$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa File: 323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa (raw, json) Hash identifier: 2GieUC+DWct38EkxbolERLB2iQ5GzTRUAOHt+PgljZI= Subject key identifier: 4C:5A:ED:F3:31:E0:A0:4D:90:38:0F:21:F9:C0:72:11:67:91:A6:A9 Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 33973BC11CAB16E6C5623B2B22040B1CC73399CB Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa Signing time: Fri 06 Mar 2026 14:51:52 +0000 ROA not before: Fri 06 Mar 2026 14:46:52 +0000 ROA not after: Fri 05 Mar 2027 14:51:52 +0000 asID: 131736 IP address blocks: 2404:2cc0:20::/43 maxlen: 43 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:97:3b:c1:1c:ab:16:e6:c5:62:3b:2b:22:04:0b:1c:c7:33:99:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Mar 6 14:46:52 2026 GMT Not After : Mar 5 14:51:52 2027 GMT Subject: CN=4C5AEDF331E0A04D90380F21F9C072116791A6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:a7:c6:19:12:ab:25:01:b3:33:35:0d:3e: e8:9c:f2:31:c9:a5:4a:d9:73:cf:9d:d6:82:25:ab: 82:aa:5c:61:f0:10:10:fc:2f:65:5d:0e:79:98:83: e8:63:32:f1:45:32:36:b9:9c:dd:6b:5d:7e:08:3b: bb:ff:e6:1e:61:0a:c3:dd:09:26:78:08:0d:68:23: e0:38:7f:1f:a0:ba:1b:f7:75:87:e8:78:03:b2:10: 05:e2:b6:48:05:20:3b:ee:58:49:68:29:2e:72:22: fc:d8:a6:3d:d3:e3:ab:5e:42:d0:9d:7b:65:a3:61: 29:33:c5:bb:00:bf:1b:0a:99:6d:9d:a7:00:72:ca: db:55:45:ad:7e:57:07:b1:f3:43:05:09:f9:10:f6: 19:9f:8e:e3:e0:9a:62:d3:eb:41:6f:88:42:71:f7: 50:60:1d:fb:4f:60:4e:a6:6c:a4:93:d8:a3:50:84: 4d:3b:72:2b:cd:f9:40:76:74:66:90:13:ca:2e:93: 1f:56:fd:dc:e0:d7:1b:d4:99:ba:24:4e:aa:e3:d3: ee:a0:df:bf:a4:24:83:23:b7:14:96:a9:e3:56:ce: 44:61:34:5f:2e:1a:ad:eb:61:65:5d:71:ea:16:f3: fa:5b:59:b5:cd:e6:0b:4c:b0:2b:28:b9:74:7b:ca: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:ED:F3:31:E0:A0:4D:90:38:0F:21:F9:C0:72:11:67:91:A6:A9 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a32303a3a2f34332d3433203d3e20313331373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:2cc0:20::/43 Signature Algorithm: sha256WithRSAEncryption 7d:d9:cf:cf:20:1b:95:46:b3:f6:9b:3e:c8:6a:ad:84:06:25: c5:47:ec:14:03:a3:c8:56:b5:3c:84:03:b3:c4:4a:71:9e:76: 6d:70:54:a1:87:70:a3:a8:c4:0a:9e:bb:8d:7e:1a:4b:47:cd: a9:2a:63:95:55:3f:cf:89:15:3a:56:d4:f2:d4:fc:e1:71:d4: b1:4c:91:96:3c:60:9f:b2:00:5e:d3:eb:1e:9b:26:5c:6e:c4: a2:c6:f6:6e:62:d5:b8:69:57:1c:6a:a9:00:f6:26:c6:72:fe: aa:c9:2c:58:3d:09:c4:87:97:96:68:53:12:46:a7:5a:45:cd: c8:c8:f8:53:06:2b:d0:7e:70:be:bf:fb:57:26:7a:b0:06:04: 56:82:9a:16:79:22:c8:69:2c:71:5f:7f:ab:d7:10:9c:8b:2f: 35:86:51:46:51:6c:35:72:93:ac:d8:f0:0f:03:1f:08:f6:31: cb:c9:28:3f:9d:ff:62:91:af:44:c8:f9:64:0b:4f:95:e3:5e: 90:03:ae:20:45:7c:35:64:91:9a:29:c1:a8:32:98:37:b0:2c: 1b:1c:63:65:3a:1f:b8:b0:d0:1e:eb:10:30:6b:0a:cc:38:c0: 00:8c:05:36:a2:dc:27:3b:47:3e:4a:65:a7:ac:17:08:de:f0: da:14:53:e9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUM5c7wRyrFubFYjsrIgQLHMczmcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNjAzMDYxNDQ2NTJaFw0yNzAzMDUxNDUxNTJaMDMxMTAvBgNV BAMTKDRDNUFFREYzMzFFMEEwNEQ5MDM4MEYyMUY5QzA3MjExNjc5MUE2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvW6fGGRKrJQGzMzUNPuic8jHJ pUrZc8+d1oIlq4KqXGHwEBD8L2VdDnmYg+hjMvFFMja5nN1rXX4IO7v/5h5hCsPd CSZ4CA1oI+A4fx+guhv3dYfoeAOyEAXitkgFIDvuWEloKS5yIvzYpj3T46teQtCd e2WjYSkzxbsAvxsKmW2dpwByyttVRa1+Vwex80MFCfkQ9hmfjuPgmmLT60FviEJx 91BgHftPYE6mbKST2KNQhE07civN+UB2dGaQE8oukx9W/dzg1xvUmbokTqrj0+6g 37+kJIMjtxSWqeNWzkRhNF8uGq3rYWVdceoW8/pbWbXN5gtMsCsouXR7yn/VAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUTFrt8zHgoE2QOA8h+cByEWeRpqkwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyNWNkYTM2LTY5M2EtNGMxYS1i YTllLWUwZTE3ODExMjE0MC8wLzMyMzQzMDM0M2EzMjYzNjMzMDNhMzIzMDNhM2Ey ZjM0MzMyZDM0MzMyMDNkM2UyMDMxMzMzMTM3MzMzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSQELMAA IDANBgkqhkiG9w0BAQsFAAOCAQEAfdnPzyAblUaz9ps+yGqthAYlxUfsFAOjyFa1 PIQDs8RKcZ52bXBUoYdwo6jECp67jX4aS0fNqSpjlVU/z4kVOlbU8tT84XHUsUyR ljxgn7IAXtPrHpsmXG7Eosb2bmLVuGlXHGqpAPYmxnL+qsksWD0JxIeXlmhTEkan WkXNyMj4UwYr0H5wvr/7VyZ6sAYEVoKaFnkiyGkscV9/q9cQnIsvNYZRRlFsNXKT rNjwDwMfCPYxy8koP53/YpGvRMj5ZAtPleNekAOuIEV8NWSRminBqDKYN7AsGxxj ZTofuLDQHusQMGsKzDjAAIwFNqLcJztHPkplp6wXCN7w2hRT6Q== -----END CERTIFICATE-----Generated at Thu Mar 26 20:03:05 2026 by rpki-client