$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa File: 323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa (raw, json) Hash identifier: KE/398lSeMUtHRrscwxIN6CfhOWbcM9cBrkB3gU53go= Subject key identifier: 84:47:F8:1B:C0:DE:2D:7C:80:84:C8:02:91:1D:72:15:0E:74:CD:A6 Certificate issuer: /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Certificate serial: 3F5B8128B552D693B2405A365998546115676AC5 Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa Signing time: Thu 19 Mar 2026 03:02:45 +0000 ROA not before: Thu 19 Mar 2026 02:57:45 +0000 ROA not after: Thu 18 Mar 2027 03:02:45 +0000 asID: 136101 IP address blocks: 2001:df0:d700::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5b:81:28:b5:52:d6:93:b2:40:5a:36:59:98:54:61:15:67:6a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171 Validity Not Before: Mar 19 02:57:45 2026 GMT Not After : Mar 18 03:02:45 2027 GMT Subject: CN=8447F81BC0DE2D7C8084C802911D72150E74CDA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a7:e2:6d:93:fe:ec:0d:7d:7b:eb:95:1b:51: d6:4f:08:26:05:6e:94:c0:80:ec:80:86:2f:66:51: 77:ea:6a:33:81:0e:27:21:77:c5:5e:a7:32:86:4f: 76:bd:c7:f3:c9:ed:7b:88:2c:e4:bd:04:ad:d6:c8: 96:45:92:a6:57:d5:67:93:19:62:d4:8b:4e:39:b6: 57:ad:b4:6f:03:71:57:49:22:1b:af:7c:d8:9a:1c: 36:bf:77:80:0f:32:0a:92:b8:4e:70:de:32:e7:8d: 5b:f4:49:f2:d0:8c:db:ab:f4:1b:0a:41:2c:e2:41: 42:d3:01:dd:28:d5:a8:0f:48:88:5a:bb:2a:f4:90: 0c:c1:67:a4:98:dc:5f:ec:c8:85:ba:0e:80:66:04: 43:e4:d9:b1:5d:ab:5c:7e:ea:9b:93:95:dc:dc:85: 44:28:e7:1d:f1:7a:b6:c7:29:e3:a1:be:e5:25:68: 05:47:4c:8e:35:b2:73:ce:73:e9:a0:29:a5:da:08: a4:2c:1f:6a:81:9e:c8:aa:a0:21:ce:33:9c:2e:78: 93:fe:85:aa:2d:1b:df:5e:06:9d:5a:5b:96:88:a4: 5b:ed:67:0b:8f:2d:65:66:19:c0:39:13:d7:21:d4: 9a:cc:89:9f:cc:d4:66:7c:02:ee:16:fe:12:63:e4: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:47:F8:1B:C0:DE:2D:7C:80:84:C8:02:91:1D:72:15:0E:74:CD:A6 X509v3 Authority Key Identifier: keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/323030313a6466303a643730303a3a2f34382d3438203d3e20313336313031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:d700::/48 Signature Algorithm: sha256WithRSAEncryption 91:2d:90:2e:17:66:60:ae:9e:f1:6a:da:3f:61:86:2d:f8:67: fb:f2:94:cb:a6:6e:a5:bf:da:6b:a3:da:0e:31:f3:4d:93:8e: 11:d8:e1:81:de:8f:d0:43:76:9e:f8:fa:f9:34:b3:c8:75:61: 50:60:64:60:8e:00:7a:8f:de:18:a6:06:3d:ab:0b:90:db:4d: 3e:48:6d:eb:98:6f:5d:0d:1b:02:ef:50:7a:7b:8a:0f:24:b9: b4:6a:b6:60:b3:7f:3d:c3:29:49:0f:82:a2:3a:f9:84:c4:ac: d3:34:41:7c:00:3c:8f:8e:d9:73:b0:dd:af:8d:f6:9e:c4:42: b5:f6:1a:b0:ba:81:5d:af:d6:90:5e:62:c9:8c:d8:26:2b:25: 03:39:63:e9:5f:22:4c:9d:11:4c:a7:b5:df:43:24:79:2c:02: 46:d1:a6:82:36:85:b9:e6:47:5d:73:f1:03:ae:b6:44:de:c0: 70:3e:aa:ae:dd:f5:48:ee:0a:b4:66:3a:75:e7:ab:a9:a3:d0: 84:9b:12:d1:29:8c:a9:13:b5:b4:0d:1d:b0:5f:ef:27:b7:50: 07:2e:46:c9:7f:59:0a:0f:50:ec:f5:b5:b8:49:d0:3a:bf:30: 85:31:37:ed:7d:3f:b5:3b:3e:9a:e2:d4:aa:5d:db:a2:bf:6b: 90:65:d7:78 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUP1uBKLVS1pOyQFo2WZhUYRVnasUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF QUJCRDE3MTAeFw0yNjAzMTkwMjU3NDVaFw0yNzAzMTgwMzAyNDVaMDMxMTAvBgNV BAMTKDg0NDdGODFCQzBERTJEN0M4MDg0QzgwMjkxMUQ3MjE1MEU3NENEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQp+Jtk/7sDX1765UbUdZPCCYF bpTAgOyAhi9mUXfqajOBDichd8VepzKGT3a9x/PJ7XuILOS9BK3WyJZFkqZX1WeT GWLUi045tlettG8DcVdJIhuvfNiaHDa/d4APMgqSuE5w3jLnjVv0SfLQjNur9BsK QSziQULTAd0o1agPSIhauyr0kAzBZ6SY3F/syIW6DoBmBEPk2bFdq1x+6puTldzc hUQo5x3xerbHKeOhvuUlaAVHTI41snPOc+mgKaXaCKQsH2qBnsiqoCHOM5wueJP+ haotG99eBp1aW5aIpFvtZwuPLWVmGcA5E9ch1JrMiZ/M1GZ8Au4W/hJj5IPzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhEf4G8DeLXyAhMgCkR1yFQ50zaYwHwYDVR0j BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3 RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC RDE3MS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmMzQwNGU2LWJiMmEtNDRiMC1i ZWRlLWE4YjM1MDE0NjEyZC8wLzMyMzAzMDMxM2E2NDY2MzAzYTY0MzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzEzMDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8NcAMA0GCSqGSIb3DQEBCwUAA4IBAQCRLZAuF2Zgrp7xato/YYYt+Gf78pTLpm6l v9pro9oOMfNNk44R2OGB3o/QQ3ae+Pr5NLPIdWFQYGRgjgB6j94YpgY9qwuQ200+ SG3rmG9dDRsC71B6e4oPJLm0arZgs389wylJD4KiOvmExKzTNEF8ADyPjtlzsN2v jfaexEK19hqwuoFdr9aQXmLJjNgmKyUDOWPpXyJMnRFMp7XfQyR5LAJG0aaCNoW5 5kddc/EDrrZE3sBwPqqu3fVI7gq0Zjp156upo9CEmxLRKYypE7W0DR2wX+8nt1AH LkbJf1kKD1Ds9bW4SdA6vzCFMTftfT+1Oz6a4tSqXduiv2uQZdd4 -----END CERTIFICATE-----Generated at Fri Mar 27 00:37:04 2026 by rpki-client