$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa File: 323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa (raw, json) Hash identifier: ud49FXeRe72XxYEMKiYhkFOzmvzEUz+AuBntxaesnoo= Subject key identifier: 5B:64:3F:E0:AE:E8:14:2E:B7:13:C8:4E:F4:65:DA:21:9B:B0:E7:C9 Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 0BFF62D8747CEDBA85A1B5E74E6F9D665A444E7F Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa Signing time: Wed 18 Mar 2026 10:00:00 +0000 ROA not before: Wed 18 Mar 2026 09:55:00 +0000 ROA not after: Wed 17 Mar 2027 10:00:00 +0000 asID: 139419 IP address blocks: 2405:6740:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ff:62:d8:74:7c:ed:ba:85:a1:b5:e7:4e:6f:9d:66:5a:44:4e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: Mar 18 09:55:00 2026 GMT Not After : Mar 17 10:00:00 2027 GMT Subject: CN=5B643FE0AEE8142EB713C84EF465DA219BB0E7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:20:5c:7a:c5:75:59:c0:dd:e7:a7:f0:e0: d6:bb:c7:1f:f6:45:bf:a0:4e:d0:d3:56:a4:8c:db: bb:57:d6:0c:e2:34:90:09:23:44:8b:eb:7b:67:0d: f9:13:5f:43:b2:c6:6f:20:29:3a:71:df:00:13:da: c6:65:64:e1:1e:a4:42:d1:6c:89:80:87:30:02:db: 9a:b7:7d:3c:51:e6:a0:5c:89:ae:a5:14:9f:10:b1: 21:64:b5:67:56:85:d6:1b:0e:8a:0a:06:35:3a:51: a8:74:bf:7f:3b:f6:17:3d:03:af:63:f9:6c:a6:15: 51:d2:8e:3a:58:d9:a2:d4:80:6c:d0:a6:c0:d6:0d: 99:48:59:66:5b:86:f9:8c:f8:5d:d0:80:4c:57:1a: d7:61:43:a2:58:e7:d2:22:31:83:68:81:11:82:2a: 83:a4:4f:ff:c4:cb:03:58:08:3a:16:a0:e6:77:9b: 3e:a2:61:90:52:26:88:1a:00:b4:35:02:cd:57:f7: 44:1a:8b:af:e1:75:52:0f:91:71:37:2b:ee:83:6b: 85:1d:32:47:7b:f2:07:c7:77:93:67:e5:f0:4b:7b: f0:ab:48:bc:83:1d:ac:26:76:14:b0:bb:24:39:3d: f0:ae:a2:3e:60:0f:1f:8c:b9:67:66:2c:3b:8e:9b: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:3F:E0:AE:E8:14:2E:B7:13:C8:4E:F4:65:DA:21:9B:B0:E7:C9 X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a61303a3a2f34382d3438203d3e20313339343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6740:a0::/48 Signature Algorithm: sha256WithRSAEncryption 6d:68:8b:86:bc:a3:2b:d4:05:f7:2c:5f:61:9f:27:2c:f1:bb: 94:22:39:6d:b9:92:bf:7a:14:e5:db:b3:44:d9:94:38:fc:be: 39:63:56:a8:bc:65:b4:e1:1e:b6:d2:2c:ea:bb:9a:b7:7b:b2: 41:d6:4d:e1:6c:cd:7c:e5:fc:f0:58:83:94:20:3b:85:21:b5: 63:76:54:39:42:35:11:e7:6d:9e:54:38:a0:8f:88:87:1b:51: 80:1a:8e:38:8d:9e:49:44:94:67:34:cf:12:0f:04:15:4f:61: d6:ad:21:bd:78:56:90:24:ca:cf:38:df:35:4b:09:b9:26:3d: c1:c2:9b:d0:b4:6e:53:cc:dc:54:d9:ec:b5:d3:75:c2:65:cf: 33:ef:e6:64:90:a8:a1:55:9f:95:13:a2:b0:86:5a:d7:f3:c2: 23:bd:21:9e:26:08:20:81:7b:de:2b:77:84:08:2d:6d:93:d1: 71:32:e4:91:5b:cb:78:8d:a1:6f:e0:69:97:cc:a4:94:b7:98: 81:23:28:5b:9c:14:a2:0f:e2:23:95:b2:04:6a:fc:54:bd:00: 8d:e2:1b:64:f6:2a:57:a6:39:e6:6c:d9:88:f1:e6:4b:d7:5f: fc:5d:b6:e6:35:e3:1e:92:46:7e:92:77:7d:e8:d8:9e:ed:62: cd:99:2e:46 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUC/9i2HR87bqFobXnTm+dZlpETn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNjAzMTgwOTU1MDBaFw0yNzAzMTcxMDAwMDBaMDMxMTAvBgNV BAMTKDVCNjQzRkUwQUVFODE0MkVCNzEzQzg0RUY0NjVEQTIxOUJCMEU3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkKSBcesV1WcDd56fw4Na7xx/2 Rb+gTtDTVqSM27tX1gziNJAJI0SL63tnDfkTX0Oyxm8gKTpx3wAT2sZlZOEepELR bImAhzAC25q3fTxR5qBcia6lFJ8QsSFktWdWhdYbDooKBjU6Uah0v3879hc9A69j +WymFVHSjjpY2aLUgGzQpsDWDZlIWWZbhvmM+F3QgExXGtdhQ6JY59IiMYNogRGC KoOkT//EywNYCDoWoOZ3mz6iYZBSJogaALQ1As1X90Qai6/hdVIPkXE3K+6Da4Ud Mkd78gfHd5Nn5fBLe/CrSLyDHawmdhSwuyQ5PfCuoj5gDx+MuWdmLDuOm6qBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUW2Q/4K7oFC63E8hO9GXaIZuw58kwHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTNmYzE3LTU3ZjEtNDY3MS04 YTE2LWY4NThkZGQ3ZGE0My8wLzMyMzQzMDM1M2EzNjM3MzQzMDNhNjEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFZ0AA oDANBgkqhkiG9w0BAQsFAAOCAQEAbWiLhryjK9QF9yxfYZ8nLPG7lCI5bbmSv3oU 5duzRNmUOPy+OWNWqLxltOEettIs6ruat3uyQdZN4WzNfOX88FiDlCA7hSG1Y3ZU OUI1EedtnlQ4oI+IhxtRgBqOOI2eSUSUZzTPEg8EFU9h1q0hvXhWkCTKzzjfNUsJ uSY9wcKb0LRuU8zcVNnstdN1wmXPM+/mZJCooVWflROisIZa1/PCI70hniYIIIF7 3it3hAgtbZPRcTLkkVvLeI2hb+Bpl8yklLeYgSMoW5wUog/iI5WyBGr8VL0AjeIb ZPYqV6Y55mzZiPHmS9df/F225jXjHpJGfpJ3fejYnu1izZkuRg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:11:46 2026 by rpki-client