$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: FQVIk9jt3lLQ8YprtF47oT5gCDZq+nm/xI1WPiBr2rk= Subject key identifier: C8:B1:B8:55:25:1E:09:BB:6B:2C:4A:06:DD:23:A4:D0:88:91:E1:99 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 27F6DEE9EE6A6652DF7EE8E0CD01A9DCE16520A8 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa Signing time: Mon 23 Mar 2026 18:00:00 +0000 ROA not before: Mon 23 Mar 2026 17:55:00 +0000 ROA not after: Mon 22 Mar 2027 18:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:13::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f6:de:e9:ee:6a:66:52:df:7e:e8:e0:cd:01:a9:dc:e1:65:20:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Mar 23 17:55:00 2026 GMT Not After : Mar 22 18:00:00 2027 GMT Subject: CN=C8B1B855251E09BB6B2C4A06DD23A4D08891E199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:f0:f9:4c:c3:79:60:f5:e7:d4:86:96:9a: 2a:a9:2a:0e:c3:b4:b6:92:c8:61:99:ab:81:28:86: 4e:51:2f:fe:4a:7b:bf:81:a4:fe:d5:46:c7:ce:17: fe:15:c0:bd:6d:6a:f6:48:cd:ae:5b:6f:65:10:93: 2d:b1:ef:47:b1:05:ab:b6:50:4e:ee:5b:87:d9:f6: 1e:25:a8:b9:78:70:f8:f3:fb:ef:ec:fe:9e:0d:38: 6e:9c:17:23:7e:00:04:98:c6:c7:06:5d:b2:d3:ea: 89:99:05:c6:bc:9c:8f:7c:a1:51:a7:49:c4:dc:c0: 88:48:59:62:a1:87:4d:a6:65:3f:b1:9b:c6:23:c7: 2f:59:d6:79:a6:39:84:5e:2e:3d:7c:9f:cf:7a:a1: 64:12:81:e5:97:ad:aa:d3:5f:52:87:eb:aa:a9:e4: 09:5b:fd:06:0c:d3:4e:32:53:bd:25:4e:73:b6:ae: 10:ac:7c:71:23:96:d4:ea:2e:5c:56:99:e0:86:ea: 8f:cc:d7:5d:90:01:58:c3:53:57:9f:5b:da:c1:6d: 36:10:24:39:58:92:02:0d:9b:12:c8:a6:91:9a:b4: 14:dc:53:61:07:b3:dc:e9:83:13:16:3b:af:de:72: dd:30:ce:f7:de:a3:87:9b:6f:41:84:c1:d0:34:f6: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B1:B8:55:25:1E:09:BB:6B:2C:4A:06:DD:23:A4:D0:88:91:E1:99 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:13::/48 Signature Algorithm: sha256WithRSAEncryption d9:39:f0:fb:5c:80:02:a0:2d:3d:6c:6e:4a:2b:7d:d1:ed:54: 81:6a:c3:e0:17:af:5a:0e:3d:ab:2b:4a:53:32:00:30:7c:c7: 67:40:f9:68:26:49:a7:76:c4:62:1f:7a:37:1a:04:cc:06:a1: 4e:d8:5b:84:a7:ab:64:7e:8b:b2:2b:f0:1f:b0:56:d7:8c:8e: 1e:ed:cd:13:77:75:d1:59:e9:fa:ce:34:b2:69:5c:e5:74:49: 89:74:dc:39:e6:f1:34:4a:60:3f:ba:3f:40:ad:75:5e:45:af: b8:55:f0:48:82:f8:a0:fa:82:e5:a6:c2:b7:25:41:bd:83:17: 8c:46:c4:ef:b5:a5:b2:2b:f4:3e:8b:97:54:26:b2:cb:03:0e: aa:54:70:76:7e:ab:3a:b8:d4:28:c1:a2:f7:b2:a4:10:7e:76: 38:87:cc:e4:45:c4:7a:7b:64:53:c8:50:9b:51:e3:3b:93:62: 45:f7:d5:d8:ad:0f:ea:63:7c:4d:c6:71:23:5c:23:1a:4d:8f: c8:fc:8d:8b:62:bc:8e:a6:49:4d:60:61:cd:f5:eb:e9:a3:59: fb:53:e1:6c:f3:b7:7d:15:32:48:7c:c4:f4:44:9d:ea:ed:ae: d0:b8:74:da:52:76:6d:43:b1:f7:4a:55:89:44:a3:12:b7:c7: 79:5c:6e:2a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJ/be6e5qZlLffujgzQGp3OFlIKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNjAzMjMxNzU1MDBaFw0yNzAzMjIxODAwMDBaMDMxMTAvBgNV BAMTKEM4QjFCODU1MjUxRTA5QkI2QjJDNEEwNkREMjNBNEQwODg5MUUxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIPD5TMN5YPXn1IaWmiqpKg7D tLaSyGGZq4Eohk5RL/5Ke7+BpP7VRsfOF/4VwL1tavZIza5bb2UQky2x70exBau2 UE7uW4fZ9h4lqLl4cPjz++/s/p4NOG6cFyN+AASYxscGXbLT6omZBca8nI98oVGn ScTcwIhIWWKhh02mZT+xm8Yjxy9Z1nmmOYReLj18n896oWQSgeWXrarTX1KH66qp 5Alb/QYM004yU70lTnO2rhCsfHEjltTqLlxWmeCG6o/M112QAVjDU1efW9rBbTYQ JDlYkgINmxLIppGatBTcU2EHs9zpgxMWO6/ect0wzvfeo4ebb0GEwdA09qUBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUyLG4VSUeCbtrLEoG3SOk0IiR4ZkwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzEzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA EzANBgkqhkiG9w0BAQsFAAOCAQEA2Tnw+1yAAqAtPWxuSit90e1UgWrD4BevWg49 qytKUzIAMHzHZ0D5aCZJp3bEYh96NxoEzAahTthbhKerZH6LsivwH7BW14yOHu3N E3d10Vnp+s40smlc5XRJiXTcOebxNEpgP7o/QK11XkWvuFXwSIL4oPqC5abCtyVB vYMXjEbE77Wlsiv0PouXVCayywMOqlRwdn6rOrjUKMGi97KkEH52OIfM5EXEentk U8hQm1HjO5NiRffV2K0P6mN8TcZxI1wjGk2PyPyNi2K8jqZJTWBhzfXr6aNZ+1Ph bPO3fRUySHzE9ESd6u2u0Lh02lJ2bUOx90pViUSjErfHeVxuKg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:09 2026 by rpki-client