$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030323a3a2f34382d3438203d3e203137373237.roa File: 323430343a633030303a383030323a3a2f34382d3438203d3e203137373237.roa (raw, json) Hash identifier: WNyQm7yB1tzBvn0TXUBwo0ku3t0+MoH44g0FDOKS2t4= Subject key identifier: 84:6C:19:CA:A2:35:6C:50:9E:71:BF:FC:B4:3E:DD:06:C1:69:9C:E5 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 4E06EAD132C906305A8F05ACAE00618DD3A924F9 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030323a3a2f34382d3438203d3e203137373237.roa Signing time: Mon 06 Apr 2026 06:02:47 +0000 ROA not before: Mon 06 Apr 2026 05:57:47 +0000 ROA not after: Mon 05 Apr 2027 06:02:47 +0000 asID: 17727 IP address blocks: 2404:c000:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:06:ea:d1:32:c9:06:30:5a:8f:05:ac:ae:00:61:8d:d3:a9:24:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Apr 6 05:57:47 2026 GMT Not After : Apr 5 06:02:47 2027 GMT Subject: CN=846C19CAA2356C509E71BFFCB43EDD06C1699CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:12:3c:cf:68:53:79:99:ff:e1:49:26:c6: 7c:a8:15:0d:03:a7:d6:79:7f:11:96:ed:41:73:fe: 6b:04:c5:1a:cc:17:dc:6e:5f:22:e5:fd:d3:05:24: 75:70:20:ab:25:23:90:3e:a7:e4:c1:1a:8b:cc:62: 8a:89:75:d9:b7:ec:3a:17:a4:0d:b5:2a:e4:a5:b8: cf:0b:ac:72:f3:10:c0:97:53:54:46:93:73:31:77: 44:d2:37:e1:b4:bb:25:81:06:bd:36:05:a4:3f:59: 6c:77:64:4b:be:c3:5d:72:28:b2:15:e5:fd:ea:8c: f3:b6:cd:aa:22:c7:0e:68:a4:4a:14:7a:9e:7e:67: 2d:cf:73:bc:d7:03:1b:8f:50:4e:ce:0d:62:b8:7c: 9b:74:22:9f:b6:24:4e:29:e4:31:ea:4d:4b:4b:22: ee:cc:57:30:f5:3b:74:79:2e:7d:d1:3d:1f:b3:d1: ae:e9:ae:33:bf:4b:61:e8:4f:17:1c:4c:b8:c6:e8: 74:32:bb:b9:53:d7:8c:8e:98:1f:fd:22:3a:ed:37: 5f:5c:4d:f7:b1:9d:af:72:c7:71:05:bb:00:08:f3: d5:b8:42:3d:86:a9:51:76:27:32:70:c7:2e:28:ef: 32:55:42:a2:53:22:aa:2e:6f:bc:49:ae:5b:5e:14: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6C:19:CA:A2:35:6C:50:9E:71:BF:FC:B4:3E:DD:06:C1:69:9C:E5 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a383030323a3a2f34382d3438203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:8002::/48 Signature Algorithm: sha256WithRSAEncryption 18:a8:13:09:4a:01:99:0d:52:3c:90:18:22:84:7f:1d:61:fc: cf:a5:34:57:c9:02:55:ef:e2:4f:f3:25:86:64:d0:2d:78:5b: ac:45:a5:a5:0c:f0:80:53:85:8c:e6:98:44:9e:6b:0b:3a:1d: 09:7d:46:74:5b:26:89:77:ea:b4:5e:93:f8:d0:a0:ac:99:7a: 21:ea:16:77:0c:fd:09:ff:ed:54:f5:b9:3f:0f:81:1a:65:83: 81:e9:6d:86:7d:e8:6c:10:ad:c2:91:79:2a:19:99:74:79:9b: 6e:de:4d:82:a3:b4:96:de:cb:00:49:6d:27:63:eb:07:3c:3d: 5c:91:6e:56:64:ed:0d:03:8d:92:ac:4d:85:82:16:d5:a2:36: ba:db:2e:e6:ec:cf:8f:d0:66:6a:71:69:e4:e3:e2:59:27:1d: c9:dc:70:c3:dd:c8:68:55:fd:63:2f:7d:52:a4:02:58:78:a6: cc:4b:55:e9:0f:c3:96:9d:c7:2d:9b:74:6d:3f:a1:a1:4a:58: 04:fb:15:5d:11:2a:89:35:30:2f:31:80:57:e8:c3:ca:b2:26: 27:51:56:4b:ae:7a:30:d1:9b:c7:9d:7f:2e:8d:3b:8d:a6:54: ed:bb:19:3e:35:a6:31:e0:c3:d7:bf:fc:25:57:7a:0d:54:0c: 9e:64:1e:8b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTgbq0TLJBjBajwWsrgBhjdOpJPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNjA0MDYwNTU3NDdaFw0yNzA0MDUwNjAyNDdaMDMxMTAvBgNV BAMTKDg0NkMxOUNBQTIzNTZDNTA5RTcxQkZGQ0I0M0VERDA2QzE2OTlDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcBI8z2hTeZn/4UkmxnyoFQ0D p9Z5fxGW7UFz/msExRrMF9xuXyLl/dMFJHVwIKslI5A+p+TBGovMYoqJddm37DoX pA21KuSluM8LrHLzEMCXU1RGk3Mxd0TSN+G0uyWBBr02BaQ/WWx3ZEu+w11yKLIV 5f3qjPO2zaoixw5opEoUep5+Zy3Pc7zXAxuPUE7ODWK4fJt0Ip+2JE4p5DHqTUtL Iu7MVzD1O3R5Ln3RPR+z0a7prjO/S2HoTxccTLjG6HQyu7lT14yOmB/9IjrtN19c Tfexna9yx3EFuwAI89W4Qj2GqVF2JzJwxy4o7zJVQqJTIqoub7xJrlteFPHfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhGwZyqI1bFCecb/8tD7dBsFpnOUwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhMzgzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATA AIACMA0GCSqGSIb3DQEBCwUAA4IBAQAYqBMJSgGZDVI8kBgihH8dYfzPpTRXyQJV 7+JP8yWGZNAteFusRaWlDPCAU4WM5phEnmsLOh0JfUZ0WyaJd+q0XpP40KCsmXoh 6hZ3DP0J/+1U9bk/D4EaZYOB6W2GfehsEK3CkXkqGZl0eZtu3k2Co7SW3ssASW0n Y+sHPD1ckW5WZO0NA42SrE2FghbVoja62y7m7M+P0GZqcWnk4+JZJx3J3HDD3cho Vf1jL31SpAJYeKbMS1XpD8OWncctm3RtP6GhSlgE+xVdESqJNTAvMYBX6MPKsiYn UVZLrnow0ZvHnX8ujTuNplTtuxk+NaYx4MPXv/wlV3oNVAyeZB6L -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:48 2026 by rpki-client