$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa File: 323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa (raw, json) Hash identifier: I0xpa6DwhWARwwQTSx6dBSpdOPMTgiZd1xP92HyxIig= Subject key identifier: 5D:6C:7E:49:B4:03:C8:A8:9F:35:B9:B4:FA:7C:3B:22:DC:74:3A:21 Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E Certificate serial: 16176ABAB97C85EFB351C259EFABD04BB35E1685 Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa Signing time: Fri 17 Apr 2026 06:00:01 +0000 ROA not before: Fri 17 Apr 2026 05:55:01 +0000 ROA not after: Fri 16 Apr 2027 06:00:01 +0000 asID: 138818 IP address blocks: 2406:be40:babe::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:17:6a:ba:b9:7c:85:ef:b3:51:c2:59:ef:ab:d0:4b:b3:5e:16:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E Validity Not Before: Apr 17 05:55:01 2026 GMT Not After : Apr 16 06:00:01 2027 GMT Subject: CN=5D6C7E49B403C8A89F35B9B4FA7C3B22DC743A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:f9:cf:89:af:c9:f8:6e:8c:e1:8e:d5:2e: 1e:4e:8e:7e:45:2b:1d:78:0a:28:03:8e:f6:83:b8: c4:8d:db:75:bc:00:4f:75:f8:26:a1:4e:c3:db:7f: b6:e9:66:83:b8:1e:3a:ff:6e:f1:c8:ff:4e:01:c9: 8c:87:e6:bb:ca:c1:d3:56:b2:dd:0b:e7:52:53:1a: 90:bc:e8:61:ba:48:31:0c:8d:89:be:c2:1e:8c:7f: d0:0b:a7:bf:6f:0b:c9:d5:eb:e8:e7:0c:a1:56:37: 1f:14:54:09:88:7c:63:06:7f:df:96:ca:36:fa:24: 81:67:18:5d:06:42:ab:d7:52:4f:3e:a4:86:c6:5e: 51:da:21:c3:ec:f4:70:8a:5a:b9:82:49:03:a3:1e: 6d:8e:21:c0:20:48:1c:f0:bb:52:4b:6f:e6:c6:6f: e6:a5:a4:c7:8d:87:ae:a7:ca:2b:94:50:b2:f0:5c: 47:a3:db:ef:71:28:ef:7c:39:34:84:ba:be:9b:a6: ab:57:5d:2e:a5:8c:51:b8:95:8d:74:f0:7a:5d:7c: 82:7f:42:af:2a:d5:7f:3b:fe:b7:1e:20:81:66:bb: ed:1b:f0:62:51:47:47:c4:69:a0:c2:9d:68:ca:90: 8e:72:5b:1d:f6:14:98:0e:37:62:09:c4:7a:48:3c: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6C:7E:49:B4:03:C8:A8:9F:35:B9:B4:FA:7C:3B:22:DC:74:3A:21 X509v3 Authority Key Identifier: keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/323430363a626534303a626162653a3a2f34382d3438203d3e20313338383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:be40:babe::/48 Signature Algorithm: sha256WithRSAEncryption 53:33:10:6f:c4:25:99:1e:b3:3c:57:c6:dc:a7:ac:50:48:8a: e8:74:18:29:40:7d:2f:a0:44:30:c0:11:86:0b:bc:b0:3f:47: 96:2c:55:84:44:6c:c4:de:b4:35:01:09:55:f6:df:00:29:9c: a7:d7:6e:3c:0e:ca:b5:e1:16:a0:31:95:52:47:e7:de:fe:bb: 01:e4:eb:73:5b:08:5e:6e:26:cd:c7:9d:f6:1c:5e:e8:09:d4: 46:e4:17:02:78:f1:a6:e9:bf:de:17:7f:73:e3:c0:d7:68:4f: 13:2c:dd:a4:1e:03:01:66:8d:03:ec:98:5d:7d:5a:47:37:fa: b0:5e:eb:a3:07:e1:d5:6e:f9:b0:a1:77:5b:49:38:be:f5:f6: e1:13:bd:d3:ac:40:14:ea:90:e9:bd:5a:32:57:98:80:36:41: a5:c6:20:d6:54:f2:24:8f:a6:28:36:73:a2:5e:40:3b:72:cc: 24:20:12:19:57:31:c7:af:92:7c:98:28:03:31:57:6e:8f:e8: cb:11:3d:58:8f:9c:d6:0a:a1:95:86:55:fe:c5:39:0a:cc:12: 6e:c8:7d:d4:4f:90:d6:c8:c3:a4:e4:1d:ef:d8:eb:7a:ae:d8: cd:80:7a:c6:9f:e2:3a:87:ff:7e:20:e4:6f:d4:bf:02:24:03: 9d:92:17:d0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUFhdqurl8he+zUcJZ76vQS7NeFoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC NTlCRjkxRTAeFw0yNjA0MTcwNTU1MDFaFw0yNzA0MTYwNjAwMDFaMDMxMTAvBgNV BAMTKDVENkM3RTQ5QjQwM0M4QTg5RjM1QjlCNEZBN0MzQjIyREM3NDNBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2K/nPia/J+G6M4Y7VLh5Ojn5F Kx14CigDjvaDuMSN23W8AE91+CahTsPbf7bpZoO4Hjr/bvHI/04ByYyH5rvKwdNW st0L51JTGpC86GG6SDEMjYm+wh6Mf9ALp79vC8nV6+jnDKFWNx8UVAmIfGMGf9+W yjb6JIFnGF0GQqvXUk8+pIbGXlHaIcPs9HCKWrmCSQOjHm2OIcAgSBzwu1JLb+bG b+alpMeNh66nyiuUULLwXEej2+9xKO98OTSEur6bpqtXXS6ljFG4lY108HpdfIJ/ Qq8q1X87/rceIIFmu+0b8GJRR0fEaaDCnWjKkI5yWx32FJgON2IJxHpIPHjlAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUXWx+SbQDyKifNbm0+nw7Itx0OiEwHwYDVR0j BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC RjkxRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMyMzQzMDM2M2E2MjY1MzQzMDNhNjI2MTYyNjUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Br5Aur4wDQYJKoZIhvcNAQELBQADggEBAFMzEG/EJZkeszxXxtynrFBIiuh0GClA fS+gRDDAEYYLvLA/R5YsVYREbMTetDUBCVX23wApnKfXbjwOyrXhFqAxlVJH597+ uwHk63NbCF5uJs3HnfYcXugJ1EbkFwJ48abpv94Xf3PjwNdoTxMs3aQeAwFmjQPs mF19Wkc3+rBe66MH4dVu+bChd1tJOL719uETvdOsQBTqkOm9WjJXmIA2QaXGINZU 8iSPpig2c6JeQDtyzCQgEhlXMcevknyYKAMxV26P6MsRPViPnNYKoZWGVf7FOQrM Em7IfdRPkNbIw6TkHe/Y63qu2M2Aesaf4jqH/34g5G/UvwIkA52SF9A= -----END CERTIFICATE-----Generated at Sat Apr 18 07:34:18 2026 by rpki-client