$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: HA87lAPnR7iUK+dc1jECmtT+iEh5xxhksBYnQ16Faq0= Subject key identifier: BA:06:1B:24:2B:3E:03:05:40:DD:78:6C:85:D3:CB:D9:9B:B3:9D:1C Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 6BABE129C3B57B1DD7109998C004981C5D3BF922 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 05:00:01 +0000 ROA not before: Thu 12 Mar 2026 04:55:01 +0000 ROA not after: Thu 11 Mar 2027 05:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:14::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ab:e1:29:c3:b5:7b:1d:d7:10:99:98:c0:04:98:1c:5d:3b:f9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 04:55:01 2026 GMT Not After : Mar 11 05:00:01 2027 GMT Subject: CN=BA061B242B3E030540DD786C85D3CBD99BB39D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:81:49:13:c7:01:97:56:f3:26:00:f0:e3: e6:2c:ac:6c:cc:28:bc:5f:f9:e5:b9:4c:84:7e:a0: 48:87:de:f2:68:82:5b:cc:40:a4:86:9c:9c:12:cb: 2c:a7:5d:ed:f8:ea:e4:96:8d:5d:1a:64:cb:bd:34: 13:ac:88:a8:b1:99:56:cb:eb:66:0c:6d:27:93:cc: bd:61:e6:88:b5:fa:01:be:aa:6f:af:ea:35:60:1e: ea:26:e6:6d:cb:6e:a9:c8:97:d3:2e:28:c0:7e:cd: 71:69:cd:dc:ea:0d:c0:5a:82:69:b5:a7:11:94:7d: 78:f7:c5:23:4e:77:e1:3e:75:4b:6c:b9:61:95:fe: 53:8a:50:b2:39:18:84:dc:ff:d6:3e:ac:c0:da:cf: 40:39:5f:57:14:93:40:80:d0:18:bb:a5:3a:58:ce: 8f:61:70:d5:4b:ba:52:37:da:c6:9d:e0:ee:10:87: a6:bb:fb:20:16:6f:79:23:a7:64:49:e3:15:c3:3b: 55:f9:af:2a:6c:f2:f1:d0:14:ca:e0:6c:2b:13:0e: 53:bf:79:3a:d8:0e:b7:13:2a:cf:4a:8b:3d:c9:07: 20:46:63:1e:7f:db:57:aa:4f:29:a8:a2:d8:53:3a: fc:11:25:63:ce:55:23:29:9c:9f:9d:79:f4:dc:22: a9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:06:1B:24:2B:3E:03:05:40:DD:78:6C:85:D3:CB:D9:9B:B3:9D:1C X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31343a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:14::/48 Signature Algorithm: sha256WithRSAEncryption 8e:f9:0c:e7:7a:33:3d:9e:8a:7a:1f:f6:d6:26:89:e9:3e:25: e4:71:b1:3f:da:35:36:33:40:42:3e:03:fa:7e:76:1e:ff:95: af:2d:26:00:3e:36:1d:ee:d8:42:72:4d:f5:91:3b:e6:27:e5: bb:ba:be:e5:a0:c0:79:d7:73:32:c7:ad:9b:88:f0:25:31:33: 04:d8:23:f8:13:b8:53:3b:c2:7a:3e:28:55:8d:e9:71:c3:de: 9c:86:19:24:0b:32:fc:1f:f9:08:f3:c3:57:e3:4c:67:80:3e: 7a:fa:01:a1:0b:b5:22:43:e7:25:a7:c9:5d:14:b1:5e:00:04: 19:a7:33:1e:52:09:30:1b:06:07:15:0a:57:2b:fa:fb:de:c2: 0d:33:00:51:2c:4e:ff:d8:7e:3f:55:51:f7:e5:1b:7d:22:1a: 65:82:c3:70:d7:21:0d:bd:fc:5d:95:67:f3:7e:b9:61:87:3c: 75:e1:63:d3:7c:79:39:e9:65:66:7e:f3:44:a4:b6:8b:1e:c1: ab:cd:b7:cc:4b:7a:0a:df:6e:70:c1:60:c0:bf:f6:38:c8:4d: b9:4d:af:9b:1e:6f:79:1b:78:0b:ea:3b:85:85:d7:99:0c:81: bf:f4:2a:09:17:e3:50:4a:a3:ca:10:83:dd:6f:67:8b:27:69: 5b:1a:3c:84 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUa6vhKcO1ex3XEJmYwASYHF07+SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwNDU1MDFaFw0yNzAzMTEwNTAwMDFaMDMxMTAvBgNV BAMTKEJBMDYxQjI0MkIzRTAzMDU0MERENzg2Qzg1RDNDQkQ5OUJCMzlEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOoFJE8cBl1bzJgDw4+YsrGzM KLxf+eW5TIR+oEiH3vJoglvMQKSGnJwSyyynXe346uSWjV0aZMu9NBOsiKixmVbL 62YMbSeTzL1h5oi1+gG+qm+v6jVgHuom5m3LbqnIl9MuKMB+zXFpzdzqDcBagmm1 pxGUfXj3xSNOd+E+dUtsuWGV/lOKULI5GITc/9Y+rMDaz0A5X1cUk0CA0Bi7pTpY zo9hcNVLulI32sad4O4Qh6a7+yAWb3kjp2RJ4xXDO1X5ryps8vHQFMrgbCsTDlO/ eTrYDrcTKs9Kiz3JByBGYx5/21eqTymoothTOvwRJWPOVSMpnJ+defTcIqmVAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUugYbJCs+AwVA3XhshdPL2ZuznRwwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA FDANBgkqhkiG9w0BAQsFAAOCAQEAjvkM53ozPZ6Keh/21iaJ6T4l5HGxP9o1NjNA Qj4D+n52Hv+Vry0mAD42He7YQnJN9ZE75iflu7q+5aDAeddzMsetm4jwJTEzBNgj +BO4UzvCej4oVY3pccPenIYZJAsy/B/5CPPDV+NMZ4A+evoBoQu1IkPnJafJXRSx XgAEGaczHlIJMBsGBxUKVyv6+97CDTMAUSxO/9h+P1VR9+UbfSIaZYLDcNchDb38 XZVn8365YYc8deFj03x5OellZn7zRKS2ix7Bq823zEt6Ct9ucMFgwL/2OMhNuU2v mx5veRt4C+o7hYXXmQyBv/QqCRfjUEqjyhCD3W9niydpWxo8hA== -----END CERTIFICATE-----Generated at Fri Mar 27 00:47:48 2026 by rpki-client