$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa File: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (raw, json) Hash identifier: OecE9eeqTbFl7AcU2bScbuInBGGXJT8BS6r2GNlTSNE= Subject key identifier: 5B:56:BC:11:6D:BB:5F:EA:8C:12:52:56:10:E7:41:00:EF:2F:7B:5C Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 33FE95B797B026316171F9854EC0D9A1C3EE7661 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa Signing time: Fri 17 Apr 2026 08:00:37 +0000 ROA not before: Fri 17 Apr 2026 07:55:37 +0000 ROA not after: Fri 16 Apr 2027 08:00:37 +0000 asID: 131705 IP address blocks: 2406:5c40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fe:95:b7:97:b0:26:31:61:71:f9:85:4e:c0:d9:a1:c3:ee:76:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Apr 17 07:55:37 2026 GMT Not After : Apr 16 08:00:37 2027 GMT Subject: CN=5B56BC116DBB5FEA8C12525610E74100EF2F7B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:f5:34:5e:f7:63:b6:be:76:57:52:b3:2b: b5:58:fb:10:a7:04:f6:94:70:cb:a1:79:6c:b3:a6: 6a:43:53:04:f3:e8:0f:31:3d:c5:b1:10:ad:d7:60: cf:83:48:ae:07:7c:df:6a:d1:8b:d4:7f:74:d3:31: a5:46:43:06:2c:b5:ce:63:b5:fc:1e:c9:b6:a8:0c: 21:12:94:f1:11:36:5a:67:9f:75:e5:34:96:af:80: 3f:da:e4:d4:a7:24:2a:12:a7:c5:b2:54:00:5f:a7: 54:97:4f:c6:b0:9f:28:5a:87:36:37:73:3a:ba:4f: 07:12:63:90:ff:3f:65:40:f9:35:d1:df:ee:b9:86: e0:32:de:36:04:d8:dd:34:18:8e:99:97:6f:55:65: 99:08:e6:07:a2:74:77:52:15:be:aa:01:7e:b6:53: 8c:6c:d1:57:7d:af:b6:82:84:7d:6b:51:c9:1b:cb: 5f:2e:11:cc:37:c1:73:49:a2:15:8a:72:f2:4b:92: 9f:db:46:4f:2f:07:0e:7e:5e:79:4f:ca:43:da:65: f8:8b:3a:52:ed:92:37:96:df:10:cc:c9:1e:13:6a: 6a:eb:82:03:e9:f8:0c:50:cd:ce:ab:35:01:2d:f6: b6:4a:bb:9b:83:19:81:49:ee:86:13:5b:81:62:1e: fc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:56:BC:11:6D:BB:5F:EA:8C:12:52:56:10:E7:41:00:EF:2F:7B:5C X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c40:1000::/36 Signature Algorithm: sha256WithRSAEncryption 16:0e:39:61:34:ce:fe:4a:16:7b:3a:fc:6c:19:db:a3:8f:53: ac:73:52:3d:ca:4b:fd:9c:1d:f3:56:d3:93:31:d1:f3:96:d0: eb:99:3e:f0:d3:3f:9c:42:02:91:5d:e1:58:b5:90:8a:22:fa: 44:25:0a:cf:e8:ad:f9:40:1d:41:34:b8:6e:dc:3a:be:74:c7: 7d:d8:4e:a8:16:53:3f:94:d5:2f:b0:92:4d:09:3a:67:9b:88: 7f:86:1a:63:0a:ea:b9:f1:90:dd:20:3c:78:e9:c4:b0:c5:17: 00:d5:dd:6a:a0:e1:ee:24:d9:7d:48:ca:1a:d3:3e:25:47:15: 09:83:61:ea:f5:8d:27:11:f5:16:fa:7e:c1:55:46:3e:d9:91: 15:23:d2:6c:9e:cd:9a:35:ae:4b:61:d0:12:b4:0f:01:ca:04: 79:03:05:b4:9c:75:14:bb:7e:b0:0c:29:5d:0c:74:9a:06:6a: 16:d1:fc:d5:55:f1:54:f6:17:fb:51:b1:ad:ca:5e:b7:2c:7b: e2:a8:75:5a:52:47:8f:0f:d3:2e:01:a7:b0:89:b6:9b:5d:4a: 74:20:72:75:e0:c5:e7:e5:f5:d7:36:48:d7:27:95:25:31:68: c7:df:56:ce:ce:49:7a:8e:d7:cc:aa:15:33:73:57:9e:5f:de: 41:21:4c:08 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUM/6Vt5ewJjFhcfmFTsDZocPudmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNjA0MTcwNzU1MzdaFw0yNzA0MTYwODAwMzdaMDMxMTAvBgNV BAMTKDVCNTZCQzExNkRCQjVGRUE4QzEyNTI1NjEwRTc0MTAwRUYyRjdCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtivU0Xvdjtr52V1KzK7VY+xCn BPaUcMuheWyzpmpDUwTz6A8xPcWxEK3XYM+DSK4HfN9q0YvUf3TTMaVGQwYstc5j tfweybaoDCESlPERNlpnn3XlNJavgD/a5NSnJCoSp8WyVABfp1SXT8awnyhahzY3 czq6TwcSY5D/P2VA+TXR3+65huAy3jYE2N00GI6Zl29VZZkI5geidHdSFb6qAX62 U4xs0Vd9r7aChH1rUckby18uEcw3wXNJohWKcvJLkp/bRk8vBw5+XnlPykPaZfiL OlLtkjeW3xDMyR4TamrrggPp+AxQzc6rNQEt9rZKu5uDGYFJ7oYTW4FiHvxnAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUW1a8EW27X+qMElJWEOdBAO8ve1wwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzEzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BlxAEDANBgkqhkiG9w0BAQsFAAOCAQEAFg45YTTO/koWezr8bBnbo49TrHNSPcpL /Zwd81bTkzHR85bQ65k+8NM/nEICkV3hWLWQiiL6RCUKz+it+UAdQTS4btw6vnTH fdhOqBZTP5TVL7CSTQk6Z5uIf4YaYwrqufGQ3SA8eOnEsMUXANXdaqDh7iTZfUjK GtM+JUcVCYNh6vWNJxH1Fvp+wVVGPtmRFSPSbJ7NmjWuS2HQErQPAcoEeQMFtJx1 FLt+sAwpXQx0mgZqFtH81VXxVPYX+1Gxrcpetyx74qh1WlJHjw/TLgGnsIm2m11K dCBydeDF5+X11zZI1yeVJTFox99Wzs5Jeo7XzKoVM3NXnl/eQSFMCA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:45:46 2026 by rpki-client