$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa File: 323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa (raw, json) Hash identifier: 7f3N46rtjHkI2C3oE5TzS/iUWQpdtHVjFk9+DSYfpk8= Subject key identifier: 54:41:27:E1:74:D1:FA:FC:53:CA:6E:38:4C:DD:BC:7F:06:7D:CE:4C Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Certificate serial: 588BF6480849D8A29AF0A029FA2228A993639173 Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa Signing time: Sat 18 Apr 2026 10:00:02 +0000 ROA not before: Sat 18 Apr 2026 09:55:02 +0000 ROA not after: Sat 17 Apr 2027 10:00:02 +0000 asID: 142366 IP address blocks: 2407:b4c0:c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8b:f6:48:08:49:d8:a2:9a:f0:a0:29:fa:22:28:a9:93:63:91:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Validity Not Before: Apr 18 09:55:02 2026 GMT Not After : Apr 17 10:00:02 2027 GMT Subject: CN=544127E174D1FAFC53CA6E384CDDBC7F067DCE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:27:16:f2:d7:9d:0f:3b:47:13:83:98:2b: 72:30:b9:8d:e4:97:21:e0:72:9b:e8:55:e3:6e:e5: f1:ae:d8:6d:3d:0a:23:e8:2b:2b:44:99:bd:e3:f0: 66:14:2f:f9:ba:ce:01:12:25:a6:17:0e:15:7a:d3: d4:80:4e:aa:43:39:3d:64:e1:49:7e:ce:35:e6:1f: 92:bb:6c:46:51:e5:a0:10:b4:bd:2a:8b:58:fd:64: 3f:87:fd:7e:3d:79:a5:19:1c:49:18:4c:65:86:87: 8f:fc:a7:04:86:4f:9b:11:6a:ae:96:05:a2:c5:52: c1:ca:96:67:b6:80:37:c8:78:d3:62:d2:b0:ec:bf: df:e4:de:0e:21:76:17:ab:1f:10:47:09:34:5f:1e: 49:4e:3b:01:17:f3:2a:e3:62:17:8b:09:f4:13:68: 5f:76:2b:57:5c:84:05:ec:03:f9:5b:9e:33:15:57: 29:38:8f:3f:92:15:c3:53:8f:87:f5:19:e6:20:10: fc:b6:e5:4e:37:5c:0c:13:f7:52:66:20:bc:fd:2d: ac:dd:a3:98:d9:38:6b:4a:c9:af:a3:e1:f4:e7:46: b9:69:d1:9e:45:d9:bc:bf:93:82:bf:55:0a:30:59: 63:33:4c:8a:f1:38:c4:dc:50:1a:bb:d4:fb:d3:84: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:27:E1:74:D1:FA:FC:53:CA:6E:38:4C:DD:BC:7F:06:7D:CE:4C X509v3 Authority Key Identifier: keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/323430373a623463303a633a3a2f34382d3438203d3e20313432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:b4c0:c::/48 Signature Algorithm: sha256WithRSAEncryption 25:c2:e3:c3:ce:af:9d:76:ff:de:20:c9:e4:35:60:e0:d1:4f: de:9e:0d:6d:9b:a9:ea:fd:66:f6:b9:6a:d8:8a:3c:13:a4:de: cd:c1:32:e4:c9:7b:3c:27:27:a5:5b:ec:48:c3:24:14:01:2f: b1:a2:ab:1f:7d:ff:41:5d:41:d0:fe:db:46:0f:51:cf:ff:0d: 94:53:e1:50:3c:35:7a:dd:12:aa:07:1e:74:88:50:2e:35:ca: 63:90:48:72:07:a9:cb:11:5f:85:22:e5:52:50:60:fd:0f:c0: 90:50:75:69:46:ea:4c:0d:d8:75:ba:6d:93:32:70:cc:c3:fa: 7c:af:fc:c5:d7:f3:59:8a:93:ea:6f:d2:b9:a6:03:a1:28:8b: 05:57:3c:c0:48:50:48:18:70:59:fb:97:50:1e:40:75:cb:9c: 9d:90:1c:a7:8f:77:0d:06:4b:34:2b:5d:9d:01:c2:33:2d:9d: 90:f5:2c:a3:49:77:13:7b:9a:85:89:8e:a1:d1:c6:b3:d5:67: ca:83:2c:03:0c:43:2a:c2:9c:5c:95:ef:2b:98:3e:9c:81:33: ad:e0:76:8b:5f:46:2d:a6:fb:aa:57:47:dc:fe:7d:a3:99:33: d3:5d:bf:c7:c8:89:63:58:16:0a:5b:e3:96:dd:bc:c3:30:a1: 0f:bc:b1:db -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWIv2SAhJ2KKa8KAp+iIoqZNjkXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5 NTc3RDMxQzAeFw0yNjA0MTgwOTU1MDJaFw0yNzA0MTcxMDAwMDJaMDMxMTAvBgNV BAMTKDU0NDEyN0UxNzREMUZBRkM1M0NBNkUzODRDRERCQzdGMDY3RENFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarCcW8tedDztHE4OYK3IwuY3k lyHgcpvoVeNu5fGu2G09CiPoKytEmb3j8GYUL/m6zgESJaYXDhV609SATqpDOT1k 4Ul+zjXmH5K7bEZR5aAQtL0qi1j9ZD+H/X49eaUZHEkYTGWGh4/8pwSGT5sRaq6W BaLFUsHKlme2gDfIeNNi0rDsv9/k3g4hdherHxBHCTRfHklOOwEX8yrjYheLCfQT aF92K1dchAXsA/lbnjMVVyk4jz+SFcNTj4f1GeYgEPy25U43XAwT91JmILz9Lazd o5jZOGtKya+j4fTnRrlp0Z5F2by/k4K/VQowWWMzTIrxOMTcUBq71PvThNKVAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUVEEn4XTR+vxTym44TN28fwZ9zkwwHwYDVR0j BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1 RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3 RDMxQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h Y2E3LWE5YjMxYzMxZGZmNC8wLzMyMzQzMDM3M2E2MjM0NjMzMDNhNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzIzMzM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB7TAAAww DQYJKoZIhvcNAQELBQADggEBACXC48POr512/94gyeQ1YODRT96eDW2bqer9Zva5 atiKPBOk3s3BMuTJezwnJ6Vb7EjDJBQBL7Giqx99/0FdQdD+20YPUc//DZRT4VA8 NXrdEqoHHnSIUC41ymOQSHIHqcsRX4Ui5VJQYP0PwJBQdWlG6kwN2HW6bZMycMzD +nyv/MXX81mKk+pv0rmmA6EoiwVXPMBIUEgYcFn7l1AeQHXLnJ2QHKePdw0GSzQr XZ0BwjMtnZD1LKNJdxN7moWJjqHRxrPVZ8qDLAMMQyrCnFyV7yuYPpyBM63gdotf Ri2m+6pXR9z+faOZM9Ndv8fIiWNYFgpb45bdvMMwoQ+8sds= -----END CERTIFICATE-----Generated at Sun Apr 19 15:49:58 2026 by rpki-client