$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: X/VdQj0myZ9pc/9RSPEVpKcJ8tVPlBcEKUnFIDmfNas= Subject key identifier: 40:26:77:00:42:F7:42:A1:46:7C:D9:EE:B5:5B:94:2B:29:C2:9B:0C Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 4FF4896F03535E973669B5F8200314E261E6DD05 Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 05 Apr 2026 16:00:02 +0000 ROA not before: Sun 05 Apr 2026 15:55:02 +0000 ROA not after: Sun 04 Apr 2027 16:00:02 +0000 asID: 140413 IP address blocks: 2406:13c0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f4:89:6f:03:53:5e:97:36:69:b5:f8:20:03:14:e2:61:e6:dd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Apr 5 15:55:02 2026 GMT Not After : Apr 4 16:00:02 2027 GMT Subject: CN=4026770042F742A1467CD9EEB55B942B29C29B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:fe:6e:01:6c:1d:09:9f:45:ba:6b:65:5a: ee:49:f1:8f:b3:30:f0:97:c6:97:87:21:d0:8f:9d: 08:63:da:14:12:59:6e:e2:ee:0e:ea:6d:81:c5:28: e9:a6:13:a8:80:2d:4a:ee:1b:32:dd:b7:b9:4c:d0: c2:b1:a7:d6:0b:ec:44:35:09:a6:ca:1c:26:5c:2e: 74:5d:1f:e9:a9:ad:4c:3d:e1:fc:4a:13:ad:e7:29: bd:44:5d:11:70:d9:bb:da:e3:d6:f6:67:ce:09:b6: 07:df:50:8b:f8:5f:55:01:4a:ff:15:97:58:fb:71: 18:88:c3:58:5e:52:14:e4:e1:9b:c9:31:62:a4:a9: 92:fb:74:6f:36:9f:29:60:e7:ca:b2:ec:71:bf:3a: 0a:3f:2c:c1:0c:d7:83:ac:56:5c:8b:36:91:9e:21: 66:a3:2a:9e:d1:4a:3d:07:50:32:5e:7c:46:25:f0: 2c:1e:ef:6a:bb:b0:dc:f4:48:7b:e8:31:f4:1c:b8: af:03:8e:66:04:d4:20:3e:a0:d5:3e:27:c7:ed:67: c0:ca:0c:89:c2:40:da:38:63:c6:cb:85:9c:f7:d7: 38:9d:69:d1:ba:e3:0f:12:3b:fb:3e:09:c5:6a:4c: e7:fb:81:80:cb:16:73:e3:18:4c:a3:67:9d:7a:63: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:26:77:00:42:F7:42:A1:46:7C:D9:EE:B5:5B:94:2B:29:C2:9B:0C X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:b::/48 Signature Algorithm: sha256WithRSAEncryption 90:22:1d:e3:87:b0:23:29:67:99:8e:56:09:ed:08:3d:9f:96: 26:63:ca:9f:00:ee:a6:15:c3:53:b8:de:fa:5a:be:59:24:68: 66:57:cb:51:48:36:ad:41:6b:31:30:19:3d:b9:d8:56:12:d0: f1:b6:a4:59:93:9e:c5:1d:22:6e:26:76:e5:cf:a2:49:36:c5: fb:72:65:c8:4f:65:65:cc:e6:dc:0b:1c:68:d2:5b:7e:7c:09: 07:54:f7:c0:5f:59:72:57:0c:46:8b:cf:4b:f2:95:69:4e:d1: ac:e7:2e:5f:29:f6:e0:55:28:02:d2:5a:58:d0:fb:b8:48:73: 8b:2d:3e:75:05:06:1b:0c:28:d8:c5:3c:c1:fc:2d:62:36:b9: f3:6d:77:a8:50:69:a7:94:2b:af:f3:31:62:4a:57:83:83:39: b9:e8:c5:76:3a:ee:f1:dc:fa:01:6e:1f:39:a0:28:72:e0:c8: 06:4c:09:32:a9:ca:7e:73:7c:54:8d:78:d3:e2:f3:a8:02:5c: c8:a4:ce:f8:56:e1:15:35:c6:99:cf:88:f0:10:f8:3e:b7:98: fc:56:92:75:61:18:6c:29:bc:99:59:a6:70:0b:31:32:e2:70: 4b:d5:fe:2c:31:69:e3:71:e7:70:00:9f:66:25:77:e6:18:ed: 3f:8e:31:44 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUT/SJbwNTXpc2abX4IAMU4mHm3QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNjA0MDUxNTU1MDJaFw0yNzA0MDQxNjAwMDJaMDMxMTAvBgNV BAMTKDQwMjY3NzAwNDJGNzQyQTE0NjdDRDlFRUI1NUI5NDJCMjlDMjlCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNj/5uAWwdCZ9FumtlWu5J8Y+z MPCXxpeHIdCPnQhj2hQSWW7i7g7qbYHFKOmmE6iALUruGzLdt7lM0MKxp9YL7EQ1 CabKHCZcLnRdH+mprUw94fxKE63nKb1EXRFw2bva49b2Z84JtgffUIv4X1UBSv8V l1j7cRiIw1heUhTk4ZvJMWKkqZL7dG82nylg58qy7HG/Ogo/LMEM14OsVlyLNpGe IWajKp7RSj0HUDJefEYl8Cwe72q7sNz0SHvoMfQcuK8DjmYE1CA+oNU+J8ftZ8DK DInCQNo4Y8bLhZz31zidadG64w8SO/s+CcVqTOf7gYDLFnPjGEyjZ516Yw2NAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUQCZ3AEL3QqFGfNnutVuUKynCmwwwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAsw DQYJKoZIhvcNAQELBQADggEBAJAiHeOHsCMpZ5mOVgntCD2fliZjyp8A7qYVw1O4 3vpavlkkaGZXy1FINq1BazEwGT252FYS0PG2pFmTnsUdIm4mduXPokk2xftyZchP ZWXM5twLHGjSW358CQdU98BfWXJXDEaLz0vylWlO0aznLl8p9uBVKALSWljQ+7hI c4stPnUFBhsMKNjFPMH8LWI2ufNtd6hQaaeUK6/zMWJKV4ODObnoxXY67vHc+gFu HzmgKHLgyAZMCTKpyn5zfFSNeNPi86gCXMikzvhW4RU1xpnPiPAQ+D63mPxWknVh GGwpvJlZpnALMTLicEvV/iwxaeNx53AAn2Yld+YY7T+OMUQ= -----END CERTIFICATE-----Generated at Sun Apr 19 15:00:06 2026 by rpki-client