7yVclL1n6yYDrnju uzHYbngHV10UM9s4mpbKHC24oE5OaAASENCgaiY4yTpxaWkTQpOKK6Z61T8zWLzP YGIBS3xQ3QXUfQwbl2Yxy36TOW4kIkfFQHMPmzJAIsb4XcTuiy7H2cUFnpVWRv+9 ZeQreKhcwJYq1z8AQ7ZnRGpvLNbnbLB4ySnc5Lro3UmEixzACoPP3OgGGLnJey7g 6hvD+uenlrbMCJrNPaJ9sF/Qp98ox12PuKX6W0LnIM5iBnvsjyHbsxBXwXtHAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU7dzr+NoHKO1OoIOlmO7TGXs9FvAwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAMw DQYJKoZIhvcNAQELBQADggEBABkYrF7KavaQyOcsIC2kWraOLU7fAnXtMXPFWiw6 R9k0+lhCiSPOsROx9C0SPLKjoidQWNoZBtQv4kaCnLlKdZcjKVNrNrqpjg3QtvTu JfzXHyN1YtG/b/l8qGCXtqrb3VtVpCA2MW8gnvUpLuQ+me7pC87xw22ssMYTZhyo 1CZ589iWrtRmNdasj7amQUifZcVqdNPkrc8nGVYUF5BSyxtF6nUp2JZ/sSZ4Bexi 67A9wl/Uy4UAInCiqv/i5h/qttPsl0nBzUEuPbNxCbv2aTKRTM3WIAZUJoZDLQ4K Nvq69Mo7wyqfKO2nn1b2MCy9rd/J0BGEKWAUNygf3/5pwtY= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:56 2026 by rpki-client