$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: HGxBLJwP40susG9Gyozs1ZhldTfOpAEYxHB8mYqENTo= Subject key identifier: 3B:04:C5:17:C3:8A:DA:4E:C0:A3:34:82:01:6F:BD:0F:3C:CE:05:12 Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 1C8F335D95C9A804FBF48EAE67C1C9D4AE26C0AB Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 05 Apr 2026 16:00:01 +0000 ROA not before: Sun 05 Apr 2026 15:55:01 +0000 ROA not after: Sun 04 Apr 2027 16:00:01 +0000 asID: 140413 IP address blocks: 2406:13c0:d::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 21:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8f:33:5d:95:c9:a8:04:fb:f4:8e:ae:67:c1:c9:d4:ae:26:c0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: Apr 5 15:55:01 2026 GMT Not After : Apr 4 16:00:01 2027 GMT Subject: CN=3B04C517C38ADA4EC0A33482016FBD0F3CCE0512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:73:4d:97:55:c7:c2:e2:4c:a9:0c:97:52: b7:dd:c7:44:a1:6a:27:42:33:00:ca:96:63:8e:27: d1:c7:c7:04:95:7f:92:38:05:5b:5b:03:c2:e2:25: c6:50:68:bb:5b:ce:7b:f8:b8:40:5a:70:8a:cd:17: 66:f9:01:2f:47:97:6a:77:7b:a3:b2:f3:d9:3b:00: aa:c0:64:9d:ea:2c:df:90:ef:3d:04:54:8c:c6:bb: 1b:ab:c1:59:d9:3c:fd:c4:57:d9:cb:e3:82:3f:ca: a7:92:16:a8:54:03:78:61:e4:5a:bb:27:ee:bd:cd: 51:9a:6b:7a:93:e6:54:07:0a:18:dc:c3:96:89:a4: 93:05:87:59:c9:d1:f5:ee:8b:23:a9:9f:a2:dd:c3: 42:48:4f:78:77:a5:67:cf:93:29:61:35:3d:e0:1b: 14:65:e3:af:1c:2c:ee:e5:40:b3:9d:e4:12:98:f1: 98:0e:94:f3:93:e4:b5:8c:11:55:c4:77:38:02:7c: 12:9e:e4:fe:4a:c3:c1:ba:74:e0:91:73:f8:f1:5c: 84:fe:31:d9:78:b0:4f:50:87:e1:9b:8e:4d:98:83: 22:bf:4f:a6:f4:1f:f0:a6:62:40:76:af:f5:ef:25: 89:53:a1:06:0b:15:45:26:0c:0d:cb:82:54:9f:74: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:04:C5:17:C3:8A:DA:4E:C0:A3:34:82:01:6F:BD:0F:3C:CE:05:12 X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a643a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:d::/48 Signature Algorithm: sha256WithRSAEncryption 2f:18:af:b9:7a:45:1e:8b:55:8c:fe:1f:6a:74:3f:b9:b9:f8: eb:c5:16:5e:02:7f:a3:41:78:d1:02:b4:fd:5c:18:d2:21:b2: 71:32:49:f3:5c:e8:74:ce:b5:3d:d0:f9:6e:1c:7e:89:b7:03: 4f:4d:52:40:91:ee:56:83:93:27:83:db:a9:35:c0:f1:af:6b: 1a:aa:56:45:d3:0d:17:5e:e1:54:1a:25:5e:d4:cc:07:99:29: 31:4a:50:5c:36:02:95:7f:d2:dc:23:0c:5e:91:f7:95:b2:67: 5f:50:3d:0a:30:0b:5f:4f:61:58:45:88:bb:94:fe:c2:dc:f7: fe:16:8e:6d:68:45:54:93:8a:68:c3:26:33:37:00:f3:c7:f0: 1c:5e:6b:bd:e3:a5:ff:09:b7:aa:14:d1:ee:9d:25:60:b5:7f: 75:fd:8f:41:a0:e3:5d:f6:87:87:e4:8d:ae:f0:01:07:c9:46: a8:ec:55:65:54:97:c4:17:33:dc:45:4d:cf:ef:79:d9:e1:2c: ef:80:7b:34:2e:36:a1:4b:63:72:3f:bd:04:19:34:38:04:6c: b8:87:af:e9:42:e9:b6:4f:06:1d:6c:c3:d0:64:fb:b5:e8:9b: 1a:0f:50:54:25:b6:e8:02:b0:7b:f7:f6:39:cd:56:0a:65:01: bf:ed:85:38 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHI8zXZXJqAT79I6uZ8HJ1K4mwKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNjA0MDUxNTU1MDFaFw0yNzA0MDQxNjAwMDFaMDMxMTAvBgNV BAMTKDNCMDRDNTE3QzM4QURBNEVDMEEzMzQ4MjAxNkZCRDBGM0NDRTA1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHnNNl1XHwuJMqQyXUrfdx0Sh aidCMwDKlmOOJ9HHxwSVf5I4BVtbA8LiJcZQaLtbznv4uEBacIrNF2b5AS9Hl2p3 e6Oy89k7AKrAZJ3qLN+Q7z0EVIzGuxurwVnZPP3EV9nL44I/yqeSFqhUA3hh5Fq7 J+69zVGaa3qT5lQHChjcw5aJpJMFh1nJ0fXuiyOpn6Ldw0JIT3h3pWfPkylhNT3g GxRl468cLO7lQLOd5BKY8ZgOlPOT5LWMEVXEdzgCfBKe5P5Kw8G6dOCRc/jxXIT+ Mdl4sE9Qh+Gbjk2YgyK/T6b0H/CmYkB2r/XvJYlToQYLFUUmDA3LglSfdBgtAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUOwTFF8OK2k7AozSCAW+9DzzOBRIwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhNjQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAA0w DQYJKoZIhvcNAQELBQADggEBAC8Yr7l6RR6LVYz+H2p0P7m5+OvFFl4Cf6NBeNEC tP1cGNIhsnEySfNc6HTOtT3Q+W4cfom3A09NUkCR7laDkyeD26k1wPGvaxqqVkXT DRde4VQaJV7UzAeZKTFKUFw2ApV/0twjDF6R95WyZ19QPQowC19PYVhFiLuU/sLc 9/4Wjm1oRVSTimjDJjM3APPH8Bxea73jpf8Jt6oU0e6dJWC1f3X9j0Gg4132h4fk ja7wAQfJRqjsVWVUl8QXM9xFTc/vednhLO+AezQuNqFLY3I/vQQZNDgEbLiHr+lC 6bZPBh1sw9Bk+7XomxoPUFQltugCsHv39jnNVgplAb/thTg= -----END CERTIFICATE-----Generated at Sun Apr 19 15:00:06 2026 by rpki-client