$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: 4R7MDWLKy+mdGSR7ZMbqWXtPgKCXx2/9L8xHG7DHjgI= Subject key identifier: A5:AB:34:F3:7D:61:5B:4D:90:1D:7C:C8:D4:26:4F:80:D2:CE:88:2A Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 32B8C3E6FF0CD3D11F2C253C2D6628C3A5D8B2CB Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 05 Apr 2026 16:00:01 +0000 ROA not before: Sun 05 Apr 2026 15:55:01 +0000 ROA not after: Sun 04 Apr 2027 16:00:01 +0000 asID: 140413 IP address blocks: 2406:13c0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b8:c3:e6:ff:0c:d3:d1:1f:2c:25:3c:2d:66:28:c3:a5:d8:b2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Apr 5 15:55:01 2026 GMT Not After : Apr 4 16:00:01 2027 GMT Subject: CN=A5AB34F37D615B4D901D7CC8D4264F80D2CE882A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:21:89:1d:f2:04:69:24:1b:8e:c8:43:ff: 85:ec:a7:7b:ec:b9:d7:de:a3:71:f4:a9:c9:61:f2: 39:4b:92:05:71:ed:e8:7b:a1:61:84:8e:08:50:fa: 48:e9:d0:13:8a:22:e8:43:38:09:3a:ff:fa:bb:d4: 48:54:0f:9b:7b:9e:9b:f0:1d:15:7e:04:24:a4:52: 25:0f:93:30:a2:d9:8a:9b:e3:ee:e3:d8:49:62:8b: b8:ea:e3:e0:e2:c5:93:61:36:6c:6f:d4:9a:bb:b3: 2d:4c:83:e2:31:cc:9a:84:6f:83:e9:04:50:3e:ff: b2:21:0d:06:5d:60:9c:ee:eb:ad:ee:83:39:af:b2: 9d:41:0a:24:eb:1a:f7:b7:01:f5:0a:7c:ec:81:fa: 65:96:72:40:45:67:f3:00:e1:c7:6a:6c:4e:3f:01: 2b:e7:f9:dc:c6:53:e5:44:83:db:2f:63:1d:5c:af: fe:f8:be:15:49:30:1e:75:f8:01:2e:3f:99:52:c5: 8e:b5:37:3a:54:7f:db:5a:e6:e0:c2:fc:b4:7f:55: 50:e4:67:bc:eb:6d:25:47:68:a9:4f:fe:96:d3:f7: 0f:98:b4:c1:42:bd:03:7a:ab:82:35:21:d6:08:0f: cf:cc:f1:68:a2:4a:2d:13:10:1a:c1:2c:4d:84:0d: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AB:34:F3:7D:61:5B:4D:90:1D:7C:C8:D4:26:4F:80:D2:CE:88:2A X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a353a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:5::/48 Signature Algorithm: sha256WithRSAEncryption 80:4a:01:dc:e8:be:5d:a0:9a:e4:b6:6e:f2:cf:d1:18:39:9a: 03:a8:18:d4:48:4a:9a:bf:eb:f3:2e:6a:f8:fb:30:5d:bf:f2: 10:95:33:83:24:9a:cf:36:9e:55:51:5e:32:8c:b0:b5:b2:da: 59:f4:2c:33:fb:ff:30:4e:a0:30:35:17:a6:17:88:c8:39:1f: 0d:f3:69:93:8d:81:6b:a5:bc:2d:3a:d4:4d:51:8d:8e:aa:dc: b0:15:b4:bc:d6:c9:a2:7e:20:4f:3e:b3:6e:34:f2:b7:5c:46: 49:dc:37:c2:5b:b1:1d:77:55:e2:b9:bc:bb:06:7a:92:c6:94: f1:3f:ad:14:7a:68:7e:7c:3e:61:e0:97:9f:16:73:cd:3f:bb: 83:0f:2b:7b:59:86:80:10:65:bb:38:84:39:00:d1:dc:42:eb: f1:80:8c:ee:0d:89:a9:70:6b:72:2e:a9:f3:a8:ec:2e:ce:a7: e1:32:1f:ae:ee:82:3a:05:28:a1:a7:d3:3f:d6:e7:4e:df:88: f9:19:3b:bb:d4:35:e1:42:b8:47:4d:b0:45:c3:2f:ac:54:09: 8f:ae:68:b0:66:0c:11:60:9d:db:7a:1f:3e:71:f4:63:e6:1e: c0:41:b2:b5:f3:ed:de:60:63:d0:ed:01:11:eb:ec:62:f2:52: ea:54:b1:85 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUMrjD5v8M09EfLCU8LWYow6XYssswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNjA0MDUxNTU1MDFaFw0yNzA0MDQxNjAwMDFaMDMxMTAvBgNV BAMTKEE1QUIzNEYzN0Q2MTVCNEQ5MDFEN0NDOEQ0MjY0RjgwRDJDRTg4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxdSGJHfIEaSQbjshD/4Xsp3vs udfeo3H0qclh8jlLkgVx7eh7oWGEjghQ+kjp0BOKIuhDOAk6//q71EhUD5t7npvw HRV+BCSkUiUPkzCi2Yqb4+7j2Elii7jq4+DixZNhNmxv1Jq7sy1Mg+IxzJqEb4Pp BFA+/7IhDQZdYJzu663ugzmvsp1BCiTrGve3AfUKfOyB+mWWckBFZ/MA4cdqbE4/ ASvn+dzGU+VEg9svYx1cr/74vhVJMB51+AEuP5lSxY61NzpUf9ta5uDC/LR/VVDk Z7zrbSVHaKlP/pbT9w+YtMFCvQN6q4I1IdYID8/M8WiiSi0TEBrBLE2EDXBlAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUpas0831hW02QHXzI1CZPgNLOiCowHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAUw DQYJKoZIhvcNAQELBQADggEBAIBKAdzovl2gmuS2bvLP0Rg5mgOoGNRISpq/6/Mu avj7MF2/8hCVM4Mkms82nlVRXjKMsLWy2ln0LDP7/zBOoDA1F6YXiMg5Hw3zaZON gWulvC061E1RjY6q3LAVtLzWyaJ+IE8+s2408rdcRkncN8JbsR13VeK5vLsGepLG lPE/rRR6aH58PmHgl58Wc80/u4MPK3tZhoAQZbs4hDkA0dxC6/GAjO4Nialwa3Iu qfOo7C7Op+EyH67ugjoFKKGn0z/W507fiPkZO7vUNeFCuEdNsEXDL6xUCY+uaLBm DBFgndt6Hz5x9GPmHsBBsrXz7d5gY9DtARHr7GLyUupUsYU= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:57 2026 by rpki-client