$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa File: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (raw, json) Hash identifier: vVFtcDy4aPivFUPPIcMbLhe9f28+1kgtEKXIpm8Qbe4= Subject key identifier: B1:26:0F:1A:CC:0F:F3:DE:A7:A9:93:EE:EC:1B:C9:61:4E:5C:77:59 Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 17A6FD87A9D6316C13E9C85E4683CF774EE6BA1B Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa Signing time: Thu 12 Mar 2026 08:00:03 +0000 ROA not before: Thu 12 Mar 2026 07:55:03 +0000 ROA not after: Thu 11 Mar 2027 08:00:03 +0000 asID: 149909 IP address blocks: 2001:df1:c2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a6:fd:87:a9:d6:31:6c:13:e9:c8:5e:46:83:cf:77:4e:e6:ba:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Mar 12 07:55:03 2026 GMT Not After : Mar 11 08:00:03 2027 GMT Subject: CN=B1260F1ACC0FF3DEA7A993EEEC1BC9614E5C7759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:69:d9:76:da:af:5c:2a:00:2e:0e:7f:10: 0f:50:9f:f2:17:44:3d:31:08:8a:61:7e:08:ca:b4: 2b:a4:e5:49:89:0a:bc:83:52:ba:1c:c6:c3:e9:1e: f4:51:e0:cd:11:37:fd:8f:56:11:4a:1e:7a:77:f2: a7:3b:1a:3c:a2:e7:ee:b5:d1:fd:00:05:e5:da:f9: 86:a9:b7:6d:1e:d9:7c:4b:ff:c6:50:c9:85:26:6b: 0a:7a:ef:fd:61:6a:e7:7d:e3:ec:fa:a7:e8:38:2f: 57:08:e7:1f:73:b1:7d:62:f3:de:97:73:8d:45:49: 59:27:94:b4:62:72:19:b1:34:9d:06:06:70:3e:d2: 6f:11:b8:ed:42:b9:56:0d:c5:1d:89:4e:79:10:16: 0f:1c:04:07:fe:ff:c8:84:88:6f:dd:b5:16:49:32: 8a:89:38:28:41:83:24:a9:27:92:29:19:dd:08:e3: 62:7d:16:70:e6:21:3f:d9:26:d5:ee:a3:95:58:d3: 70:69:f2:7e:c8:cc:80:0d:b2:1c:cd:f3:99:d6:23: 0c:90:87:9a:db:9e:16:c1:ce:03:45:9a:86:b6:04: 36:71:3f:8c:9a:97:f9:b2:ba:8f:99:92:ec:79:c3: a8:67:59:45:38:91:ce:79:e9:4c:b1:ba:a6:7f:83: 8f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:26:0F:1A:CC:0F:F3:DE:A7:A9:93:EE:EC:1B:C9:61:4E:5C:77:59 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:c2c0::/48 Signature Algorithm: sha256WithRSAEncryption 5e:52:c3:c1:94:6a:b9:f0:9f:5b:05:3f:0c:f8:22:4c:2b:ab: 38:98:f7:cd:d0:a1:0c:3a:94:63:ad:fa:c8:a6:d8:08:74:6a: 7c:27:0e:dd:75:7a:7b:df:ba:ae:bc:ab:a1:8b:87:c2:1b:db: 27:70:d3:39:2c:d8:00:d5:46:1c:ba:f2:e6:f0:df:fa:91:38: a9:96:bd:97:13:3d:1a:d6:69:b8:58:57:18:22:a6:89:9d:a1: 97:6b:f9:7f:f3:bd:4d:a6:ce:cd:0b:c5:53:45:09:96:3d:cd: 33:0b:09:4e:0d:d8:b8:d7:36:66:96:5e:c6:c7:99:fe:52:a9: ee:80:20:f2:0e:50:28:bc:e7:a3:3a:74:d6:83:1d:04:74:26: ba:fb:be:65:40:0c:86:3d:89:08:1e:8d:dd:35:ed:b8:c2:cc: 4e:56:af:21:11:6b:50:b7:55:1d:9f:ff:45:e1:b1:09:74:f0: d6:92:64:6c:9b:e8:21:f7:9c:9a:5f:7f:ab:4e:0c:ad:19:1b: e1:95:65:c9:04:51:91:a5:e6:69:e1:d9:9f:b8:40:73:0f:6a: 2a:38:40:9c:a6:df:05:d6:95:73:89:74:4d:88:33:cc:8e:69: 53:7b:bf:23:f4:71:b5:5c:78:9b:61:68:41:8d:30:82:a1:60: ba:cd:b6:6e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUF6b9h6nWMWwT6cheRoPPd07muhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNjAzMTIwNzU1MDNaFw0yNzAzMTEwODAwMDNaMDMxMTAvBgNV BAMTKEIxMjYwRjFBQ0MwRkYzREVBN0E5OTNFRUVDMUJDOTYxNEU1Qzc3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf2WnZdtqvXCoALg5/EA9Qn/IX RD0xCIphfgjKtCuk5UmJCryDUrocxsPpHvRR4M0RN/2PVhFKHnp38qc7Gjyi5+61 0f0ABeXa+Yapt20e2XxL/8ZQyYUmawp67/1haud94+z6p+g4L1cI5x9zsX1i896X c41FSVknlLRichmxNJ0GBnA+0m8RuO1CuVYNxR2JTnkQFg8cBAf+/8iEiG/dtRZJ MoqJOChBgySpJ5IpGd0I42J9FnDmIT/ZJtXuo5VY03Bp8n7IzIANshzN85nWIwyQ h5rbnhbBzgNFmoa2BDZxP4yal/myuo+Zkux5w6hnWUU4kc556UyxuqZ/g49lAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUsSYPGswP896nqZPu7BvJYU5cd1kwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiYmU2ODE1LTMxMGUtNDIwNi1h NTAwLTZiYjlkMzI2M2FiZi8wLzMyMzAzMDMxM2E2NDY2MzEzYTYzMzI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzkzMDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8cLAMA0GCSqGSIb3DQEBCwUAA4IBAQBeUsPBlGq58J9bBT8M+CJMK6s4mPfN0KEM OpRjrfrIptgIdGp8Jw7ddXp737quvKuhi4fCG9sncNM5LNgA1UYcuvLm8N/6kTip lr2XEz0a1mm4WFcYIqaJnaGXa/l/871Nps7NC8VTRQmWPc0zCwlODdi41zZmll7G x5n+UqnugCDyDlAovOejOnTWgx0EdCa6+75lQAyGPYkIHo3dNe24wsxOVq8hEWtQ t1Udn/9F4bEJdPDWkmRsm+gh95yaX3+rTgytGRvhlWXJBFGRpeZp4dmfuEBzD2oq OECcpt8F1pVziXRNiDPMjmlTe78j9HG1XHibYWhBjTCCoWC6zbZu -----END CERTIFICATE-----Generated at Thu Mar 26 19:51:15 2026 by rpki-client