$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa File: 323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa (raw, json) Hash identifier: ZXvNi9Wmnh1HNBes+9Z4bams8Lm4ceOavfeuaeslQ58= Subject key identifier: A0:67:BD:6D:09:AE:05:3C:31:82:A0:E6:86:95:36:99:47:71:E2:D8 Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E Certificate serial: 021B1603716026B3AFF5FC88F256ED9932E1A5D3 Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa Signing time: Fri 17 Apr 2026 08:03:02 +0000 ROA not before: Fri 17 Apr 2026 07:58:02 +0000 ROA not after: Fri 16 Apr 2027 08:03:02 +0000 asID: 138818 IP address blocks: 2406:be40:b15a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1b:16:03:71:60:26:b3:af:f5:fc:88:f2:56:ed:99:32:e1:a5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E Validity Not Before: Apr 17 07:58:02 2026 GMT Not After : Apr 16 08:03:02 2027 GMT Subject: CN=A067BD6D09AE053C3182A0E6869536994771E2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:e8:4e:7f:51:14:18:ca:7d:83:c3:10:8a: 0e:34:b7:f9:7a:a7:5c:76:75:b8:9c:e1:55:59:f2: fd:ff:91:c5:4d:a4:c1:3d:8d:df:1e:7d:4b:9c:8d: 98:c7:c9:82:28:95:ce:7b:e3:2a:35:01:a9:63:83: 73:ee:e8:39:7f:22:12:a7:0b:d9:35:f7:2e:91:94: 31:b1:95:25:ee:c9:70:5b:b4:5e:96:18:0b:70:86: 81:3e:2f:6a:7b:11:5a:4c:c1:a2:59:24:92:98:53: 85:12:02:de:61:2d:a5:55:e4:3a:e2:0e:97:14:81: ba:b6:7d:72:7d:4a:c5:6e:75:ae:68:36:e9:bc:8a: eb:ad:46:1e:94:6a:54:06:a0:7d:16:46:38:5a:76: ad:02:c6:8c:87:62:c2:72:23:39:ef:2c:a3:18:0d: c5:f6:63:65:dc:6a:3e:5d:82:ee:3b:f7:5f:c2:5f: 2a:d4:37:b4:6c:59:f3:b6:06:58:eb:7f:cf:3b:92: fc:41:85:58:57:22:11:89:28:e4:4e:c2:a1:15:53: 5f:2a:5d:51:2e:e8:4f:7a:9a:8a:60:f7:5b:0d:d4: cf:8a:e4:d4:f8:ab:b9:fb:a9:fe:dd:8b:9f:e0:fb: 55:f2:fc:42:17:96:19:cf:b8:9c:94:eb:60:7c:81: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:67:BD:6D:09:AE:05:3C:31:82:A0:E6:86:95:36:99:47:71:E2:D8 X509v3 Authority Key Identifier: keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a623135613a3a2f34382d3438203d3e20313338383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:be40:b15a::/48 Signature Algorithm: sha256WithRSAEncryption bc:d7:77:d4:2a:dd:1b:9d:ba:35:05:72:8a:f3:95:cc:fa:0f: e7:cb:b2:be:e9:12:74:55:0b:63:35:07:ae:68:63:de:5c:ae: 97:b5:2f:58:54:eb:62:03:ea:5d:b2:14:9a:30:e5:f6:07:15: 76:49:6c:ec:6c:b2:32:c0:0a:62:ab:cd:79:0d:ab:7a:c1:8c: f6:f6:e0:f0:70:85:c5:01:1a:2f:43:8f:eb:a8:2c:e7:a0:8a: e5:fb:95:21:11:46:8d:ee:23:be:20:fb:cb:ee:cd:c7:08:fb: 0c:67:54:81:5a:39:33:83:ae:41:f3:2b:87:de:0e:38:86:a0: b8:47:ca:76:86:b5:59:92:63:01:fb:80:e5:bb:3a:00:00:78: 72:8b:3b:4c:09:50:d8:62:4b:3a:a2:c9:89:b7:0b:2d:f7:98: 7c:bd:06:d7:d1:57:d2:a3:64:30:34:dc:12:82:d6:33:c3:b5: ed:46:0d:b8:49:31:fa:7a:6b:8b:95:58:ee:1a:24:b1:66:e2: dc:5f:62:81:88:d0:43:3f:97:9c:3f:b4:a0:84:c8:c8:d9:d6: f8:f1:c3:96:f6:53:d4:c9:36:98:35:7f:b2:ea:f1:b0:13:59: f5:d7:1d:3e:c2:3b:4f:ce:c5:d6:b4:03:fe:97:91:52:b2:9d: 69:27:68:34 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUAhsWA3FgJrOv9fyI8lbtmTLhpdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC NTlCRjkxRTAeFw0yNjA0MTcwNzU4MDJaFw0yNzA0MTYwODAzMDJaMDMxMTAvBgNV BAMTKEEwNjdCRDZEMDlBRTA1M0MzMTgyQTBFNjg2OTUzNjk5NDc3MUUyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bOhOf1EUGMp9g8MQig40t/l6 p1x2dbic4VVZ8v3/kcVNpME9jd8efUucjZjHyYIolc574yo1Aaljg3Pu6Dl/IhKn C9k19y6RlDGxlSXuyXBbtF6WGAtwhoE+L2p7EVpMwaJZJJKYU4USAt5hLaVV5Dri DpcUgbq2fXJ9SsVuda5oNum8iuutRh6UalQGoH0WRjhadq0CxoyHYsJyIznvLKMY DcX2Y2Xcaj5dgu4791/CXyrUN7RsWfO2Bljrf887kvxBhVhXIhGJKOROwqEVU18q XVEu6E96mopg91sN1M+K5NT4q7n7qf7di5/g+1Xy/EIXlhnPuJyU62B8gZP5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUoGe9bQmuBTwxgqDmhpU2mUdx4tgwHwYDVR0j BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC RjkxRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMyMzQzMDM2M2E2MjY1MzQzMDNhNjIzMTM1NjEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Br5AsVowDQYJKoZIhvcNAQELBQADggEBALzXd9Qq3RudujUFcorzlcz6D+fLsr7p EnRVC2M1B65oY95crpe1L1hU62ID6l2yFJow5fYHFXZJbOxssjLACmKrzXkNq3rB jPb24PBwhcUBGi9Dj+uoLOegiuX7lSERRo3uI74g+8vuzccI+wxnVIFaOTODrkHz K4feDjiGoLhHynaGtVmSYwH7gOW7OgAAeHKLO0wJUNhiSzqiyYm3Cy33mHy9BtfR V9KjZDA03BKC1jPDte1GDbhJMfp6a4uVWO4aJLFm4txfYoGI0EM/l5w/tKCEyMjZ 1vjxw5b2U9TJNpg1f7Lq8bATWfXXHT7CO0/Oxda0A/6XkVKynWknaDQ= -----END CERTIFICATE-----Generated at Sat Apr 18 00:38:49 2026 by rpki-client