$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a32303a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a32303a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: eTm7SRPStPMMue15D604/zbIpBPlfqR8Q8XY+kXO8k8= Subject key identifier: 43:15:EC:CE:9B:52:8A:B8:16:8E:AA:7E:FF:97:17:AE:33:23:D2:D7 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 2E4D9F273D5DFEA3D7868982A0398EAEED7F37FA Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a32303a3a2f34382d3438203d3e20313337333330.roa Signing time: Fri 13 Mar 2026 00:13:28 +0000 ROA not before: Fri 13 Mar 2026 00:08:28 +0000 ROA not after: Fri 12 Mar 2027 00:13:28 +0000 asID: 137330 IP address blocks: 2402:aa40:20::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4d:9f:27:3d:5d:fe:a3:d7:86:89:82:a0:39:8e:ae:ed:7f:37:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 13 00:08:28 2026 GMT Not After : Mar 12 00:13:28 2027 GMT Subject: CN=4315ECCE9B528AB8168EAA7EFF9717AE3323D2D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:3c:4e:bb:3b:6d:f0:bb:b4:10:96:46:a9: 76:af:72:8b:17:a9:0d:1b:50:a8:73:9a:4b:4c:22: dd:8c:ab:9b:49:6b:89:1b:4f:34:e3:9b:ce:b7:73: d7:7c:d6:e4:d3:ba:66:4c:0f:a4:ae:b2:d1:f9:6e: 87:10:11:a6:98:fb:c3:15:0a:bf:34:da:a8:3d:74: 16:29:c8:dd:52:23:59:0d:fb:84:ec:e7:ed:93:e7: 57:37:6e:5f:61:6a:f4:74:d2:9d:d8:70:89:3d:4d: 2f:ed:c7:72:56:da:95:10:cd:12:ce:cc:0a:c9:c1: 74:b8:4d:fa:25:99:b9:5d:a9:57:6e:a0:74:b4:41: 52:6b:d1:2e:24:1a:d8:0d:49:f5:af:e1:d0:b6:a5: 8d:74:c6:eb:f9:d1:f0:2f:c1:14:e3:b7:44:72:96: cb:ed:12:69:0c:80:71:3c:ad:e1:b4:d6:93:9d:d7: 56:b8:c0:85:0f:b4:35:cb:58:4f:d3:01:18:6d:9c: 0a:c3:7e:0d:fc:c2:eb:aa:b1:9a:a4:bd:43:ac:47: bc:2e:cf:ba:40:7e:ef:12:f9:a8:7c:44:96:30:32: e8:62:80:c5:49:48:4d:a8:1d:66:a4:7b:d3:7a:03: 24:da:72:61:eb:1c:4e:ff:07:d9:78:a9:59:2d:b9: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:15:EC:CE:9B:52:8A:B8:16:8E:AA:7E:FF:97:17:AE:33:23:D2:D7 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a32303a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:20::/48 Signature Algorithm: sha256WithRSAEncryption 70:10:14:9d:4d:82:c3:47:d6:ca:98:65:fa:e0:f1:3e:b1:62: 37:80:50:1c:ea:09:d6:61:93:aa:19:cd:b2:d0:e6:ed:b3:3f: a3:1a:2a:be:88:a0:0c:7d:f4:aa:ef:6a:63:5c:e3:4f:34:11: 59:69:e9:e3:13:35:b7:16:b7:b4:d1:51:74:ef:d6:00:8a:84: fa:4e:88:0b:b8:46:8c:40:59:77:17:ae:ba:e0:00:cb:4f:00: b8:63:03:d8:96:e4:07:09:f3:32:bf:41:6b:bc:71:04:71:3f: 9e:47:c9:aa:6c:a3:07:de:42:20:f6:1d:59:87:8e:18:0f:77: 1b:64:4a:9a:94:7c:7d:b4:2c:44:b1:a2:82:53:be:aa:1e:68: 3c:ae:87:b0:da:33:81:7a:84:51:04:c3:07:de:d1:2c:83:1f: dc:c5:5c:82:32:9c:cf:9c:9b:5d:3b:91:6e:d6:0b:84:78:70: 4d:e4:04:f9:be:25:0b:a3:70:80:74:c2:7e:34:7a:24:29:c3: e8:6a:f0:79:c5:19:d5:fd:56:6f:c3:e8:33:61:b5:3f:ba:62: ef:45:6a:53:79:33:79:29:7f:8c:40:c3:be:3b:51:07:9c:85: 52:bb:3d:75:29:de:25:d4:55:a7:d1:46:eb:70:28:be:4f:47: d5:a4:f3:e8 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULk2fJz1d/qPXhomCoDmOru1/N/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTMwMDA4MjhaFw0yNzAzMTIwMDEzMjhaMDMxMTAvBgNV BAMTKDQzMTVFQ0NFOUI1MjhBQjgxNjhFQUE3RUZGOTcxN0FFMzMyM0QyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJjxOuztt8Lu0EJZGqXavcosX qQ0bUKhzmktMIt2Mq5tJa4kbTzTjm863c9d81uTTumZMD6SustH5bocQEaaY+8MV Cr802qg9dBYpyN1SI1kN+4Ts5+2T51c3bl9havR00p3YcIk9TS/tx3JW2pUQzRLO zArJwXS4TfolmbldqVduoHS0QVJr0S4kGtgNSfWv4dC2pY10xuv50fAvwRTjt0Ry lsvtEmkMgHE8reG01pOd11a4wIUPtDXLWE/TARhtnArDfg38wuuqsZqkvUOsR7wu z7pAfu8S+ah8RJYwMuhigMVJSE2oHWake9N6AyTacmHrHE7/B9l4qVktuWVNAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUQxXszptSirgWjqp+/5cXrjMj0tcwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzIzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA IDANBgkqhkiG9w0BAQsFAAOCAQEAcBAUnU2Cw0fWyphl+uDxPrFiN4BQHOoJ1mGT qhnNstDm7bM/oxoqvoigDH30qu9qY1zjTzQRWWnp4xM1txa3tNFRdO/WAIqE+k6I C7hGjEBZdxeuuuAAy08AuGMD2JbkBwnzMr9Ba7xxBHE/nkfJqmyjB95CIPYdWYeO GA93G2RKmpR8fbQsRLGiglO+qh5oPK6HsNozgXqEUQTDB97RLIMf3MVcgjKcz5yb XTuRbtYLhHhwTeQE+b4lC6NwgHTCfjR6JCnD6GrwecUZ1f1Wb8PoM2G1P7pi70Vq U3kzeSl/jEDDvjtRB5yFUrs9dSneJdRVp9FG63Aovk9H1aTz6A== -----END CERTIFICATE-----Generated at Thu Mar 26 19:42:44 2026 by rpki-client