$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa File: 323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (raw, json) Hash identifier: veTUym4V2MwCWzP5HPakWwXr51tOjSeHtBuEZPVCr+4= Subject key identifier: 73:6F:ED:3D:BB:10:FA:67:71:CA:E3:31:49:43:A7:7C:38:84:30:61 Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 13B19105C56AF3E12DB9CD7E6040E4DACDD6D563 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa Signing time: Fri 10 Apr 2026 09:01:14 +0000 ROA not before: Fri 10 Apr 2026 08:56:14 +0000 ROA not after: Fri 09 Apr 2027 09:01:14 +0000 asID: 142389 IP address blocks: 2001:df2:81c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b1:91:05:c5:6a:f3:e1:2d:b9:cd:7e:60:40:e4:da:cd:d6:d5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Apr 10 08:56:14 2026 GMT Not After : Apr 9 09:01:14 2027 GMT Subject: CN=736FED3DBB10FA6771CAE3314943A77C38843061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:e1:7e:e1:56:d5:d0:94:5e:d0:a7:37:bc: e2:9d:0c:4d:72:71:8f:b3:19:f9:77:a0:7d:a1:2e: 24:e8:74:19:a0:98:fb:38:2a:01:78:06:82:2a:e9: fa:40:4e:32:a2:5b:98:19:32:59:1a:79:0d:4c:cb: c9:55:14:d9:bf:53:ac:15:3d:16:d7:28:94:29:e7: b0:69:4f:b0:a2:26:3a:56:b8:2d:7e:e3:37:c4:c7: 60:8b:8a:af:33:29:d6:fa:2c:da:00:c9:3a:d5:63: f6:16:6e:30:a5:63:48:62:80:38:80:12:67:d0:34: d4:ef:9c:b6:a5:43:9f:82:40:a8:4e:88:78:09:f4: 5a:3d:e9:d2:26:80:0f:6c:4b:5d:80:c7:1c:48:81: 89:ca:d2:a1:ec:45:ec:61:b2:31:2b:41:1e:77:55: 27:71:a7:68:a3:fc:45:04:1c:f6:44:49:82:2b:bc: 71:f4:d5:96:dd:f9:f3:1f:cd:ab:64:45:75:93:ee: 1d:db:77:97:d0:86:72:9e:b6:ce:cf:ca:4c:18:47: e2:7e:8b:5b:93:67:09:b8:65:e9:be:a8:0c:8a:67: fc:c1:c9:41:0f:ab:29:eb:f6:bd:c4:b3:50:0c:35: 35:6c:1b:4f:31:23:3e:6d:dd:2a:70:90:37:db:ad: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6F:ED:3D:BB:10:FA:67:71:CA:E3:31:49:43:A7:7C:38:84:30:61 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:81c0::/48 Signature Algorithm: sha256WithRSAEncryption 00:37:ae:33:dc:71:d3:93:0d:cf:f0:1b:82:21:9b:d2:57:4c: 89:2c:27:e3:06:99:74:94:32:8a:96:9c:44:86:4d:b4:7d:e6: a4:4c:a4:05:a2:5f:6e:75:3e:51:6c:2f:8c:c8:fc:75:45:2f: 1c:a5:77:3b:3d:7d:6e:6b:e9:62:4f:7e:ff:37:89:24:ed:47: 51:f1:e5:73:87:5a:67:da:69:84:03:a7:e4:d3:3e:cb:77:01: 20:1c:e2:24:c6:d9:fd:39:7d:94:48:53:9f:19:a6:69:30:92: 3c:ad:9c:dd:25:06:00:e3:5c:e7:0a:6a:72:23:e1:a2:63:99: 93:e1:d5:f9:67:06:30:8e:ca:45:71:f6:e3:cd:c8:08:e8:8b: 5a:c1:6e:ed:3b:e8:8c:b7:62:94:54:f7:2c:22:3f:22:c4:94: e7:46:0b:cf:95:13:09:8d:9c:e8:02:34:19:60:1b:7c:62:34: 88:4e:26:dd:7f:70:ba:31:bb:78:a5:e1:19:b7:05:4c:24:71: cb:f5:53:fb:2f:69:1c:7c:9c:54:20:47:7c:c4:a4:42:c7:a4: 7c:10:f0:31:e8:0a:1b:02:14:8b:bb:af:a7:9c:14:cf:60:7a: 9e:09:7d:02:28:62:79:c3:0e:22:59:e9:4c:37:44:e9:55:79: dd:d1:3b:77 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUE7GRBcVq8+Etuc1+YEDk2s3W1WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNjA0MTAwODU2MTRaFw0yNzA0MDkwOTAxMTRaMDMxMTAvBgNV BAMTKDczNkZFRDNEQkIxMEZBNjc3MUNBRTMzMTQ5NDNBNzdDMzg4NDMwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyOF+4VbV0JRe0Kc3vOKdDE1y cY+zGfl3oH2hLiTodBmgmPs4KgF4BoIq6fpATjKiW5gZMlkaeQ1My8lVFNm/U6wV PRbXKJQp57BpT7CiJjpWuC1+4zfEx2CLiq8zKdb6LNoAyTrVY/YWbjClY0higDiA EmfQNNTvnLalQ5+CQKhOiHgJ9Fo96dImgA9sS12AxxxIgYnK0qHsRexhsjErQR53 VSdxp2ij/EUEHPZESYIrvHH01Zbd+fMfzatkRXWT7h3bd5fQhnKets7PykwYR+J+ i1uTZwm4Zem+qAyKZ/zByUEPqynr9r3Es1AMNTVsG08xIz5t3SpwkDfbraQTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUc2/tPbsQ+mdxyuMxSUOnfDiEMGEwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkNzllN2E3LTFhYWUtNGU1Mi1i YWMzLThmN2M2N2FlMGEwNC8wLzMyMzAzMDMxM2E2NDY2MzIzYTM4MzE2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzMzODM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8oHAMA0GCSqGSIb3DQEBCwUAA4IBAQAAN64z3HHTkw3P8BuCIZvSV0yJLCfjBpl0 lDKKlpxEhk20feakTKQFol9udT5RbC+MyPx1RS8cpXc7PX1ua+liT37/N4kk7UdR 8eVzh1pn2mmEA6fk0z7LdwEgHOIkxtn9OX2USFOfGaZpMJI8rZzdJQYA41znCmpy I+GiY5mT4dX5ZwYwjspFcfbjzcgI6ItawW7tO+iMt2KUVPcsIj8ixJTnRgvPlRMJ jZzoAjQZYBt8YjSITibdf3C6Mbt4peEZtwVMJHHL9VP7L2kcfJxUIEd8xKRCx6R8 EPAx6AobAhSLu6+nnBTPYHqeCX0CKGJ5ww4iWelMN0TpVXnd0Tt3 -----END CERTIFICATE-----Generated at Fri Apr 17 19:47:57 2026 by rpki-client