$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa File: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (raw, json) Hash identifier: c/KXUpCOJbQP0nA61zGA+EIdd/Oe1mSfHUKFexjH0ec= Subject key identifier: 48:91:01:01:95:7E:79:11:2D:83:72:0A:88:98:20:7B:87:2B:8A:1E Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 02E9526E21A5F64674791E561A0AE0CBCE213017 Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa Signing time: Sun 08 Mar 2026 16:00:01 +0000 ROA not before: Sun 08 Mar 2026 15:55:01 +0000 ROA not after: Sun 07 Mar 2027 16:00:01 +0000 asID: 45725 IP address blocks: 2402:780:100::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e9:52:6e:21:a5:f6:46:74:79:1e:56:1a:0a:e0:cb:ce:21:30:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Mar 8 15:55:01 2026 GMT Not After : Mar 7 16:00:01 2027 GMT Subject: CN=48910101957E79112D83720A8898207B872B8A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:6e:c5:28:00:24:11:51:ae:18:a9:93:ae: 57:8d:a5:34:de:13:36:63:89:f8:18:58:97:9a:ca: 1b:e1:33:33:7e:2c:3d:4d:83:6a:0b:59:f6:62:c0: 05:0f:b2:03:7d:2e:13:02:9f:1e:dc:63:1e:b2:7e: 9b:6a:b2:b1:53:12:0b:22:56:e4:11:8c:2a:46:9f: 19:9e:ee:3d:54:ba:09:de:75:81:b1:dc:a4:c7:f0: dd:7c:fc:17:f2:f3:4a:f2:e5:44:78:95:8b:a2:25: b1:69:2f:99:10:46:63:40:3f:5c:4c:40:3b:00:ae: f0:ca:42:38:39:6e:46:32:8b:be:08:fc:44:2c:1d: a3:cd:56:cc:bb:73:c1:70:3a:80:42:2b:4f:c9:50: 20:76:f3:d1:d9:b3:a2:34:df:48:81:cd:81:cd:d8: e8:97:84:7e:f5:7a:52:37:f0:1d:57:41:4c:76:20: 92:0c:b6:d1:b5:20:01:0f:8f:60:8b:6b:59:f4:99: 6d:b2:6e:e6:30:3f:77:b8:ab:a0:07:c1:33:ff:54: 5a:76:d9:bd:f8:66:d6:3c:df:b6:06:c8:67:f3:26: 7d:9e:5a:07:64:a7:f0:e2:17:86:cd:38:13:d3:4b: e9:13:e8:74:fb:bc:ea:e2:a2:9d:c8:35:fa:a5:03: 53:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:91:01:01:95:7E:79:11:2D:83:72:0A:88:98:20:7B:87:2B:8A:1E X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:780:100::/40 Signature Algorithm: sha256WithRSAEncryption 06:63:dc:7f:02:98:e0:06:4f:f1:2d:23:d8:0a:08:98:48:5a: 8e:1e:7a:2a:6f:ed:cd:dc:d6:06:f1:99:7e:98:86:92:e6:52: 9f:3a:2e:fb:d1:bb:1d:b0:66:20:3a:2b:4a:5f:59:50:ce:50: 37:16:5c:15:85:72:58:22:bb:fc:fe:2a:6c:3d:d1:6b:f2:f0: 32:54:09:32:d5:34:58:63:91:fe:3a:6f:c0:eb:8c:59:52:ef: 47:e1:f9:b3:d9:cb:53:a5:a4:79:bf:72:4b:36:b6:2a:cd:3b: b1:e6:99:6c:a0:df:81:46:03:61:c4:02:16:5c:c5:c4:fd:c2: 3d:d1:91:ec:36:98:28:a3:da:ac:67:bb:4b:04:92:a0:26:ef: 32:c4:89:fb:1b:1c:90:8c:98:57:4a:29:6d:dd:91:47:f7:e6: 2e:de:a0:a7:de:d5:44:0e:90:e0:2d:21:7d:a4:66:b1:d2:b7: 6f:c1:15:6f:83:b6:9c:db:22:c8:1f:25:fd:1d:d5:54:95:a1: 47:54:22:80:6a:3c:c5:a0:07:8a:f5:40:f2:f8:7c:02:df:99: 4e:8a:e1:ef:d1:41:e8:14:c9:91:35:a1:b7:00:4b:ab:2e:8c: 96:fe:bd:57:76:19:17:ab:89:61:67:63:ae:66:ff:58:03:38: d4:37:a2:09 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUAulSbiGl9kZ0eR5WGgrgy84hMBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNjAzMDgxNTU1MDFaFw0yNzAzMDcxNjAwMDFaMDMxMTAvBgNV BAMTKDQ4OTEwMTAxOTU3RTc5MTEyRDgzNzIwQTg4OTgyMDdCODcyQjhBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DG7FKAAkEVGuGKmTrleNpTTe EzZjifgYWJeayhvhMzN+LD1Ng2oLWfZiwAUPsgN9LhMCnx7cYx6yfptqsrFTEgsi VuQRjCpGnxme7j1UugnedYGx3KTH8N18/Bfy80ry5UR4lYuiJbFpL5kQRmNAP1xM QDsArvDKQjg5bkYyi74I/EQsHaPNVsy7c8FwOoBCK0/JUCB289HZs6I030iBzYHN 2OiXhH71elI38B1XQUx2IJIMttG1IAEPj2CLa1n0mW2ybuYwP3e4q6AHwTP/VFp2 2b34ZtY837YGyGfzJn2eWgdkp/DiF4bNOBPTS+kT6HT7vOriop3INfqlA1PTAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUSJEBAZV+eREtg3IKiJgge4crih4wHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzMyMzQzMDMyM2EzNzM4MzAzYTMxMzAzMDNhM2Ey ZjM0MzAyZDM0MzAyMDNkM2UyMDM0MzUzNzMyMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAkAgeAATAN BgkqhkiG9w0BAQsFAAOCAQEABmPcfwKY4AZP8S0j2AoImEhajh56Km/tzdzWBvGZ fpiGkuZSnzou+9G7HbBmIDorSl9ZUM5QNxZcFYVyWCK7/P4qbD3Ra/LwMlQJMtU0 WGOR/jpvwOuMWVLvR+H5s9nLU6Wkeb9ySza2Ks07seaZbKDfgUYDYcQCFlzFxP3C PdGR7DaYKKParGe7SwSSoCbvMsSJ+xsckIyYV0opbd2RR/fmLt6gp97VRA6Q4C0h faRmsdK3b8EVb4O2nNsiyB8l/R3VVJWhR1QigGo8xaAHivVA8vh8At+ZTorh79FB 6BTJkTWhtwBLqy6Mlv69V3YZF6uJYWdjrmb/WAM41DeiCQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:25:01 2026 by rpki-client