$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa File: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (raw, json) Hash identifier: FhNB6lvqrgsnyj+NwSVLGUciAJ8IZ9sjnpMtoRLaqRw= Subject key identifier: 41:E9:A2:67:A7:1E:D8:58:9C:81:51:5B:DB:E6:B5:40:14:5E:03:92 Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 34863C505836FFA5068842F881B00E603AB837D3 Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa Signing time: Thu 16 Apr 2026 03:00:02 +0000 ROA not before: Thu 16 Apr 2026 02:55:02 +0000 ROA not after: Thu 15 Apr 2027 03:00:02 +0000 asID: 141675 IP address blocks: 2406:aec0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 12:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:86:3c:50:58:36:ff:a5:06:88:42:f8:81:b0:0e:60:3a:b8:37:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Apr 16 02:55:02 2026 GMT Not After : Apr 15 03:00:02 2027 GMT Subject: CN=41E9A267A71ED8589C81515BDBE6B540145E0392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:8d:9b:c5:18:5e:57:da:8c:34:2f:2a:7c: 4a:65:e8:b3:df:e9:dd:c3:be:aa:97:ab:13:e7:35: 6c:5e:0f:3b:28:85:2c:89:88:79:da:af:8b:3f:8b: 79:23:3a:a5:f5:b9:2f:d3:2b:e2:7e:03:b8:70:af: 4e:b9:40:81:2c:94:b6:e2:0b:d8:45:ad:7e:de:ea: bc:39:1d:f3:8b:ec:04:31:6b:92:da:52:08:96:27: 64:73:7e:fc:4d:e9:5a:a1:b9:d9:de:85:30:fb:d9: 80:2a:77:91:ea:80:4c:7b:6e:22:3b:f1:65:22:27: e1:3a:6b:e0:40:02:67:9e:d9:9f:c6:4f:07:63:18: 52:c3:0e:5f:89:6d:6d:e4:fa:17:13:ac:25:16:44: df:fe:5e:af:0d:29:ad:ef:4b:83:ea:38:67:24:ec: 54:25:e8:aa:4e:94:11:b2:6b:bb:28:b2:f1:4a:03: 07:11:48:0d:4d:ee:4f:54:a4:70:e4:fa:1c:93:43: c3:58:4b:ec:b0:0d:4b:47:95:6b:c9:28:47:16:c7: 08:02:ef:27:e2:f5:7a:9c:af:6e:87:b8:e6:23:bf: 08:2b:24:d2:a0:91:05:00:be:f2:b7:08:9c:60:d5: 9a:8b:1f:57:7a:d8:46:77:5a:6e:99:a6:8d:8f:3a: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E9:A2:67:A7:1E:D8:58:9C:81:51:5B:DB:E6:B5:40:14:5E:03:92 X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:aec0:2::/48 Signature Algorithm: sha256WithRSAEncryption 60:8f:c8:8c:4a:d2:f8:f9:d8:f1:06:99:b2:6d:0d:2b:f7:65: 96:e0:9a:a1:b9:ed:bb:5d:61:7b:dc:17:63:29:a8:0e:d6:ea: ec:a0:50:ad:2b:2b:35:34:cc:b7:60:24:28:ce:c7:86:cd:ce: 57:8a:ef:d3:fe:01:c5:69:cc:15:e0:53:1d:3f:81:a1:4a:0c: 04:6e:04:f6:99:d4:f0:a8:7b:df:a8:29:2e:c7:cc:c8:d6:c8: b4:19:d8:a3:cc:f4:95:b8:e1:bb:39:1c:09:a9:f6:4f:d9:d6: 68:c4:2f:32:12:a1:7a:86:91:56:af:4a:6b:35:74:39:24:4b: b8:8d:7f:db:1e:35:90:7d:7c:ba:ef:98:ba:c6:64:85:ef:b8: 3d:e7:c1:8b:8d:04:3a:62:9c:fc:e1:0a:7a:b8:8a:bc:a2:3f: a7:ee:50:19:0c:7f:da:34:99:9c:1f:62:89:f3:b4:19:64:e4: 01:b2:25:bc:de:1f:e9:9f:72:93:9d:81:c4:eb:61:5f:6d:36: 05:47:e3:32:44:e0:fe:21:b7:de:ce:86:71:53:f4:e5:e0:2a: 92:3a:78:29:96:9f:43:74:ff:dd:f7:6f:77:ab:a4:9a:4d:6c: ba:9d:b3:f8:49:cf:37:32:69:a6:df:49:e5:7e:7d:3b:fe:12: bf:a1:5e:45 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUNIY8UFg2/6UGiEL4gbAOYDq4N9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNjA0MTYwMjU1MDJaFw0yNzA0MTUwMzAwMDJaMDMxMTAvBgNV BAMTKDQxRTlBMjY3QTcxRUQ4NTg5QzgxNTE1QkRCRTZCNTQwMTQ1RTAzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHI2bxRheV9qMNC8qfEpl6LPf 6d3DvqqXqxPnNWxeDzsohSyJiHnar4s/i3kjOqX1uS/TK+J+A7hwr065QIEslLbi C9hFrX7e6rw5HfOL7AQxa5LaUgiWJ2RzfvxN6VqhudnehTD72YAqd5HqgEx7biI7 8WUiJ+E6a+BAAmee2Z/GTwdjGFLDDl+JbW3k+hcTrCUWRN/+Xq8NKa3vS4PqOGck 7FQl6KpOlBGya7sosvFKAwcRSA1N7k9UpHDk+hyTQ8NYS+ywDUtHlWvJKEcWxwgC 7yfi9Xqcr26HuOYjvwgrJNKgkQUAvvK3CJxg1ZqLH1d62EZ3Wm6Zpo2POuTtAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUQemiZ6ce2FicgVFb2+a1QBReA5IwHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjJjMDI1LTFkNzYtNGEzNi04 MTYwLWE5ZThhZmUzNTc5Zi8wLzMyMzQzMDM2M2E2MTY1NjMzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzNjM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBq7AAAIw DQYJKoZIhvcNAQELBQADggEBAGCPyIxK0vj52PEGmbJtDSv3ZZbgmqG57btdYXvc F2MpqA7W6uygUK0rKzU0zLdgJCjOx4bNzleK79P+AcVpzBXgUx0/gaFKDARuBPaZ 1PCoe9+oKS7HzMjWyLQZ2KPM9JW44bs5HAmp9k/Z1mjELzISoXqGkVavSms1dDkk S7iNf9seNZB9fLrvmLrGZIXvuD3nwYuNBDpinPzhCnq4iryiP6fuUBkMf9o0mZwf YonztBlk5AGyJbzeH+mfcpOdgcTrYV9tNgVH4zJE4P4ht97OhnFT9OXgKpI6eCmW n0N0/933b3erpJpNbLqds/hJzzcyaabfSeV+fTv+Er+hXkU= -----END CERTIFICATE-----Generated at Sun Apr 19 11:55:21 2026 by rpki-client