$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa File: 323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa (raw, json) Hash identifier: qmXcGhHVMXdLAmw0DoQXCy+bPJwGQZoi74LgcW6JVlA= Subject key identifier: A3:8B:E8:6A:6B:EA:07:5A:A6:94:A4:A9:91:7C:5D:7E:89:41:61:B9 Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 2D759B4543F06D3B4A6D4BA33CBD47BF7822098D Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa Signing time: Fri 06 Mar 2026 14:55:20 +0000 ROA not before: Fri 06 Mar 2026 14:50:20 +0000 ROA not after: Fri 05 Mar 2027 14:55:20 +0000 asID: 131736 IP address blocks: 2404:2cc0:58::/46 maxlen: 46 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:75:9b:45:43:f0:6d:3b:4a:6d:4b:a3:3c:bd:47:bf:78:22:09:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Mar 6 14:50:20 2026 GMT Not After : Mar 5 14:55:20 2027 GMT Subject: CN=A38BE86A6BEA075AA694A4A9917C5D7E894161B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c2:51:c6:02:d8:49:26:94:41:53:6e:b3:f7: 64:4c:1c:ca:e5:6c:e8:cb:d4:6c:ce:ee:7a:96:a3: c2:a2:36:09:6c:02:d8:b4:a3:b4:5d:32:86:f4:8e: 50:65:4e:57:89:ab:ce:e8:68:ee:b9:75:56:ef:27: 89:93:6f:3a:34:13:50:03:f7:fc:02:0e:8e:01:23: 0f:1b:7c:6a:c9:a0:cb:1a:55:e0:56:f0:0b:c0:fc: ba:03:a5:27:7c:97:6a:76:f2:e7:03:ff:de:e2:96: 0a:1a:0c:8f:8f:d6:99:aa:ef:20:a3:8b:10:a7:7d: e1:36:cc:49:8d:c7:2a:c7:79:0c:88:db:fa:61:bc: 87:48:50:8f:26:98:03:32:9b:e0:79:ac:7e:39:2f: ff:41:fb:e5:a0:a3:dd:7a:ae:06:4f:e0:86:d9:7d: 45:7b:5a:84:69:4f:f7:ba:26:b0:fa:ea:79:0f:d3: f0:1b:79:d4:e6:45:87:20:29:39:6b:fc:35:b4:60: b4:31:fb:70:c8:61:f8:0d:0e:09:cf:57:06:da:e9: 2e:2c:be:f1:f1:74:7b:ef:86:ba:1b:ba:79:23:61: bc:8f:ec:ee:b0:91:f6:27:eb:ec:e2:cc:8a:0c:71: 26:d7:66:11:69:ae:d8:7a:db:30:2c:f0:88:87:40: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8B:E8:6A:6B:EA:07:5A:A6:94:A4:A9:91:7C:5D:7E:89:41:61:B9 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a35383a3a2f34362d3436203d3e20313331373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:2cc0:58::/46 Signature Algorithm: sha256WithRSAEncryption 68:8a:dd:2f:51:8e:39:cc:ba:c1:e2:e9:11:62:67:09:fd:e7: 7a:40:f4:da:01:bb:a3:c7:49:1e:56:3b:6f:a9:60:76:04:d5: af:1a:8e:27:ec:28:a8:3b:35:e5:be:62:af:01:da:a2:68:50: 32:e7:0a:6d:ee:c1:9d:1b:2c:a0:db:84:56:2a:0b:28:58:25: 00:31:65:7d:18:f3:2f:31:08:bc:c9:e3:93:94:1c:16:ad:89: a3:93:66:a8:17:98:5f:9e:dd:b1:07:41:45:81:2e:80:5f:59: 92:12:50:9c:79:af:80:77:90:c5:6f:26:27:5c:02:6c:bb:19: 37:cb:72:af:9a:f1:2b:1f:c8:54:cc:01:e5:c1:98:6f:36:51: 74:cd:a8:97:2b:ec:5e:eb:67:ba:7c:bd:e7:2c:31:05:1c:8d: 17:cd:c8:12:2b:fe:a0:78:b8:e1:4f:f6:00:07:38:4f:aa:82: 9c:d0:0c:92:8d:64:45:80:5a:ad:2e:a1:c7:bc:94:50:8d:25: 82:8c:f5:d8:c6:30:c2:32:1c:e2:a2:9a:7c:8a:66:b9:9f:22: a0:d8:7b:e8:ea:1c:89:79:4e:ef:0b:7b:82:3b:35:b1:4c:f2: 5c:bc:dd:8d:59:72:0d:51:19:d6:ac:f8:9d:82:4b:10:2c:b9: 7f:74:e2:47 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULXWbRUPwbTtKbUujPL1Hv3giCY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNjAzMDYxNDUwMjBaFw0yNzAzMDUxNDU1MjBaMDMxMTAvBgNV BAMTKEEzOEJFODZBNkJFQTA3NUFBNjk0QTRBOTkxN0M1RDdFODk0MTYxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrwlHGAthJJpRBU26z92RMHMrl bOjL1GzO7nqWo8KiNglsAti0o7RdMob0jlBlTleJq87oaO65dVbvJ4mTbzo0E1AD 9/wCDo4BIw8bfGrJoMsaVeBW8AvA/LoDpSd8l2p28ucD/97ilgoaDI+P1pmq7yCj ixCnfeE2zEmNxyrHeQyI2/phvIdIUI8mmAMym+B5rH45L/9B++Wgo916rgZP4IbZ fUV7WoRpT/e6JrD66nkP0/AbedTmRYcgKTlr/DW0YLQx+3DIYfgNDgnPVwba6S4s vvHxdHvvhrobunkjYbyP7O6wkfYn6+zizIoMcSbXZhFprth62zAs8IiHQLPjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUo4voamvqB1qmlKSpkXxdfolBYbkwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyNWNkYTM2LTY5M2EtNGMxYS1i YTllLWUwZTE3ODExMjE0MC8wLzMyMzQzMDM0M2EzMjYzNjMzMDNhMzUzODNhM2Ey ZjM0MzYyZDM0MzYyMDNkM2UyMDMxMzMzMTM3MzMzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAiQELMAA WDANBgkqhkiG9w0BAQsFAAOCAQEAaIrdL1GOOcy6weLpEWJnCf3nekD02gG7o8dJ HlY7b6lgdgTVrxqOJ+woqDs15b5irwHaomhQMucKbe7BnRssoNuEVioLKFglADFl fRjzLzEIvMnjk5QcFq2Jo5NmqBeYX57dsQdBRYEugF9ZkhJQnHmvgHeQxW8mJ1wC bLsZN8tyr5rxKx/IVMwB5cGYbzZRdM2olyvsXutnuny95ywxBRyNF83IEiv+oHi4 4U/2AAc4T6qCnNAMko1kRYBarS6hx7yUUI0lgoz12MYwwjIc4qKafIpmuZ8ioNh7 6OociXlO7wt7gjs1sUzyXLzdjVlyDVEZ1qz4nYJLECy5f3TiRw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:33:33 2026 by rpki-client