$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/323430353a666134303a3a2f33322d3438203d3e20313430333930.roa File: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (raw, json) Hash identifier: vNwtnFQ+aCKry6vlUtetOnAmZSYtPPn32DJ/ZyBu6uM= Subject key identifier: 4E:69:7D:A2:44:60:00:28:36:9A:9A:E3:CC:4D:9A:38:FC:3C:96:3C Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 24AB4C5E423A0BC70D856CA07BE309514530CB5B Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/323430353a666134303a3a2f33322d3438203d3e20313430333930.roa Signing time: Mon 09 Mar 2026 20:00:02 +0000 ROA not before: Mon 09 Mar 2026 19:55:02 +0000 ROA not after: Mon 08 Mar 2027 20:00:02 +0000 asID: 140390 IP address blocks: 2405:fa40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ab:4c:5e:42:3a:0b:c7:0d:85:6c:a0:7b:e3:09:51:45:30:cb:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Mar 9 19:55:02 2026 GMT Not After : Mar 8 20:00:02 2027 GMT Subject: CN=4E697DA244600028369A9AE3CC4D9A38FC3C963C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:1e:f1:9a:21:a9:e8:b7:9d:c5:67:4d:f5: 0d:8d:8b:bf:c5:93:9b:2e:00:03:28:8f:9f:64:5a: 4a:47:e9:83:d6:da:1c:f7:36:d7:3c:f0:f4:69:1b: ae:52:7d:e0:03:db:b3:b8:97:60:4e:81:5f:1f:bc: 03:5c:dc:4b:6a:95:b1:1d:9f:1b:83:88:1f:fa:d7: 97:16:ef:b2:0e:a5:6f:cc:eb:d6:cb:d1:08:99:c9: 61:5e:07:4e:0a:2d:23:4e:8d:cc:f4:16:97:93:d5: fa:28:71:3a:0f:17:48:27:f4:d2:b5:b9:30:46:b1: b0:51:65:b2:78:ff:57:f4:89:57:38:36:b2:0f:1b: 1d:0d:68:8d:5f:c2:5a:15:4a:a6:49:6a:da:99:3c: 16:41:96:c3:bd:db:10:b3:7e:cc:d0:24:37:ca:5d: 14:f3:fa:18:dd:9b:72:0f:50:47:66:53:cc:d7:45: ef:10:1f:a3:8f:b3:73:1d:42:61:e6:bf:c8:d4:71: 11:9f:ee:1f:54:5b:c4:93:99:24:04:e5:9e:02:61: de:8c:9f:64:9f:ce:b0:4c:97:ea:f9:0b:36:1a:32: 80:20:af:f1:85:84:75:a2:12:73:c1:64:7f:62:b4: e6:01:a9:70:bb:ad:ee:c8:c6:c5:84:83:48:ba:ee: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:69:7D:A2:44:60:00:28:36:9A:9A:E3:CC:4D:9A:38:FC:3C:96:3C X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/323430353a666134303a3a2f33322d3438203d3e20313430333930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 17:d0:fe:9d:9b:fc:9a:38:f7:ee:d8:b1:cd:7a:fd:0d:2a:cd: ca:cd:fd:f0:c2:23:38:0c:42:33:71:c8:8c:f5:9a:27:85:2b: 73:b8:15:d2:da:65:33:71:29:a6:c6:5a:49:09:b8:7a:cb:dd: 01:24:e3:7c:a4:5e:de:65:ad:89:a1:d3:7e:05:ee:bf:70:3a: a2:8d:a6:2a:0d:e1:63:b1:8b:62:a1:8f:5c:3b:22:d8:50:5d: b9:b0:50:9d:33:6e:06:ad:8e:90:a9:44:77:17:b9:a3:d5:c6: 69:be:6a:dc:b4:86:6b:8a:db:05:79:1d:17:a2:29:4c:7a:ab: dc:64:18:2f:a5:f1:f8:60:3a:aa:1c:cf:53:af:57:49:ef:f7: 8a:7f:9d:64:4c:ec:6c:76:f3:b3:46:42:70:80:ed:37:7a:a5: c3:53:83:f8:b7:bb:4b:05:8c:d1:59:b2:58:04:35:78:26:50: 2a:39:24:d5:dc:25:16:e9:2a:75:9f:cc:27:9b:80:1b:ad:84: 64:da:d1:d6:e5:02:95:4e:20:25:61:52:fb:7a:9e:63:7f:ce: d6:b8:1c:b0:d2:c2:15:5f:00:17:ed:1e:43:61:b7:17:87:71: 39:f8:71:cd:91:3a:5a:76:5c:e3:e2:ae:82:14:18:bd:9d:b7: e4:bf:e2:a2 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUJKtMXkI6C8cNhWyge+MJUUUwy1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNjAzMDkxOTU1MDJaFw0yNzAzMDgyMDAwMDJaMDMxMTAvBgNV BAMTKDRFNjk3REEyNDQ2MDAwMjgzNjlBOUFFM0NDNEQ5QTM4RkMzQzk2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYoB7xmiGp6LedxWdN9Q2Ni7/F k5suAAMoj59kWkpH6YPW2hz3Ntc88PRpG65SfeAD27O4l2BOgV8fvANc3EtqlbEd nxuDiB/615cW77IOpW/M69bL0QiZyWFeB04KLSNOjcz0FpeT1foocToPF0gn9NK1 uTBGsbBRZbJ4/1f0iVc4NrIPGx0NaI1fwloVSqZJatqZPBZBlsO92xCzfszQJDfK XRTz+hjdm3IPUEdmU8zXRe8QH6OPs3MdQmHmv8jUcRGf7h9UW8STmSQE5Z4CYd6M n2SfzrBMl+r5CzYaMoAgr/GFhHWiEnPBZH9itOYBqXC7re7IxsWEg0i67rinAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUTml9okRgACg2mprjzE2aOPw8ljwwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZjUwMzgzLTdkMDQtNDdjOC1h YWViLWY3ZTc2NjkzNzczMS8wLzMyMzQzMDM1M2E2NjYxMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMDMzMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQF+kAwDQYJKoZI hvcNAQELBQADggEBABfQ/p2b/Jo49+7Ysc16/Q0qzcrN/fDCIzgMQjNxyIz1mieF K3O4FdLaZTNxKabGWkkJuHrL3QEk43ykXt5lrYmh034F7r9wOqKNpioN4WOxi2Kh j1w7IthQXbmwUJ0zbgatjpCpRHcXuaPVxmm+aty0hmuK2wV5HReiKUx6q9xkGC+l 8fhgOqocz1OvV0nv94p/nWRM7Gx287NGQnCA7Td6pcNTg/i3u0sFjNFZslgENXgm UCo5JNXcJRbpKnWfzCebgButhGTa0dblApVOICVhUvt6nmN/zta4HLDSwhVfABft HkNhtxeHcTn4cc2ROlp2XOPiroIUGL2dt+S/4qI= -----END CERTIFICATE-----Generated at Fri Mar 27 02:06:10 2026 by rpki-client