$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: DyblRdAcneayqUYUzLQrusdo79df7lrk/CG5/9G503c= Subject key identifier: 88:FF:DB:A7:46:DD:FC:CA:82:1A:7C:68:D9:81:B6:98:87:33:C7:00 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 674CAED48076DFD86CAE5423BEF4DDD4B5CCDAB2 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 04:00:00 +0000 ROA not before: Thu 12 Mar 2026 03:55:00 +0000 ROA not after: Thu 11 Mar 2027 04:00:00 +0000 asID: 137330 IP address blocks: 2402:aa40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4c:ae:d4:80:76:df:d8:6c:ae:54:23:be:f4:dd:d4:b5:cc:da:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 03:55:00 2026 GMT Not After : Mar 11 04:00:00 2027 GMT Subject: CN=88FFDBA746DDFCCA821A7C68D981B6988733C700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:db:af:66:33:23:7c:3d:84:9d:fa:15:aa: 9f:02:e3:45:8d:d1:4c:5c:43:4e:5b:0f:06:44:9b: af:8f:0d:d8:f4:17:e1:6a:54:cc:12:01:d6:98:93: b5:94:3c:0b:29:6c:ed:01:a2:82:06:ca:17:b6:6a: 80:3d:05:bb:a6:32:52:d2:a6:9f:e7:d3:93:1d:e9: ca:c2:d7:9f:30:a1:24:21:43:37:55:e8:9b:89:49: b1:96:31:d7:2a:6b:95:08:0f:ed:b5:05:82:8a:b6: 0f:81:bd:1e:0e:63:7d:7b:3f:28:86:77:ba:ee:48: 8d:a9:73:3b:64:10:50:4e:0d:6b:08:ae:00:fb:d7: a5:38:35:12:4d:fe:36:83:57:2f:de:52:2f:0b:cb: 46:a1:26:c4:21:1f:55:58:f4:75:67:c6:a6:1b:b4: c1:9f:7c:e9:86:5d:8b:06:bb:ba:07:78:b8:a3:5f: d9:0e:5e:25:60:d4:8c:0b:d8:d3:3d:c0:de:68:d9: 9b:af:ee:0a:ca:17:19:6b:71:fd:b9:52:0f:73:a4: 31:10:80:d4:72:cc:e6:dc:fa:af:08:3f:c8:b8:67: 82:2d:3c:fa:83:ae:26:16:9f:f7:04:b1:6f:24:4c: 9a:65:e9:6d:6f:15:d0:44:1b:1e:1f:78:3d:b7:a0: f3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FF:DB:A7:46:DD:FC:CA:82:1A:7C:68:D9:81:B6:98:87:33:C7:00 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a313a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:1::/48 Signature Algorithm: sha256WithRSAEncryption 8b:e6:3b:1a:73:06:c8:e7:8a:0c:33:8e:b1:80:e2:9c:b9:cf: 66:73:3e:fc:54:e7:2a:5d:c7:b0:c1:69:95:dc:d3:7e:53:6b: ea:60:31:60:00:b4:44:be:bf:10:4f:28:92:15:bb:d9:5e:3a: fd:30:38:fd:54:75:e6:56:2d:57:1e:5c:d8:8f:26:7c:37:73: 57:9d:01:06:a1:3b:8f:b1:98:70:a8:44:b9:a5:8d:f8:1a:30: 95:fe:60:e5:43:e5:5b:8b:8b:3e:97:69:9a:fb:5f:ee:e1:4e: f0:bb:72:18:39:0e:38:28:79:f6:a4:d9:b4:58:4c:5b:54:4d: 31:87:b0:32:98:5b:87:86:eb:80:c8:0c:25:2e:b8:3d:91:ad: e1:ef:12:35:62:c6:6f:ed:69:28:11:9c:09:11:ee:13:5f:86: 0f:25:41:0e:40:12:a3:5d:a6:3a:7b:96:ce:91:31:17:0a:03: c9:e6:c1:44:e0:1c:bd:92:c3:6e:ff:10:b5:92:24:40:72:fe: 99:32:2c:60:46:2f:f7:09:97:55:cb:1b:29:47:53:1c:cf:5a: b4:49:a2:c6:ee:16:6c:08:dc:aa:b8:d1:03:03:65:81:b2:d3: 20:26:5e:4e:4f:6f:fe:93:35:6f:ad:53:f2:8b:4f:1f:d7:5c: df:a6:27:d8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUZ0yu1IB239hsrlQjvvTd1LXM2rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwMzU1MDBaFw0yNzAzMTEwNDAwMDBaMDMxMTAvBgNV BAMTKDg4RkZEQkE3NDZEREZDQ0E4MjFBN0M2OEQ5ODFCNjk4ODczM0M3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GduvZjMjfD2EnfoVqp8C40WN 0UxcQ05bDwZEm6+PDdj0F+FqVMwSAdaYk7WUPAspbO0BooIGyhe2aoA9BbumMlLS pp/n05Md6crC158woSQhQzdV6JuJSbGWMdcqa5UID+21BYKKtg+BvR4OY317PyiG d7ruSI2pcztkEFBODWsIrgD716U4NRJN/jaDVy/eUi8Ly0ahJsQhH1VY9HVnxqYb tMGffOmGXYsGu7oHeLijX9kOXiVg1IwL2NM9wN5o2Zuv7grKFxlrcf25Ug9zpDEQ gNRyzObc+q8IP8i4Z4ItPPqDriYWn/cEsW8kTJpl6W1vFdBEGx4feD23oPN/AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUiP/bp0bd/MqCGnxo2YG2mIczxwAwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAEw DQYJKoZIhvcNAQELBQADggEBAIvmOxpzBsjnigwzjrGA4py5z2ZzPvxU5ypdx7DB aZXc035Ta+pgMWAAtES+vxBPKJIVu9leOv0wOP1UdeZWLVceXNiPJnw3c1edAQah O4+xmHCoRLmljfgaMJX+YOVD5VuLiz6XaZr7X+7hTvC7chg5Djgoefak2bRYTFtU TTGHsDKYW4eG64DIDCUuuD2RreHvEjVixm/taSgRnAkR7hNfhg8lQQ5AEqNdpjp7 ls6RMRcKA8nmwUTgHL2Sw27/ELWSJEBy/pkyLGBGL/cJl1XLGylHUxzPWrRJosbu FmwI3Kq40QMDZYGy0yAmXk5Pb/6TNW+tU/KLTx/XXN+mJ9g= -----END CERTIFICATE-----Generated at Fri Mar 27 02:08:11 2026 by rpki-client