$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa File: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (raw, json) Hash identifier: jVP4IyadfUbeWINM/KDvDvW3G0lqOs1gYvj37OOsmzs= Subject key identifier: C2:59:7A:09:B4:EE:9D:81:4F:66:BD:B3:A3:42:A1:BA:8D:87:89:63 Certificate issuer: /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Certificate serial: 06EAE21CDEA6524D85C37AD31C547685BDE5E350 Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa Signing time: Wed 04 Mar 2026 08:00:01 +0000 ROA not before: Wed 04 Mar 2026 07:55:01 +0000 ROA not after: Wed 03 Mar 2027 08:00:01 +0000 asID: 142315 IP address blocks: 2407:a1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ea:e2:1c:de:a6:52:4d:85:c3:7a:d3:1c:54:76:85:bd:e5:e3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Validity Not Before: Mar 4 07:55:01 2026 GMT Not After : Mar 3 08:00:01 2027 GMT Subject: CN=C2597A09B4EE9D814F66BDB3A342A1BA8D878963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:07:36:10:b4:e6:c1:14:3f:43:38:ee:b3:e4: 9b:ce:0f:f0:26:52:ba:97:ed:f9:53:3f:84:4d:89: b7:4c:99:b2:08:19:35:9b:13:e9:e2:90:01:d2:c8: 32:3e:7b:f0:c7:11:2b:67:e4:d9:cc:b5:bf:8f:d4: c0:0a:8d:72:23:79:15:60:ed:35:fd:7e:89:00:68: b2:8a:6d:a9:fc:50:eb:dd:76:78:fa:fe:06:c4:4b: 36:a1:83:18:fe:c3:cb:39:82:8c:d0:33:2f:80:40: 37:9f:ac:c6:7e:4e:5c:f3:00:55:92:ef:b7:a8:95: 1a:51:8f:7c:9f:ca:8b:40:5a:7b:95:ff:4d:0d:ab: 57:9f:1f:92:b0:74:82:5d:64:74:6a:28:41:60:8a: 2f:ff:79:66:a9:db:a4:fc:bf:fb:e2:02:1e:01:f5: d5:8e:24:f5:da:69:96:e8:f2:72:da:10:a1:73:24: b8:33:54:bd:03:13:43:14:40:9b:13:2d:1d:b8:fd: c2:ce:00:fd:91:13:b2:48:9c:d1:59:1a:80:cf:56: 81:20:dd:12:33:c2:9e:09:12:44:fd:70:7a:73:87: 8a:11:07:79:3e:c1:f3:ac:14:f8:c1:0b:a5:e3:21: 6d:7c:98:47:75:36:82:fb:f0:f6:d7:d3:2d:87:2b: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:59:7A:09:B4:EE:9D:81:4F:66:BD:B3:A3:42:A1:BA:8D:87:89:63 X509v3 Authority Key Identifier: keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/323430373a613163303a3a2f33322d3332203d3e20313432333135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:6a:66:80:68:14:65:6a:cb:d9:0d:ee:e0:80:65:eb:83:21: e8:d4:f0:39:94:15:62:62:b8:de:b6:2a:8c:12:89:d3:0c:c4: 14:e4:34:d6:20:c9:35:61:eb:eb:8f:11:ea:a7:eb:e6:2b:36: 82:d8:ef:ad:dd:62:c7:18:a9:86:60:09:aa:50:01:4d:43:24: 3b:77:98:66:1b:32:56:fa:bf:3b:4b:09:79:8f:25:f1:8f:d1: 90:a8:1a:5c:d9:0a:06:c2:1e:d5:eb:cf:e3:03:01:5d:84:2f: ac:de:cd:a1:4d:06:9b:60:d4:55:c0:23:32:99:89:5d:0e:74: 32:19:35:7d:e8:01:f8:83:e0:9f:23:68:7e:8d:12:42:09:74: 4f:2d:97:de:46:a6:3e:c4:08:30:bc:9e:7d:b4:de:a9:75:d9: 1f:8d:ec:10:1a:52:a2:d9:1b:2d:aa:7d:08:87:9c:54:b3:3f: 48:1a:cb:93:1a:c7:63:d1:86:1c:d7:68:94:ea:d1:ac:48:63: a2:cb:ee:0b:a7:a3:f3:ed:23:10:30:f7:04:53:59:fe:d8:be: 1c:dd:6f:8c:5a:bf:01:d1:f4:fa:76:a3:d5:59:4c:46:0b:7e: 3b:be:ed:b8:45:52:d7:13:3f:d2:6e:6d:47:f8:41:e8:98:34: 9f:5e:c9:11 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUBuriHN6mUk2Fw3rTHFR2hb3l41AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUwMDU2 MzEzN0EyNzAeFw0yNjAzMDQwNzU1MDFaFw0yNzAzMDMwODAwMDFaMDMxMTAvBgNV BAMTKEMyNTk3QTA5QjRFRTlEODE0RjY2QkRCM0EzNDJBMUJBOEQ4Nzg5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwBzYQtObBFD9DOO6z5JvOD/Am UrqX7flTP4RNibdMmbIIGTWbE+nikAHSyDI+e/DHEStn5NnMtb+P1MAKjXIjeRVg 7TX9fokAaLKKban8UOvddnj6/gbESzahgxj+w8s5gozQMy+AQDefrMZ+TlzzAFWS 77eolRpRj3yfyotAWnuV/00Nq1efH5KwdIJdZHRqKEFgii//eWap26T8v/viAh4B 9dWOJPXaaZbo8nLaEKFzJLgzVL0DE0MUQJsTLR24/cLOAP2RE7JInNFZGoDPVoEg 3RIzwp4JEkT9cHpzh4oRB3k+wfOsFPjBC6XjIW18mEd1NoL78PbX0y2HK0ELAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUwll6CbTunYFPZr2zo0Khuo2HiWMwHwYDVR0j BBgwFoAU78x76oQBhXY/92JM893gBWMTeicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGQwNzhmZS0wOTMwLTQ1ZGMtYjQwMy0zY2U0ZTg2M2Y4YjUvMC9FRkNDN0JFQTg0 MDE4NTc2M0ZGNzYyNENGM0RERTAwNTYzMTM3QTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUwMDU2MzEz N0EyNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkZDA3OGZlLTA5MzAtNDVkYy1i NDAzLTNjZTRlODYzZjhiNS8wLzMyMzQzMDM3M2E2MTMxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMjMzMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHocAwDQYJKoZI hvcNAQELBQADggEBABdqZoBoFGVqy9kN7uCAZeuDIejU8DmUFWJiuN62KowSidMM xBTkNNYgyTVh6+uPEeqn6+YrNoLY763dYscYqYZgCapQAU1DJDt3mGYbMlb6vztL CXmPJfGP0ZCoGlzZCgbCHtXrz+MDAV2EL6zezaFNBptg1FXAIzKZiV0OdDIZNX3o AfiD4J8jaH6NEkIJdE8tl95Gpj7ECDC8nn203ql12R+N7BAaUqLZGy2qfQiHnFSz P0gay5Max2PRhhzXaJTq0axIY6LL7guno/PtIxAw9wRTWf7Yvhzdb4xavwHR9Pp2 o9VZTEYLfju+7bhFUtcTP9JubUf4QeiYNJ9eyRE= -----END CERTIFICATE-----Generated at Fri Mar 27 00:36:46 2026 by rpki-client