$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: r3aeBK0wC19KbZfQEH9JKf1jcb5+iU1gT0Lpa9912/U= Subject key identifier: 58:91:98:9A:F9:22:4A:02:D6:18:06:0B:4C:B5:A3:71:D3:9E:2F:84 Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 278F28655755702C98CE34FA68A5744467D67523 Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 05 Apr 2026 16:00:01 +0000 ROA not before: Sun 05 Apr 2026 15:55:01 +0000 ROA not after: Sun 04 Apr 2027 16:00:01 +0000 asID: 140413 IP address blocks: 2406:13c0:c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8f:28:65:57:55:70:2c:98:ce:34:fa:68:a5:74:44:67:d6:75:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Apr 5 15:55:01 2026 GMT Not After : Apr 4 16:00:01 2027 GMT Subject: CN=5891989AF9224A02D618060B4CB5A371D39E2F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:db:84:5a:ed:2c:99:6c:4d:e9:69:a4:a5: 36:f0:3f:28:2b:39:f2:18:09:b0:85:77:4b:97:39: a4:3f:21:6c:29:a5:f6:74:e9:7e:46:60:bc:0a:d8: ee:b6:d6:9f:c3:b4:98:60:d0:2c:f0:48:b1:99:59: ca:01:57:b2:09:d4:99:fd:99:dd:86:55:90:ce:31: 33:c9:91:67:14:c1:f7:e8:5b:f7:7d:97:79:7d:3a: 4a:ef:5f:b5:68:7e:11:1f:ce:35:12:38:02:67:e1: c3:b8:0d:ec:02:65:ac:18:2b:ac:1e:fc:1f:b1:d5: e7:64:ca:19:27:9d:53:2a:31:2b:71:2b:12:44:5e: 88:a7:45:79:e4:1a:4f:85:02:9d:69:43:e2:b5:12: b0:a1:84:db:ab:64:45:36:62:ec:b4:69:7d:77:bf: 0c:b5:cf:c0:e8:17:e5:be:29:bd:cb:87:47:bb:43: a2:3c:42:18:10:b1:10:26:2e:2a:3d:94:b2:38:b6: 49:d0:81:39:ca:52:3a:02:8c:9e:02:01:38:e6:b0: 89:c0:05:a0:f3:0a:48:ab:82:f9:56:14:70:ed:8b: 24:82:89:63:52:50:e1:75:d0:b9:3d:34:d1:e8:49: 75:43:7c:e2:7b:32:52:58:00:0c:8d:35:a5:c4:37: 9c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:91:98:9A:F9:22:4A:02:D6:18:06:0B:4C:B5:A3:71:D3:9E:2F:84 X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a633a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:c::/48 Signature Algorithm: sha256WithRSAEncryption 62:2a:64:34:82:e2:d7:29:2c:63:24:e7:9a:f5:48:eb:ce:ba: 2d:e8:52:d4:e8:41:80:93:0d:59:2f:4d:ee:b7:12:1e:7f:c6: e4:fc:ca:e2:62:66:47:50:60:cb:97:92:76:64:4d:f5:4c:21: e3:3a:04:e8:9f:c0:56:e7:49:71:67:d5:cb:c2:f4:21:da:5a: 58:c9:c1:35:31:e2:e1:17:ae:bf:ee:16:49:48:b8:08:b5:0e: 0e:54:80:0f:26:b9:e7:e5:1a:19:ac:95:49:87:83:71:0e:6f: 53:12:54:54:e1:5a:3e:7e:90:9b:87:2e:a9:14:c9:02:6d:2c: 8e:02:bd:77:07:b9:87:a6:f2:ca:0a:63:d1:fc:6b:1e:91:71: 49:ef:5e:60:01:1a:04:7f:43:6e:2d:e7:d9:4c:02:a9:66:5a: 14:4e:4c:53:bc:c5:d7:92:df:04:3a:eb:2b:6b:1b:c2:79:76: b5:d6:2c:d5:4b:dc:20:ba:89:a9:af:df:64:58:74:a1:94:b1: 10:c8:52:be:b5:a2:b5:0e:4d:fd:77:ac:fa:5c:1d:b4:c4:d9: b0:35:43:e3:53:39:47:c9:d3:77:ba:5e:6c:55:d4:2c:ef:c4: b4:73:48:6e:4a:0d:db:cb:ca:70:3e:54:a3:a2:5f:bb:df:f4: b7:4b:90:b3 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUJ48oZVdVcCyYzjT6aKV0RGfWdSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNjA0MDUxNTU1MDFaFw0yNzA0MDQxNjAwMDFaMDMxMTAvBgNV BAMTKDU4OTE5ODlBRjkyMjRBMDJENjE4MDYwQjRDQjVBMzcxRDM5RTJGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbT9uEWu0smWxN6WmkpTbwPygr OfIYCbCFd0uXOaQ/IWwppfZ06X5GYLwK2O621p/DtJhg0CzwSLGZWcoBV7IJ1Jn9 md2GVZDOMTPJkWcUwffoW/d9l3l9OkrvX7VofhEfzjUSOAJn4cO4DewCZawYK6we /B+x1edkyhknnVMqMStxKxJEXoinRXnkGk+FAp1pQ+K1ErChhNurZEU2Yuy0aX13 vwy1z8DoF+W+Kb3Lh0e7Q6I8QhgQsRAmLio9lLI4tknQgTnKUjoCjJ4CATjmsInA BaDzCkirgvlWFHDtiySCiWNSUOF10Lk9NNHoSXVDfOJ7MlJYAAyNNaXEN5yPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUWJGYmvkiSgLWGAYLTLWjcdOeL4QwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAww DQYJKoZIhvcNAQELBQADggEBAGIqZDSC4tcpLGMk55r1SOvOui3oUtToQYCTDVkv Te63Eh5/xuT8yuJiZkdQYMuXknZkTfVMIeM6BOifwFbnSXFn1cvC9CHaWljJwTUx 4uEXrr/uFklIuAi1Dg5UgA8mueflGhmslUmHg3EOb1MSVFThWj5+kJuHLqkUyQJt LI4CvXcHuYem8soKY9H8ax6RcUnvXmABGgR/Q24t59lMAqlmWhROTFO8xdeS3wQ6 6ytrG8J5drXWLNVL3CC6iamv32RYdKGUsRDIUr61orUOTf13rPpcHbTE2bA1Q+NT OUfJ03e6XmxV1CzvxLRzSG5KDdvLynA+VKOiX7vf9LdLkLM= -----END CERTIFICATE-----Generated at Sun Apr 19 15:00:05 2026 by rpki-client