$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a3a2f33362d3438203d3e20313331373035.roa File: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (raw, json) Hash identifier: 4bo1QGeibGqlWV5rzwY6UTsC4OpagnBRtWFzFniQb48= Subject key identifier: 2F:6D:86:FD:E3:B4:97:E8:08:61:29:52:B4:67:A2:E7:18:1B:FD:E5 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 478177AF63A6E2B3180B26AA699C5114CB151A1B Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a3a2f33362d3438203d3e20313331373035.roa Signing time: Fri 17 Apr 2026 08:00:37 +0000 ROA not before: Fri 17 Apr 2026 07:55:37 +0000 ROA not after: Fri 16 Apr 2027 08:00:37 +0000 asID: 131705 IP address blocks: 2406:5c40::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:81:77:af:63:a6:e2:b3:18:0b:26:aa:69:9c:51:14:cb:15:1a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Apr 17 07:55:37 2026 GMT Not After : Apr 16 08:00:37 2027 GMT Subject: CN=2F6D86FDE3B497E808612952B467A2E7181BFDE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:2b:1c:8e:5c:17:31:8a:9c:b0:1d:b2:d1: b7:f5:8b:8f:0d:f2:53:64:b5:4a:ac:1f:0e:41:4f: b6:7e:f7:06:59:01:ec:08:d7:63:4d:78:f5:56:7f: f2:8c:0d:20:cd:6c:93:1e:88:69:10:68:f7:f6:9d: 83:ce:77:d0:d6:f8:c8:b0:95:1d:06:a0:29:38:77: 37:42:84:3a:03:33:3c:4a:8c:3a:bc:01:03:f1:bc: dc:91:d1:0a:cf:95:84:d7:bc:35:72:0d:47:dc:2a: da:3d:89:33:ff:99:e7:31:1b:43:d2:cd:89:ad:c6: 15:40:c1:0c:87:bf:4d:3e:ee:1d:e1:2e:4b:ab:45: e8:a5:13:7a:c2:f3:96:e0:32:30:ba:fd:11:10:1e: 33:68:f7:b7:39:8a:c7:7b:c3:5c:23:ff:09:09:9f: 48:20:a4:ce:86:71:70:a3:6e:72:8c:98:f1:40:db: 3c:aa:63:11:9e:b8:82:9f:2f:21:85:e9:19:37:5b: bb:16:aa:71:06:2f:15:4a:b4:2c:e7:35:04:0c:ff: 1c:bc:d4:d3:3c:8c:c5:0f:2e:fa:70:68:99:d9:fa: 4c:6b:eb:d4:93:0f:1d:af:c7:27:83:a8:a3:d7:4c: 26:3e:7a:57:98:90:25:0f:c2:f6:ab:6b:21:f7:ba: 9b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6D:86:FD:E3:B4:97:E8:08:61:29:52:B4:67:A2:E7:18:1B:FD:E5 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a3a2f33362d3438203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c40::/36 Signature Algorithm: sha256WithRSAEncryption 30:39:3a:8c:9a:0a:cb:e3:de:59:c4:96:25:71:7c:5c:4f:9d: d0:e8:c9:a7:d4:41:0e:12:06:82:05:88:02:1d:f5:0d:c8:75: 45:06:11:a6:4c:02:10:20:21:34:0b:4b:b0:1c:b9:5b:88:1d: 4b:65:7a:74:ea:f1:92:c6:1b:8b:8e:4b:b4:55:9f:dd:4b:2f: 89:76:7b:7d:e4:c8:fd:e5:a1:f3:cd:e8:d9:59:ff:ee:39:3c: b9:fe:55:43:00:6d:7d:9b:61:a3:f3:d4:b9:e0:29:f7:ad:05: 1c:44:63:6a:bb:4d:d1:88:ca:14:4d:6c:1a:b3:7d:82:3b:34: d5:f4:47:59:88:cf:d2:8b:9a:b4:30:3e:32:ab:33:59:fe:2c: 30:f9:2e:d9:89:13:19:af:79:3c:1b:79:b4:40:9a:78:f9:a7: 84:96:04:d4:ca:df:3c:fd:f8:a9:10:a4:ab:d3:b5:bf:da:3e: 4e:a2:31:f3:77:4d:3e:97:0b:92:03:3c:79:37:ec:48:1f:ce: e4:3c:fe:f5:20:32:0e:5e:ae:0e:25:f5:c6:65:82:21:90:33: 39:98:bf:d5:74:b5:98:4f:26:58:30:ef:f2:50:4b:c7:4e:e3: ea:ea:7e:cb:d8:e3:5f:b7:89:71:d4:61:c3:8f:36:ec:65:4e: 9f:3e:4c:3d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUR4F3r2Om4rMYCyaqaZxRFMsVGhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNjA0MTcwNzU1MzdaFw0yNzA0MTYwODAwMzdaMDMxMTAvBgNV BAMTKDJGNkQ4NkZERTNCNDk3RTgwODYxMjk1MkI0NjdBMkU3MTgxQkZERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDiscjlwXMYqcsB2y0bf1i48N 8lNktUqsHw5BT7Z+9wZZAewI12NNePVWf/KMDSDNbJMeiGkQaPf2nYPOd9DW+Miw lR0GoCk4dzdChDoDMzxKjDq8AQPxvNyR0QrPlYTXvDVyDUfcKto9iTP/mecxG0PS zYmtxhVAwQyHv00+7h3hLkurReilE3rC85bgMjC6/REQHjNo97c5isd7w1wj/wkJ n0ggpM6GcXCjbnKMmPFA2zyqYxGeuIKfLyGF6Rk3W7sWqnEGLxVKtCznNQQM/xy8 1NM8jMUPLvpwaJnZ+kxr69STDx2vxyeDqKPXTCY+eleYkCUPwvarayH3uptRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUL22G/eO0l+gIYSlStGei5xgb/eUwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhM2EyZjMzMzYy ZDM0MzgyMDNkM2UyMDMxMzMzMTM3MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQGXEAAMA0GCSqG SIb3DQEBCwUAA4IBAQAwOTqMmgrL495ZxJYlcXxcT53Q6Mmn1EEOEgaCBYgCHfUN yHVFBhGmTAIQICE0C0uwHLlbiB1LZXp06vGSxhuLjku0VZ/dSy+Jdnt95Mj95aHz zejZWf/uOTy5/lVDAG19m2Gj89S54Cn3rQUcRGNqu03RiMoUTWwas32COzTV9EdZ iM/Si5q0MD4yqzNZ/iww+S7ZiRMZr3k8G3m0QJp4+aeElgTUyt88/fipEKSr07W/ 2j5OojHzd00+lwuSAzx5N+xIH87kPP71IDIOXq4OJfXGZYIhkDM5mL/VdLWYTyZY MO/yUEvHTuPq6n7L2ONft4lx1GHDjzbsZU6fPkw9 -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:02 2026 by rpki-client