$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: o4PO23lnRqPf03Wo6JrcILog0Qd/SLT9yVAea2BC/2M= Subject key identifier: 25:7F:5F:8B:B3:89:EC:C5:CE:A7:C6:36:D3:B5:67:A4:CF:19:80:1B Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 0A8DBD2BDEB85560BC73FFF693B38129816E2D41 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 05:00:01 +0000 ROA not before: Thu 12 Mar 2026 04:55:01 +0000 ROA not after: Thu 11 Mar 2027 05:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:13::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8d:bd:2b:de:b8:55:60:bc:73:ff:f6:93:b3:81:29:81:6e:2d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 04:55:01 2026 GMT Not After : Mar 11 05:00:01 2027 GMT Subject: CN=257F5F8BB389ECC5CEA7C636D3B567A4CF19801B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:15:5c:29:39:40:35:c4:11:43:d9:7b:53:f0: ae:ac:55:37:dc:e1:cd:b9:ee:61:e6:9b:bf:2c:de: 31:f6:6a:d7:f5:81:6b:e0:de:a3:4a:55:ca:6b:79: 74:57:54:29:ee:39:31:2b:6e:9e:4c:62:b1:2e:7c: e6:42:dd:2c:84:93:1c:e2:f0:7f:2a:ba:58:5a:d0: 5b:e0:0e:cd:19:04:fd:58:3e:4a:14:39:1b:5f:23: c7:ad:cb:4d:49:3f:67:cf:9d:74:b7:53:c6:bd:9d: 51:91:78:dd:30:e6:3f:f4:57:00:b7:4e:35:55:fd: ea:a9:6e:f4:2b:75:35:05:69:8a:24:67:90:59:19: 36:d5:95:0a:e9:93:7d:10:95:17:b2:56:7f:15:55: d8:87:83:f6:92:2d:60:9c:ac:cf:ba:3f:11:0c:58: 2a:0b:36:46:c3:59:aa:b3:fd:1c:13:3b:23:15:9f: 5f:39:ca:e2:b6:6b:38:ca:c7:1a:dd:c6:b6:fa:1f: f4:bf:72:f2:42:61:39:81:81:3e:20:75:71:db:3f: c8:8b:b0:10:a8:c0:1a:e8:ca:ea:85:49:68:96:35: 13:dc:6a:11:b6:f7:31:5a:7b:c9:f3:3a:36:64:90: ad:ae:92:d0:17:3a:79:41:2b:3a:28:c4:bd:c1:bc: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7F:5F:8B:B3:89:EC:C5:CE:A7:C6:36:D3:B5:67:A4:CF:19:80:1B X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:13::/48 Signature Algorithm: sha256WithRSAEncryption 06:4e:fa:51:9b:7e:20:fe:06:4d:fd:a7:2d:89:8f:e9:51:fc: 0e:36:fb:56:73:2a:b0:ad:20:d3:73:99:77:3e:1d:36:0a:26: 29:81:4a:e3:ae:b9:11:00:e2:e5:2a:dd:73:f5:80:40:ba:35: 2d:3a:ee:72:88:0b:65:a5:b0:91:2b:68:f8:1c:0b:21:33:e4: 2d:ab:8a:ce:34:75:06:22:7a:71:71:32:a5:15:5d:53:c7:b4: ad:86:b9:aa:c2:f4:c9:ef:ed:a7:30:f7:ae:5c:d3:39:02:25: 76:da:cc:3f:49:af:b2:a6:ac:3d:23:77:3f:32:41:88:0a:b2: 48:0d:76:fc:37:9d:d0:60:23:ca:19:c7:3a:19:0e:09:aa:e4: 9f:b8:f3:db:d1:1a:01:c1:07:39:ae:c8:22:cd:4f:55:49:6e: 1c:18:58:d2:c7:5c:07:84:50:14:c7:f1:a2:2e:80:2f:55:4f: 93:ef:ca:79:24:94:b5:41:2e:68:c0:08:90:ed:90:7d:3e:c4: 95:69:04:8d:e1:6b:f3:30:b9:3f:7e:96:31:5f:f2:b1:97:05: 6a:8c:11:80:4b:2a:a8:40:ff:d8:1a:bb:88:9b:f6:6f:7b:46: ed:46:8b:2c:d1:c5:fd:73:f5:63:96:f4:89:19:62:0b:f9:28: a5:01:ca:ce -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUCo29K964VWC8c//2k7OBKYFuLUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwNDU1MDFaFw0yNzAzMTEwNTAwMDFaMDMxMTAvBgNV BAMTKDI1N0Y1RjhCQjM4OUVDQzVDRUE3QzYzNkQzQjU2N0E0Q0YxOTgwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0FVwpOUA1xBFD2XtT8K6sVTfc 4c257mHmm78s3jH2atf1gWvg3qNKVcpreXRXVCnuOTErbp5MYrEufOZC3SyEkxzi 8H8qulha0FvgDs0ZBP1YPkoUORtfI8ety01JP2fPnXS3U8a9nVGReN0w5j/0VwC3 TjVV/eqpbvQrdTUFaYokZ5BZGTbVlQrpk30QlReyVn8VVdiHg/aSLWCcrM+6PxEM WCoLNkbDWaqz/RwTOyMVn185yuK2azjKxxrdxrb6H/S/cvJCYTmBgT4gdXHbP8iL sBCowBroyuqFSWiWNRPcahG29zFae8nzOjZkkK2uktAXOnlBKzooxL3BvAnzAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUJX9fi7OJ7MXOp8Y207VnpM8ZgBswHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA EzANBgkqhkiG9w0BAQsFAAOCAQEABk76UZt+IP4GTf2nLYmP6VH8Djb7VnMqsK0g 03OZdz4dNgomKYFK4665EQDi5Srdc/WAQLo1LTrucogLZaWwkSto+BwLITPkLauK zjR1BiJ6cXEypRVdU8e0rYa5qsL0ye/tpzD3rlzTOQIldtrMP0mvsqasPSN3PzJB iAqySA12/Ded0GAjyhnHOhkOCarkn7jz29EaAcEHOa7IIs1PVUluHBhY0sdcB4RQ FMfxoi6AL1VPk+/KeSSUtUEuaMAIkO2QfT7ElWkEjeFr8zC5P36WMV/ysZcFaowR gEsqqED/2Bq7iJv2b3tG7UaLLNHF/XP1Y5b0iRliC/kopQHKzg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:12:32 2026 by rpki-client