$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31363a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31363a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: RUrWhmreQUQp1NjZrcuDlG3qiB+RCRdIC30Io87l1mw= Subject key identifier: D6:9C:D3:A0:D6:FC:68:C1:86:02:AC:B8:59:59:AE:70:55:76:5E:2F Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 5DB7F423E9350486CBC6840F166E7019837C1B61 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31363a3a2f34382d3438203d3e20313337333330.roa Signing time: Fri 13 Mar 2026 00:11:56 +0000 ROA not before: Fri 13 Mar 2026 00:06:56 +0000 ROA not after: Fri 12 Mar 2027 00:11:56 +0000 asID: 137330 IP address blocks: 2402:aa40:16::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b7:f4:23:e9:35:04:86:cb:c6:84:0f:16:6e:70:19:83:7c:1b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 13 00:06:56 2026 GMT Not After : Mar 12 00:11:56 2027 GMT Subject: CN=D69CD3A0D6FC68C18602ACB85959AE7055765E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:f1:5e:e1:f2:03:d6:cd:b4:15:82:50:25: 8f:18:e4:3e:36:d1:19:49:ea:40:49:39:d1:61:9f: 4d:79:2c:65:1b:cc:7e:0a:52:2a:11:0b:6b:22:bc: c7:41:b6:da:9c:ff:6b:00:7b:9f:dd:4f:99:19:ac: 35:55:ca:52:3e:8e:91:a0:03:67:93:d7:c1:38:f7: d5:a0:98:7f:cc:de:7b:1b:f2:d9:67:2c:72:1e:12: 6c:f5:22:71:8f:ca:3e:cf:cf:11:c1:d8:68:d2:c7: ce:4f:47:2d:12:8f:e0:5d:7f:50:1c:d9:40:cc:c9: 79:19:9c:21:ee:50:c3:6e:87:07:1e:58:a8:3d:ad: 88:cf:bf:dd:39:d7:71:7a:a6:a8:0a:7c:7c:07:e5: 0e:24:b8:a6:fd:d4:fb:00:60:4f:43:a6:5c:fe:c0: 20:34:23:cf:db:18:db:e7:f2:d3:26:dc:82:e9:a0: 89:ef:b7:e6:75:4d:31:5c:dc:5f:25:6d:a0:f3:da: cf:56:cc:da:9a:e3:e2:a5:4d:b8:b5:a3:ae:12:1c: 4f:61:0a:3f:93:48:b6:ad:6a:84:81:c8:b9:7b:af: 57:0e:c5:c8:d2:1c:96:7a:92:96:ed:33:65:56:a0: 0e:f7:ea:9c:60:b4:4b:7d:d9:09:c0:15:ba:fd:2b: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9C:D3:A0:D6:FC:68:C1:86:02:AC:B8:59:59:AE:70:55:76:5E:2F X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31363a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:16::/48 Signature Algorithm: sha256WithRSAEncryption 44:6c:cb:bf:e6:cc:64:b1:fd:94:df:22:ea:90:8c:4c:f3:51: a2:c5:1f:55:0f:99:20:01:af:83:fd:db:7f:05:7a:ff:43:48: 79:20:86:14:7d:ca:15:db:f3:ea:65:40:dd:99:93:77:eb:98: 8c:fa:79:e8:f7:b0:53:72:ab:a4:93:91:f6:6c:f3:8a:25:69: fc:db:5e:b1:67:eb:59:07:2b:31:aa:bf:11:55:c3:22:f8:79: d8:2d:55:5a:52:f8:e8:3f:6f:0c:3d:2f:37:12:a2:d2:44:18: d3:fa:6a:64:a3:dd:d7:94:e8:94:e0:77:b3:7d:3c:43:9c:71: 22:ef:17:e6:07:bf:c0:e7:6b:3e:f7:de:67:4c:52:14:49:b3: 25:23:7f:17:ff:71:2a:d9:9a:ff:e8:0d:1e:4d:a6:5a:3b:38: 20:55:a0:f2:3b:be:f7:08:ce:bc:a3:25:c4:10:dc:ad:3c:09: d2:07:b7:df:1b:ba:4b:e4:c7:fb:8e:8f:dc:9b:d6:3c:62:43: c3:b5:d1:b2:f0:84:08:b9:83:45:c7:b9:1d:dc:2c:0f:f1:83: ef:ef:b5:10:9f:92:13:06:f0:d2:9c:ff:d9:5b:57:d5:ae:33: 65:dc:79:e5:75:d4:f5:65:70:45:64:f3:15:1c:53:e5:41:80: 6e:1c:13:f0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUXbf0I+k1BIbLxoQPFm5wGYN8G2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTMwMDA2NTZaFw0yNzAzMTIwMDExNTZaMDMxMTAvBgNV BAMTKEQ2OUNEM0EwRDZGQzY4QzE4NjAyQUNCODU5NTlBRTcwNTU3NjVFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4/Fe4fID1s20FYJQJY8Y5D42 0RlJ6kBJOdFhn015LGUbzH4KUioRC2sivMdBttqc/2sAe5/dT5kZrDVVylI+jpGg A2eT18E499WgmH/M3nsb8tlnLHIeEmz1InGPyj7PzxHB2GjSx85PRy0Sj+Bdf1Ac 2UDMyXkZnCHuUMNuhwceWKg9rYjPv90513F6pqgKfHwH5Q4kuKb91PsAYE9Dplz+ wCA0I8/bGNvn8tMm3ILpoInvt+Z1TTFc3F8lbaDz2s9WzNqa4+KlTbi1o64SHE9h Cj+TSLataoSByLl7r1cOxcjSHJZ6kpbtM2VWoA736pxgtEt92QnAFbr9K2G7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU1pzToNb8aMGGAqy4WVmucFV2Xi8wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA FjANBgkqhkiG9w0BAQsFAAOCAQEARGzLv+bMZLH9lN8i6pCMTPNRosUfVQ+ZIAGv g/3bfwV6/0NIeSCGFH3KFdvz6mVA3ZmTd+uYjPp56PewU3KrpJOR9mzziiVp/Nte sWfrWQcrMaq/EVXDIvh52C1VWlL46D9vDD0vNxKi0kQY0/pqZKPd15TolOB3s308 Q5xxIu8X5ge/wOdrPvfeZ0xSFEmzJSN/F/9xKtma/+gNHk2mWjs4IFWg8ju+9wjO vKMlxBDcrTwJ0ge33xu6S+TH+46P3JvWPGJDw7XRsvCECLmDRce5HdwsD/GD7++1 EJ+SEwbw0pz/2VtX1a4zZdx55XXU9WVwRWTzFRxT5UGAbhwT8A== -----END CERTIFICATE-----Generated at Thu Mar 26 20:34:12 2026 by rpki-client