$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa File: 323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa (raw, json) Hash identifier: wRDFqbZTPTa3AkPVgMxOMULgqudJoTKiuzDPhVfykeA= Subject key identifier: 5A:FC:E2:3E:40:45:48:75:49:4E:96:53:E4:CA:99:26:F5:D1:CC:58 Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 69A077274D35D98825738DAB98B5D121028C7668 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa Signing time: Fri 06 Mar 2026 14:53:38 +0000 ROA not before: Fri 06 Mar 2026 14:48:38 +0000 ROA not after: Fri 05 Mar 2027 14:53:38 +0000 asID: 131736 IP address blocks: 2404:2cc0:48::/46 maxlen: 46 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a0:77:27:4d:35:d9:88:25:73:8d:ab:98:b5:d1:21:02:8c:76:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Mar 6 14:48:38 2026 GMT Not After : Mar 5 14:53:38 2027 GMT Subject: CN=5AFCE23E40454875494E9653E4CA9926F5D1CC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:7f:fd:34:d0:99:0a:58:1e:c8:b0:5a:2c: 82:b3:29:3e:00:0f:4e:b1:93:ef:09:d9:e4:d3:c2: 54:8c:57:62:ed:fa:87:7c:ca:de:9f:11:29:3d:6d: 77:72:62:e6:7f:c9:3c:5e:1b:1d:b8:4b:26:36:b3: de:f2:e5:91:5a:1f:19:cf:59:ab:a0:4f:48:ce:c2: c5:6f:ec:af:a5:f2:68:df:a4:79:a2:a6:dd:c5:2e: 53:72:29:09:ca:a3:01:33:e1:0a:73:9a:0e:47:29: 82:77:16:57:7e:f4:fd:dc:92:4d:64:6f:6f:b9:42: c9:cc:fc:d6:5f:ae:9f:dc:16:26:d3:06:fb:94:4b: 1d:aa:ca:76:3d:45:65:d2:af:50:d0:07:80:ca:45: aa:2e:b9:4f:bb:67:08:60:34:87:08:e8:6a:d7:be: fe:5e:a8:f7:f2:d1:39:57:28:f7:ab:cf:4e:8b:26: 5f:79:fe:2f:a1:62:41:5d:ac:66:c4:4d:fa:4c:4a: 05:00:cd:c0:59:1d:2e:9e:49:e2:37:1c:84:a9:48: bb:0b:71:6d:1f:60:fb:1d:4f:13:18:93:7e:09:fe: 78:0c:11:0f:74:16:8b:98:75:60:03:ed:94:c4:df: 91:ee:3b:b0:5a:74:eb:02:a0:10:07:90:0e:a4:6b: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FC:E2:3E:40:45:48:75:49:4E:96:53:E4:CA:99:26:F5:D1:CC:58 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a34383a3a2f34362d3436203d3e20313331373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:2cc0:48::/46 Signature Algorithm: sha256WithRSAEncryption 3b:5f:8e:dc:e8:0b:03:59:b4:bc:aa:39:4a:6e:e4:f3:c1:20: ee:4b:52:e2:7c:ef:4f:52:f4:9a:1e:f8:18:58:fd:79:3c:ed: 5a:a1:23:2d:b9:79:66:1a:58:ee:69:3d:0b:b0:f8:a9:c1:8f: 4b:e1:85:4d:53:ef:92:0a:97:92:c4:74:e9:a8:9f:70:a4:19: d9:e4:74:5c:95:e7:c4:bf:5e:3f:48:d7:bd:a5:98:ac:af:34: 73:d1:f0:b5:ce:03:c5:ff:ca:89:b3:ed:90:41:90:6e:e4:69: ad:f3:f5:a3:3c:88:c8:3e:34:51:f0:84:1b:25:7c:d2:c7:a8: 13:18:b9:10:8e:05:05:2a:6e:2b:25:cc:3f:40:23:c4:4c:1a: 4d:cc:d6:bf:9a:e8:2a:be:20:8f:dc:b2:d3:f6:40:34:94:25: a7:3a:47:fc:b0:a9:b5:42:9c:0e:82:72:4b:1e:8d:3e:d3:13: be:1d:11:77:f1:8e:bf:87:73:45:73:f2:37:bc:50:d0:42:6e: 71:29:f9:d7:e7:27:a4:e3:f4:ee:8e:81:e8:5f:4a:62:9b:3c: 50:c7:c9:47:0b:ce:fa:59:62:c7:2b:03:22:72:ac:3d:4f:d0: 50:73:a4:4d:b7:b0:34:9b:fc:04:ac:b6:0e:e0:5b:67:65:97: 6b:89:f9:e1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUaaB3J0012Yglc42rmLXRIQKMdmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNjAzMDYxNDQ4MzhaFw0yNzAzMDUxNDUzMzhaMDMxMTAvBgNV BAMTKDVBRkNFMjNFNDA0NTQ4NzU0OTRFOTY1M0U0Q0E5OTI2RjVEMUNDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHX/9NNCZClgeyLBaLIKzKT4A D06xk+8J2eTTwlSMV2Lt+od8yt6fESk9bXdyYuZ/yTxeGx24SyY2s97y5ZFaHxnP WaugT0jOwsVv7K+l8mjfpHmipt3FLlNyKQnKowEz4Qpzmg5HKYJ3Fld+9P3ckk1k b2+5QsnM/NZfrp/cFibTBvuUSx2qynY9RWXSr1DQB4DKRaouuU+7ZwhgNIcI6GrX vv5eqPfy0TlXKPerz06LJl95/i+hYkFdrGbETfpMSgUAzcBZHS6eSeI3HISpSLsL cW0fYPsdTxMYk34J/ngMEQ90FouYdWAD7ZTE35HuO7BadOsCoBAHkA6ka9/7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUWvziPkBFSHVJTpZT5MqZJvXRzFgwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyNWNkYTM2LTY5M2EtNGMxYS1i YTllLWUwZTE3ODExMjE0MC8wLzMyMzQzMDM0M2EzMjYzNjMzMDNhMzQzODNhM2Ey ZjM0MzYyZDM0MzYyMDNkM2UyMDMxMzMzMTM3MzMzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAiQELMAA SDANBgkqhkiG9w0BAQsFAAOCAQEAO1+O3OgLA1m0vKo5Sm7k88Eg7ktS4nzvT1L0 mh74GFj9eTztWqEjLbl5ZhpY7mk9C7D4qcGPS+GFTVPvkgqXksR06aifcKQZ2eR0 XJXnxL9eP0jXvaWYrK80c9Hwtc4Dxf/KibPtkEGQbuRprfP1ozyIyD40UfCEGyV8 0seoExi5EI4FBSpuKyXMP0AjxEwaTczWv5roKr4gj9yy0/ZANJQlpzpH/LCptUKc DoJySx6NPtMTvh0Rd/GOv4dzRXPyN7xQ0EJucSn51+cnpOP07o6B6F9KYps8UMfJ RwvO+llixysDInKsPU/QUHOkTbewNJv8BKy2DuBbZ2WXa4n54Q== -----END CERTIFICATE-----Generated at Thu Mar 26 20:03:21 2026 by rpki-client