$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa File: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (raw, json) Hash identifier: +I9REFT/9CDemlYTFd+kdZCfxUbZN1dIULLqmlkBPuw= Subject key identifier: 3E:71:C3:31:C6:37:B3:DC:38:65:FD:49:43:D8:A0:38:B6:5D:91:8A Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 5F69972351B1FF00A39EBB36C4C2E3C2647AE80E Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa Signing time: Wed 18 Mar 2026 05:00:02 +0000 ROA not before: Wed 18 Mar 2026 04:55:02 +0000 ROA not after: Wed 17 Mar 2027 05:00:02 +0000 asID: 38515 IP address blocks: 2402:600:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:69:97:23:51:b1:ff:00:a3:9e:bb:36:c4:c2:e3:c2:64:7a:e8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Mar 18 04:55:02 2026 GMT Not After : Mar 17 05:00:02 2027 GMT Subject: CN=3E71C331C637B3DC3865FD4943D8A038B65D918A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:80:a6:16:52:ca:ce:96:41:2f:da:d7:f0: 63:8b:c4:ac:5a:7d:02:f4:75:e0:e0:83:a4:9c:fa: 88:a5:c3:ce:e9:e5:c5:10:d2:cb:ff:0d:b9:71:8a: f0:6e:ad:2b:2e:c1:20:8e:5a:a0:a1:31:14:68:03: 27:93:01:1e:87:0b:2b:d3:52:ea:99:77:ae:e6:a5: 23:1f:68:25:86:dd:2f:41:03:1b:3a:c1:69:68:14: 9b:78:a5:a8:52:7e:00:fe:f7:2b:d3:c9:d7:0c:55: 36:97:23:5f:6c:f1:4e:65:87:c1:98:14:85:40:b0: 17:ce:f8:42:a5:31:bc:fb:36:7d:77:6b:9e:a6:bf: 95:1f:c2:7d:21:d0:41:3f:fe:e1:6a:82:79:ff:dc: 87:fe:7e:51:5e:ac:9f:09:22:ee:36:1a:e2:be:5a: 80:00:95:74:ef:b7:d1:9c:50:41:77:8e:aa:a8:f0: 38:77:5d:6a:23:ed:32:e3:83:ee:fb:48:99:c1:4e: fd:70:78:94:88:44:d3:52:30:d5:e0:cd:84:c8:22: ea:5b:fa:74:1c:11:62:49:4c:33:24:bb:55:09:32: bc:4a:a4:8d:aa:27:a6:b1:1a:7b:93:81:e1:e0:8e: ac:49:7a:da:b8:da:56:75:f7:b6:c0:03:8f:ee:70: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:71:C3:31:C6:37:B3:DC:38:65:FD:49:43:D8:A0:38:B6:5D:91:8A X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:600:d000::/48 Signature Algorithm: sha256WithRSAEncryption 3c:84:9f:79:2f:90:53:83:69:5a:a0:40:67:58:c4:d4:9f:1f: 2d:53:da:54:b8:08:78:97:46:bc:93:14:20:99:6d:fe:af:fa: 71:40:ba:50:11:4f:49:d6:ae:03:83:9f:01:e1:00:4d:1c:f9: cc:ac:13:55:3c:de:07:2c:b4:ea:b0:d6:d5:c2:e4:2c:16:a3: 04:ac:48:3f:86:f0:be:20:2c:e6:0d:9b:03:c0:8b:f9:3d:e0: f2:f2:7b:12:69:f4:2d:0a:23:61:2c:dd:0e:f3:95:1c:dd:37: 1f:4c:ec:02:53:21:74:92:e1:d1:60:ee:7f:9b:ba:1e:57:17: 3e:97:3e:0a:b6:fc:96:09:98:1c:9c:3b:99:b9:82:12:3b:fe: e0:de:70:4f:b5:8c:5f:67:e7:0f:39:29:a2:5d:8c:05:2c:22: 49:98:de:67:c2:cc:0d:de:61:32:c9:99:63:95:79:d5:f8:95: bc:1e:62:ee:a4:08:a9:23:6a:e2:15:a9:65:6a:7a:fe:fe:b1: da:85:68:5c:36:ff:ea:e1:1a:a6:ac:bb:db:58:ba:30:a2:e9: a1:68:06:08:b8:1a:7a:ea:ff:11:c5:4e:a5:27:e3:65:d0:ba: ba:16:4e:6d:47:37:1b:45:41:4d:0b:af:b2:fd:93:24:f5:06: 49:4d:cb:8e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUX2mXI1Gx/wCjnrs2xMLjwmR66A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNjAzMTgwNDU1MDJaFw0yNzAzMTcwNTAwMDJaMDMxMTAvBgNV BAMTKDNFNzFDMzMxQzYzN0IzREMzODY1RkQ0OTQzRDhBMDM4QjY1RDkxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRE4CmFlLKzpZBL9rX8GOLxKxa fQL0deDgg6Sc+oilw87p5cUQ0sv/DblxivBurSsuwSCOWqChMRRoAyeTAR6HCyvT UuqZd67mpSMfaCWG3S9BAxs6wWloFJt4pahSfgD+9yvTydcMVTaXI19s8U5lh8GY FIVAsBfO+EKlMbz7Nn13a56mv5Ufwn0h0EE//uFqgnn/3If+flFerJ8JIu42GuK+ WoAAlXTvt9GcUEF3jqqo8Dh3XWoj7TLjg+77SJnBTv1weJSIRNNSMNXgzYTIIupb +nQcEWJJTDMku1UJMrxKpI2qJ6axGnuTgeHgjqxJetq42lZ197bAA4/ucOtjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUPnHDMcY3s9w4Zf1JQ9igOLZdkYowHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMyMzQzMDMyM2EzNjMwMzAzYTY0MzAzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCBgDQ ADANBgkqhkiG9w0BAQsFAAOCAQEAPISfeS+QU4NpWqBAZ1jE1J8fLVPaVLgIeJdG vJMUIJlt/q/6cUC6UBFPSdauA4OfAeEATRz5zKwTVTzeByy06rDW1cLkLBajBKxI P4bwviAs5g2bA8CL+T3g8vJ7Emn0LQojYSzdDvOVHN03H0zsAlMhdJLh0WDuf5u6 HlcXPpc+Crb8lgmYHJw7mbmCEjv+4N5wT7WMX2fnDzkpol2MBSwiSZjeZ8LMDd5h MsmZY5V51fiVvB5i7qQIqSNq4hWpZWp6/v6x2oVoXDb/6uEapqy721i6MKLpoWgG CLgaeur/EcVOpSfjZdC6uhZObUc3G0VBTQuvsv2TJPUGSU3Ljg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:41 2026 by rpki-client