$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: r1HTlIacGCX7WIy+ItKmdF1K+oqgLcL3a+HFYfLMrrg= Subject key identifier: ED:BF:68:68:5C:D6:F3:5E:73:E3:FC:CE:71:C2:F6:BF:66:80:61:9F Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 62F3AAAF538E2B6ACABF17E689D48B3227B0D289 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 06:00:01 +0000 ROA not before: Thu 12 Mar 2026 05:55:01 +0000 ROA not after: Thu 11 Mar 2027 06:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f3:aa:af:53:8e:2b:6a:ca:bf:17:e6:89:d4:8b:32:27:b0:d2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 05:55:01 2026 GMT Not After : Mar 11 06:00:01 2027 GMT Subject: CN=EDBF68685CD6F35E73E3FCCE71C2F6BF6680619F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:36:48:46:70:4d:cc:f7:52:f5:a5:b2:b9:7a: ae:05:f2:33:6c:a6:04:4f:08:9c:ac:9f:9a:70:63: f9:75:8b:f1:4f:e9:a2:34:65:b9:fe:05:dd:60:d7: 75:4b:78:4f:20:f0:51:6f:e3:1c:33:88:d7:27:f2: 75:8e:d1:5e:17:a2:5a:ae:50:cf:55:e2:a2:eb:b4: 5f:5e:76:b0:14:be:c3:d1:6a:91:83:0f:5e:a7:16: db:40:9e:0b:67:5a:7f:ef:4d:3e:5a:6d:16:08:d3: 5a:c5:03:16:7f:36:01:04:5b:a8:2a:9a:36:02:07: 3b:17:95:04:33:73:24:de:6a:ed:3e:0e:8a:4b:e8: 4f:1f:01:4c:87:bc:f2:d2:88:96:39:82:f2:be:9a: e9:3d:ba:96:fb:83:b9:3e:1e:66:69:27:72:a4:be: ef:ff:af:3c:c4:e3:71:7c:ab:6e:30:23:20:e9:73: 41:96:71:18:64:f1:a1:a5:26:46:67:76:90:5f:98: 23:91:1b:69:ee:02:c0:ec:5c:5d:2a:e5:0b:e5:02: b9:43:9b:41:80:2c:ce:35:2e:9d:43:6f:e1:69:80: e6:9d:e5:a9:6c:e9:44:b1:24:20:26:95:20:90:d8: 18:23:d5:7a:e9:f6:f1:c3:1b:53:f7:52:7d:2a:11: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BF:68:68:5C:D6:F3:5E:73:E3:FC:CE:71:C2:F6:BF:66:80:61:9F X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a333a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:3::/48 Signature Algorithm: sha256WithRSAEncryption 74:5d:e5:74:b9:48:c1:fc:d1:76:47:df:0b:72:68:6a:ef:2f: 7b:0d:f4:eb:a9:9a:00:1e:17:99:27:a7:fa:2f:7b:f6:2a:ee: be:e9:58:50:80:6b:32:7d:2f:fb:75:20:57:41:82:83:1e:d8: 71:23:9f:e1:91:72:8f:e2:46:fc:87:7f:b0:c2:7c:26:cb:f9: 17:56:f0:60:9b:52:4e:a1:a2:f3:e4:f4:f8:4d:ab:b2:d5:08: 91:f5:36:ed:ba:df:a5:33:c4:4b:1d:05:68:06:71:d8:60:61: c9:3f:a9:45:b3:07:de:ce:44:a5:be:cd:96:11:2d:29:e0:eb: 86:ae:7f:e8:71:18:66:4c:1e:69:08:ed:ba:42:e3:49:09:e1: 65:4b:8f:c3:9f:b0:fe:b8:9b:76:1f:d0:a8:c2:88:ad:5f:3b: 41:ab:7e:c7:04:f9:74:b3:a0:e1:4f:70:94:9b:1f:a0:ad:c8: 91:dc:2f:ee:44:8d:b6:cc:72:ca:98:ff:7c:77:3d:f0:d2:04: 67:24:0a:07:fb:45:52:80:50:11:7b:d6:0a:9d:37:6f:ed:88: f9:a8:69:6e:dc:10:40:96:bd:bd:a8:24:89:47:2f:a7:65:62: 25:68:7c:70:84:a3:f6:a6:b5:c4:dc:73:94:e0:43:f4:43:53: 89:89:aa:ca -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYvOqr1OOK2rKvxfmidSLMiew0okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwNTU1MDFaFw0yNzAzMTEwNjAwMDFaMDMxMTAvBgNV BAMTKEVEQkY2ODY4NUNENkYzNUU3M0UzRkNDRTcxQzJGNkJGNjY4MDYxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyNkhGcE3M91L1pbK5eq4F8jNs pgRPCJysn5pwY/l1i/FP6aI0Zbn+Bd1g13VLeE8g8FFv4xwziNcn8nWO0V4Xolqu UM9V4qLrtF9edrAUvsPRapGDD16nFttAngtnWn/vTT5abRYI01rFAxZ/NgEEW6gq mjYCBzsXlQQzcyTeau0+DopL6E8fAUyHvPLSiJY5gvK+muk9upb7g7k+HmZpJ3Kk vu//rzzE43F8q24wIyDpc0GWcRhk8aGlJkZndpBfmCORG2nuAsDsXF0q5QvlArlD m0GALM41Lp1Db+FpgOad5als6USxJCAmlSCQ2Bgj1Xrp9vHDG1P3Un0qEQcBAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU7b9oaFzW815z4/zOccL2v2aAYZ8wHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAMw DQYJKoZIhvcNAQELBQADggEBAHRd5XS5SMH80XZH3wtyaGrvL3sN9OupmgAeF5kn p/ove/Yq7r7pWFCAazJ9L/t1IFdBgoMe2HEjn+GRco/iRvyHf7DCfCbL+RdW8GCb Uk6hovPk9PhNq7LVCJH1Nu2636UzxEsdBWgGcdhgYck/qUWzB97ORKW+zZYRLSng 64auf+hxGGZMHmkI7bpC40kJ4WVLj8OfsP64m3Yf0KjCiK1fO0GrfscE+XSzoOFP cJSbH6CtyJHcL+5EjbbMcsqY/3x3PfDSBGckCgf7RVKAUBF71gqdN2/tiPmoaW7c EECWvb2oJIlHL6dlYiVofHCEo/amtcTcc5TgQ/RDU4mJqso= -----END CERTIFICATE-----Generated at Fri Mar 27 00:47:41 2026 by rpki-client