$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3438203d3e203435333032.roa File: 323430333a393130303a3a2f33322d3438203d3e203435333032.roa (raw, json) Hash identifier: j2ByG4+zBRy61H9Sw8b3o03MH75Hge8R05LNjWa31J0= Subject key identifier: 99:59:B0:95:D3:AF:31:24:B8:24:9D:1A:0E:E9:50:1B:A3:8B:15:1D Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Certificate serial: 0F0A78B2AAF2EA17169641F5462ED449085AFCF5 Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3438203d3e203435333032.roa Signing time: Fri 17 Apr 2026 05:00:26 +0000 ROA not before: Fri 17 Apr 2026 04:55:26 +0000 ROA not after: Fri 16 Apr 2027 05:00:26 +0000 asID: 45302 IP address blocks: 2403:9100::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0a:78:b2:aa:f2:ea:17:16:96:41:f5:46:2e:d4:49:08:5a:fc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Validity Not Before: Apr 17 04:55:26 2026 GMT Not After : Apr 16 05:00:26 2027 GMT Subject: CN=9959B095D3AF3124B8249D1A0EE9501BA38B151D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:c9:8b:a4:05:01:3c:df:f1:60:3f:5e:cd: f2:70:e1:96:39:db:e5:23:07:fd:e6:59:d7:68:6f: a7:e5:20:8c:6f:fc:49:d8:1b:58:17:73:db:9c:7b: 6b:cb:7b:64:07:6d:a1:4f:ef:59:bc:21:d3:c1:8b: b2:25:2b:fb:6c:55:5d:99:c7:47:26:cc:5f:42:4a: e9:17:d8:59:68:fd:af:e5:2b:49:09:92:13:5d:05: ab:c5:1b:22:eb:b9:d6:fc:c4:15:bd:b3:92:1b:74: bd:2c:b6:5b:6e:bf:d0:f4:6c:86:be:57:15:72:87: a9:62:5c:37:8b:3b:c7:74:8f:a6:ea:a2:72:26:0a: 62:01:49:c1:05:9f:e0:11:d2:03:13:50:40:ce:07: a9:c5:d2:28:9d:3b:be:f9:6b:e1:a4:54:cf:a4:78: 3d:dc:07:fb:47:d4:73:45:d5:38:2a:47:01:b2:c7: 60:34:28:af:3c:78:33:13:25:e6:21:5b:0a:70:bb: 27:d1:a1:07:72:84:5b:46:d0:61:7d:97:af:42:27: c5:7e:85:9b:52:76:20:84:54:9e:19:18:f2:d0:80: 10:74:1c:e7:84:b0:01:c9:b2:25:e2:d9:f0:89:f7: 21:f7:2c:3b:ba:6c:4b:73:97:78:d6:f8:61:32:5c: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:59:B0:95:D3:AF:31:24:B8:24:9D:1A:0E:E9:50:1B:A3:8B:15:1D X509v3 Authority Key Identifier: keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3438203d3e203435333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9100::/32 Signature Algorithm: sha256WithRSAEncryption 38:05:d3:7f:c3:5e:c0:c6:b8:f2:3b:e4:c9:78:1b:7f:9b:fd: 1b:35:a9:33:9b:2a:14:8b:ec:3c:ec:d5:72:15:10:87:c1:f1: 10:d9:cd:91:90:c4:df:13:ae:de:d1:01:7a:53:72:4f:ca:db: 85:9e:69:10:ab:df:87:4d:20:b9:fc:22:2d:f3:aa:e7:f4:0e: e9:27:ca:e5:bc:d8:c7:22:b8:b2:d2:e3:7a:90:92:98:a8:26: c9:f8:e3:48:03:be:3c:eb:5a:87:1b:4f:14:03:22:9f:c0:ad: ec:97:4e:b9:c3:84:24:9b:26:fc:cc:5b:8b:42:1d:b0:c0:0b: 0e:42:57:77:db:6b:84:ce:21:b1:0e:33:83:8e:db:88:db:7e: 8f:07:5f:90:53:5d:95:7c:1a:46:67:77:ec:0f:e7:50:93:8f: e9:b8:3a:70:26:47:44:48:8c:94:a6:1d:24:52:bc:eb:9e:44: b6:e6:48:96:d1:fb:15:1b:79:47:86:c1:7d:c0:e5:b6:e4:ca: 23:e5:49:3b:3d:7a:7b:45:d0:fa:1a:b2:0b:51:87:a8:86:c4: f3:e3:65:57:c5:a2:b7:fd:26:bd:14:fa:ee:d7:f8:e8:1a:a6: be:e9:a5:8f:88:9c:84:c5:45:85:af:dc:a8:03:79:1d:86:0a: 32:15:6d:62 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUDwp4sqry6hcWlkH1Ri7USQha/PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4 N0U2NUMzQzAeFw0yNjA0MTcwNDU1MjZaFw0yNzA0MTYwNTAwMjZaMDMxMTAvBgNV BAMTKDk5NTlCMDk1RDNBRjMxMjRCODI0OUQxQTBFRTk1MDFCQTM4QjE1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGcmLpAUBPN/xYD9ezfJw4ZY5 2+UjB/3mWddob6flIIxv/EnYG1gXc9uce2vLe2QHbaFP71m8IdPBi7IlK/tsVV2Z x0cmzF9CSukX2Flo/a/lK0kJkhNdBavFGyLrudb8xBW9s5IbdL0stltuv9D0bIa+ VxVyh6liXDeLO8d0j6bqonImCmIBScEFn+AR0gMTUEDOB6nF0iidO775a+GkVM+k eD3cB/tH1HNF1TgqRwGyx2A0KK88eDMTJeYhWwpwuyfRoQdyhFtG0GF9l69CJ8V+ hZtSdiCEVJ4ZGPLQgBB0HOeEsAHJsiXi2fCJ9yH3LDu6bEtzl3jW+GEyXIZBAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUmVmwldOvMSS4JJ0aDulQG6OLFR0wHwYDVR0j BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1 QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2 NUMzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiODg1OGUwLWVjZjAtNGU1My1h NDkwLTNiN2MyZGUxNjkzYy8wLzMyMzQzMDMzM2EzOTMxMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM0MzUzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA5EAMA0GCSqGSIb3 DQEBCwUAA4IBAQA4BdN/w17AxrjyO+TJeBt/m/0bNakzmyoUi+w87NVyFRCHwfEQ 2c2RkMTfE67e0QF6U3JPytuFnmkQq9+HTSC5/CIt86rn9A7pJ8rlvNjHIriy0uN6 kJKYqCbJ+ONIA74861qHG08UAyKfwK3sl065w4Qkmyb8zFuLQh2wwAsOQld322uE ziGxDjODjtuI236PB1+QU12VfBpGZ3fsD+dQk4/puDpwJkdESIyUph0kUrzrnkS2 5kiW0fsVG3lHhsF9wOW25Moj5Uk7PXp7RdD6GrILUYeohsTz42VXxaK3/Sa9FPru 1/joGqa+6aWPiJyExUWFr9yoA3kdhgoyFW1i -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:24 2026 by rpki-client