$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: FRUUhjgGeEeA3YMCY2nrJspCpuVO3MbXOfDrqooJMes= Subject key identifier: A2:C7:E1:AC:92:73:86:C7:11:39:37:D1:BA:B0:4F:37:F8:C5:36:99 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 1D9A59F2F3EE2B3FF125297684F9B342E59CC35C Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa Signing time: Thu 05 Mar 2026 09:00:00 +0000 ROA not before: Thu 05 Mar 2026 08:55:00 +0000 ROA not after: Thu 04 Mar 2027 09:00:00 +0000 asID: 133798 IP address blocks: 2402:5680:8100::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:9a:59:f2:f3:ee:2b:3f:f1:25:29:76:84:f9:b3:42:e5:9c:c3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Mar 5 08:55:00 2026 GMT Not After : Mar 4 09:00:00 2027 GMT Subject: CN=A2C7E1AC927386C7113937D1BAB04F37F8C53699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:84:67:c3:6f:2d:2d:38:e3:8f:8d:15:63: 3a:2d:15:14:bb:9a:dd:f0:32:61:83:99:78:4d:ec: 57:95:2b:a4:7a:72:b3:d8:ca:e4:ab:2f:cd:f3:6a: 5b:32:68:96:45:72:f0:2b:bb:2e:db:36:81:fd:e7: a2:1c:19:52:ef:f3:94:56:f9:c1:3e:c6:1b:f5:cf: 13:c4:dc:16:04:5b:cf:70:ce:17:10:e0:7f:06:70: ed:27:3c:54:4e:6a:fa:f5:fc:84:ea:2c:e4:2d:29: 56:b6:0e:eb:db:04:a4:c7:58:7c:14:70:48:bf:02: c2:8e:7c:7f:1d:6d:e0:91:ae:4c:c8:8a:eb:a8:1f: cc:db:c0:4b:76:d3:b2:6a:77:40:ff:cf:1f:3d:5d: b1:98:2e:15:de:2f:e3:fb:f5:fe:c4:f1:72:68:df: 7c:42:0a:a8:de:e6:06:11:cd:5d:19:40:17:57:6c: e6:1b:e8:2a:1f:a2:ef:bd:92:62:ec:19:a5:37:30: c2:aa:21:b2:4d:c7:01:c9:10:b4:aa:95:c1:8b:f2: 7a:5c:cf:39:44:c9:d9:06:9e:66:77:1a:e0:cf:e7: ce:e8:7c:49:b2:f5:5a:4c:37:ed:24:94:ef:5b:67: a9:4f:c9:70:7a:0f:94:48:6a:73:a1:c5:64:45:92: f2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C7:E1:AC:92:73:86:C7:11:39:37:D1:BA:B0:4F:37:F8:C5:36:99 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8100::/44 Signature Algorithm: sha256WithRSAEncryption b0:75:f1:95:d1:ea:e8:ff:2d:cc:4d:fb:de:66:5e:a4:00:f1: c6:9a:43:f5:f6:57:fc:47:82:5e:c9:80:04:aa:77:e8:c6:50: 6b:8c:4b:20:d5:c9:7e:dc:82:e9:ea:87:90:eb:df:65:f0:87: 66:97:6a:e7:99:84:c4:8b:b2:8e:1a:f6:e3:0f:df:ef:58:bc: 3b:e0:74:85:25:2d:fa:70:74:2c:5e:85:68:d8:27:8c:dd:42: 5f:57:90:5f:c2:72:8b:dc:7a:14:30:c9:6a:20:34:23:ae:84: e4:81:07:56:2d:a6:9b:ed:18:04:77:f5:f7:22:c1:d5:dd:53: e3:78:78:4a:34:e4:12:61:10:01:a0:cc:7a:69:b2:ec:42:6c: 5c:ec:62:88:cc:34:9a:fb:b2:4b:12:68:e1:b1:8d:1f:5c:d2: 8a:8b:1f:e7:03:16:2c:05:f8:4b:6c:cb:fe:09:66:33:52:be: 98:9f:f2:b9:fd:8d:46:d6:72:64:8f:5a:02:5a:31:d2:0f:8d: fa:81:68:47:0a:93:f7:54:e8:41:71:34:e4:37:72:04:47:80: 0a:e0:86:e5:cb:de:be:f9:e0:da:fe:c3:c7:e7:7a:7e:7b:be: b6:3e:3f:bd:10:5b:d1:d3:23:bd:8c:54:28:6e:5f:28:cc:b1: c9:54:53:f6 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUHZpZ8vPuKz/xJSl2hPmzQuWcw1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNjAzMDUwODU1MDBaFw0yNzAzMDQwOTAwMDBaMDMxMTAvBgNV BAMTKEEyQzdFMUFDOTI3Mzg2QzcxMTM5MzdEMUJBQjA0RjM3RjhDNTM2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLIRnw28tLTjjj40VYzotFRS7 mt3wMmGDmXhN7FeVK6R6crPYyuSrL83zalsyaJZFcvAruy7bNoH956IcGVLv85RW +cE+xhv1zxPE3BYEW89wzhcQ4H8GcO0nPFROavr1/ITqLOQtKVa2DuvbBKTHWHwU cEi/AsKOfH8dbeCRrkzIiuuoH8zbwEt207Jqd0D/zx89XbGYLhXeL+P79f7E8XJo 33xCCqje5gYRzV0ZQBdXbOYb6Cofou+9kmLsGaU3MMKqIbJNxwHJELSqlcGL8npc zzlEydkGnmZ3GuDP587ofEmy9VpMN+0klO9bZ6lPyXB6D5RIanOhxWRFkvItAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUosfhrJJzhscROTfRurBPN/jFNpkwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzMTMwMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAgQAwDQYJKoZIhvcNAQELBQADggEBALB18ZXR6uj/LcxN+95mXqQA8caaQ/X2 V/xHgl7JgASqd+jGUGuMSyDVyX7cgunqh5Dr32Xwh2aXaueZhMSLso4a9uMP3+9Y vDvgdIUlLfpwdCxehWjYJ4zdQl9XkF/CcovcehQwyWogNCOuhOSBB1YtppvtGAR3 9fciwdXdU+N4eEo05BJhEAGgzHppsuxCbFzsYojMNJr7sksSaOGxjR9c0oqLH+cD FiwF+Etsy/4JZjNSvpif8rn9jUbWcmSPWgJaMdIPjfqBaEcKk/dU6EFxNOQ3cgRH gArghuXL3r754Nr+w8fnen57vrY+P70QW9HTI72MVChuXyjMsclUU/Y= -----END CERTIFICATE-----Generated at Thu Mar 26 23:06:03 2026 by rpki-client