$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: E105q5utVLAb7F91MyW/7zjxBRhf1sFjonbj4mP9SiQ= Subject key identifier: 63:11:20:4B:5C:17:AE:A8:B4:F9:B3:65:9C:62:E6:F5:CB:E9:97:6D Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 4832BBC119C2204EBF075FC7F22368B6859631D4 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa Signing time: Thu 09 Apr 2026 07:03:22 +0000 ROA not before: Thu 09 Apr 2026 06:58:22 +0000 ROA not after: Thu 08 Apr 2027 07:03:22 +0000 asID: 139949 IP address blocks: 2405:aac0:500::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:32:bb:c1:19:c2:20:4e:bf:07:5f:c7:f2:23:68:b6:85:96:31:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Apr 9 06:58:22 2026 GMT Not After : Apr 8 07:03:22 2027 GMT Subject: CN=6311204B5C17AEA8B4F9B3659C62E6F5CBE9976D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:ac:f0:f8:e4:ca:56:ee:92:d7:73:bd:cd: 92:dd:16:d5:bd:00:a6:58:99:c7:76:d4:9b:b3:a3: d8:9e:a1:65:19:0f:ec:ac:41:63:f2:de:c8:a9:a3: 1b:c4:05:96:b1:87:8c:9b:92:24:b2:a4:16:e0:54: 86:a7:45:25:65:67:21:88:cb:86:e7:1a:33:22:b4: 3f:a0:bf:35:53:a9:0e:8a:ee:9d:42:57:e7:6f:4a: 70:ab:67:cc:d2:e4:2e:6c:0e:f0:25:9b:9f:96:de: 56:f2:43:6b:4c:f5:ca:e7:f0:ee:11:3d:25:8d:80: 9f:d2:03:0e:00:b0:d4:eb:1e:81:65:cc:80:90:f1: 12:21:6a:ab:aa:07:c9:3f:53:5b:0e:5a:6f:b2:01: 82:9f:7e:e6:8a:30:43:20:3d:3b:f5:d2:18:98:7b: cc:cc:22:24:0b:70:03:d7:45:28:44:b0:96:e7:f7: 1f:25:27:b1:6b:75:fa:79:3c:71:26:0b:78:73:e4: 5b:89:bf:fa:98:fa:27:82:14:15:8d:ac:d0:01:ec: 43:8e:02:47:14:4e:3d:74:7d:fd:73:24:22:d7:f3: b4:71:01:d6:d7:65:2a:ad:3a:dc:b2:6a:38:c5:e1: 71:a0:8c:82:a5:df:22:c9:00:c4:af:43:25:30:b0: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:11:20:4B:5C:17:AE:A8:B4:F9:B3:65:9C:62:E6:F5:CB:E9:97:6D X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:500::/48 Signature Algorithm: sha256WithRSAEncryption 7d:41:e5:92:8b:92:56:6e:59:54:1d:d9:92:d0:51:81:6e:10: 64:f3:e3:17:38:02:88:80:2d:cf:b8:53:73:52:f0:62:d7:ee: 96:fc:eb:f6:d9:44:3b:fd:cd:2d:83:e4:37:81:a5:6b:1e:82: 48:b6:91:76:e7:77:04:45:32:dd:68:76:31:c0:3c:95:bb:73: be:e5:1e:9d:8e:7f:9d:1b:05:50:d2:ab:44:51:ff:31:44:a6: db:0f:17:af:3e:e1:0e:18:72:ec:3d:82:f0:bd:ac:5f:2c:7d: bd:b9:a6:bb:7e:e4:de:cc:e7:d3:d7:b4:ef:b7:7f:57:dc:92: 94:5c:93:1d:58:65:e5:5c:60:e7:f3:3f:40:f0:1d:3c:08:86: 42:4d:17:b2:79:f1:39:9e:de:19:aa:26:0e:a8:bf:bf:bb:f7: 32:0f:55:be:8d:56:e7:58:10:49:ce:08:3c:71:f8:0e:1d:ea: 86:29:ea:b8:eb:cf:aa:ce:f1:34:b6:86:1d:9d:ef:02:6e:4b: 34:1d:9b:04:af:3f:43:cb:4c:1a:8b:18:89:0c:ca:61:f0:02: 8a:fd:96:1b:30:05:3e:03:29:1e:be:9b:31:67:63:51:8f:35: 40:60:b6:22:b3:86:a0:96:86:b8:15:36:29:2d:14:46:72:6a: 69:a8:2b:d2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSDK7wRnCIE6/B1/H8iNotoWWMdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNjA0MDkwNjU4MjJaFw0yNzA0MDgwNzAzMjJaMDMxMTAvBgNV BAMTKDYzMTEyMDRCNUMxN0FFQThCNEY5QjM2NTlDNjJFNkY1Q0JFOTk3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfT6zw+OTKVu6S13O9zZLdFtW9 AKZYmcd21Juzo9ieoWUZD+ysQWPy3sipoxvEBZaxh4ybkiSypBbgVIanRSVlZyGI y4bnGjMitD+gvzVTqQ6K7p1CV+dvSnCrZ8zS5C5sDvAlm5+W3lbyQ2tM9crn8O4R PSWNgJ/SAw4AsNTrHoFlzICQ8RIhaquqB8k/U1sOWm+yAYKffuaKMEMgPTv10hiY e8zMIiQLcAPXRShEsJbn9x8lJ7Frdfp5PHEmC3hz5FuJv/qY+ieCFBWNrNAB7EOO AkcUTj10ff1zJCLX87RxAdbXZSqtOtyyajjF4XGgjIKl3yLJAMSvQyUwsDf9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUYxEgS1wXrqi0+bNlnGLm9cvpl20wHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWq wAUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9QeWSi5JWbllUHdmS0FGBbhBk8+MXOAKI gC3PuFNzUvBi1+6W/Ov22UQ7/c0tg+Q3gaVrHoJItpF253cERTLdaHYxwDyVu3O+ 5R6djn+dGwVQ0qtEUf8xRKbbDxevPuEOGHLsPYLwvaxfLH29uaa7fuTezOfT17Tv t39X3JKUXJMdWGXlXGDn8z9A8B08CIZCTReyefE5nt4ZqiYOqL+/u/cyD1W+jVbn WBBJzgg8cfgOHeqGKeq468+qzvE0toYdne8Cbks0HZsErz9Dy0waixiJDMph8AKK /ZYbMAU+AykevpsxZ2NRjzVAYLYis4agloa4FTYpLRRGcmppqCvS -----END CERTIFICATE-----Generated at Fri Apr 17 20:06:07 2026 by rpki-client