$ rpki-client -vvf repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa File: 323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa (raw, json) Hash identifier: h4I9oEkX0bpYR1LxFGrybjAWymwk7L+eiz1D7bUYUA8= Subject key identifier: 26:2C:D8:6E:3E:87:06:DD:42:FF:18:32:B9:55:9A:87:4F:F8:A0:7D Certificate issuer: /CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Certificate serial: 49E4BD55FCE0E7CF094DE19C3A0B148C55BD4EDD Authority key identifier: 56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa Signing time: Sat 07 Mar 2026 05:00:00 +0000 ROA not before: Sat 07 Mar 2026 04:55:00 +0000 ROA not after: Sat 06 Mar 2027 05:00:00 +0000 asID: 133804 IP address blocks: 2001:df1:e400::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e4:bd:55:fc:e0:e7:cf:09:4d:e1:9c:3a:0b:14:8c:55:bd:4e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56369FDBBCDE685B4440429A22B7967BBC3C5E36 Validity Not Before: Mar 7 04:55:00 2026 GMT Not After : Mar 6 05:00:00 2027 GMT Subject: CN=262CD86E3E8706DD42FF1832B9559A874FF8A07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:7c:12:c8:d8:29:e0:d6:6c:73:c5:21:d2: 87:27:8c:1c:4f:2b:92:6c:63:34:62:54:bc:48:da: 57:67:c6:c8:3b:f1:2b:44:1c:33:36:b0:e1:de:10: 00:a9:d6:e2:66:28:dd:30:98:50:b7:5b:46:5d:f2: 19:af:32:16:e7:6f:39:cc:b0:5a:0e:f3:37:53:75: df:c8:b2:46:a9:09:7c:60:28:d9:5a:f0:24:9a:aa: 38:72:f5:1d:8a:19:35:4b:53:85:a3:37:92:67:9c: 37:fd:31:2f:73:15:2b:59:66:f7:97:14:0c:3e:5b: 24:ee:6f:b8:95:dd:5f:c0:53:71:bc:05:6b:bf:ef: 56:c3:0a:8f:13:db:ca:06:ed:9b:49:c7:91:f5:40: b0:71:5b:2c:01:57:b1:3e:fa:ba:8b:57:01:e8:7e: ec:d9:6a:c1:49:22:35:c9:72:4f:f1:e0:4a:ae:e5: 76:43:d7:16:ca:c3:be:78:ec:76:97:80:13:66:61: 95:51:03:e5:b1:b0:5b:ce:94:76:b9:ae:d1:e6:b9: 55:65:00:d2:c9:1a:2c:b4:e7:2e:e7:59:80:cb:da: 06:64:3b:cb:69:a3:9a:2a:57:1e:9a:22:ca:56:31: 00:be:38:a6:02:0e:3d:c6:0a:d4:9b:9f:f4:88:47: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2C:D8:6E:3E:87:06:DD:42:FF:18:32:B9:55:9A:87:4F:F8:A0:7D X509v3 Authority Key Identifier: keyid:56:36:9F:DB:BC:DE:68:5B:44:40:42:9A:22:B7:96:7B:BC:3C:5E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/56369FDBBCDE685B4440429A22B7967BBC3C5E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56369FDBBCDE685B4440429A22B7967BBC3C5E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0221ad67-d35c-4559-9a73-7c74f50dcffa/0/323030313a6466313a653430303a3a2f34382d3438203d3e20313333383034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:e400::/48 Signature Algorithm: sha256WithRSAEncryption 5c:01:0f:68:ae:83:b9:52:1a:67:29:a5:a9:39:09:3e:51:ec: 5a:e4:8d:ea:0d:60:e5:72:6e:28:6c:1f:6f:15:9c:d9:9b:c8: fc:7e:ef:51:95:a9:56:7e:34:c2:77:df:0f:b9:22:0f:2b:58: 5a:77:90:f8:66:35:22:80:9e:ab:a1:20:b7:96:aa:81:d0:36: f0:02:8a:a8:6d:49:18:b3:77:e7:d7:d7:77:b4:95:eb:d1:c1: 28:ae:a5:23:0a:11:71:eb:4d:78:c3:2b:4e:88:b5:7e:9d:d9: b1:99:11:8b:a0:fb:97:03:ce:8c:1b:3b:c9:e5:39:d4:db:12: bb:25:c7:4d:86:9a:22:71:ec:d1:ce:af:46:ee:77:b4:c3:62: 13:b2:a2:cd:68:b9:0c:0a:08:7a:b7:ad:df:5f:2f:5a:69:99: bd:4e:ec:17:e2:e5:2e:b3:7e:77:8e:ff:8e:7f:8f:3d:f7:1c: aa:8a:14:3d:f4:be:fb:98:3f:02:bf:d4:53:f9:54:29:08:f6: 34:23:b6:59:01:09:a0:2e:0c:b3:90:85:b7:0c:7d:06:39:9d: f4:ba:ab:d4:df:ed:e8:a5:96:e2:4f:e5:6a:3b:b9:60:21:34: 4a:7c:a1:de:df:8a:ae:91:2d:06:59:85:4b:cc:e1:e1:e2:d4: ec:01:e3:64 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSeS9Vfzg588JTeGcOgsUjFW9Tt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JC QzNDNUUzNjAeFw0yNjAzMDcwNDU1MDBaFw0yNzAzMDYwNTAwMDBaMDMxMTAvBgNV BAMTKDI2MkNEODZFM0U4NzA2REQ0MkZGMTgzMkI5NTU5QTg3NEZGOEEwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHXwSyNgp4NZsc8Uh0ocnjBxP K5JsYzRiVLxI2ldnxsg78StEHDM2sOHeEACp1uJmKN0wmFC3W0Zd8hmvMhbnbznM sFoO8zdTdd/IskapCXxgKNla8CSaqjhy9R2KGTVLU4WjN5JnnDf9MS9zFStZZveX FAw+WyTub7iV3V/AU3G8BWu/71bDCo8T28oG7ZtJx5H1QLBxWywBV7E++rqLVwHo fuzZasFJIjXJck/x4Equ5XZD1xbKw7547HaXgBNmYZVRA+WxsFvOlHa5rtHmuVVl ANLJGiy05y7nWYDL2gZkO8tpo5oqVx6aIspWMQC+OKYCDj3GCtSbn/SIRwQHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUJizYbj6HBt1C/xgyuVWah0/4oH0wHwYDVR0j BBgwFoAUVjaf27zeaFtEQEKaIreWe7w8XjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjIxYWQ2Ny1kMzVjLTQ1NTktOWE3My03Yzc0ZjUwZGNmZmEvMC81NjM2OUZEQkJD REU2ODVCNDQ0MDQyOUEyMkI3OTY3QkJDM0M1RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYzNjlGREJCQ0RFNjg1QjQ0NDA0MjlBMjJCNzk2N0JCQzND NUUzNi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyMjFhZDY3LWQzNWMtNDU1OS05 YTczLTdjNzRmNTBkY2ZmYS8wLzMyMzAzMDMxM2E2NDY2MzEzYTY1MzQzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMzMzgzMDM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8eQAMA0GCSqGSIb3DQEBCwUAA4IBAQBcAQ9oroO5UhpnKaWpOQk+Uexa5I3qDWDl cm4obB9vFZzZm8j8fu9RlalWfjTCd98PuSIPK1had5D4ZjUigJ6roSC3lqqB0Dbw AoqobUkYs3fn19d3tJXr0cEorqUjChFx6014wytOiLV+ndmxmRGLoPuXA86MGzvJ 5TnU2xK7JcdNhpoicezRzq9G7ne0w2ITsqLNaLkMCgh6t63fXy9aaZm9TuwX4uUu s353jv+Of4899xyqihQ99L77mD8Cv9RT+VQpCPY0I7ZZAQmgLgyzkIW3DH0GOZ30 uqvU3+3opZbiT+VqO7lgITRKfKHe34qukS0GWYVLzOHh4tTsAeNk -----END CERTIFICATE-----Generated at Thu Mar 26 19:53:46 2026 by rpki-client