$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: g3vyRifuyvl5BCn5DB+I+DOVAeaWVWvau9orH/+GYFQ= Subject key identifier: 52:BF:FB:11:CC:82:63:30:91:12:A0:66:72:82:6B:DB:3C:C3:A3:90 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 6256882FFEF860DD7EBE06684703C17BFBD54164 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa Signing time: Thu 09 Apr 2026 05:02:47 +0000 ROA not before: Thu 09 Apr 2026 04:57:47 +0000 ROA not after: Thu 08 Apr 2027 05:02:47 +0000 asID: 139949 IP address blocks: 2405:aac0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:56:88:2f:fe:f8:60:dd:7e:be:06:68:47:03:c1:7b:fb:d5:41:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Apr 9 04:57:47 2026 GMT Not After : Apr 8 05:02:47 2027 GMT Subject: CN=52BFFB11CC8263309112A06672826BDB3CC3A390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:e8:8e:28:0b:bc:48:15:6f:d0:00:6c:1e: 4b:83:9b:06:5f:63:86:8f:05:cd:ea:a6:58:7c:79: f9:1f:87:89:05:d0:07:11:fb:4b:9c:c6:36:42:09: 35:46:d6:4e:2c:08:31:03:e1:63:68:84:14:0a:35: 61:41:bd:58:71:f3:1a:9c:28:e0:7b:52:d7:a6:e8: b4:00:af:87:d3:d1:7c:b8:3f:11:86:b7:b9:80:78: 2a:25:99:a9:d1:93:6f:53:ca:79:2a:79:4f:11:ed: 84:36:e4:ab:71:bc:a2:f2:f0:a7:50:f3:25:ae:82: 56:3e:ed:c4:7c:e1:a4:40:66:2a:59:6b:51:7b:13: c1:e0:f1:75:2f:1b:8e:bb:95:ad:49:7b:5f:89:a6: 3b:1d:e4:5d:df:5e:d9:50:d0:9d:0b:74:85:f8:fa: 01:1e:c3:a7:b8:54:c5:54:19:84:59:a2:f2:bb:f5: ac:58:5d:b6:5c:cd:88:c6:dc:87:c4:cb:cd:5f:af: 7e:ca:fa:ae:79:43:e7:8c:7d:35:5b:be:b8:69:e1: 44:35:0f:df:26:b8:4d:f9:c3:7c:a4:72:48:26:74: 95:2f:fe:75:8f:17:6e:e8:e3:de:0b:3a:90:a0:af: d8:d3:9f:38:49:98:80:d6:72:c1:35:cb:d6:20:3f: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BF:FB:11:CC:82:63:30:91:12:A0:66:72:82:6B:DB:3C:C3:A3:90 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:6::/48 Signature Algorithm: sha256WithRSAEncryption cc:dc:e1:f4:03:c8:b3:93:6a:45:6f:d5:e0:1a:e6:3e:aa:58: e5:f1:4f:5d:a4:08:33:e8:75:ee:04:3b:62:fc:dd:4e:08:a8: 1e:ff:cf:13:6e:56:ff:52:58:ac:72:83:40:5a:79:1d:c5:98: 9f:16:23:3b:66:b8:2f:46:7f:84:c9:28:5d:ca:c6:8d:68:eb: 9d:04:0b:a0:0c:3b:ba:03:5b:51:7b:7b:a6:78:e0:e1:f0:df: 78:79:1d:26:49:e4:c7:df:9f:e4:ae:6c:4e:ea:c1:57:a3:9e: 93:ca:c7:08:ee:4c:ec:19:b1:4a:f5:03:65:be:e3:2f:05:7b: f8:71:b6:9e:da:ad:97:03:1d:90:18:9f:5c:70:5f:95:af:ea: e0:b4:6e:45:db:21:44:bb:05:e7:c6:08:79:09:0b:c3:de:44: a1:c5:15:56:da:2f:f2:e1:9a:67:b8:a7:48:ba:42:e7:82:9c: 2c:91:51:fc:ef:36:4c:0d:c9:cf:a3:ff:49:a2:30:22:cf:e5: 88:9c:fd:bf:dd:1d:89:ef:11:de:8e:22:32:bc:1a:10:3b:67: 26:32:4e:57:06:a4:7d:e5:6a:45:89:22:cb:d4:25:64:e3:43: e1:e1:33:ad:fc:0f:d7:b7:87:76:02:38:32:42:36:ff:08:c0: d1:5f:70:4d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYlaIL/74YN1+vgZoRwPBe/vVQWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNjA0MDkwNDU3NDdaFw0yNzA0MDgwNTAyNDdaMDMxMTAvBgNV BAMTKDUyQkZGQjExQ0M4MjYzMzA5MTEyQTA2NjcyODI2QkRCM0NDM0EzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6OiOKAu8SBVv0ABsHkuDmwZf Y4aPBc3qplh8efkfh4kF0AcR+0ucxjZCCTVG1k4sCDED4WNohBQKNWFBvVhx8xqc KOB7Utem6LQAr4fT0Xy4PxGGt7mAeColmanRk29TynkqeU8R7YQ25KtxvKLy8KdQ 8yWuglY+7cR84aRAZipZa1F7E8Hg8XUvG467la1Je1+Jpjsd5F3fXtlQ0J0LdIX4 +gEew6e4VMVUGYRZovK79axYXbZczYjG3IfEy81fr37K+q55Q+eMfTVbvrhp4UQ1 D98muE35w3ykckgmdJUv/nWPF27o494LOpCgr9jTnzhJmIDWcsE1y9YgP1JxAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUUr/7EcyCYzCREqBmcoJr2zzDo5AwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBarAAAYw DQYJKoZIhvcNAQELBQADggEBAMzc4fQDyLOTakVv1eAa5j6qWOXxT12kCDPode4E O2L83U4IqB7/zxNuVv9SWKxyg0BaeR3FmJ8WIztmuC9Gf4TJKF3Kxo1o650EC6AM O7oDW1F7e6Z44OHw33h5HSZJ5Mffn+SubE7qwVejnpPKxwjuTOwZsUr1A2W+4y8F e/hxtp7arZcDHZAYn1xwX5Wv6uC0bkXbIUS7BefGCHkJC8PeRKHFFVbaL/Lhmme4 p0i6QueCnCyRUfzvNkwNyc+j/0miMCLP5Yic/b/dHYnvEd6OIjK8GhA7ZyYyTlcG pH3lakWJIsvUJWTjQ+HhM638D9e3h3YCODJCNv8IwNFfcE0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:12:29 2026 by rpki-client