$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: v4Taz03e2i7+jkqTPf0U0ovYjVCMponleywvMjVM0R8= Subject key identifier: 75:4B:65:B7:91:7C:8C:7C:17:61:94:39:68:B0:73:34:4B:11:E5:E9 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 382C8A4B46C32B79F19A3FECB5D198F0DF5A780B Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 03:00:00 +0000 ROA not before: Thu 12 Mar 2026 02:55:00 +0000 ROA not after: Thu 11 Mar 2027 03:00:00 +0000 asID: 137330 IP address blocks: 2402:aa40:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2c:8a:4b:46:c3:2b:79:f1:9a:3f:ec:b5:d1:98:f0:df:5a:78:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 02:55:00 2026 GMT Not After : Mar 11 03:00:00 2027 GMT Subject: CN=754B65B7917C8C7C1761943968B073344B11E5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:0d:65:8e:13:df:0f:75:58:bd:5d:5e:65: a7:f2:f9:a2:4d:d5:81:55:4c:52:1a:ae:2a:0d:09: 48:0c:25:6d:59:80:df:4a:ad:81:1d:4e:1c:d1:1b: 05:f3:5b:51:8c:f8:76:60:6f:b2:55:e0:4b:e6:f2: a2:ce:b2:01:ef:6b:19:7a:f1:28:b6:f8:d6:03:da: e9:79:3f:7b:96:16:50:07:c6:ee:5b:1e:b3:c2:b5: 55:31:0c:51:0b:9c:de:7c:f2:00:a7:85:84:2d:d0: 3e:c5:38:bf:8f:bc:1e:f2:df:3e:e8:a6:c4:9a:e8: c0:89:bf:ea:df:06:7d:0a:2f:1d:e5:cc:56:89:9a: c4:22:f3:df:62:78:b7:f3:7d:a1:4c:6c:44:28:17: cc:74:ae:5f:17:0c:10:ea:d2:a2:80:de:73:52:f3: f2:6c:ef:30:ad:96:e7:91:b4:20:30:51:70:7e:43: c1:40:db:f0:66:b7:cc:d4:97:4e:bf:48:e6:dd:dd: e9:03:12:98:83:0d:91:6b:5f:98:0a:65:07:65:7f: 90:e4:3d:cf:ab:3e:19:5a:ea:ac:dc:5f:01:76:85: ba:c4:91:60:72:ad:0e:f6:fc:78:ba:b3:f3:68:25: 80:0f:53:01:b8:e0:32:15:46:72:e1:36:bc:02:64: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:65:B7:91:7C:8C:7C:17:61:94:39:68:B0:73:34:4B:11:E5:E9 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a373a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:7::/48 Signature Algorithm: sha256WithRSAEncryption 5e:fb:fc:2e:24:56:e1:94:c8:8b:b4:ea:1d:86:8f:98:9b:b0: 8a:ca:dd:97:0e:0a:51:cf:c1:67:a0:e9:0f:e2:0c:37:07:4d: d1:cd:23:d4:8e:45:5d:cb:80:01:65:eb:14:67:c5:0d:62:88: a1:80:ff:d8:53:2a:37:38:73:ca:04:1a:98:e0:90:e1:f5:48: 8a:62:fe:b2:4a:f3:27:c0:95:e2:c9:48:03:79:d0:e1:a2:b0: c2:91:c9:23:3c:bb:af:4a:49:41:4a:f7:53:0f:bd:2e:2d:9f: 6c:0f:4e:c7:d2:e5:19:17:2d:f7:02:1c:97:1d:39:f0:9d:8a: 30:ca:1a:98:7f:81:ff:eb:f7:af:b5:de:d8:d8:4e:a5:18:4a: 47:5a:95:46:40:fb:76:8b:7e:99:1e:f1:0f:98:75:7f:ca:d3: d4:ae:8a:bd:68:6d:6d:f7:8c:d4:e0:02:cf:ef:1a:48:25:fa: 2d:f9:57:fa:6b:72:98:57:59:83:c5:10:9e:fc:96:d0:9e:9f: 67:cf:4d:69:37:55:28:d3:77:6d:c4:7c:7b:33:9c:2b:ba:5c: 43:1e:f0:e6:41:ac:1c:b9:cf:e0:0f:a7:f7:39:a4:21:ce:79: 11:b8:00:0e:f7:43:1a:07:be:af:40:5a:d4:8a:16:e7:ea:8e: c7:8b:90:4c -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUOCyKS0bDK3nxmj/stdGY8N9aeAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwMjU1MDBaFw0yNzAzMTEwMzAwMDBaMDMxMTAvBgNV BAMTKDc1NEI2NUI3OTE3QzhDN0MxNzYxOTQzOTY4QjA3MzM0NEIxMUU1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LA1ljhPfD3VYvV1eZafy+aJN 1YFVTFIarioNCUgMJW1ZgN9KrYEdThzRGwXzW1GM+HZgb7JV4Evm8qLOsgHvaxl6 8Si2+NYD2ul5P3uWFlAHxu5bHrPCtVUxDFELnN588gCnhYQt0D7FOL+PvB7y3z7o psSa6MCJv+rfBn0KLx3lzFaJmsQi899ieLfzfaFMbEQoF8x0rl8XDBDq0qKA3nNS 8/Js7zCtlueRtCAwUXB+Q8FA2/Bmt8zUl06/SObd3ekDEpiDDZFrX5gKZQdlf5Dk Pc+rPhla6qzcXwF2hbrEkWByrQ72/Hi6s/NoJYAPUwG44DIVRnLhNrwCZOTLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUdUtlt5F8jHwXYZQ5aLBzNEsR5ekwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAcw DQYJKoZIhvcNAQELBQADggEBAF77/C4kVuGUyIu06h2Gj5ibsIrK3ZcOClHPwWeg 6Q/iDDcHTdHNI9SORV3LgAFl6xRnxQ1iiKGA/9hTKjc4c8oEGpjgkOH1SIpi/rJK 8yfAleLJSAN50OGisMKRySM8u69KSUFK91MPvS4tn2wPTsfS5RkXLfcCHJcdOfCd ijDKGph/gf/r96+13tjYTqUYSkdalUZA+3aLfpke8Q+YdX/K09Suir1obW33jNTg As/vGkgl+i35V/prcphXWYPFEJ78ltCen2fPTWk3VSjTd23EfHsznCu6XEMe8OZB rBy5z+APp/c5pCHOeRG4AA73QxoHvq9AWtSKFufqjseLkEw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:12:29 2026 by rpki-client