$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa File: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (raw, json) Hash identifier: HdMEaKkRmV4PARMSxcIzB8IIxzpLKv/iS31wiWgTaAM= Subject key identifier: EF:CA:A0:AE:A2:E2:F2:C0:24:9B:46:F0:F1:E4:71:E5:B7:AC:6F:1A Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 043C1DBEA2FDDD3AC2C64BBDD8258C66B1541F1D Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa Signing time: Wed 18 Mar 2026 11:00:01 +0000 ROA not before: Wed 18 Mar 2026 10:55:01 +0000 ROA not after: Wed 17 Mar 2027 11:00:01 +0000 asID: 136131 IP address blocks: 2401:8440:311::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3c:1d:be:a2:fd:dd:3a:c2:c6:4b:bd:d8:25:8c:66:b1:54:1f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Mar 18 10:55:01 2026 GMT Not After : Mar 17 11:00:01 2027 GMT Subject: CN=EFCAA0AEA2E2F2C0249B46F0F1E471E5B7AC6F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:fe:a5:b6:3d:a4:5d:5c:84:d0:63:20:55: fe:ae:87:ea:47:b0:8b:3a:19:eb:8f:88:76:87:b8: ca:93:73:42:0b:eb:18:0c:42:05:7d:71:60:04:46: 43:64:38:8c:1e:ad:85:48:81:91:db:f8:2e:4a:75: d7:16:e2:f4:d0:92:90:db:a6:60:b1:f8:28:89:73: b5:22:3c:3c:4f:ae:02:c0:35:ee:c1:3a:45:85:12: da:16:22:01:5b:a8:1e:43:75:1b:5d:2d:a7:56:0a: b2:5f:38:ab:37:d9:c1:1b:26:8f:08:cc:b2:d8:10: ca:c3:c0:51:e0:21:16:9d:5e:12:23:9f:c3:04:8b: 68:49:a2:19:9b:8f:2e:e9:58:c8:b1:28:8e:31:17: 4a:2f:1f:ca:b9:ea:25:cc:4b:b2:02:8f:9a:f2:35: e0:1d:5c:10:07:f8:1a:ab:a6:60:87:8d:3e:be:3c: d3:58:27:60:14:61:76:8b:32:a2:b8:cc:69:ed:c7: 08:f7:9e:76:e9:6c:c1:ff:57:df:9b:39:fb:25:e1: 89:8a:b5:cb:d8:4e:13:67:97:d7:f6:a6:82:fb:5f: 95:8a:66:c7:cc:12:73:7f:5e:56:22:9f:49:61:ff: 3c:24:b2:6e:2a:cd:8b:71:5f:b6:11:5b:67:f3:ae: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:A0:AE:A2:E2:F2:C0:24:9B:46:F0:F1:E4:71:E5:B7:AC:6F:1A X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8440:311::/48 Signature Algorithm: sha256WithRSAEncryption 1d:35:5a:5a:a9:f0:3c:eb:65:20:eb:d8:dd:23:4a:60:8b:81: d1:a8:0d:7b:68:81:c8:aa:2e:a9:24:7d:2d:1d:ad:8f:3f:d0: 10:6e:0f:7c:84:04:ea:df:c5:03:d0:7c:a6:c1:b5:4b:42:d3: 70:e8:c6:8d:48:25:f4:e6:0d:c0:12:bc:1e:22:fa:d9:c0:c8: ed:a2:54:74:2c:dc:f7:49:4c:dd:56:1d:ab:81:a3:93:aa:c9: 2e:6e:f7:34:ce:e0:8a:1b:f1:07:a0:b9:11:84:c7:ca:71:cf: 1d:c0:bf:4c:f3:7b:a2:21:a4:bf:60:c9:9c:88:80:21:03:e5: 53:d6:9f:4b:03:c2:dc:9f:a0:86:a0:4a:1c:e7:fe:ce:4f:1e: 4f:b4:72:5b:7d:6c:0a:b5:28:90:57:35:aa:ed:47:3c:6f:77: 4e:c1:13:79:06:b1:62:df:eb:50:78:80:e3:44:70:d7:1d:ae: 46:8e:39:70:7c:2b:7e:16:82:ac:65:99:d2:a6:c3:d3:32:5b: a0:41:96:74:dc:24:2d:54:bf:21:8b:2d:60:19:78:df:5d:7b: bb:f3:3b:85:f5:d8:2f:71:a0:96:30:d6:aa:e1:b6:12:6c:5d: 6c:20:70:0d:fd:cf:12:6b:c4:cc:e5:24:8a:03:44:84:31:90: b0:c7:34:a7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBDwdvqL93TrCxku92CWMZrFUHx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNjAzMTgxMDU1MDFaFw0yNzAzMTcxMTAwMDFaMDMxMTAvBgNV BAMTKEVGQ0FBMEFFQTJFMkYyQzAyNDlCNDZGMEYxRTQ3MUU1QjdBQzZGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJY/6ltj2kXVyE0GMgVf6uh+pH sIs6GeuPiHaHuMqTc0IL6xgMQgV9cWAERkNkOIwerYVIgZHb+C5KddcW4vTQkpDb pmCx+CiJc7UiPDxPrgLANe7BOkWFEtoWIgFbqB5DdRtdLadWCrJfOKs32cEbJo8I zLLYEMrDwFHgIRadXhIjn8MEi2hJohmbjy7pWMixKI4xF0ovH8q56iXMS7ICj5ry NeAdXBAH+BqrpmCHjT6+PNNYJ2AUYXaLMqK4zGntxwj3nnbpbMH/V9+bOfsl4YmK tcvYThNnl9f2poL7X5WKZsfMEnN/XlYin0lh/zwksm4qzYtxX7YRW2fzrpeFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU78qgrqLi8sAkm0bw8eRx5besbxowHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h YjIwLThjN2YyZDViZTY5Zi8wLzMyMzQzMDMxM2EzODM0MzQzMDNhMzMzMTMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzEzMzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAGE QAMRMA0GCSqGSIb3DQEBCwUAA4IBAQAdNVpaqfA862Ug69jdI0pgi4HRqA17aIHI qi6pJH0tHa2PP9AQbg98hATq38UD0HymwbVLQtNw6MaNSCX05g3AErweIvrZwMjt olR0LNz3SUzdVh2rgaOTqskubvc0zuCKG/EHoLkRhMfKcc8dwL9M83uiIaS/YMmc iIAhA+VT1p9LA8Lcn6CGoEoc5/7OTx5PtHJbfWwKtSiQVzWq7Uc8b3dOwRN5BrFi 3+tQeIDjRHDXHa5GjjlwfCt+FoKsZZnSpsPTMlugQZZ03CQtVL8hiy1gGXjfXXu7 8zuF9dgvcaCWMNaq4bYSbF1sIHAN/c8Sa8TM5SSKA0SEMZCwxzSn -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:36 2026 by rpki-client