$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: hgu6JQFjlPCsZ1LOkWJ43XgrvcgegqNe/WOZPeA+nLk= Subject key identifier: C4:1C:4F:87:0D:A0:6A:90:FA:CB:DD:80:5A:01:B7:EC:12:75:B1:C8 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 582846E483B00480931F338A3CD2DAE61C910223 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 05:00:01 +0000 ROA not before: Thu 12 Mar 2026 04:55:01 +0000 ROA not after: Thu 11 Mar 2027 05:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:28:46:e4:83:b0:04:80:93:1f:33:8a:3c:d2:da:e6:1c:91:02:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 04:55:01 2026 GMT Not After : Mar 11 05:00:01 2027 GMT Subject: CN=C41C4F870DA06A90FACBDD805A01B7EC1275B1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:78:0c:c9:26:5f:e2:3f:1d:3d:c8:52:db: e7:55:a2:01:b0:98:a3:61:23:52:db:ac:e6:f5:2d: 16:76:b6:10:c1:8a:3e:72:69:8c:a5:71:89:91:1a: f9:0b:9e:3d:11:07:f6:fd:e5:96:f3:56:11:56:b0: 58:a1:7b:0d:81:58:78:0d:52:a1:a0:2f:ad:49:7f: b7:43:2c:59:c1:d2:8b:0e:35:6d:cc:86:f8:fa:e3: 7e:ae:d1:1e:96:9e:d8:cd:57:44:81:61:27:36:ba: bc:6c:03:86:84:7c:6b:72:ad:9f:55:83:b8:e5:08: c2:f3:54:0d:d2:37:19:3c:b0:41:d0:38:58:75:b8: 8c:bc:c2:4e:ce:41:98:d0:b7:e9:6d:ed:42:f7:9b: 00:c6:c9:79:74:a9:80:ef:03:22:83:d6:df:0d:f7: a9:b8:eb:ad:73:12:1a:73:91:0f:1b:9c:f5:ad:26: c0:92:0a:d8:c5:84:c4:aa:2f:2d:99:1c:6f:3f:4b: 9a:3e:7b:10:14:75:31:f2:b2:a4:de:ec:5d:5b:78: 5f:ff:64:db:d8:fc:ba:51:83:d1:1f:c7:8f:6f:c4: 8e:39:50:2e:4f:93:23:62:e8:e2:59:28:79:aa:b5: 39:0a:9e:b7:4c:14:49:4b:53:5d:ab:01:1c:9c:9f: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1C:4F:87:0D:A0:6A:90:FA:CB:DD:80:5A:01:B7:EC:12:75:B1:C8 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:6::/48 Signature Algorithm: sha256WithRSAEncryption 29:ec:6e:7c:f4:e3:e7:85:76:2c:20:f3:54:b6:ed:ac:b4:18: 13:bc:07:b3:00:95:ac:cc:f4:f7:ac:6d:36:db:93:c6:98:d1: ba:74:0d:4b:4e:b4:95:1c:1b:f0:30:e4:8d:0c:6e:e6:21:15: 07:cf:69:8c:71:e2:00:c3:bf:3a:65:b3:c7:6d:03:63:26:e1: 96:9e:c3:83:ba:6b:46:4c:7b:56:22:59:5b:35:79:09:e9:f7: 03:37:0a:22:0a:90:6d:0c:f7:a8:b9:09:1f:3e:59:3b:2f:9c: d8:88:d4:52:25:5b:96:63:7a:a6:f1:27:99:9d:ba:23:15:5a: e7:e8:52:67:f9:ba:78:df:69:a2:13:fd:f9:f4:80:f2:be:b4: 77:29:45:1e:f4:b7:81:4e:32:ca:ff:73:27:e6:65:73:bd:42: 3a:12:db:ec:5d:3b:32:6a:be:e0:99:75:24:29:5a:ee:fa:31: cb:82:5b:b1:bb:1f:2d:d1:14:65:f1:3c:12:30:39:60:d2:78: a8:0b:ee:c4:34:14:1d:58:8f:01:0b:f8:1d:a9:8b:62:2b:c0: c5:6e:d8:f5:5c:0f:df:f5:41:9a:58:83:e7:8e:21:7b:6f:bc: 9d:61:df:66:e6:fe:6a:04:4a:24:9a:38:10:ac:7f:4f:d5:f0: c1:fa:f4:fe -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWChG5IOwBICTHzOKPNLa5hyRAiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwNDU1MDFaFw0yNzAzMTEwNTAwMDFaMDMxMTAvBgNV BAMTKEM0MUM0Rjg3MERBMDZBOTBGQUNCREQ4MDVBMDFCN0VDMTI3NUIxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlXgMySZf4j8dPchS2+dVogGw mKNhI1LbrOb1LRZ2thDBij5yaYylcYmRGvkLnj0RB/b95ZbzVhFWsFihew2BWHgN UqGgL61Jf7dDLFnB0osONW3Mhvj6436u0R6WntjNV0SBYSc2urxsA4aEfGtyrZ9V g7jlCMLzVA3SNxk8sEHQOFh1uIy8wk7OQZjQt+lt7UL3mwDGyXl0qYDvAyKD1t8N 96m4661zEhpzkQ8bnPWtJsCSCtjFhMSqLy2ZHG8/S5o+exAUdTHysqTe7F1beF// ZNvY/LpRg9Efx49vxI45UC5PkyNi6OJZKHmqtTkKnrdMFElLU12rARycn+mzAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUxBxPhw2gapD6y92AWgG37BJ1scgwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAYw DQYJKoZIhvcNAQELBQADggEBACnsbnz04+eFdiwg81S27ay0GBO8B7MAlazM9Pes bTbbk8aY0bp0DUtOtJUcG/Aw5I0MbuYhFQfPaYxx4gDDvzpls8dtA2Mm4Zaew4O6 a0ZMe1YiWVs1eQnp9wM3CiIKkG0M96i5CR8+WTsvnNiI1FIlW5ZjeqbxJ5mduiMV WufoUmf5unjfaaIT/fn0gPK+tHcpRR70t4FOMsr/cyfmZXO9QjoS2+xdOzJqvuCZ dSQpWu76McuCW7G7Hy3RFGXxPBIwOWDSeKgL7sQ0FB1YjwEL+B2pi2IrwMVu2PVc D9/1QZpYg+eOIXtvvJ1h32bm/moESiSaOBCsf0/V8MH69P4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:57:07 2026 by rpki-client