$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: zv6vAfsefl7yBaAvbq+NQc03d4+XW8OFywPZLJ49jDI= Subject key identifier: C4:E2:00:0C:E6:A1:7D:D8:AE:36:CD:E4:12:61:E5:F9:7B:34:97:DB Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 0C094F1C23CFB552CE8029E0FAE1B75E38B4580F Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 05 Apr 2026 16:00:03 +0000 ROA not before: Sun 05 Apr 2026 15:55:03 +0000 ROA not after: Sun 04 Apr 2027 16:00:03 +0000 asID: 140413 IP address blocks: 2406:13c0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:09:4f:1c:23:cf:b5:52:ce:80:29:e0:fa:e1:b7:5e:38:b4:58:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Apr 5 15:55:03 2026 GMT Not After : Apr 4 16:00:03 2027 GMT Subject: CN=C4E2000CE6A17DD8AE36CDE41261E5F97B3497DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:5e:b1:0d:d8:de:05:b5:f6:28:78:82:b2: 57:f5:00:2a:e0:65:b8:ff:e5:00:c7:f6:6c:06:ae: 38:99:74:b9:56:8e:83:34:97:67:a8:66:61:af:f5: a4:26:70:ee:12:b0:56:a9:b1:79:57:5d:38:28:ef: 93:01:9a:10:ec:f3:3d:f3:c3:7b:43:39:0e:db:41: af:e9:25:f5:73:81:03:00:c4:45:c3:38:a6:26:59: 96:96:1e:49:df:7c:2e:78:bf:93:5d:88:a0:ac:7b: d5:9c:23:2f:98:db:06:67:4a:97:14:cd:b3:3a:b7: 88:0d:a2:51:e2:3b:8b:19:54:4a:7e:7e:3b:89:53: bf:96:76:b7:95:02:f2:f7:df:a5:9a:7d:0f:97:13: c9:22:35:0a:2a:c6:f6:a5:d3:8c:23:3c:16:17:09: 04:9d:63:97:d1:43:25:10:d4:08:62:c6:c4:8f:3c: 28:04:72:3c:eb:fa:0b:1f:36:61:56:28:45:d9:7e: e9:59:b5:1a:36:71:e0:18:3a:ca:5a:0e:11:9f:8f: 9c:e5:f2:ed:f8:2f:81:54:4f:27:0a:cc:9e:f7:64: 21:9c:ff:40:76:86:e8:df:b4:60:8d:35:55:08:24: 9f:0b:e9:20:b8:b0:01:51:d4:94:23:c0:bd:77:c9: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:00:0C:E6:A1:7D:D8:AE:36:CD:E4:12:61:E5:F9:7B:34:97:DB X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a373a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:7::/48 Signature Algorithm: sha256WithRSAEncryption 17:d3:11:fd:7b:7f:19:f2:b0:7f:af:92:c5:a1:11:69:fc:34: 9e:5b:57:9a:05:3f:fa:e4:04:a6:5d:0f:22:7a:3b:1c:a4:fb: 11:7f:c2:28:e4:13:15:fa:fb:8b:ee:d9:70:b7:6f:99:30:25: 0c:16:07:dc:1f:9f:e4:89:8b:0d:a3:3b:c0:10:5b:af:99:73: 2a:a8:52:bc:c6:85:e5:4d:7b:d3:b1:d8:c6:76:60:06:46:17: 9d:56:77:21:33:4f:0a:50:05:58:54:ef:c4:30:8f:7d:ae:35: 12:79:f2:18:bc:54:83:65:a8:ed:72:0c:a0:ef:40:12:42:76: c0:04:af:b2:57:5b:63:f7:62:10:8c:d9:46:ed:d9:1b:8a:e6: 6c:09:1b:4d:91:4a:43:29:6a:c2:97:12:0e:45:3b:f4:c7:97: 8e:d3:5b:5f:53:51:8d:92:98:3c:39:fd:91:0c:31:c3:67:60: 43:b1:ee:c9:be:73:b0:ef:42:ce:77:27:14:c3:86:f6:6b:f8: 8f:57:d4:8e:20:57:09:4a:34:4d:32:6f:93:bb:a0:77:05:79: 5c:b7:26:f2:94:73:2c:7e:f2:ec:76:d2:a4:a0:0e:74:bd:c1: d2:34:20:72:7f:35:1d:39:1b:fa:13:94:d2:95:4f:81:78:ae: db:a6:3c:04 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUDAlPHCPPtVLOgCng+uG3Xji0WA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNjA0MDUxNTU1MDNaFw0yNzA0MDQxNjAwMDNaMDMxMTAvBgNV BAMTKEM0RTIwMDBDRTZBMTdERDhBRTM2Q0RFNDEyNjFFNUY5N0IzNDk3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOaV6xDdjeBbX2KHiCslf1ACrg Zbj/5QDH9mwGrjiZdLlWjoM0l2eoZmGv9aQmcO4SsFapsXlXXTgo75MBmhDs8z3z w3tDOQ7bQa/pJfVzgQMAxEXDOKYmWZaWHknffC54v5NdiKCse9WcIy+Y2wZnSpcU zbM6t4gNolHiO4sZVEp+fjuJU7+WdreVAvL336WafQ+XE8kiNQoqxval04wjPBYX CQSdY5fRQyUQ1AhixsSPPCgEcjzr+gsfNmFWKEXZfulZtRo2ceAYOspaDhGfj5zl 8u34L4FUTycKzJ73ZCGc/0B2hujftGCNNVUIJJ8L6SC4sAFR1JQjwL13yf1jAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUxOIADOahfdiuNs3kEmHl+Xs0l9swHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAcw DQYJKoZIhvcNAQELBQADggEBABfTEf17fxnysH+vksWhEWn8NJ5bV5oFP/rkBKZd DyJ6Oxyk+xF/wijkExX6+4vu2XC3b5kwJQwWB9wfn+SJiw2jO8AQW6+ZcyqoUrzG heVNe9Ox2MZ2YAZGF51WdyEzTwpQBVhU78Qwj32uNRJ58hi8VINlqO1yDKDvQBJC dsAEr7JXW2P3YhCM2Ubt2RuK5mwJG02RSkMpasKXEg5FO/THl47TW19TUY2SmDw5 /ZEMMcNnYEOx7sm+c7DvQs53JxTDhvZr+I9X1I4gVwlKNE0yb5O7oHcFeVy3JvKU cyx+8ux20qSgDnS9wdI0IHJ/NR05G/oTlNKVT4F4rtumPAQ= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:57 2026 by rpki-client