$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: wQY9oUK0n/ZiM1qUELQ9nUUAjEFwQkM8wAkVoOkHjLI= Subject key identifier: 4A:D3:73:D1:EE:E2:88:00:B4:D9:29:72:2A:3E:68:63:01:9B:2C:D6 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 043B28CC10CE76EED87B62BBAF00B7AE08031A04 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 06:00:01 +0000 ROA not before: Thu 12 Mar 2026 05:55:01 +0000 ROA not after: Thu 11 Mar 2027 06:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3b:28:cc:10:ce:76:ee:d8:7b:62:bb:af:00:b7:ae:08:03:1a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 05:55:01 2026 GMT Not After : Mar 11 06:00:01 2027 GMT Subject: CN=4AD373D1EEE28800B4D929722A3E6863019B2CD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:0f:cd:67:b5:be:32:8b:ab:4a:36:1e:76: b1:f6:e7:f2:c9:ae:1d:2b:f3:ab:52:ef:35:79:18: 94:49:61:3b:90:cf:3e:6e:40:da:81:15:9f:fb:7c: 2f:d5:95:d8:cf:d2:55:93:d0:87:97:0c:7a:89:3a: d0:ab:70:53:3f:40:28:c8:e7:fb:69:dc:5b:f4:9e: 7e:24:5b:24:2e:76:5d:08:2d:76:d0:e5:fd:86:86: 6c:dc:c5:b3:d5:c0:67:6d:93:6b:a3:84:14:20:6f: 32:7b:1a:e2:74:9b:aa:9a:5e:7f:41:f5:9a:6c:b0: ee:2d:3d:00:cd:27:03:ad:4b:c4:b4:96:8a:21:24: 56:d4:4d:2a:01:3a:2f:25:83:37:c6:d2:76:8b:30: ac:42:d5:b4:75:96:5e:a4:c1:3c:55:31:6a:30:33: c1:4b:0d:94:f0:47:23:7d:39:10:3a:a5:8b:73:e7: fd:b8:ff:34:90:10:3e:9b:ea:96:49:ac:70:03:1b: 22:07:96:ec:8a:40:79:c2:c3:03:c7:dd:28:7d:15: b6:06:2a:f2:59:14:5c:c4:dc:a9:3e:a3:ef:f1:a2: 07:60:c6:c0:84:2c:2a:99:78:f6:38:fe:70:a8:72: d0:60:31:af:d0:b7:ad:24:b7:63:99:f1:73:32:a0: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D3:73:D1:EE:E2:88:00:B4:D9:29:72:2A:3E:68:63:01:9B:2C:D6 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a323a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:2::/48 Signature Algorithm: sha256WithRSAEncryption 7d:d4:0f:93:07:13:ce:77:53:5e:b6:62:d2:0a:9b:63:ce:f2: 28:ff:3e:38:81:22:2c:54:ff:03:b9:24:96:93:0a:4d:ef:f6: 08:b0:d0:18:c2:fd:5b:38:12:9e:d3:4d:7a:51:ae:ae:8a:41: 55:76:c2:67:56:ab:55:e3:6a:94:6f:d9:9d:da:fc:47:15:93: c3:87:b6:4f:50:80:ef:29:4b:14:2e:ba:7a:92:fb:c6:66:da: 9a:95:1d:96:0a:98:a1:98:2a:a9:fd:fa:fc:97:0c:15:b7:14: af:3e:b4:7a:8a:26:12:99:78:c3:9f:f1:fb:f5:96:43:0e:d8: e2:06:34:cb:69:6f:2a:91:20:32:3f:27:f4:58:e1:c9:bf:05: 6c:88:3a:8c:d1:df:f3:e2:9a:2d:f5:cf:ad:b7:46:b6:f0:38: d6:c4:43:0c:2b:ad:59:79:7a:ff:76:7e:70:ea:50:90:78:b7: f4:34:17:ee:74:b4:7e:f4:f8:00:b9:bd:a6:49:4c:c4:45:12: f4:26:aa:c6:2d:ea:fd:8f:43:9e:80:89:27:bd:9f:2d:ff:5f: 83:2b:04:1e:8a:f5:d8:e4:a0:ae:a8:7b:65:ef:98:9d:5f:b5: fc:19:73:a4:d2:a8:ed:18:58:78:58:d3:76:b4:fe:ad:3f:57: 28:13:e7:3d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBDsozBDOdu7Ye2K7rwC3rggDGgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwNTU1MDFaFw0yNzAzMTEwNjAwMDFaMDMxMTAvBgNV BAMTKDRBRDM3M0QxRUVFMjg4MDBCNEQ5Mjk3MjJBM0U2ODYzMDE5QjJDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/A/NZ7W+MourSjYedrH25/LJ rh0r86tS7zV5GJRJYTuQzz5uQNqBFZ/7fC/VldjP0lWT0IeXDHqJOtCrcFM/QCjI 5/tp3Fv0nn4kWyQudl0ILXbQ5f2GhmzcxbPVwGdtk2ujhBQgbzJ7GuJ0m6qaXn9B 9ZpssO4tPQDNJwOtS8S0loohJFbUTSoBOi8lgzfG0naLMKxC1bR1ll6kwTxVMWow M8FLDZTwRyN9ORA6pYtz5/24/zSQED6b6pZJrHADGyIHluyKQHnCwwPH3Sh9FbYG KvJZFFzE3Kk+o+/xogdgxsCELCqZePY4/nCoctBgMa/Qt60kt2OZ8XMyoDxdAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUStNz0e7iiAC02SlyKj5oYwGbLNYwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAIw DQYJKoZIhvcNAQELBQADggEBAH3UD5MHE853U162YtIKm2PO8ij/PjiBIixU/wO5 JJaTCk3v9giw0BjC/Vs4Ep7TTXpRrq6KQVV2wmdWq1XjapRv2Z3a/EcVk8OHtk9Q gO8pSxQuunqS+8Zm2pqVHZYKmKGYKqn9+vyXDBW3FK8+tHqKJhKZeMOf8fv1lkMO 2OIGNMtpbyqRIDI/J/RY4cm/BWyIOozR3/Pimi31z623RrbwONbEQwwrrVl5ev92 fnDqUJB4t/Q0F+50tH70+AC5vaZJTMRFEvQmqsYt6v2PQ56AiSe9ny3/X4MrBB6K 9djkoK6oe2XvmJ1ftfwZc6TSqO0YWHhY03a0/q0/VygT5z0= -----END CERTIFICATE-----Generated at Fri Mar 27 04:42:48 2026 by rpki-client