$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: s80i2JnZJo0U9U25elvxTxh6QkHnCZRBkPx/ALx9H8Q= Subject key identifier: DD:C2:A8:96:8D:89:CE:0E:32:3B:12:E6:37:49:66:44:69:AE:51:C3 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 7927E92C89396459D501C9603739D92FD5B21644 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 06:00:00 +0000 ROA not before: Thu 12 Mar 2026 05:55:00 +0000 ROA not after: Thu 11 Mar 2027 06:00:00 +0000 asID: 137330 IP address blocks: 2402:aa40:4::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:27:e9:2c:89:39:64:59:d5:01:c9:60:37:39:d9:2f:d5:b2:16:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 05:55:00 2026 GMT Not After : Mar 11 06:00:00 2027 GMT Subject: CN=DDC2A8968D89CE0E323B12E63749664469AE51C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:d1:ec:d3:06:ad:05:58:a6:de:a0:15:f7: 09:22:a5:3b:a0:1d:f0:65:ff:2c:ef:42:b8:b8:cd: 37:b8:75:8a:70:48:83:78:32:2f:fe:b5:08:b7:8e: 2e:9d:66:7c:6c:55:e6:8a:0b:5f:89:3f:ed:e6:b2: 95:b5:6a:3b:12:e6:c8:c8:53:8d:84:d3:d9:2f:28: e5:f4:5a:1b:22:2d:a4:e1:5a:19:3b:9e:15:f3:d7: d5:25:79:c5:9d:74:63:a9:5b:58:27:f2:04:7e:a4: fc:98:83:0c:1f:0f:45:3d:18:55:72:9e:fa:67:dc: 9a:48:75:70:21:be:00:ff:de:c0:87:f9:45:6e:f8: 67:b9:52:17:70:11:5f:08:1f:81:01:29:72:d1:57: 7e:b7:16:69:c8:2e:13:79:44:5c:23:fb:ee:5e:c1: b5:5f:8d:c8:cb:fc:a9:06:18:46:73:1f:d8:f3:c7: 73:c2:0a:ab:aa:f6:ff:21:10:89:cd:37:c0:ec:63: d4:23:be:7e:5d:bc:16:c3:f7:05:d7:b9:26:d4:f4: 27:5e:6e:b3:8a:e5:51:c4:b4:26:ea:4f:9e:3b:2e: 2f:19:09:be:8a:0a:7e:e3:be:89:bd:c0:58:ea:7a: a5:9b:7c:1f:99:b3:df:ad:a9:9f:49:3e:bd:3c:58: bd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C2:A8:96:8D:89:CE:0E:32:3B:12:E6:37:49:66:44:69:AE:51:C3 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a343a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:4::/48 Signature Algorithm: sha256WithRSAEncryption 0c:c5:b0:46:30:91:1a:08:70:70:3c:cc:dc:dc:26:20:32:ff: 4a:13:49:54:d7:14:5d:cc:84:db:56:8b:4e:9c:7a:26:4e:9f: a0:1d:dc:dd:0e:70:54:58:63:10:c4:eb:0b:18:97:95:85:e7: 01:df:b0:6f:23:40:44:de:ab:7f:c7:f3:6a:c1:86:a7:b4:b7: a5:be:e7:02:87:ed:94:4f:3a:92:57:5e:a5:12:7e:72:4f:bd: 8c:4a:12:bf:26:29:cd:f4:5f:c8:6f:bc:41:66:c6:ef:8a:73: 22:b6:94:24:70:bc:14:3a:c8:58:00:96:44:cd:f2:d6:65:dd: 71:b3:a8:84:8e:bb:50:c7:b9:14:ff:bd:4b:ea:87:48:dc:3b: 80:3e:c3:a5:85:88:f5:c8:52:e9:74:86:90:bf:6f:74:21:27: b3:61:24:72:ab:ee:7b:ae:e7:ee:6f:49:30:58:bd:20:b4:f5: 7d:70:8a:56:07:0a:aa:2c:44:bb:46:e0:d1:3b:11:d7:dc:a7: bc:35:54:51:8a:8b:89:db:04:bf:ac:24:18:0d:a1:62:80:ee: 30:7e:60:ef:42:5a:ba:82:8c:d2:1a:22:e1:b5:da:4e:ac:22: 4c:9a:21:15:29:dc:28:a3:ea:53:05:08:e4:74:4d:30:da:46: dc:c7:c6:00 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUeSfpLIk5ZFnVAclgNznZL9WyFkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwNTU1MDBaFw0yNzAzMTEwNjAwMDBaMDMxMTAvBgNV BAMTKEREQzJBODk2OEQ4OUNFMEUzMjNCMTJFNjM3NDk2NjQ0NjlBRTUxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycNHs0watBVim3qAV9wkipTug HfBl/yzvQri4zTe4dYpwSIN4Mi/+tQi3ji6dZnxsVeaKC1+JP+3mspW1ajsS5sjI U42E09kvKOX0WhsiLaThWhk7nhXz19UlecWddGOpW1gn8gR+pPyYgwwfD0U9GFVy nvpn3JpIdXAhvgD/3sCH+UVu+Ge5UhdwEV8IH4EBKXLRV363FmnILhN5RFwj++5e wbVfjcjL/KkGGEZzH9jzx3PCCquq9v8hEInNN8DsY9Qjvn5dvBbD9wXXuSbU9Cde brOK5VHEtCbqT547Li8ZCb6KCn7jvom9wFjqeqWbfB+Zs9+tqZ9JPr08WL1lAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU3cKolo2Jzg4yOxLmN0lmRGmuUcMwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAQw DQYJKoZIhvcNAQELBQADggEBAAzFsEYwkRoIcHA8zNzcJiAy/0oTSVTXFF3MhNtW i06ceiZOn6Ad3N0OcFRYYxDE6wsYl5WF5wHfsG8jQETeq3/H82rBhqe0t6W+5wKH 7ZRPOpJXXqUSfnJPvYxKEr8mKc30X8hvvEFmxu+KcyK2lCRwvBQ6yFgAlkTN8tZl 3XGzqISOu1DHuRT/vUvqh0jcO4A+w6WFiPXIUul0hpC/b3QhJ7NhJHKr7nuu5+5v STBYvSC09X1wilYHCqosRLtG4NE7Edfcp7w1VFGKi4nbBL+sJBgNoWKA7jB+YO9C WrqCjNIaIuG12k6sIkyaIRUp3Cij6lMFCOR0TTDaRtzHxgA= -----END CERTIFICATE-----Generated at Fri Mar 27 08:12:44 2026 by rpki-client