$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: NNrOvOAX878W/wl76ltah13BW4qzOmHYAfyfUyg3Do4= Subject key identifier: 62:1E:FC:85:FF:B1:B9:48:C3:FD:00:7B:87:95:D9:3A:8B:73:E8:97 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 631B6E9AB06AF311F997A70B3C938D3AF885B2CF Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 12 Mar 2026 05:00:00 +0000 ROA not before: Thu 12 Mar 2026 04:55:00 +0000 ROA not after: Thu 11 Mar 2027 05:00:00 +0000 asID: 137330 IP address blocks: 2402:aa40:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1b:6e:9a:b0:6a:f3:11:f9:97:a7:0b:3c:93:8d:3a:f8:85:b2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Mar 12 04:55:00 2026 GMT Not After : Mar 11 05:00:00 2027 GMT Subject: CN=621EFC85FFB1B948C3FD007B8795D93A8B73E897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:2b:3d:07:8a:d6:65:11:25:fe:f3:61:04: 21:89:cf:80:37:07:1d:6d:d3:8c:db:34:8f:a1:eb: 9a:14:cc:6c:9a:9a:4a:77:50:e3:ae:3e:e2:0d:3b: 83:25:54:ec:fe:a6:d6:fb:c0:4e:41:05:b1:d3:3d: 1f:7e:b1:20:e2:ea:01:b1:2f:ba:9c:28:ea:f9:4e: 73:9b:c0:c0:f2:d9:f0:b8:56:53:db:7f:2f:13:a6: 16:67:45:d2:51:88:41:2f:90:00:af:15:ce:af:05: 04:2f:27:84:8d:93:42:f6:0d:aa:96:6e:eb:eb:af: ef:ac:3d:fe:51:35:b3:68:9a:6c:29:47:f4:c9:dc: 26:a6:9e:9a:c6:f2:ac:b3:c1:3b:24:66:ca:d1:70: 36:00:f0:6c:76:76:7a:f9:af:74:4f:ae:bd:6e:6a: bf:c6:82:24:2d:2d:7f:a6:49:3f:09:00:5d:81:37: c9:bd:a8:22:9f:eb:9c:72:7b:68:da:49:73:c8:fa: 55:1a:48:7d:6a:f7:0b:d2:17:fe:a5:84:9b:7d:67: 4b:6a:18:91:c8:2e:4b:c3:d8:1b:68:b7:0f:ef:8a: e9:7c:74:fa:c1:74:2c:92:56:a9:9f:bf:2c:7f:23: 44:33:71:3e:41:f1:1a:cc:9e:46:ca:37:72:71:c5: bd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1E:FC:85:FF:B1:B9:48:C3:FD:00:7B:87:95:D9:3A:8B:73:E8:97 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a393a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:9::/48 Signature Algorithm: sha256WithRSAEncryption 22:77:b1:dc:ab:57:3d:bf:6d:bd:2b:26:9d:dd:55:95:11:f4: 6b:d0:b0:c5:0f:84:f2:10:ba:dc:c4:39:03:59:d6:e2:11:40: 4c:c2:fe:3a:18:28:26:70:29:94:77:64:e7:3a:34:f9:98:5b: 48:d8:53:96:fe:6f:44:24:b5:fe:9d:fa:33:ea:9f:f9:17:96: 95:46:90:dc:93:6a:79:b9:c5:dd:b7:35:9c:2c:e7:e2:74:24: d1:da:73:48:bc:11:6c:75:6e:39:bf:16:f6:85:17:a0:1b:68: bf:f1:a6:d9:a0:fd:ba:a3:2e:fd:ce:6e:e3:cf:05:ef:5a:37: ee:4f:89:03:f6:6f:60:f9:e3:64:40:5d:3e:a4:e7:ef:65:a6: 59:3e:99:79:93:65:7d:ef:7a:38:70:07:aa:bb:82:70:b2:05: 7b:88:aa:4c:9a:12:c1:6c:3d:dd:85:72:57:61:22:2b:ac:b6: 68:47:46:22:18:35:d0:04:00:e8:03:13:39:3a:46:51:f4:87: 9c:a3:6c:bd:b3:e2:7b:93:16:7c:3e:0d:bc:c8:5f:ab:47:e0: 97:7d:9b:4e:ee:be:dd:90:c4:5e:05:c7:c9:8e:c6:9b:a0:09: 1a:6d:5c:94:fc:f9:a3:09:cf:d5:04:76:7c:93:71:32:eb:f2: 23:fb:d8:a6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYxtumrBq8xH5l6cLPJONOviFss8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNjAzMTIwNDU1MDBaFw0yNzAzMTEwNTAwMDBaMDMxMTAvBgNV BAMTKDYyMUVGQzg1RkZCMUI5NDhDM0ZEMDA3Qjg3OTVEOTNBOEI3M0U4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUiys9B4rWZREl/vNhBCGJz4A3 Bx1t04zbNI+h65oUzGyamkp3UOOuPuINO4MlVOz+ptb7wE5BBbHTPR9+sSDi6gGx L7qcKOr5TnObwMDy2fC4VlPbfy8TphZnRdJRiEEvkACvFc6vBQQvJ4SNk0L2DaqW buvrr++sPf5RNbNommwpR/TJ3CamnprG8qyzwTskZsrRcDYA8Gx2dnr5r3RPrr1u ar/GgiQtLX+mST8JAF2BN8m9qCKf65xye2jaSXPI+lUaSH1q9wvSF/6lhJt9Z0tq GJHILkvD2Btotw/viul8dPrBdCySVqmfvyx/I0QzcT5B8RrMnkbKN3Jxxb0RAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUYh78hf+xuUjD/QB7h5XZOotz6JcwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAkw DQYJKoZIhvcNAQELBQADggEBACJ3sdyrVz2/bb0rJp3dVZUR9GvQsMUPhPIQutzE OQNZ1uIRQEzC/joYKCZwKZR3ZOc6NPmYW0jYU5b+b0Qktf6d+jPqn/kXlpVGkNyT anm5xd23NZws5+J0JNHac0i8EWx1bjm/FvaFF6AbaL/xptmg/bqjLv3ObuPPBe9a N+5PiQP2b2D542RAXT6k5+9lplk+mXmTZX3vejhwB6q7gnCyBXuIqkyaEsFsPd2F cldhIiustmhHRiIYNdAEAOgDEzk6RlH0h5yjbL2z4nuTFnw+DbzIX6tH4Jd9m07u vt2QxF4Fx8mOxpugCRptXJT8+aMJz9UEdnyTcTLr8iP72KY= -----END CERTIFICATE-----Generated at Thu Mar 26 20:12:52 2026 by rpki-client