$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa File: 323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa (raw, json) Hash identifier: krxxGhH9VamdaH+LSrlmFNkUKNqs+HD54srEszxp0eo= Subject key identifier: 81:43:12:B2:1A:1A:BF:3B:20:9B:44:6F:72:77:DC:FD:C9:BB:A9:EE Certificate issuer: /CN=19093F7761A9E337D03405604750BFD4ADC2121E Certificate serial: 6556315A6D91742CD978945537C6A00B4358E6E5 Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa Signing time: Tue 31 Mar 2026 20:00:02 +0000 ROA not before: Tue 31 Mar 2026 19:55:02 +0000 ROA not after: Tue 30 Mar 2027 20:00:02 +0000 asID: 137329 IP address blocks: 2402:4840:106::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:56:31:5a:6d:91:74:2c:d9:78:94:55:37:c6:a0:0b:43:58:e6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E Validity Not Before: Mar 31 19:55:02 2026 GMT Not After : Mar 30 20:00:02 2027 GMT Subject: CN=814312B21A1ABF3B209B446F7277DCFDC9BBA9EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:bf:63:0f:e1:99:66:52:75:46:9c:21:50: dd:85:cb:8e:c2:65:bb:d6:32:65:39:2b:23:3d:8d: 0c:3b:07:52:e0:56:00:5d:54:3d:b8:57:fa:2c:78: 72:b4:b3:a4:9c:82:5a:73:d9:3d:01:4c:f0:0a:59: 15:f3:15:48:74:9f:51:71:a8:5b:af:a4:70:e2:5d: c9:a5:bd:9e:ad:5d:55:b7:47:cf:c3:bb:10:c3:59: 51:13:24:4b:b5:f3:3d:6b:e7:70:33:76:20:d5:ee: 54:b3:bb:66:d0:ea:41:2d:c9:a9:b4:fa:ce:88:be: d2:b6:8a:6e:21:e0:dc:3d:ac:a1:8b:7d:a0:b5:91: a4:5c:27:61:16:e3:7c:32:42:c8:da:56:af:86:f0: 1d:da:af:0a:4b:50:22:e3:ad:88:9b:a4:28:c4:65: 59:04:29:ba:02:3e:93:cb:0a:a3:5b:b6:98:51:54: e7:71:59:e9:26:08:1a:64:28:9e:4f:bf:fb:e8:c7: 89:a4:87:60:d5:57:be:ed:72:ed:cc:83:38:ba:7c: 68:a6:c8:f5:e0:60:2a:12:9e:3c:5d:2d:11:08:1b: 45:92:92:93:4b:9c:a8:2a:a7:b0:de:71:4c:a6:9c: 66:c4:98:aa:15:d7:63:b2:b0:86:4c:4b:d4:5b:8b: 69:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:43:12:B2:1A:1A:BF:3B:20:9B:44:6F:72:77:DC:FD:C9:BB:A9:EE X509v3 Authority Key Identifier: keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3130363a3a2f34382d3438203d3e20313337333239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4840:106::/48 Signature Algorithm: sha256WithRSAEncryption 70:3c:00:32:bc:c1:36:2c:17:0d:2c:c6:c3:fc:23:54:cc:43: c2:fa:71:b7:3e:7e:cf:63:44:3a:f7:8a:5b:57:43:33:ac:87: eb:4b:03:a8:37:c2:08:73:ae:96:65:28:c4:68:a4:f3:9f:22: 40:dd:90:f0:9d:60:6d:3e:d5:8b:81:39:8a:38:b1:50:15:d9: 46:5c:ae:7e:8f:8d:ec:cd:50:08:9c:e3:6c:d2:63:3e:f1:cc: 56:18:d1:c6:96:01:08:90:b9:15:c1:bb:fe:7d:e9:72:96:8c: bd:15:dd:55:50:b2:30:11:ed:ea:fc:8d:3d:a1:a6:fc:3d:c1: bb:0b:d6:6a:77:75:a5:96:f6:0b:79:38:ce:3c:67:66:dd:c1: 6f:9c:44:8d:e5:08:98:58:f1:2d:f1:bb:60:d2:64:cc:4a:20: 1a:60:09:11:b1:41:a5:53:1d:19:47:fb:38:76:9b:39:2a:42: 3e:f1:12:60:3a:74:51:b7:57:fb:7a:9d:31:99:70:30:6d:b3: 7e:bb:f5:0d:e4:66:20:dc:8c:49:fc:fc:97:63:f7:a7:73:c1: e8:dd:9c:81:5d:51:31:96:43:99:52:d8:ee:e2:2b:0b:77:ac: 95:95:cf:39:a2:b8:ee:a1:38:84:d8:a1:39:9e:9b:65:99:63: 2e:cb:24:64 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZVYxWm2RdCzZeJRVN8agC0NY5uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB REMyMTIxRTAeFw0yNjAzMzExOTU1MDJaFw0yNzAzMzAyMDAwMDJaMDMxMTAvBgNV BAMTKDgxNDMxMkIyMUExQUJGM0IyMDlCNDQ2RjcyNzdEQ0ZEQzlCQkE5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7L9jD+GZZlJ1RpwhUN2Fy47C ZbvWMmU5KyM9jQw7B1LgVgBdVD24V/oseHK0s6Scglpz2T0BTPAKWRXzFUh0n1Fx qFuvpHDiXcmlvZ6tXVW3R8/DuxDDWVETJEu18z1r53AzdiDV7lSzu2bQ6kEtyam0 +s6IvtK2im4h4Nw9rKGLfaC1kaRcJ2EW43wyQsjaVq+G8B3arwpLUCLjrYibpCjE ZVkEKboCPpPLCqNbtphRVOdxWekmCBpkKJ5Pv/vox4mkh2DVV77tcu3Mgzi6fGim yPXgYCoSnjxdLREIG0WSkpNLnKgqp7DecUymnGbEmKoV12OysIZMS9Rbi2mLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgUMSshoavzsgm0Rvcnfc/cm7qe4wHwYDVR0j BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy MTIxRS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h MmFkLWQxNzU0MzY1YTQ1ZC8wLzMyMzQzMDMyM2EzNDM4MzQzMDNhMzEzMDM2M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzMzMjM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAJI QAEGMA0GCSqGSIb3DQEBCwUAA4IBAQBwPAAyvME2LBcNLMbD/CNUzEPC+nG3Pn7P Y0Q694pbV0MzrIfrSwOoN8IIc66WZSjEaKTznyJA3ZDwnWBtPtWLgTmKOLFQFdlG XK5+j43szVAInONs0mM+8cxWGNHGlgEIkLkVwbv+felyloy9Fd1VULIwEe3q/I09 oab8PcG7C9Zqd3WllvYLeTjOPGdm3cFvnESN5QiYWPEt8btg0mTMSiAaYAkRsUGl Ux0ZR/s4dps5KkI+8RJgOnRRt1f7ep0xmXAwbbN+u/UN5GYg3IxJ/PyXY/enc8Ho 3ZyBXVExlkOZUtju4isLd6yVlc85orjuoTiE2KE5nptlmWMuyyRk -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:02 2026 by rpki-client