$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31393a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31393a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: hdgIawWouah0ekpAe8UrvrGoDu4aXWNxqYNJE/bdGyY= Subject key identifier: 3F:70:12:BE:9C:CE:1C:C6:91:3F:ED:8D:D1:ED:CD:65:72:5A:5C:15 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 22235E1CBA9E8870711E15097F58E559DE88E6F0 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31393a3a2f34382d3438203d3e20313337333330.roa Signing time: Fri 13 Mar 2026 00:13:02 +0000 ROA not before: Fri 13 Mar 2026 00:08:02 +0000 ROA not after: Fri 12 Mar 2027 00:13:02 +0000 asID: 137330 IP address blocks: 2402:aa40:19::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:23:5e:1c:ba:9e:88:70:71:1e:15:09:7f:58:e5:59:de:88:e6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 13 00:08:02 2026 GMT Not After : Mar 12 00:13:02 2027 GMT Subject: CN=3F7012BE9CCE1CC6913FED8DD1EDCD65725A5C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:18:7f:cd:ce:0b:54:d9:c0:a2:f1:7f:90:3e: 84:e0:62:72:5c:0d:09:4e:4b:97:d9:17:33:61:e6: 72:f0:88:3f:f7:53:84:36:f3:9a:5d:52:41:a0:e2: fa:ab:5e:1b:ef:b3:db:1d:d1:c0:95:e9:28:8d:01: a3:d0:e3:34:d6:3e:23:09:4b:13:09:95:3b:a7:62: 24:38:9d:ce:1d:32:cb:b5:a2:3b:d4:28:03:f5:36: f5:97:d7:13:f4:d1:a1:99:dc:c9:10:9c:0a:cc:7c: 03:b2:69:c0:90:7d:d5:9e:1a:e3:78:fe:54:73:2f: bd:0c:5f:3b:f2:0b:fb:c8:64:57:64:a0:ce:58:be: a6:86:a8:7a:b3:64:0e:19:19:cf:42:b0:55:26:7c: ea:14:b2:23:10:6d:db:de:04:57:b3:b7:b5:66:5e: 3b:24:00:22:49:d8:40:2a:6d:e2:f2:37:8e:56:84: 35:b7:11:d9:97:03:be:58:fe:68:f7:4a:00:ff:f4: c7:2a:86:99:77:e7:80:eb:01:ef:83:cc:b0:f4:5e: 2a:37:47:5e:93:9e:bf:eb:15:14:88:29:cb:60:8c: bf:b4:c1:52:33:33:6a:82:37:7d:b3:31:8b:36:8f: 9d:ea:3d:c2:25:a0:95:9a:6a:d0:83:8e:16:9b:7f: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:70:12:BE:9C:CE:1C:C6:91:3F:ED:8D:D1:ED:CD:65:72:5A:5C:15 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31393a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:19::/48 Signature Algorithm: sha256WithRSAEncryption 10:b2:05:f9:ff:05:7a:19:60:2b:1c:99:06:a6:74:41:3e:8d: b4:f1:6e:3a:77:d2:65:f6:61:d2:d6:d9:20:c3:b8:26:5b:71: 88:cf:8c:30:43:ea:05:07:90:35:9c:8b:cf:2a:6e:95:f1:b4: 7b:50:33:cb:ec:28:78:d9:34:06:54:26:f8:6f:15:52:59:a1: 69:31:ae:af:c8:0c:0b:f7:ca:44:39:65:e8:d6:96:00:85:a7: b1:8a:16:f3:df:45:18:f9:21:10:af:71:9e:63:12:d8:08:cf: d9:55:26:f8:f7:00:cf:15:46:04:e7:20:a2:27:ba:04:a1:86: df:a4:e5:67:a3:4e:32:10:e4:2e:c1:0b:78:31:79:29:3e:3a: 0b:66:53:f2:72:9d:5d:86:9f:12:8c:ab:2e:f7:27:64:9d:bf: 36:b9:37:14:22:10:cd:d1:1b:89:bb:c6:11:b7:39:c5:c0:bc: 66:c9:a2:f5:68:8a:77:77:48:46:11:d0:c1:06:c8:f6:6e:d2: d3:72:38:25:ae:a8:76:13:e9:b2:ef:84:a1:9f:f3:fb:ff:47: 9c:c6:13:3c:d2:8c:c4:d4:bc:ee:f7:2d:b2:4c:c5:6a:49:55: 8d:cc:15:b5:ad:df:c6:76:bf:70:80:49:c2:f5:47:38:e6:4a: a6:36:32:78 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUIiNeHLqeiHBxHhUJf1jlWd6I5vAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTMwMDA4MDJaFw0yNzAzMTIwMDEzMDJaMDMxMTAvBgNV BAMTKDNGNzAxMkJFOUNDRTFDQzY5MTNGRUQ4REQxRURDRDY1NzI1QTVDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdGH/NzgtU2cCi8X+QPoTgYnJc DQlOS5fZFzNh5nLwiD/3U4Q285pdUkGg4vqrXhvvs9sd0cCV6SiNAaPQ4zTWPiMJ SxMJlTunYiQ4nc4dMsu1ojvUKAP1NvWX1xP00aGZ3MkQnArMfAOyacCQfdWeGuN4 /lRzL70MXzvyC/vIZFdkoM5YvqaGqHqzZA4ZGc9CsFUmfOoUsiMQbdveBFezt7Vm XjskACJJ2EAqbeLyN45WhDW3EdmXA75Y/mj3SgD/9Mcqhpl354DrAe+DzLD0Xio3 R16Tnr/rFRSIKctgjL+0wVIzM2qCN32zMYs2j53qPcIloJWaatCDjhabf3S9AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUP3ASvpzOHMaRP+2N0e3NZXJaXBUwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA GTANBgkqhkiG9w0BAQsFAAOCAQEAELIF+f8FehlgKxyZBqZ0QT6NtPFuOnfSZfZh 0tbZIMO4JltxiM+MMEPqBQeQNZyLzypulfG0e1Azy+woeNk0BlQm+G8VUlmhaTGu r8gMC/fKRDll6NaWAIWnsYoW899FGPkhEK9xnmMS2AjP2VUm+PcAzxVGBOcgoie6 BKGG36TlZ6NOMhDkLsELeDF5KT46C2ZT8nKdXYafEoyrLvcnZJ2/Nrk3FCIQzdEb ibvGEbc5xcC8Zsmi9WiKd3dIRhHQwQbI9m7S03I4Ja6odhPpsu+EoZ/z+/9HnMYT PNKMxNS87vctskzFaklVjcwVta3fxna/cIBJwvVHOOZKpjYyeA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:34:12 2026 by rpki-client