$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa File: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (raw, json) Hash identifier: 3Y3mlm4HMyrgNpmUNSqSOB2l/S9ZhaHNUoUcTNO5h0c= Subject key identifier: 45:8D:20:D5:BE:9B:5C:74:29:BF:1D:3C:6F:9C:EE:24:0D:20:49:3A Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 3287C28B1794EB1FF224DB537A52FA69DE1AC1C4 Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa Signing time: Tue 31 Mar 2026 03:02:45 +0000 ROA not before: Tue 31 Mar 2026 02:57:45 +0000 ROA not after: Tue 30 Mar 2027 03:02:45 +0000 asID: 38496 IP address blocks: 2407:3e80:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:87:c2:8b:17:94:eb:1f:f2:24:db:53:7a:52:fa:69:de:1a:c1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Mar 31 02:57:45 2026 GMT Not After : Mar 30 03:02:45 2027 GMT Subject: CN=458D20D5BE9B5C7429BF1D3C6F9CEE240D20493A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:07:0d:98:23:c0:bd:2d:d3:d9:65:a6:37: ac:b2:b3:f2:0e:a8:90:d9:42:93:ef:71:30:8a:d2: 31:2e:7a:6a:07:82:25:bd:19:fd:40:d6:8e:8e:24: 9b:44:d4:57:63:4e:f7:fa:7e:5c:b9:b7:ac:81:2f: ef:31:93:fd:24:a1:2b:45:30:21:55:95:61:54:38: f3:3d:47:30:ea:af:1b:36:93:4b:b6:6e:0e:d0:f9: e3:60:30:5a:53:00:77:2a:f8:22:9e:99:b6:58:04: af:70:a5:7e:37:5b:ae:56:09:51:91:31:f6:f3:13: 47:a9:16:1f:2e:8d:c0:54:54:e1:a6:2a:ba:2d:6b: 64:03:94:44:ce:a0:c9:29:87:f0:88:09:76:32:4b: 9f:12:41:89:fb:52:58:34:3f:7a:ca:1d:15:ef:0b: fd:79:41:ca:f8:1d:80:0c:b3:f5:a1:30:ef:55:40: 67:f6:ee:5a:0e:f3:70:c1:4a:00:1d:96:fd:66:35: 7f:77:e2:51:ac:50:5a:1e:59:bc:d9:05:b2:11:44: 81:16:3b:46:48:4c:6a:b6:b2:5b:95:13:d3:bf:ff: 52:cd:22:28:94:a7:80:3c:23:7e:24:b7:da:ed:58: 6c:2b:f0:a3:db:20:50:41:64:d0:66:84:f6:b6:54: 46:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8D:20:D5:BE:9B:5C:74:29:BF:1D:3C:6F:9C:EE:24:0D:20:49:3A X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:3e80:6::/48 Signature Algorithm: sha256WithRSAEncryption 12:af:73:2f:c0:9c:d7:b5:25:27:3e:68:9d:9f:5f:cc:80:f8: 84:d7:bf:11:b1:72:a2:68:71:22:e8:d9:43:8d:b0:2b:4a:d6: 9a:bb:e9:22:a2:e0:11:61:85:ad:31:f2:47:a9:20:00:64:24: 82:c5:67:40:c9:5f:9b:f6:ae:5d:fa:fa:cb:21:e9:10:29:9b: 60:b9:d2:0c:90:e0:ce:a7:c4:78:87:d2:5b:7b:84:58:2d:25: 60:13:95:25:c8:5e:d2:11:c2:14:0e:47:ea:d3:00:bd:c5:6c: 49:6a:48:8a:88:d8:5c:55:3d:0c:36:2d:cc:c8:67:72:2e:75: a9:ea:3d:44:80:68:10:53:6c:74:3b:88:98:86:7b:25:f7:81: 28:76:5d:78:d4:de:be:b3:72:1a:26:63:94:dc:cf:0f:60:46: 8a:7c:d7:b8:38:9d:08:59:07:78:8a:6e:1d:4a:68:53:b5:bc: 3d:48:3c:c8:76:27:06:fb:66:14:c5:36:68:45:a8:4c:a4:af: b3:41:d5:cc:c0:13:d2:02:c7:4d:d6:ec:ce:10:2f:4e:93:ee: 00:64:d4:1e:e7:d7:e1:c6:08:d9:75:48:e1:9a:9a:36:e1:41: 95:2f:e6:54:60:6c:36:d1:69:ad:4f:f9:5f:0c:5a:62:3f:28: 0d:8f:5d:73 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUMofCixeU6x/yJNtTelL6ad4awcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNjAzMzEwMjU3NDVaFw0yNzAzMzAwMzAyNDVaMDMxMTAvBgNV BAMTKDQ1OEQyMEQ1QkU5QjVDNzQyOUJGMUQzQzZGOUNFRTI0MEQyMDQ5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoAcNmCPAvS3T2WWmN6yys/IO qJDZQpPvcTCK0jEuemoHgiW9Gf1A1o6OJJtE1FdjTvf6fly5t6yBL+8xk/0koStF MCFVlWFUOPM9RzDqrxs2k0u2bg7Q+eNgMFpTAHcq+CKembZYBK9wpX43W65WCVGR MfbzE0epFh8ujcBUVOGmKrota2QDlETOoMkph/CICXYyS58SQYn7Ulg0P3rKHRXv C/15Qcr4HYAMs/WhMO9VQGf27loO83DBSgAdlv1mNX934lGsUFoeWbzZBbIRRIEW O0ZITGq2sluVE9O//1LNIiiUp4A8I34kt9rtWGwr8KPbIFBBZNBmhPa2VEZPAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQURY0g1b6bXHQpvx08b5zuJA0gSTowHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxZTk0MjQzLTg3ZjAtNDI2Zi1h OWNhLTRjMTllZGIwNmI0Mi8wLzMyMzQzMDM3M2EzMzY1MzgzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAc+gAAGMA0G CSqGSIb3DQEBCwUAA4IBAQASr3MvwJzXtSUnPmidn1/MgPiE178RsXKiaHEi6NlD jbArStaau+kiouARYYWtMfJHqSAAZCSCxWdAyV+b9q5d+vrLIekQKZtgudIMkODO p8R4h9Jbe4RYLSVgE5UlyF7SEcIUDkfq0wC9xWxJakiKiNhcVT0MNi3MyGdyLnWp 6j1EgGgQU2x0O4iYhnsl94Eodl141N6+s3IaJmOU3M8PYEaKfNe4OJ0IWQd4im4d SmhTtbw9SDzIdicG+2YUxTZoRahMpK+zQdXMwBPSAsdN1uzOEC9Ok+4AZNQe59fh xgjZdUjhmpo24UGVL+ZUYGw20WmtT/lfDFpiPygNj11z -----END CERTIFICATE-----Generated at Fri Apr 17 18:28:35 2026 by rpki-client