$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa File: 323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa (raw, json) Hash identifier: cRM97GaLq+yg7Y/tZ49v1KCMaCyvkEqRI2ekhh5PAv4= Subject key identifier: 27:57:00:87:BC:09:93:82:09:EA:5C:3E:F0:89:B0:CF:11:31:87:C1 Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 41B0F614715B6AC0F47357C11DBBE47942A4C124 Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa Signing time: Wed 18 Mar 2026 10:00:00 +0000 ROA not before: Wed 18 Mar 2026 09:55:00 +0000 ROA not after: Wed 17 Mar 2027 10:00:00 +0000 asID: 139419 IP address blocks: 2405:6740:100::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b0:f6:14:71:5b:6a:c0:f4:73:57:c1:1d:bb:e4:79:42:a4:c1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Mar 18 09:55:00 2026 GMT Not After : Mar 17 10:00:00 2027 GMT Subject: CN=27570087BC09938209EA5C3EF089B0CF113187C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:6d:dc:c1:ba:12:22:ee:70:d1:16:c0:50: 94:46:1f:8b:b2:9f:4f:9e:e6:81:98:1e:ea:05:e9: 56:4d:c5:8b:2e:c1:60:d6:f8:ce:32:b6:00:52:40: 78:2c:3f:4e:37:0b:b6:8d:18:6e:82:34:3f:41:8f: 80:c1:31:bd:15:51:33:31:7d:9c:1d:67:43:e7:55: a2:c7:64:69:89:b9:98:b4:f9:d3:32:63:ab:a7:2f: d8:2d:15:d6:c5:10:29:7c:32:ec:b2:b1:e2:a6:5a: b6:a9:6c:0c:e1:0d:ea:78:bc:b6:77:45:3b:34:b3: 35:2d:ca:63:b0:25:da:59:22:df:12:89:0e:a1:f0: ea:03:9a:e9:b1:e8:7c:dc:f9:ba:be:cf:9a:d1:c6: ce:9b:0f:3f:61:03:75:f8:98:eb:0a:4e:0c:54:1a: 42:65:57:cc:52:d0:b7:c2:9f:15:ce:96:ae:f7:89: 0a:e9:f7:f7:9b:12:b4:3a:b4:81:cf:db:c2:38:0b: fa:40:4b:ca:d9:9d:fb:3f:9d:2d:95:38:43:fc:02: f9:66:6a:62:55:9b:e0:c1:10:8b:25:56:92:15:d0: 7b:99:b3:f0:09:ac:3c:20:fc:d4:cf:22:b8:48:dc: 71:3a:c3:b8:4a:b5:49:a6:00:af:d4:c7:ea:e6:c9: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:57:00:87:BC:09:93:82:09:EA:5C:3E:F0:89:B0:CF:11:31:87:C1 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3130303a3a2f34382d3438203d3e20313339343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6740:100::/48 Signature Algorithm: sha256WithRSAEncryption 1b:81:a8:f4:19:ab:ab:53:18:92:75:93:67:63:56:04:cb:9f: c6:d7:8a:bd:ec:cd:e1:ff:a5:39:b6:54:20:c6:54:ef:ad:3b: b3:ba:9d:fe:31:3a:d9:c3:93:32:87:98:a9:3f:2c:d5:ed:42: 09:00:43:18:9f:47:17:8a:5e:6d:60:6b:b7:1f:59:aa:ca:3f: b3:25:03:2c:2f:f5:d2:0e:c9:05:23:28:f7:c4:28:53:cb:fa: b0:9c:47:8a:53:8d:c6:21:26:7d:ff:03:36:b4:16:7d:fa:e7: 70:1f:4e:f7:6e:90:95:72:cd:76:7e:84:85:d6:a3:dc:0c:dd: 3c:af:d7:f7:58:5b:c9:80:6f:31:5b:9c:0b:34:7a:74:06:5c: a0:c1:cd:98:5f:a5:9c:3e:44:72:00:91:5e:b1:e8:0f:b3:c5: ab:42:64:2c:a9:38:7d:7a:e4:06:3c:78:86:c3:3b:95:f3:94: 6f:82:00:7e:8c:3f:78:01:ba:6e:70:21:ed:be:2a:b6:47:69: ef:b7:97:6e:b7:01:dc:1a:4a:09:5f:27:65:cd:c3:3d:dd:12: 0f:c1:98:dd:83:73:46:0c:ba:e4:1c:f4:93:07:a0:48:c9:72: 4f:bc:ca:4b:7b:c2:4d:26:12:71:38:e5:48:9c:56:13:36:01: 05:16:3c:aa -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQbD2FHFbasD0c1fBHbvkeUKkwSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNjAzMTgwOTU1MDBaFw0yNzAzMTcxMDAwMDBaMDMxMTAvBgNV BAMTKDI3NTcwMDg3QkMwOTkzODIwOUVBNUMzRUYwODlCMENGMTEzMTg3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7G3cwboSIu5w0RbAUJRGH4uy n0+e5oGYHuoF6VZNxYsuwWDW+M4ytgBSQHgsP043C7aNGG6CND9Bj4DBMb0VUTMx fZwdZ0PnVaLHZGmJuZi0+dMyY6unL9gtFdbFECl8MuyyseKmWrapbAzhDep4vLZ3 RTs0szUtymOwJdpZIt8SiQ6h8OoDmumx6Hzc+bq+z5rRxs6bDz9hA3X4mOsKTgxU GkJlV8xS0LfCnxXOlq73iQrp9/ebErQ6tIHP28I4C/pAS8rZnfs/nS2VOEP8Avlm amJVm+DBEIslVpIV0HuZs/AJrDwg/NTPIrhI3HE6w7hKtUmmAK/Ux+rmyeKbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUJ1cAh7wJk4IJ6lw+8ImwzxExh8EwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTNmYzE3LTU3ZjEtNDY3MS04 YTE2LWY4NThkZGQ3ZGE0My8wLzMyMzQzMDM1M2EzNjM3MzQzMDNhMzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzMTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAVn QAEAMA0GCSqGSIb3DQEBCwUAA4IBAQAbgaj0GaurUxiSdZNnY1YEy5/G14q97M3h /6U5tlQgxlTvrTuzup3+MTrZw5Myh5ipPyzV7UIJAEMYn0cXil5tYGu3H1mqyj+z JQMsL/XSDskFIyj3xChTy/qwnEeKU43GISZ9/wM2tBZ9+udwH073bpCVcs12foSF 1qPcDN08r9f3WFvJgG8xW5wLNHp0Blygwc2YX6WcPkRyAJFesegPs8WrQmQsqTh9 euQGPHiGwzuV85RvggB+jD94AbpucCHtviq2R2nvt5dutwHcGkoJXydlzcM93RIP wZjdg3NGDLrkHPSTB6BIyXJPvMpLe8JNJhJxOOVInFYTNgEFFjyq -----END CERTIFICATE-----Generated at Thu Mar 26 23:11:09 2026 by rpki-client