$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa File: 323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa (raw, json) Hash identifier: Y4I82S4d7a/x1ViD8xkMuBl2nqrV7Rl0lBJwgFX9+xk= Subject key identifier: 80:B1:4B:BE:0F:3F:12:18:E3:5A:32:F8:D6:16:1A:F9:3D:40:E6:76 Certificate issuer: /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Certificate serial: 4F8BEEE7AA5DD06AD7CD1486353BF24BBDD31A57 Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa Signing time: Fri 03 Apr 2026 07:02:51 +0000 ROA not before: Fri 03 Apr 2026 06:57:51 +0000 ROA not after: Fri 02 Apr 2027 07:02:51 +0000 asID: 149369 IP address blocks: 2001:df0:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 09:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8b:ee:e7:aa:5d:d0:6a:d7:cd:14:86:35:3b:f2:4b:bd:d3:1a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Validity Not Before: Apr 3 06:57:51 2026 GMT Not After : Apr 2 07:02:51 2027 GMT Subject: CN=80B14BBE0F3F1218E35A32F8D6161AF93D40E676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:c4:9c:bb:b3:d1:94:e4:07:9d:cf:c0:70: 64:4e:f2:80:14:35:b1:3f:02:92:18:86:0c:34:b1: 40:b3:e3:52:22:4f:05:5e:69:77:f9:05:1c:55:94: 2c:bf:82:f0:c8:ce:44:77:07:fd:eb:6f:74:94:c3: 7e:a3:b5:24:26:2c:d3:2b:11:e7:9c:6c:d7:79:f7: 95:68:c8:4b:99:88:8a:0c:eb:1c:16:6a:3e:cd:c7: b7:ba:a6:40:58:21:bc:61:55:62:87:98:fe:7a:87: 17:aa:ca:3c:a6:76:e3:3f:47:c4:ac:34:35:1b:2d: 0d:f3:e2:77:07:7c:57:ef:c2:cd:9b:d3:fb:3a:f1: 24:15:2a:04:09:b7:15:57:36:8a:63:f0:2e:72:f1: cf:4a:79:f4:89:aa:8c:33:86:a2:5f:ff:92:d5:dd: 88:fe:4c:2f:22:6a:57:1b:55:2d:ec:33:bc:22:2d: 32:15:1d:c2:07:50:cf:99:2c:b6:a4:da:74:06:2a: a1:dd:85:44:19:01:14:12:20:0d:a8:06:35:87:ab: 89:31:ba:22:e7:96:8c:77:b3:3c:b8:23:69:b3:58: 1e:c4:ec:f4:9f:22:f5:24:32:72:13:eb:81:20:69: 2f:c5:8d:4f:7d:ed:73:55:f5:98:81:eb:a3:d3:2e: 9c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B1:4B:BE:0F:3F:12:18:E3:5A:32:F8:D6:16:1A:F9:3D:40:E6:76 X509v3 Authority Key Identifier: keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/323030313a6466303a363063303a3a2f34382d3438203d3e20313439333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 46:67:02:52:11:5c:62:70:59:97:5c:7d:ec:65:b1:e9:50:18: 90:a8:0c:8e:8c:58:f3:e0:25:83:95:e0:9e:e7:fe:c1:45:e0: 9f:32:e6:c2:f6:b0:05:30:77:3a:1a:82:ac:25:de:36:d0:b4: 10:65:0e:d8:c0:ca:46:04:05:b7:9b:94:ac:22:47:d6:2a:8a: ce:25:fd:86:83:c0:43:d4:e0:e0:3a:58:2f:9c:ab:ca:cf:71: 48:fa:d2:b5:23:51:85:59:5d:e5:a2:71:14:3a:25:9d:56:ec: de:9d:67:b8:34:03:ec:86:6c:42:87:84:03:2e:be:25:54:2c: 7c:b7:8e:f2:db:e0:eb:f3:ff:3b:b6:2a:3e:ad:e7:e6:ab:82: 91:fc:8d:d0:cc:6c:64:d8:de:a2:ea:a7:b0:7a:2d:18:ee:86: fc:80:c7:55:a7:b6:94:6a:f3:4f:fd:21:3c:d1:62:ab:ef:a4: 8d:cd:b2:cc:44:e8:20:bc:60:b7:26:50:2d:07:86:c6:81:f5: b3:6f:1f:d0:b5:f0:3f:a6:3c:4d:5f:0d:b7:3f:f1:e1:3a:16: 8a:4b:d3:02:f3:a0:a9:38:39:91:38:9b:d8:89:df:c2:32:84: 61:cb:84:4a:ba:bb:2c:64:75:73:8e:6a:d7:86:43:a4:88:b9: e7:f0:26:88 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUT4vu56pd0GrXzRSGNTvyS73TGlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYy QTZGRjg3RTAeFw0yNjA0MDMwNjU3NTFaFw0yNzA0MDIwNzAyNTFaMDMxMTAvBgNV BAMTKDgwQjE0QkJFMEYzRjEyMThFMzVBMzJGOEQ2MTYxQUY5M0Q0MEU2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++cScu7PRlOQHnc/AcGRO8oAU NbE/ApIYhgw0sUCz41IiTwVeaXf5BRxVlCy/gvDIzkR3B/3rb3SUw36jtSQmLNMr EeecbNd595VoyEuZiIoM6xwWaj7Nx7e6pkBYIbxhVWKHmP56hxeqyjymduM/R8Ss NDUbLQ3z4ncHfFfvws2b0/s68SQVKgQJtxVXNopj8C5y8c9KefSJqowzhqJf/5LV 3Yj+TC8ialcbVS3sM7wiLTIVHcIHUM+ZLLak2nQGKqHdhUQZARQSIA2oBjWHq4kx uiLnlox3szy4I2mzWB7E7PSfIvUkMnIT64EgaS/FjU997XNV9ZiB66PTLpzNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgLFLvg8/EhjjWjL41hYa+T1A5nYwHwYDVR0j BBgwFoAUGe15etu40KMYTSsC19HCNipv+H4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMC8xOUVENzk3QURC QjhEMEEzMTg0RDJCMDJEN0QxQzIzNjJBNkZGODdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlFRDc5N0FEQkI4RDBBMzE4NEQyQjAyRDdEMUMyMzYyQTZG Rjg3RS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1MWQ2YzljLWVhZDctNDVmZS1h MTlhLTQyMjM1ZmM1Mzc4MC8wLzMyMzAzMDMxM2E2NDY2MzAzYTM2MzA2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzMzNjM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8GDAMA0GCSqGSIb3DQEBCwUAA4IBAQBGZwJSEVxicFmXXH3sZbHpUBiQqAyOjFjz 4CWDleCe5/7BReCfMubC9rAFMHc6GoKsJd420LQQZQ7YwMpGBAW3m5SsIkfWKorO Jf2Gg8BD1ODgOlgvnKvKz3FI+tK1I1GFWV3lonEUOiWdVuzenWe4NAPshmxCh4QD Lr4lVCx8t47y2+Dr8/87tio+refmq4KR/I3QzGxk2N6i6qewei0Y7ob8gMdVp7aU avNP/SE80WKr76SNzbLMROggvGC3JlAtB4bGgfWzbx/QtfA/pjxNXw23P/HhOhaK S9MC86CpODmROJvYid/CMoRhy4RKurssZHVzjmrXhkOkiLnn8CaI -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:40 2026 by rpki-client