$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: HFJMUP4o/w80jFmIJnz0e1+39WjuAUwW8ZmNSAlo4/U= Subject key identifier: 39:93:0B:7C:88:D3:2F:42:9B:AC:13:A3:1F:40:9B:89:1D:40:8E:4C Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 4E949F92E44A3BF7B15BC231E6AE4423359551C0 Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 05 Apr 2026 16:00:03 +0000 ROA not before: Sun 05 Apr 2026 15:55:03 +0000 ROA not after: Sun 04 Apr 2027 16:00:03 +0000 asID: 140413 IP address blocks: 2406:13c0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:94:9f:92:e4:4a:3b:f7:b1:5b:c2:31:e6:ae:44:23:35:95:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Apr 5 15:55:03 2026 GMT Not After : Apr 4 16:00:03 2027 GMT Subject: CN=39930B7C88D32F429BAC13A31F409B891D408E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:04:6c:5e:52:a7:2b:95:d9:01:45:af:b3: 56:7a:28:67:e1:e5:58:17:76:f9:a8:e7:68:73:b7: 16:01:7c:fb:67:50:95:fd:40:49:f7:8b:fd:8f:39: 9e:15:1e:bd:85:ba:04:66:85:ed:a8:76:c1:0d:19: d4:87:6e:80:89:f0:00:aa:91:76:ea:95:05:32:c5: 9f:35:b3:74:56:a8:b0:cf:09:d5:5a:e8:7e:7a:c4: 8d:69:c4:33:5a:c4:95:27:82:85:de:09:df:9d:9c: 58:1d:db:97:62:96:49:8a:24:6b:51:14:76:8a:d9: 11:1f:59:ab:f6:92:e8:74:4d:37:b0:97:33:69:f5: b1:ba:41:65:e8:e2:07:9c:5b:42:b9:7b:9d:43:d0: 87:a9:2e:e3:25:2d:5e:a2:6e:9a:41:f0:d5:f2:33: ce:30:57:a8:3a:6d:65:b5:27:f6:e3:6c:0d:7f:86: f3:01:7f:0e:be:8d:68:cc:a2:12:40:a7:36:85:2d: 61:f1:65:54:74:e5:01:66:36:4b:b6:2c:5b:ad:93: d2:3d:96:7d:62:93:c6:97:ff:45:7f:06:7c:16:33: e7:a1:00:3d:47:52:22:88:b8:3e:05:5a:cc:ae:2e: e0:d9:a8:d3:50:ee:33:fc:6a:f8:42:51:d5:ef:0f: a6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:0B:7C:88:D3:2F:42:9B:AC:13:A3:1F:40:9B:89:1D:40:8E:4C X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a383a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:8::/48 Signature Algorithm: sha256WithRSAEncryption a0:49:fd:6e:54:dd:80:25:27:bd:74:16:31:f9:f2:7b:63:37: b3:8f:eb:be:22:09:fc:c7:00:08:8f:d0:7b:39:41:11:86:01: 3f:d5:75:b9:c7:89:03:a4:b4:aa:4f:45:f3:d8:f0:e7:55:6b: 17:a9:89:00:a9:63:98:5b:1f:81:1f:c8:a0:6c:34:44:d6:e7: da:06:82:b6:cc:0a:2b:12:27:a3:0a:67:fc:ba:09:11:c2:5b: eb:46:b5:e0:87:37:08:d4:4c:d6:63:a9:dc:0e:d9:14:ae:83: 32:2a:11:8e:15:c1:8d:39:de:66:b1:49:53:2f:86:c2:ef:bd: 87:0f:3e:eb:4c:94:4f:1d:45:91:38:31:17:ab:1b:2f:ee:91: b6:1d:50:33:49:ef:20:58:42:80:67:c8:56:13:9a:c2:e6:28: 28:7a:22:9a:dd:d5:ba:de:04:15:a6:87:56:6c:ba:76:3e:be: 89:71:97:fa:26:bd:ce:f1:3b:16:cf:47:31:cd:25:04:00:cb: c3:fa:f7:8a:aa:64:3d:0a:ca:90:2a:50:55:50:4f:72:68:dd: b2:57:e3:08:bf:d3:86:26:0e:1a:b7:48:86:7e:60:3d:b8:c6: 0f:64:19:63:a2:ca:ca:85:5b:43:15:8a:f4:5f:9d:95:62:bd: e9:87:5f:62 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTpSfkuRKO/exW8Ix5q5EIzWVUcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNjA0MDUxNTU1MDNaFw0yNzA0MDQxNjAwMDNaMDMxMTAvBgNV BAMTKDM5OTMwQjdDODhEMzJGNDI5QkFDMTNBMzFGNDA5Qjg5MUQ0MDhFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vQRsXlKnK5XZAUWvs1Z6KGfh 5VgXdvmo52hztxYBfPtnUJX9QEn3i/2POZ4VHr2FugRmhe2odsENGdSHboCJ8ACq kXbqlQUyxZ81s3RWqLDPCdVa6H56xI1pxDNaxJUngoXeCd+dnFgd25dilkmKJGtR FHaK2REfWav2kuh0TTewlzNp9bG6QWXo4gecW0K5e51D0IepLuMlLV6ibppB8NXy M84wV6g6bWW1J/bjbA1/hvMBfw6+jWjMohJApzaFLWHxZVR05QFmNku2LFutk9I9 ln1ik8aX/0V/BnwWM+ehAD1HUiKIuD4FWsyuLuDZqNNQ7jP8avhCUdXvD6bDAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUOZMLfIjTL0KbrBOjH0CbiR1AjkwwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAgw DQYJKoZIhvcNAQELBQADggEBAKBJ/W5U3YAlJ710FjH58ntjN7OP674iCfzHAAiP 0Hs5QRGGAT/VdbnHiQOktKpPRfPY8OdVaxepiQCpY5hbH4EfyKBsNETW59oGgrbM CisSJ6MKZ/y6CRHCW+tGteCHNwjUTNZjqdwO2RSugzIqEY4VwY053maxSVMvhsLv vYcPPutMlE8dRZE4MRerGy/ukbYdUDNJ7yBYQoBnyFYTmsLmKCh6Iprd1breBBWm h1ZsunY+volxl/omvc7xOxbPRzHNJQQAy8P694qqZD0KypAqUFVQT3Jo3bJX4wi/ 04YmDhq3SIZ+YD24xg9kGWOiysqFW0MVivRfnZVivemHX2I= -----END CERTIFICATE-----Generated at Sun Apr 19 12:19:57 2026 by rpki-client