$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa File: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (raw, json) Hash identifier: C59km8D95YTkQZBlbVQquyxssvqtNo5HAADp8Vd+f+A= Subject key identifier: 39:2B:8D:7E:B4:56:72:B8:D9:5A:5F:93:91:BA:CC:60:0B:BC:64:9C Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Certificate serial: 04F1B7494B7775FB52EDCB8AA6ED3B82FBCE795B Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa Signing time: Fri 17 Apr 2026 11:00:00 +0000 ROA not before: Fri 17 Apr 2026 10:55:00 +0000 ROA not after: Fri 16 Apr 2027 11:00:00 +0000 asID: 149953 IP address blocks: 2001:df1:1c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f1:b7:49:4b:77:75:fb:52:ed:cb:8a:a6:ed:3b:82:fb:ce:79:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Validity Not Before: Apr 17 10:55:00 2026 GMT Not After : Apr 16 11:00:00 2027 GMT Subject: CN=392B8D7EB45672B8D95A5F9391BACC600BBC649C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:91:8e:95:4a:ae:0a:0b:e5:f1:9d:b2:d3: ec:6e:d0:3c:52:11:e5:79:86:b6:24:0f:20:be:14: 0b:9a:5c:52:74:b1:c2:e8:9c:fa:b9:19:fa:2f:22: bf:55:5f:4d:88:3f:27:80:ff:f8:d0:53:fc:94:f3: 8c:1f:7a:3d:e7:e4:ec:13:8b:c1:ec:06:1d:71:17: a3:22:1a:df:16:70:27:50:1f:b2:17:1b:84:e4:79: 56:04:33:47:a9:c0:f3:85:33:bd:52:57:8f:8c:49: cb:5e:f4:11:2a:40:f6:69:4b:5d:5d:d4:9e:0f:09: 99:bc:cf:8e:3a:48:6b:bd:24:ae:bf:b5:82:fc:6b: 43:9a:7a:91:2e:89:cd:73:21:d2:05:9b:18:de:83: 22:32:0c:69:6c:c4:88:a8:72:ab:ac:f9:8a:df:3f: 03:60:87:e5:87:6a:4c:f4:e8:32:e4:89:aa:70:e3: bc:8b:91:48:69:af:14:ca:c2:dd:1f:6c:19:f2:7f: df:75:36:16:f8:b7:3d:56:28:5f:54:68:da:6d:34: 7a:c5:4d:f3:32:3c:20:0d:b1:b4:d1:31:da:19:18: 2e:3a:d9:0b:a5:03:7a:be:25:3a:ef:eb:aa:4e:c7: 71:fc:2d:f4:b3:25:91:33:2b:7f:00:d2:be:65:d7: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2B:8D:7E:B4:56:72:B8:D9:5A:5F:93:91:BA:CC:60:0B:BC:64:9C X509v3 Authority Key Identifier: keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 2e:b5:4e:87:6f:b2:8b:f5:3c:1d:4e:a0:ed:92:eb:0a:d6:7e: 62:ca:71:9d:b9:bf:b1:b6:93:ab:c7:69:21:44:60:59:8a:25: 4e:ad:06:24:95:e2:a6:93:c8:1d:9e:54:53:bf:bd:29:94:15: 66:8a:71:11:53:6b:c8:b5:d0:65:1c:cd:5b:3e:dd:95:25:75: 51:51:79:1a:a5:d6:b9:98:51:5b:df:21:86:c3:c9:5b:3b:2f: 95:83:ba:1e:e5:58:bc:67:b7:0c:cd:cc:43:11:19:5b:32:b0: 8c:25:87:0f:dc:28:24:7e:9e:76:3c:3f:e1:09:75:7c:6b:e5: 3a:92:03:ca:a2:5d:fe:9d:9b:c4:0a:b1:64:00:b3:94:3c:fb: 3f:53:b1:0f:16:50:a3:c0:ed:c2:12:4b:1f:2c:cb:60:57:ef: a3:31:55:1b:77:83:58:eb:91:c6:1d:c2:83:b6:85:cb:31:59: 2e:8c:28:fb:d6:be:63:fb:08:87:6d:25:c7:d2:d9:62:a1:2b: 8b:65:b4:4d:da:32:7d:53:5a:d0:9f:0e:49:e3:6d:64:63:d2: e2:0d:ef:08:2f:f3:fa:37:00:47:1c:d1:f3:85:74:ea:89:55: 7c:cf:17:87:68:61:e9:47:5a:a2:67:32:d6:de:7a:0a:5a:16: 88:25:8d:0b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBPG3SUt3dftS7cuKpu07gvvOeVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC MDhFRkJGMzAeFw0yNjA0MTcxMDU1MDBaFw0yNzA0MTYxMTAwMDBaMDMxMTAvBgNV BAMTKDM5MkI4RDdFQjQ1NjcyQjhEOTVBNUY5MzkxQkFDQzYwMEJCQzY0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChbZGOlUquCgvl8Z2y0+xu0DxS EeV5hrYkDyC+FAuaXFJ0scLonPq5GfovIr9VX02IPyeA//jQU/yU84wfej3n5OwT i8HsBh1xF6MiGt8WcCdQH7IXG4TkeVYEM0epwPOFM71SV4+MScte9BEqQPZpS11d 1J4PCZm8z446SGu9JK6/tYL8a0OaepEuic1zIdIFmxjegyIyDGlsxIiocqus+Yrf PwNgh+WHakz06DLkiapw47yLkUhprxTKwt0fbBnyf991Nhb4tz1WKF9UaNptNHrF TfMyPCANsbTRMdoZGC462QulA3q+JTrv66pOx3H8LfSzJZEzK38A0r5l1xTJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOSuNfrRWcrjZWl+TkbrMYAu8ZJwwHwYDVR0j BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4 OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF RkJGMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05 ZGFhLWQyMjJiN2E4OTA3Mi8wLzMyMzAzMDMxM2E2NDY2MzEzYTMxNjMzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzkzNTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8RxAMA0GCSqGSIb3DQEBCwUAA4IBAQAutU6Hb7KL9TwdTqDtkusK1n5iynGdub+x tpOrx2khRGBZiiVOrQYkleKmk8gdnlRTv70plBVminERU2vItdBlHM1bPt2VJXVR UXkapda5mFFb3yGGw8lbOy+Vg7oe5Vi8Z7cMzcxDERlbMrCMJYcP3Cgkfp52PD/h CXV8a+U6kgPKol3+nZvECrFkALOUPPs/U7EPFlCjwO3CEksfLMtgV++jMVUbd4NY 65HGHcKDtoXLMVkujCj71r5j+wiHbSXH0tlioSuLZbRN2jJ9U1rQnw5J421kY9Li De8IL/P6NwBHHNHzhXTqiVV8zxeHaGHpR1qiZzLW3noKWhaIJY0L -----END CERTIFICATE-----Generated at Fri Apr 17 21:33:26 2026 by rpki-client