$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa File: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (raw, json) Hash identifier: WyGB9ZBFeex8jY0PFRKxTIqIVdeXR1mrNkYfMHOGYew= Subject key identifier: C8:01:E4:F5:0F:F4:01:8F:45:4F:E4:1A:52:D4:EF:87:F0:D6:67:B7 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 29497C8FB4504598F299B9ED8375F8269195ABA4 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa Signing time: Thu 02 Apr 2026 16:00:01 +0000 ROA not before: Thu 02 Apr 2026 15:55:01 +0000 ROA not after: Thu 01 Apr 2027 16:00:01 +0000 asID: 134655 IP address blocks: 2404:5980::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:49:7c:8f:b4:50:45:98:f2:99:b9:ed:83:75:f8:26:91:95:ab:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Apr 2 15:55:01 2026 GMT Not After : Apr 1 16:00:01 2027 GMT Subject: CN=C801E4F50FF4018F454FE41A52D4EF87F0D667B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:86:30:4a:64:c0:43:af:e9:a3:b6:25:ec: 7a:76:ed:77:b3:08:d0:46:8e:ec:78:e8:76:9d:bc: ad:1e:a6:3e:63:66:41:d0:15:9c:2c:80:e2:b8:ef: 84:34:b5:cf:1e:2c:95:89:d2:c9:98:d2:13:f7:9f: 85:dd:29:19:61:c6:c2:8a:10:60:48:1f:fc:0b:b0: dc:e5:3b:39:75:94:03:55:97:25:9c:a2:8e:60:75: fe:74:6a:18:25:64:56:1d:6c:e5:76:18:97:31:c3: d1:b1:be:9c:c4:11:50:d5:6f:17:6e:ff:cb:95:97: 19:ac:3f:69:5e:1c:67:02:a9:84:20:d4:f1:7c:61: 32:70:dd:f8:8c:d5:5d:05:e2:8b:24:a9:1a:a8:d8: 31:3f:05:56:2d:cb:42:e7:a0:4e:c1:e1:1e:45:65: 1e:47:c9:4c:60:0f:f0:1e:2a:83:aa:1b:94:f5:b3: 77:02:cc:b8:68:cb:37:ab:ae:3f:bd:69:04:36:c6: 92:49:9f:12:07:dc:3b:17:b3:39:31:39:41:77:c8: 15:d2:e5:d0:5f:c4:b5:10:60:5b:0d:b6:f3:0a:5b: fb:f6:c3:06:f0:3d:ca:7c:ac:c6:0d:e7:0a:3a:3f: e0:b4:1a:7f:59:5f:43:68:07:cb:c8:14:b2:08:5b: 1a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:01:E4:F5:0F:F4:01:8F:45:4F:E4:1A:52:D4:EF:87:F0:D6:67:B7 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:5980::/32 Signature Algorithm: sha256WithRSAEncryption 7a:6d:b9:f4:35:99:67:4a:89:06:f0:a8:d7:be:1c:ec:91:19: 49:80:30:08:86:b0:bf:14:db:e7:d9:d6:1a:9a:ba:87:39:f8: 3f:08:c9:a7:7f:63:a7:5d:bc:51:97:5b:06:d0:f3:6f:1c:7e: 3a:0f:63:85:2f:76:5a:af:98:8d:60:ad:a1:26:5b:fb:db:99: 5c:b4:af:6e:4e:d5:18:08:b7:b6:80:a2:fe:10:2a:33:a1:f9: 08:29:e8:b4:10:2f:54:b6:4a:39:d6:24:59:aa:23:b7:bd:31: 1e:db:32:4c:48:25:9f:22:e4:59:14:c0:a3:73:75:ec:46:93: 08:a2:13:7e:69:b5:91:0b:63:0a:05:f1:ca:54:92:28:cd:e6: d2:a1:ac:97:e8:de:95:ca:a5:a4:b2:07:c2:51:1e:ea:b3:46: 80:36:99:11:a8:de:5f:00:8b:f8:7a:b1:7b:ae:8b:bc:79:d0: 02:18:2d:32:e6:db:02:77:65:cb:97:73:72:7b:cd:16:76:af: 57:9c:ba:56:16:86:5d:51:0a:cb:0d:33:d2:90:19:ea:a9:ee: 9d:ec:d3:10:83:4c:6d:43:87:db:ff:2f:d1:04:d3:02:c2:5d: 5f:80:e2:87:5b:50:0e:89:77:e9:38:8a:b6:c5:80:1f:34:a6: f8:f5:40:b2 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUKUl8j7RQRZjymbntg3X4JpGVq6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNjA0MDIxNTU1MDFaFw0yNzA0MDExNjAwMDFaMDMxMTAvBgNV BAMTKEM4MDFFNEY1MEZGNDAxOEY0NTRGRTQxQTUyRDRFRjg3RjBENjY3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIIYwSmTAQ6/po7Yl7Hp27Xez CNBGjux46HadvK0epj5jZkHQFZwsgOK474Q0tc8eLJWJ0smY0hP3n4XdKRlhxsKK EGBIH/wLsNzlOzl1lANVlyWcoo5gdf50ahglZFYdbOV2GJcxw9GxvpzEEVDVbxdu /8uVlxmsP2leHGcCqYQg1PF8YTJw3fiM1V0F4oskqRqo2DE/BVYty0LnoE7B4R5F ZR5HyUxgD/AeKoOqG5T1s3cCzLhoyzerrj+9aQQ2xpJJnxIH3DsXszkxOUF3yBXS 5dBfxLUQYFsNtvMKW/v2wwbwPcp8rMYN5wo6P+C0Gn9ZX0NoB8vIFLIIWxqjAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUyAHk9Q/0AY9FT+QaUtTvh/DWZ7cwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i YTkwLWNlZThkMzk3OWZjZC8wLzMyMzQzMDM0M2EzNTM5MzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNDM2MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEWYAwDQYJKoZI hvcNAQELBQADggEBAHptufQ1mWdKiQbwqNe+HOyRGUmAMAiGsL8U2+fZ1hqauoc5 +D8Iyad/Y6ddvFGXWwbQ828cfjoPY4UvdlqvmI1graEmW/vbmVy0r25O1RgIt7aA ov4QKjOh+Qgp6LQQL1S2SjnWJFmqI7e9MR7bMkxIJZ8i5FkUwKNzdexGkwiiE35p tZELYwoF8cpUkijN5tKhrJfo3pXKpaSyB8JRHuqzRoA2mRGo3l8Ai/h6sXuui7x5 0AIYLTLm2wJ3ZcuXc3J7zRZ2r1eculYWhl1RCssNM9KQGeqp7p3s0xCDTG1Dh9v/ L9EE0wLCXV+A4odbUA6Jd+k4irbFgB80pvj1QLI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:51:51 2026 by rpki-client