$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: P2lcJfyLPGUNQ4cnX8Y2QLZI/erXHDt7Fmf4XMrSfGM= Subject key identifier: 07:10:1B:9F:43:B0:26:FB:BB:69:DD:5C:48:12:5D:57:DC:1A:08:63 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 2E9F858CD5AE9ED0576385D7170CC22370311062 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 05:00:01 +0000 ROA not before: Thu 12 Mar 2026 04:55:01 +0000 ROA not after: Thu 11 Mar 2027 05:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:15::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9f:85:8c:d5:ae:9e:d0:57:63:85:d7:17:0c:c2:23:70:31:10:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 04:55:01 2026 GMT Not After : Mar 11 05:00:01 2027 GMT Subject: CN=07101B9F43B026FBBB69DD5C48125D57DC1A0863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:07:80:a5:a5:ba:ee:68:d2:f5:21:a5:64: 93:6f:5c:bb:f5:87:c2:e5:04:ba:08:c3:e9:7e:4a: 7a:41:06:7a:44:e8:7d:27:3e:47:26:f1:8d:9b:4c: 03:9b:e5:1b:66:34:3b:d4:75:87:7c:b1:02:22:6d: 4e:7d:01:22:d5:dc:96:1e:14:2a:41:d1:3a:36:69: ef:16:de:84:7c:9f:28:7d:ea:33:ad:0d:64:bc:9e: 8c:58:f2:9d:63:5d:0e:cc:23:7f:c6:b2:e1:d0:70: 1d:35:f3:17:1b:6d:6d:8d:6e:79:ff:28:48:15:12: fd:c8:43:be:94:da:b8:51:da:53:a5:b2:65:a8:19: be:3b:fd:8a:68:88:17:08:75:3f:fe:50:f6:9a:2f: 67:54:e9:07:6c:1d:39:44:31:32:a0:6a:f8:89:a6: fd:8b:9c:06:9b:fb:08:31:b7:4f:24:34:41:f9:f9: b1:c6:85:5b:39:b8:93:72:67:6e:47:89:f5:06:c7: f1:f8:8f:55:7b:0e:16:b0:3a:8c:1c:03:3c:36:1e: 54:c7:d2:3a:c9:7c:3b:21:b6:bc:4c:6f:bd:a2:63: e3:a1:2b:1c:13:cf:84:23:be:00:b1:4b:e2:97:86: a3:14:80:87:31:6c:d4:d2:ba:b0:97:ae:19:8e:bb: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:10:1B:9F:43:B0:26:FB:BB:69:DD:5C:48:12:5D:57:DC:1A:08:63 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31353a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:15::/48 Signature Algorithm: sha256WithRSAEncryption 83:9e:d7:06:47:60:cc:e8:67:ae:50:bb:30:62:e3:ec:55:e8: 71:ce:9a:2a:d0:73:97:83:37:75:61:82:d5:5f:0a:99:61:84: 1a:01:01:65:bf:96:31:67:be:76:58:03:60:1d:1a:9d:da:36: c9:53:0a:3c:51:af:11:cc:80:f6:0e:4a:65:60:18:ba:0c:d1: c3:62:54:f2:3d:80:e2:fe:93:d6:32:03:d2:5c:7e:59:bc:cd: bc:7e:b4:c5:08:65:20:bd:4e:a9:d0:03:3d:99:e0:d3:8e:43: 81:44:21:f5:2b:ba:d8:2f:d1:5f:74:1c:74:38:aa:7e:9b:95: 09:9e:b4:46:8b:05:0a:d2:43:3f:98:b0:7f:88:47:b4:b2:61: 9b:c6:d6:d3:75:83:d0:a8:17:a6:d4:d5:0f:fb:b0:89:4e:13: ce:62:3d:8b:2f:d3:d9:53:cd:a9:29:4b:0b:75:ea:34:f0:ff: 85:7e:7d:93:3d:1e:bd:82:d2:38:68:5e:db:5f:95:f0:be:1d: a0:08:88:ce:51:d0:f6:78:96:b8:57:6d:60:15:86:cb:01:23: 14:d9:d5:5e:62:8f:bc:10:65:2d:8d:9f:66:26:b4:08:71:d9: 14:5f:6c:bd:e2:05:c1:29:16:3a:36:77:2c:52:bc:e7:b8:aa: 52:d4:ea:06 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULp+FjNWuntBXY4XXFwzCI3AxEGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwNDU1MDFaFw0yNzAzMTEwNTAwMDFaMDMxMTAvBgNV BAMTKDA3MTAxQjlGNDNCMDI2RkJCQjY5REQ1QzQ4MTI1RDU3REMxQTA4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rweApaW67mjS9SGlZJNvXLv1 h8LlBLoIw+l+SnpBBnpE6H0nPkcm8Y2bTAOb5RtmNDvUdYd8sQIibU59ASLV3JYe FCpB0To2ae8W3oR8nyh96jOtDWS8noxY8p1jXQ7MI3/GsuHQcB018xcbbW2Nbnn/ KEgVEv3IQ76U2rhR2lOlsmWoGb47/YpoiBcIdT/+UPaaL2dU6QdsHTlEMTKgaviJ pv2LnAab+wgxt08kNEH5+bHGhVs5uJNyZ25HifUGx/H4j1V7DhawOowcAzw2HlTH 0jrJfDshtrxMb72iY+OhKxwTz4QjvgCxS+KXhqMUgIcxbNTSurCXrhmOuw31AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUBxAbn0OwJvu7ad1cSBJdV9waCGMwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA FTANBgkqhkiG9w0BAQsFAAOCAQEAg57XBkdgzOhnrlC7MGLj7FXocc6aKtBzl4M3 dWGC1V8KmWGEGgEBZb+WMWe+dlgDYB0ando2yVMKPFGvEcyA9g5KZWAYugzRw2JU 8j2A4v6T1jID0lx+WbzNvH60xQhlIL1OqdADPZng045DgUQh9Su62C/RX3QcdDiq fpuVCZ60RosFCtJDP5iwf4hHtLJhm8bW03WD0KgXptTVD/uwiU4TzmI9iy/T2VPN qSlLC3XqNPD/hX59kz0evYLSOGhe21+V8L4doAiIzlHQ9niWuFdtYBWGywEjFNnV XmKPvBBlLY2fZia0CHHZFF9sveIFwSkWOjZ3LFK857iqUtTqBg== -----END CERTIFICATE-----Generated at Fri Mar 27 05:24:24 2026 by rpki-client