$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa File: 323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa (raw, json) Hash identifier: CXBka91AcpIi7B936LEhK1wUlB3oW4u4V9swPLT9q80= Subject key identifier: 8A:79:1E:E5:81:A3:6C:9D:9A:0C:18:11:06:F5:30:06:36:02:8E:E8 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 119688439E589D7A17D51581D1F97B3020B31BFC Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa Signing time: Fri 06 Mar 2026 03:00:00 +0000 ROA not before: Fri 06 Mar 2026 02:55:00 +0000 ROA not after: Fri 05 Mar 2027 03:00:00 +0000 asID: 133798 IP address blocks: 2402:5680:800::/38 maxlen: 38 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:96:88:43:9e:58:9d:7a:17:d5:15:81:d1:f9:7b:30:20:b3:1b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Mar 6 02:55:00 2026 GMT Not After : Mar 5 03:00:00 2027 GMT Subject: CN=8A791EE581A36C9D9A0C181106F5300636028EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:b7:84:50:0b:d0:b9:ed:79:1c:e3:3e:10: 16:dd:4f:7a:57:e9:d8:4b:81:84:fb:70:fb:e6:a6: b5:e6:d0:fe:f1:0d:00:e2:e0:6a:ba:71:39:13:3d: 61:3f:00:03:e2:1e:b5:55:88:0c:aa:79:68:e6:44: 4b:59:3c:07:34:ed:30:06:f8:97:d9:87:46:47:36: d6:fb:3a:48:7c:18:74:80:9c:2e:0a:69:5a:d6:75: 60:59:d7:4b:8d:ed:97:8e:c9:55:81:e2:7b:c2:fd: c6:fa:05:09:e5:a7:7d:85:75:22:00:50:ec:7c:b8: 09:12:14:9c:a9:1a:54:a8:9c:71:dd:4c:a2:b6:21: 04:9f:13:d6:00:1d:94:be:06:c1:df:d0:51:89:ff: c4:e0:95:07:e1:d4:39:34:e2:5b:29:16:ea:b0:1b: 1d:e8:58:ba:f4:1c:04:59:45:a8:67:f9:96:06:90: 01:1c:63:2a:91:26:ed:42:85:0c:92:98:fa:dc:74: 9c:28:20:f4:ed:90:dc:81:c8:cf:39:cd:b9:dd:fe: 51:08:88:9d:e5:a6:7e:0d:bf:ca:44:a5:ed:07:68: 58:f1:47:69:6e:8e:95:25:05:62:d9:b1:79:4d:e1: d6:e5:ba:29:17:07:99:c7:ef:73:9f:bb:31:a2:b4: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:79:1E:E5:81:A3:6C:9D:9A:0C:18:11:06:F5:30:06:36:02:8E:E8 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a3830303a3a2f33382d3338203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:800::/38 Signature Algorithm: sha256WithRSAEncryption 53:f1:1b:a3:4b:54:61:4c:68:fc:b8:e6:3b:54:7e:1e:82:9c: ab:4e:84:80:17:4b:dd:47:3e:42:0b:97:cb:fe:cb:d7:43:3b: 98:bc:23:28:4b:0f:84:63:da:a1:2a:40:bc:3b:1f:fb:d2:60: ad:29:6c:79:0a:94:58:2d:e5:bc:5b:70:d4:8a:80:5f:8e:d9: f0:26:01:57:bc:cb:1a:1e:5d:a3:10:3f:07:3b:99:b0:b7:0d: 9f:49:d5:89:4d:34:fd:c8:9b:b5:e9:bf:b6:b8:c4:4a:c1:df: a9:63:ad:fa:fb:1e:26:3f:52:3b:48:4a:29:7f:58:27:34:bf: de:ae:9d:94:38:34:96:ca:30:47:b2:6c:f1:d0:ff:67:2a:d0: 3d:2e:23:22:86:13:ef:04:8d:13:a5:4f:0e:1a:ec:67:d9:b6: 0a:1c:a4:5e:28:97:87:bd:30:bf:29:fa:85:42:c3:fa:e6:52: fd:38:0b:11:6e:28:91:cc:50:d9:18:f7:5d:eb:cc:26:bf:0e: 31:82:8d:c3:9a:b1:96:07:0b:84:9e:d3:19:81:50:0c:27:dd: da:5e:d6:51:ed:81:72:1a:86:aa:aa:a0:30:62:38:7d:ab:96: fb:90:f0:aa:8a:cc:47:f9:dd:93:87:e0:51:d8:d3:cd:a3:34: 67:6b:33:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZaIQ55YnXoX1RWB0fl7MCCzG/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNjAzMDYwMjU1MDBaFw0yNzAzMDUwMzAwMDBaMDMxMTAvBgNV BAMTKDhBNzkxRUU1ODFBMzZDOUQ5QTBDMTgxMTA2RjUzMDA2MzYwMjhFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7reEUAvQue15HOM+EBbdT3pX 6dhLgYT7cPvmprXm0P7xDQDi4Gq6cTkTPWE/AAPiHrVViAyqeWjmREtZPAc07TAG +JfZh0ZHNtb7Okh8GHSAnC4KaVrWdWBZ10uN7ZeOyVWB4nvC/cb6BQnlp32FdSIA UOx8uAkSFJypGlSonHHdTKK2IQSfE9YAHZS+BsHf0FGJ/8TglQfh1Dk04lspFuqw Gx3oWLr0HARZRahn+ZYGkAEcYyqRJu1ChQySmPrcdJwoIPTtkNyByM85zbnd/lEI iJ3lpn4Nv8pEpe0HaFjxR2lujpUlBWLZsXlN4dbluikXB5nH73OfuzGitFirAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUinke5YGjbJ2aDBgRBvUwBjYCjugwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzMDMwM2Ez YTJmMzMzODJkMzMzODIwM2QzZTIwMzEzMzMzMzczOTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJAJW gAgwDQYJKoZIhvcNAQELBQADggEBAFPxG6NLVGFMaPy45jtUfh6CnKtOhIAXS91H PkILl8v+y9dDO5i8IyhLD4Rj2qEqQLw7H/vSYK0pbHkKlFgt5bxbcNSKgF+O2fAm AVe8yxoeXaMQPwc7mbC3DZ9J1YlNNP3Im7Xpv7a4xErB36ljrfr7HiY/UjtISil/ WCc0v96unZQ4NJbKMEeybPHQ/2cq0D0uIyKGE+8EjROlTw4a7GfZtgocpF4ol4e9 ML8p+oVCw/rmUv04CxFuKJHMUNkY913rzCa/DjGCjcOasZYHC4Se0xmBUAwn3dpe 1lHtgXIahqqqoDBiOH2rlvuQ8KqKzEf53ZOH4FHY082jNGdrMyc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:30 2026 by rpki-client