$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa File: 323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa (raw, json) Hash identifier: 7pjFoEqpwiXopkcvlXdHmAMnkhazHCcUS4M07HWAyuY= Subject key identifier: 25:DF:44:6E:2C:79:0D:59:04:DF:4B:94:D4:D3:F2:16:27:AA:45:44 Certificate issuer: /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Certificate serial: 4CCC0E1D0CCC0362F24A8523FEC0CCCE3EF04077 Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa Signing time: Wed 11 Mar 2026 09:00:00 +0000 ROA not before: Wed 11 Mar 2026 08:55:00 +0000 ROA not after: Wed 10 Mar 2027 09:00:00 +0000 asID: 141069 IP address blocks: 2406:75c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cc:0e:1d:0c:cc:03:62:f2:4a:85:23:fe:c0:cc:ce:3e:f0:40:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA Validity Not Before: Mar 11 08:55:00 2026 GMT Not After : Mar 10 09:00:00 2027 GMT Subject: CN=25DF446E2C790D5904DF4B94D4D3F21627AA4544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a8:e0:42:e6:21:8a:5a:94:5e:0d:fd:09:53: 8f:f7:ed:4c:9d:d2:71:8d:61:58:38:7e:d9:f7:f2: 95:54:1a:2e:fa:be:5f:16:e4:84:c6:76:81:c0:f9: 2c:f4:d3:b3:10:aa:1e:35:17:de:4c:91:d6:aa:44: 18:ae:ad:43:ee:85:7e:6c:7c:00:d0:15:04:58:b2: 99:82:ef:63:f9:7c:c4:58:66:67:84:79:1d:9b:f2: 98:80:80:a1:4d:83:67:13:51:c9:a5:56:34:8f:f5: fe:25:cc:a8:1b:55:dc:a6:51:1a:3f:7b:18:a2:aa: 3f:50:40:bc:70:97:00:7f:89:a9:8c:40:5e:cf:62: 1a:55:7c:60:67:3d:14:7f:b9:6c:1d:5e:06:7a:ff: 91:d3:fe:f9:0e:1d:2e:65:ad:d8:dd:86:fa:1f:bf: 36:f4:d9:e0:90:b7:2c:74:4d:d7:0e:74:b9:b9:3e: bf:50:63:5d:c1:be:4b:e0:45:0f:58:68:4f:e1:57: bd:e3:31:1f:48:b1:34:94:a3:b8:06:40:97:0d:c8: 1c:93:9c:d9:62:79:43:d2:fd:fa:ad:4d:ad:63:b6: 18:e2:34:e9:e0:2c:f4:8d:d0:3b:9a:dd:bc:de:04: 04:91:e6:fa:70:93:cd:ca:71:0b:43:e8:48:8f:38: 20:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DF:44:6E:2C:79:0D:59:04:DF:4B:94:D4:D3:F2:16:27:AA:45:44 X509v3 Authority Key Identifier: keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/323430363a373563303a666666663a3a2f34382d3438203d3e20313431303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:75c0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 2e:73:51:23:20:d4:86:33:b0:92:27:c6:2a:37:d9:32:c4:52: 8c:01:31:90:65:ac:8f:ca:9e:bc:55:b5:81:88:6a:97:48:05: 02:7e:20:e9:73:2e:46:ba:bd:fc:1b:f6:29:79:76:f1:62:02: 1c:44:77:01:c2:7a:60:36:a2:7c:be:60:21:92:b7:09:8b:f5: 2b:8b:7a:60:04:39:37:6d:86:4f:68:78:af:c2:b8:f5:ee:51: a5:c4:75:1a:ca:ce:99:c6:46:ab:30:11:0e:6a:b6:d0:41:28: 12:dc:9c:a0:a2:75:16:dd:32:43:be:4b:6f:d0:c8:77:37:6d: a4:0d:03:36:79:bc:2e:90:d6:7f:7c:9e:f0:11:2b:67:f4:36: 31:b5:6e:46:00:44:8d:d3:01:8c:09:84:37:49:ef:9e:7a:50: 60:bc:df:7e:9e:b4:b6:ac:48:f3:ea:ac:b2:1a:df:0c:c7:99: a5:09:8e:bc:2e:30:4e:8a:d7:2e:5c:9b:be:56:30:0b:61:4a: f9:26:d9:b1:1c:ac:45:39:0f:3c:71:f9:81:c3:6e:75:4d:4d: 16:6a:f3:24:76:b3:ac:af:3e:88:d7:81:a0:aa:90:0a:0c:26: 83:cf:e1:fc:75:33:bb:fc:26:d2:97:6b:5d:c2:84:2f:27:c0: f4:3b:bd:b8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUTMwOHQzMA2LySoUj/sDMzj7wQHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD QTEzRjBGQTAeFw0yNjAzMTEwODU1MDBaFw0yNzAzMTAwOTAwMDBaMDMxMTAvBgNV BAMTKDI1REY0NDZFMkM3OTBENTkwNERGNEI5NEQ0RDNGMjE2MjdBQTQ1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqOBC5iGKWpReDf0JU4/37Uyd 0nGNYVg4ftn38pVUGi76vl8W5ITGdoHA+Sz007MQqh41F95MkdaqRBiurUPuhX5s fADQFQRYspmC72P5fMRYZmeEeR2b8piAgKFNg2cTUcmlVjSP9f4lzKgbVdymURo/ exiiqj9QQLxwlwB/iamMQF7PYhpVfGBnPRR/uWwdXgZ6/5HT/vkOHS5lrdjdhvof vzb02eCQtyx0TdcOdLm5Pr9QY13BvkvgRQ9YaE/hV73jMR9IsTSUo7gGQJcNyByT nNlieUPS/fqtTa1jthjiNOngLPSN0Dua3bzeBASR5vpwk83KcQtD6EiPOCDpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUJd9Ebix5DVkE30uU1NPyFieqRUQwHwYDVR0j BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz RjBGQS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0NTBkOTU2LTliMDAtNDZjMS1h NjMxLTM1NjRlMTg2YTA3OS8wLzMyMzQzMDM2M2EzNzM1NjMzMDNhNjY2NjY2NjYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzMDM2Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BnXA//8wDQYJKoZIhvcNAQELBQADggEBAC5zUSMg1IYzsJInxio32TLEUowBMZBl rI/KnrxVtYGIapdIBQJ+IOlzLka6vfwb9il5dvFiAhxEdwHCemA2ony+YCGStwmL 9SuLemAEOTdthk9oeK/CuPXuUaXEdRrKzpnGRqswEQ5qttBBKBLcnKCidRbdMkO+ S2/QyHc3baQNAzZ5vC6Q1n98nvARK2f0NjG1bkYARI3TAYwJhDdJ7556UGC8336e tLasSPPqrLIa3wzHmaUJjrwuME6K1y5cm75WMAthSvkm2bEcrEU5Dzxx+YHDbnVN TRZq8yR2s6yvPojXgaCqkAoMJoPP4fx1M7v8JtKXa13ChC8nwPQ7vbg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:17:13 2026 by rpki-client