$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f34372d3437203d3e203137373237.roa File: 323430343a633030303a383030303a3a2f34372d3437203d3e203137373237.roa (raw, json) Hash identifier: wmY8KtFj9RrdrnZw0ooBrauVORIHeoUcHy3xzbXwgJY= Subject key identifier: 52:A2:AB:E9:4A:25:12:07:E9:48:2C:46:2E:C2:D0:AA:D6:3C:0B:11 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 122134752BB8EE99A38A1CF0BC0D334BB59AB0CD Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f34372d3437203d3e203137373237.roa Signing time: Mon 06 Apr 2026 06:02:47 +0000 ROA not before: Mon 06 Apr 2026 05:57:47 +0000 ROA not after: Mon 05 Apr 2027 06:02:47 +0000 asID: 17727 IP address blocks: 2404:c000:8000::/47 maxlen: 47 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:21:34:75:2b:b8:ee:99:a3:8a:1c:f0:bc:0d:33:4b:b5:9a:b0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Apr 6 05:57:47 2026 GMT Not After : Apr 5 06:02:47 2027 GMT Subject: CN=52A2ABE94A251207E9482C462EC2D0AAD63C0B11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:e4:f7:4b:b5:f2:33:dc:72:65:15:d9:b9: 8b:af:6d:11:8b:4e:a6:8c:03:84:aa:3a:48:65:c9: 0c:c1:33:56:57:95:35:11:3b:08:f8:86:1c:49:3d: 88:8e:6c:af:5e:a4:93:9b:d3:81:0e:f5:a5:1d:9a: 1c:b3:5d:55:6e:8b:ea:99:11:4b:fb:f9:97:17:1b: 17:d4:dc:1c:7e:77:cb:cf:07:4c:dd:63:5d:73:2f: b7:95:10:34:20:c6:bf:b7:85:a9:24:1a:de:f5:d8: 93:cd:e3:e0:62:07:b4:64:5c:5f:71:31:39:a2:af: 14:0e:31:f7:74:34:0a:8a:3e:07:e4:a5:a8:b5:b9: c1:fe:83:bc:5a:7f:78:84:3a:6c:e5:a8:c5:bc:d8: e7:0e:17:51:b7:a9:99:fc:93:a6:1f:6b:e6:be:25: b8:e5:b8:e0:4d:c5:f3:84:be:f7:24:78:50:82:64: 03:b7:f6:b7:89:f1:a2:34:90:0f:bd:9f:ba:d6:d3: 7d:8b:91:95:14:09:81:82:92:8c:ca:6d:34:3f:28: 12:b4:ed:2e:ec:9c:be:ae:a5:0f:4c:eb:f6:f6:81: 85:50:5b:00:d0:bf:21:27:88:38:4e:ae:83:5a:af: 8a:d1:ac:af:16:29:8f:41:d1:e0:de:4d:c5:67:a3: dc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:AB:E9:4A:25:12:07:E9:48:2C:46:2E:C2:D0:AA:D6:3C:0B:11 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030303a3a2f34372d3437203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:8000::/47 Signature Algorithm: sha256WithRSAEncryption ac:6d:48:0a:60:16:f6:41:2d:84:0d:e4:a6:84:c7:7b:ec:a1: 40:fa:dd:de:15:6b:f6:9a:18:d3:c0:06:e8:54:08:74:5c:6d: cd:cf:11:41:f2:fd:1d:e0:22:bb:a4:ef:6e:0f:3c:5d:aa:88: 07:7e:3c:61:cb:42:4f:30:b5:80:fe:e9:df:b9:65:ef:4b:14: 31:3f:c0:c5:4c:88:a2:ec:72:bd:79:fc:6a:77:de:51:8e:ce: 78:51:bf:75:1a:ab:55:31:41:4c:0c:db:65:40:ad:69:87:29: 4a:c0:13:c5:22:32:a4:16:6f:4b:cd:3e:2e:a0:ab:09:68:90: 55:0d:ad:50:2b:39:d3:c1:4e:78:89:13:4f:99:ce:ce:9f:c9: b3:f2:85:a3:a7:f6:23:53:22:8e:95:ac:bf:a9:12:d6:c7:33: af:2b:fb:24:38:89:9c:30:69:95:56:0c:d2:a5:9b:6e:56:17: 78:b9:64:6c:73:b8:a2:b8:97:5e:c6:90:e6:1b:37:b6:38:25: ec:57:31:5f:41:ad:2f:c3:72:1a:70:61:99:45:96:bb:2d:24: d7:a4:b5:ce:43:65:fa:4d:14:32:ab:08:c9:ca:d4:41:d4:bc: 6c:17:ef:c9:11:b8:8c:89:7e:09:7b:4a:18:89:02:3f:10:f7: 65:11:8b:c6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEiE0dSu47pmjihzwvA0zS7WasM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNjA0MDYwNTU3NDdaFw0yNzA0MDUwNjAyNDdaMDMxMTAvBgNV BAMTKDUyQTJBQkU5NEEyNTEyMDdFOTQ4MkM0NjJFQzJEMEFBRDYzQzBCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiuT3S7XyM9xyZRXZuYuvbRGL TqaMA4SqOkhlyQzBM1ZXlTUROwj4hhxJPYiObK9epJOb04EO9aUdmhyzXVVui+qZ EUv7+ZcXGxfU3Bx+d8vPB0zdY11zL7eVEDQgxr+3hakkGt712JPN4+BiB7RkXF9x MTmirxQOMfd0NAqKPgfkpai1ucH+g7xaf3iEOmzlqMW82OcOF1G3qZn8k6Yfa+a+ JbjluOBNxfOEvvckeFCCZAO39reJ8aI0kA+9n7rW032LkZUUCYGCkozKbTQ/KBK0 7S7snL6upQ9M6/b2gYVQWwDQvyEniDhOroNar4rRrK8WKY9B0eDeTcVno9yFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUUqKr6UolEgfpSCxGLsLQqtY8CxEwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhMzgzMDMwMzAz YTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJATA AIAAMA0GCSqGSIb3DQEBCwUAA4IBAQCsbUgKYBb2QS2EDeSmhMd77KFA+t3eFWv2 mhjTwAboVAh0XG3NzxFB8v0d4CK7pO9uDzxdqogHfjxhy0JPMLWA/unfuWXvSxQx P8DFTIii7HK9efxqd95Rjs54Ub91GqtVMUFMDNtlQK1phylKwBPFIjKkFm9LzT4u oKsJaJBVDa1QKznTwU54iRNPmc7On8mz8oWjp/YjUyKOlay/qRLWxzOvK/skOImc MGmVVgzSpZtuVhd4uWRsc7iiuJdexpDmGze2OCXsVzFfQa0vw3IacGGZRZa7LSTX pLXOQ2X6TRQyqwjJytRB1LxsF+/JEbiMiX4Je0oYiQI/EPdlEYvG -----END CERTIFICATE-----Generated at Fri Apr 17 20:42:11 2026 by rpki-client