$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa File: 323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa (raw, json) Hash identifier: 0CU2Hz/sB21YAnPf0AMwZKSSOyTib/HZ0LucZQRsroU= Subject key identifier: 86:9C:D7:0E:8D:BB:56:C5:EB:E8:ED:DE:C5:97:11:B5:C6:4B:6D:73 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 6BDA7F9BB504274923A1BAA534CC629C4B228D25 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa Signing time: Mon 06 Apr 2026 06:02:47 +0000 ROA not before: Mon 06 Apr 2026 05:57:47 +0000 ROA not after: Mon 05 Apr 2027 06:02:47 +0000 asID: 17727 IP address blocks: 2404:c000:c000::/47 maxlen: 47 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:da:7f:9b:b5:04:27:49:23:a1:ba:a5:34:cc:62:9c:4b:22:8d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Apr 6 05:57:47 2026 GMT Not After : Apr 5 06:02:47 2027 GMT Subject: CN=869CD70E8DBB56C5EBE8EDDEC59711B5C64B6D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:59:f1:f6:17:34:57:06:b1:9d:98:ca:34: 47:d5:0a:a6:7a:f0:95:b9:f0:2c:74:e0:b6:80:ec: 0a:24:a4:f2:da:35:fb:25:10:95:3e:9f:38:29:76: bd:8d:6b:2f:84:80:9e:f7:44:f0:ce:fa:31:b8:a5: 02:63:5a:24:35:d2:c5:9a:4c:27:88:af:9c:a6:82: 72:e6:7c:bf:2f:13:46:46:10:a7:68:8d:2f:ae:ea: fe:75:e5:64:1e:17:26:82:f6:44:80:13:d4:08:58: c1:12:66:8e:1a:e9:36:ff:90:37:8f:5c:90:ea:dc: 0d:a7:a2:eb:99:0a:9a:9e:3c:1d:96:a7:ed:5a:0e: d6:42:17:23:3d:f9:ba:33:71:43:77:bd:8a:98:2c: 76:e8:2c:79:7d:b2:fa:20:cd:82:a5:c8:c5:db:a1: 0a:61:05:34:94:40:11:97:ad:ab:a9:29:6a:00:cb: 73:83:4a:12:7d:26:f1:b7:b2:01:10:f3:e4:74:ac: e0:5a:a9:9d:c3:68:f5:f1:fe:35:67:2b:68:ec:08: 6c:62:8f:e2:5b:35:50:3a:8e:a4:3b:b3:fb:a6:9b: 9c:cc:ab:e9:4e:f1:2d:83:93:e5:e7:f8:07:5c:03: f9:b5:60:87:c4:ba:dd:94:a7:80:5f:26:e6:af:88: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9C:D7:0E:8D:BB:56:C5:EB:E8:ED:DE:C5:97:11:B5:C6:4B:6D:73 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34372d3437203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:c000::/47 Signature Algorithm: sha256WithRSAEncryption 4c:20:bc:bf:5d:87:51:69:ee:9f:69:a1:7a:41:20:bc:54:7d: ec:2d:af:ad:a4:f0:bb:2a:dc:93:89:ca:bf:97:21:8f:03:c9: 7f:61:1b:57:a6:a1:7b:f9:e7:b2:41:fb:ca:05:ed:49:03:95: f7:79:5f:1e:de:9f:e2:76:9c:bc:ec:72:d2:36:5b:0f:08:71: fb:a2:46:73:57:cc:20:99:85:0c:4b:97:13:8e:1d:91:2a:96: d7:a7:31:10:ab:2b:97:36:1a:df:1b:3f:1b:6c:79:bb:b9:92: 08:8e:83:62:dc:1d:1b:07:a9:04:c3:e7:38:9d:e1:b3:28:6b: e7:25:26:38:89:70:36:68:87:b9:c5:9c:99:13:13:d3:2a:8c: 36:11:4c:ff:eb:f8:6f:a0:2f:cc:e2:fc:6b:72:0e:a2:49:0e: d8:ca:0e:e6:a8:42:71:b2:f7:44:51:5b:5d:5c:20:79:23:c9: 47:be:39:b7:62:9d:91:a9:0e:26:32:7f:fd:5d:ac:41:c9:72: 29:8e:eb:75:af:e7:99:53:33:6a:e6:04:da:c0:ea:ae:a8:97: e3:e4:9a:53:80:48:49:c4:aa:66:90:d4:86:71:ee:cf:53:82: 8e:60:e1:07:b7:0d:cf:2a:c0:f8:95:f6:5b:8e:7d:43:a9:38: 75:c1:65:89 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUa9p/m7UEJ0kjobqlNMxinEsijSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNjA0MDYwNTU3NDdaFw0yNzA0MDUwNjAyNDdaMDMxMTAvBgNV BAMTKDg2OUNENzBFOERCQjU2QzVFQkU4RURERUM1OTcxMUI1QzY0QjZENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDlnx9hc0VwaxnZjKNEfVCqZ6 8JW58Cx04LaA7AokpPLaNfslEJU+nzgpdr2Nay+EgJ73RPDO+jG4pQJjWiQ10sWa TCeIr5ymgnLmfL8vE0ZGEKdojS+u6v515WQeFyaC9kSAE9QIWMESZo4a6Tb/kDeP XJDq3A2nouuZCpqePB2Wp+1aDtZCFyM9+bozcUN3vYqYLHboLHl9svogzYKlyMXb oQphBTSUQBGXraupKWoAy3ODShJ9JvG3sgEQ8+R0rOBaqZ3DaPXx/jVnK2jsCGxi j+JbNVA6jqQ7s/umm5zMq+lO8S2Dk+Xn+AdcA/m1YIfEut2Up4BfJuaviLZtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhpzXDo27VsXr6O3exZcRtcZLbXMwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhNjMzMDMwMzAz YTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJATA AMAAMA0GCSqGSIb3DQEBCwUAA4IBAQBMILy/XYdRae6faaF6QSC8VH3sLa+tpPC7 KtyTicq/lyGPA8l/YRtXpqF7+eeyQfvKBe1JA5X3eV8e3p/idpy87HLSNlsPCHH7 okZzV8wgmYUMS5cTjh2RKpbXpzEQqyuXNhrfGz8bbHm7uZIIjoNi3B0bB6kEw+c4 neGzKGvnJSY4iXA2aIe5xZyZExPTKow2EUz/6/hvoC/M4vxrcg6iSQ7Yyg7mqEJx svdEUVtdXCB5I8lHvjm3Yp2RqQ4mMn/9XaxByXIpjut1r+eZUzNq5gTawOquqJfj 5JpTgEhJxKpmkNSGce7PU4KOYOEHtw3PKsD4lfZbjn1DqTh1wWWJ -----END CERTIFICATE-----Generated at Fri Apr 17 23:03:49 2026 by rpki-client