$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa File: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (raw, json) Hash identifier: 3OBbHewWawWqfsZhQsBflUfa075kIfGtDz3DRgtjCTw= Subject key identifier: 30:81:3A:EC:D0:A2:43:05:0A:AC:15:DB:3E:AD:67:9D:A3:66:EF:A0 Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 0668E62108D0ADA66C12D0C5EAEB47DC6796052A Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa Signing time: Thu 16 Apr 2026 03:00:02 +0000 ROA not before: Thu 16 Apr 2026 02:55:02 +0000 ROA not after: Thu 15 Apr 2027 03:00:02 +0000 asID: 141675 IP address blocks: 2406:aec0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:68:e6:21:08:d0:ad:a6:6c:12:d0:c5:ea:eb:47:dc:67:96:05:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Apr 16 02:55:02 2026 GMT Not After : Apr 15 03:00:02 2027 GMT Subject: CN=30813AECD0A243050AAC15DB3EAD679DA366EFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:bb:60:4c:ea:b9:35:0f:c9:f6:70:0a:cb: 89:37:2c:94:32:f8:ac:0d:03:7d:af:2c:20:c1:2e: 0b:3f:7d:30:19:17:0d:98:c9:b0:ac:13:e2:47:e6: 3b:ef:29:fb:9a:0a:2f:f0:f8:4a:30:8d:2f:a9:7b: a5:0d:2d:5d:75:cf:ac:c0:8c:61:af:df:d9:5d:bc: 3a:64:c4:b9:01:71:24:d6:6f:48:24:78:ca:88:72: f7:c3:a4:29:9d:91:2b:bb:fd:6d:6c:8e:82:d2:54: 5b:f2:77:cc:eb:63:9a:e3:6d:a4:67:7f:1d:ce:c9: 54:c1:df:fa:56:d0:05:fe:2b:56:7d:d1:25:14:18: c8:0a:20:fd:85:0d:f2:70:6b:f9:75:39:35:0e:d1: af:5b:cd:b0:3e:3e:67:9a:a1:3d:ea:25:b4:cc:de: 72:6e:2c:28:95:80:e4:46:c1:e5:2a:f8:f8:21:09: e4:4d:3b:cb:6f:e1:49:a8:d6:68:0b:27:bc:52:65: 2c:09:b9:19:fc:3c:e1:d6:48:00:7d:f0:d3:65:d1: 7a:bb:c0:35:86:f0:2c:16:c7:17:55:f8:77:1a:c5: 70:20:df:50:2f:0a:89:e9:14:6e:06:a8:34:06:a7: a2:0f:61:2d:49:3a:de:e8:5b:c7:e3:2c:34:a2:f9: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:3A:EC:D0:A2:43:05:0A:AC:15:DB:3E:AD:67:9D:A3:66:EF:A0 X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:aec0:1::/48 Signature Algorithm: sha256WithRSAEncryption 86:f8:0c:25:20:e0:65:07:c5:3d:83:ab:16:da:a2:9e:24:79: 59:c7:0e:dd:59:4a:ed:c1:f6:56:a0:96:5f:c7:1c:39:9a:d8: 92:da:88:85:15:e8:d8:01:f5:59:1e:c6:77:c1:90:eb:83:b3: 21:6e:f6:54:5f:f0:be:ec:1c:a0:74:0c:1e:47:a2:e0:41:46: 93:58:5e:bf:dc:4d:2e:78:60:21:8b:07:5c:ff:71:35:51:62: 8c:42:62:01:da:88:eb:0c:56:d6:4d:26:cf:fb:81:d3:2f:f4: 37:62:cf:aa:f2:11:e0:45:f4:1c:d2:9d:3d:85:3e:57:e7:e5: b1:4f:fc:9d:72:4f:cc:7d:57:c7:35:61:4e:87:6c:c9:09:84: 61:ef:95:a8:2b:b9:9d:fd:64:9d:ff:0d:ea:6d:71:1e:cd:c6: 27:79:5e:bf:8d:5d:d6:4e:fa:a4:66:0d:2b:fa:6e:b8:49:71: bf:20:9a:69:8d:66:69:a5:26:d4:88:39:44:be:4b:e7:1e:d1: f8:18:22:e7:ed:2c:9f:5b:a7:32:10:44:d2:be:b5:f4:8b:2e: e5:de:cd:16:ef:56:4b:0c:f4:06:75:b9:42:7c:bf:a6:31:af: a4:90:ad:32:5a:56:a5:06:d1:1d:d5:cb:e0:f6:44:b7:57:67: a1:7e:9f:7b -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBmjmIQjQraZsEtDF6utH3GeWBSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNjA0MTYwMjU1MDJaFw0yNzA0MTUwMzAwMDJaMDMxMTAvBgNV BAMTKDMwODEzQUVDRDBBMjQzMDUwQUFDMTVEQjNFQUQ2NzlEQTM2NkVGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ArtgTOq5NQ/J9nAKy4k3LJQy +KwNA32vLCDBLgs/fTAZFw2YybCsE+JH5jvvKfuaCi/w+EowjS+pe6UNLV11z6zA jGGv39ldvDpkxLkBcSTWb0gkeMqIcvfDpCmdkSu7/W1sjoLSVFvyd8zrY5rjbaRn fx3OyVTB3/pW0AX+K1Z90SUUGMgKIP2FDfJwa/l1OTUO0a9bzbA+PmeaoT3qJbTM 3nJuLCiVgORGweUq+PghCeRNO8tv4Umo1mgLJ7xSZSwJuRn8POHWSAB98NNl0Xq7 wDWG8CwWxxdV+HcaxXAg31AvConpFG4GqDQGp6IPYS1JOt7oW8fjLDSi+ey7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUMIE67NCiQwUKrBXbPq1nnaNm76AwHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjJjMDI1LTFkNzYtNGEzNi04 MTYwLWE5ZThhZmUzNTc5Zi8wLzMyMzQzMDM2M2E2MTY1NjMzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzNjM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBq7AAAEw DQYJKoZIhvcNAQELBQADggEBAIb4DCUg4GUHxT2Dqxbaop4keVnHDt1ZSu3B9lag ll/HHDma2JLaiIUV6NgB9VkexnfBkOuDsyFu9lRf8L7sHKB0DB5HouBBRpNYXr/c TS54YCGLB1z/cTVRYoxCYgHaiOsMVtZNJs/7gdMv9Ddiz6ryEeBF9BzSnT2FPlfn 5bFP/J1yT8x9V8c1YU6HbMkJhGHvlagruZ39ZJ3/DeptcR7Nxid5Xr+NXdZO+qRm DSv6brhJcb8gmmmNZmmlJtSIOUS+S+ce0fgYIuftLJ9bpzIQRNK+tfSLLuXezRbv VksM9AZ1uUJ8v6Yxr6SQrTJaVqUG0R3Vy+D2RLdXZ6F+n3s= -----END CERTIFICATE-----Generated at Sun Apr 19 11:55:20 2026 by rpki-client