$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/323430303a613334303a3a2f33322d3332203d3e20313336303735.roa File: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (raw, json) Hash identifier: 2uzKcYnU72O5Xi/qNWscVRV4Rkx/gN5uCZaKNsBaNU0= Subject key identifier: 65:0D:B8:63:A5:D6:4F:55:D2:BB:FA:EB:6D:42:01:D1:CB:CC:8E:BA Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 61DAFAB9DD0691E4D6E7A5ACFE423B8B76E7E518 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/323430303a613334303a3a2f33322d3332203d3e20313336303735.roa Signing time: Sat 21 Mar 2026 21:00:00 +0000 ROA not before: Sat 21 Mar 2026 20:55:00 +0000 ROA not after: Sat 20 Mar 2027 21:00:00 +0000 asID: 136075 IP address blocks: 2400:a340::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:da:fa:b9:dd:06:91:e4:d6:e7:a5:ac:fe:42:3b:8b:76:e7:e5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Mar 21 20:55:00 2026 GMT Not After : Mar 20 21:00:00 2027 GMT Subject: CN=650DB863A5D64F55D2BBFAEB6D4201D1CBCC8EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:e5:4c:63:9e:57:e7:d8:ab:b0:57:68:12: e5:e3:b0:53:48:ff:0c:0b:29:63:0a:02:9d:18:59: f7:42:dc:9f:98:5c:eb:17:de:6f:56:9b:9f:5a:23: 01:13:dc:1e:b0:27:af:2f:f6:4a:04:31:15:c8:0b: 97:48:c6:90:ad:9b:5f:e3:6c:21:3c:22:3f:7f:80: 71:9d:d7:d3:87:f2:45:90:ac:86:08:de:72:61:e9: d9:69:39:eb:27:31:f5:36:6a:7e:c2:3c:a2:bc:8f: 34:cd:8f:56:3d:06:7c:25:b8:7b:aa:03:1e:8c:59: 33:87:97:4f:08:f8:54:8f:36:82:11:a8:dd:91:72: 91:cc:39:88:0d:fd:7f:b7:3d:ee:d4:2f:86:dc:ea: 3b:65:29:ed:aa:23:3c:7f:ac:50:71:3a:c8:e7:3b: 35:f0:95:aa:38:45:ef:b8:7e:86:4a:9c:5c:87:4c: c2:36:17:bf:5e:24:a9:4c:64:a0:f7:4f:cd:54:4b: 7d:36:7f:09:32:fe:ad:b5:24:b2:b5:14:d4:0e:f5: a9:d8:0c:5e:dd:ef:0c:be:52:a9:63:98:05:53:fc: 7d:f0:de:15:44:66:1f:68:67:88:ae:f1:c4:3b:c7: f5:0b:00:5e:af:fe:ef:7e:b4:8e:5d:d9:a4:0b:f0: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0D:B8:63:A5:D6:4F:55:D2:BB:FA:EB:6D:42:01:D1:CB:CC:8E:BA X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/323430303a613334303a3a2f33322d3332203d3e20313336303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:a340::/32 Signature Algorithm: sha256WithRSAEncryption cf:7e:88:ce:22:01:9e:51:35:17:a1:f4:f3:68:07:9e:e7:89: fb:79:d7:96:8b:7e:19:0d:02:6f:5e:ff:e1:9a:8c:4e:50:2b: b3:5e:7d:c9:bf:74:78:2b:1b:f7:91:76:d6:13:be:ec:1e:32: 1f:00:82:fc:87:c1:c9:c4:eb:39:c0:45:eb:54:5f:61:76:1c: 9d:cf:1e:d3:75:4d:d6:3f:a7:db:fa:f2:2c:fd:23:c1:fa:2b: b0:84:13:b5:0b:a0:2a:f6:9d:3d:49:cf:d4:37:41:22:51:3e: e7:fd:cf:c9:dd:e2:cf:96:e6:39:f3:c7:1b:b3:90:29:fb:3f: 1a:91:f6:b2:c1:f3:42:1a:1f:8f:3e:ee:89:fd:d4:42:64:7c: c5:de:03:00:ce:f3:40:72:4c:b2:0e:26:c6:54:61:30:2c:4a: 8a:0a:ef:59:ef:e3:ae:1b:81:51:0d:0f:52:ef:3f:0c:0e:52: da:25:83:8f:1f:2f:2d:ff:2b:dd:48:42:01:9a:6a:0d:44:96: 32:95:fa:fd:9a:93:a3:1a:8f:6d:0a:d4:08:02:62:c5:d8:37: c3:d3:c8:8f:72:d7:00:d3:bf:a4:1e:54:7a:28:ca:55:ca:65: d0:30:35:16:20:7d:b9:1f:49:57:f8:f6:1f:e8:00:bf:d1:c3: 0e:d6:14:cb -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUYdr6ud0GkeTW56Ws/kI7i3bn5RgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNjAzMjEyMDU1MDBaFw0yNzAzMjAyMTAwMDBaMDMxMTAvBgNV BAMTKDY1MERCODYzQTVENjRGNTVEMkJCRkFFQjZENDIwMUQxQ0JDQzhFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJu+VMY55X59irsFdoEuXjsFNI /wwLKWMKAp0YWfdC3J+YXOsX3m9Wm59aIwET3B6wJ68v9koEMRXIC5dIxpCtm1/j bCE8Ij9/gHGd19OH8kWQrIYI3nJh6dlpOesnMfU2an7CPKK8jzTNj1Y9BnwluHuq Ax6MWTOHl08I+FSPNoIRqN2RcpHMOYgN/X+3Pe7UL4bc6jtlKe2qIzx/rFBxOsjn OzXwlao4Re+4foZKnFyHTMI2F79eJKlMZKD3T81US302fwky/q21JLK1FNQO9anY DF7d7wy+UqljmAVT/H3w3hVEZh9oZ4iu8cQ7x/ULAF6v/u9+tI5d2aQL8LQdAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUZQ24Y6XWT1XSu/rrbUIB0cvMjrowHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMGU1YWMyLWI2YmItNGJlYy05 ZGM5LWU0MzBhNjczMzIxNi8wLzMyMzQzMDMwM2E2MTMzMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjMwMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQAo0AwDQYJKoZI hvcNAQELBQADggEBAM9+iM4iAZ5RNReh9PNoB57nift515aLfhkNAm9e/+GajE5Q K7Nefcm/dHgrG/eRdtYTvuweMh8AgvyHwcnE6znARetUX2F2HJ3PHtN1TdY/p9v6 8iz9I8H6K7CEE7ULoCr2nT1Jz9Q3QSJRPuf9z8nd4s+W5jnzxxuzkCn7PxqR9rLB 80IaH48+7on91EJkfMXeAwDO80ByTLIOJsZUYTAsSooK71nv464bgVEND1LvPwwO Utolg48fLy3/K91IQgGaag1EljKV+v2ak6Maj20K1AgCYsXYN8PTyI9y1wDTv6Qe VHooylXKZdAwNRYgfbkfSVf49h/oAL/Rww7WFMs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:12:37 2026 by rpki-client