$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/323430333a396663303a3a2f33322d3438203d3e20313338303730.roa File: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (raw, json) Hash identifier: Spbhx8bMHNr3NhNqW27nH4GC4otA4EtMJD/jv8eEkwo= Subject key identifier: 7E:E0:6B:9B:94:2C:AB:11:5E:9D:2E:00:7E:F6:6A:D4:7A:56:41:FD Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 5E32119A05FC8ED0BE88005906304986FAEA6D2A Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/323430333a396663303a3a2f33322d3438203d3e20313338303730.roa Signing time: Mon 09 Mar 2026 12:00:02 +0000 ROA not before: Mon 09 Mar 2026 11:55:02 +0000 ROA not after: Mon 08 Mar 2027 12:00:02 +0000 asID: 138070 IP address blocks: 2403:9fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:32:11:9a:05:fc:8e:d0:be:88:00:59:06:30:49:86:fa:ea:6d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Mar 9 11:55:02 2026 GMT Not After : Mar 8 12:00:02 2027 GMT Subject: CN=7EE06B9B942CAB115E9D2E007EF66AD47A5641FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:d7:e5:d9:34:18:a3:a1:3d:70:5f:0e:e5: e0:28:73:81:28:5b:e0:0e:be:67:a3:b5:a9:8b:2e: 23:b4:bf:18:ba:9e:3c:6c:4c:a6:6b:d8:4c:e0:93: 3b:9f:84:2c:44:8d:be:b6:ed:4f:a8:a9:7c:e8:68: 3b:cc:ab:d2:0c:c3:e9:ce:a2:dc:cf:cd:30:1f:ca: 73:64:f9:67:d6:2f:af:06:87:d1:d3:55:43:af:3a: f9:5d:96:12:64:c0:42:b3:5b:79:80:51:b2:a3:70: 2c:4a:07:ba:87:94:27:29:95:35:f0:79:e6:4c:e1: 94:1b:66:4d:e0:7a:c6:95:04:b1:c1:94:4b:eb:71: b1:68:7b:5c:13:d9:56:f1:1b:ab:b0:29:ac:2f:39: 5d:2b:0e:62:bf:80:41:88:d8:97:36:81:92:ce:93: 74:0a:2c:45:7e:a4:67:66:ec:2d:dc:88:b7:6c:b3: 7c:ea:00:15:53:40:39:47:e1:41:09:da:2a:04:e4: b5:fc:89:f7:05:d7:79:3b:a2:89:92:07:2f:56:fe: b4:2c:12:bb:e1:e2:78:73:da:a4:87:db:81:bc:31: e0:9f:1c:f6:37:47:12:c5:0b:7a:76:88:b6:8d:23: 33:dc:40:da:1c:51:e6:b7:57:ee:ef:c9:3e:b4:f2: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E0:6B:9B:94:2C:AB:11:5E:9D:2E:00:7E:F6:6A:D4:7A:56:41:FD X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/323430333a396663303a3a2f33322d3438203d3e20313338303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9fc0::/32 Signature Algorithm: sha256WithRSAEncryption 01:0d:e5:3a:e0:f2:0f:6f:2e:34:91:fd:20:db:82:cc:37:35: ef:ff:1c:5c:39:71:76:3a:76:4b:d9:77:53:db:05:1d:fb:17: 2a:a1:ea:8b:d4:a7:5c:b3:d7:cb:11:7d:7b:50:e9:ee:1b:26: a0:4e:92:7c:6e:66:5d:0a:d2:9e:90:5f:d4:3b:1c:61:ca:7f: 20:94:7f:9e:d7:ea:97:49:8e:fe:8c:38:94:8e:17:74:43:89: 92:8e:af:f8:cb:1c:e8:38:c7:8c:f6:2b:91:fc:73:a9:92:67: 33:f9:03:1f:ae:cb:76:05:67:8f:0c:07:fa:43:f3:5b:93:0f: 3e:ac:91:af:fb:6f:35:85:72:76:98:71:63:ed:6d:ac:ac:26: 03:44:5a:07:65:b5:a3:c5:cf:1f:e1:9b:3c:4d:19:7b:58:d0: 8b:a1:73:6a:97:ef:7b:8d:32:aa:09:54:6e:5b:4d:ca:fe:b7: 94:53:2e:da:b8:51:c2:03:0c:51:4a:b8:fb:f6:b0:49:a7:39: 0f:22:a7:f2:5f:3b:d6:da:86:4f:37:33:fd:43:98:87:27:f8: 2a:85:56:1a:d7:7c:1a:ef:6d:3c:63:3c:46:ea:a7:ec:3c:8a: cf:16:30:fa:b5:3b:1b:06:e2:f7:26:b2:56:82:89:01:b9:04: 7b:00:11:5d -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUXjIRmgX8jtC+iABZBjBJhvrqbSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNjAzMDkxMTU1MDJaFw0yNzAzMDgxMjAwMDJaMDMxMTAvBgNV BAMTKDdFRTA2QjlCOTQyQ0FCMTE1RTlEMkUwMDdFRjY2QUQ0N0E1NjQxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9idfl2TQYo6E9cF8O5eAoc4Eo W+AOvmejtamLLiO0vxi6njxsTKZr2EzgkzufhCxEjb627U+oqXzoaDvMq9IMw+nO otzPzTAfynNk+WfWL68Gh9HTVUOvOvldlhJkwEKzW3mAUbKjcCxKB7qHlCcplTXw eeZM4ZQbZk3gesaVBLHBlEvrcbFoe1wT2VbxG6uwKawvOV0rDmK/gEGI2Jc2gZLO k3QKLEV+pGdm7C3ciLdss3zqABVTQDlH4UEJ2ioE5LX8ifcF13k7oomSBy9W/rQs Ervh4nhz2qSH24G8MeCfHPY3RxLFC3p2iLaNIzPcQNocUea3V+7vyT608nF1AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUfuBrm5QsqxFenS4AfvZq1HpWQf0wHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhZDY3ZDVmLTU3MTMtNDE1My04 NzFiLTFiMDA4ZjdmZmRkMi8wLzMyMzQzMDMzM2EzOTY2NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzODMwMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQDn8AwDQYJKoZI hvcNAQELBQADggEBAAEN5Trg8g9vLjSR/SDbgsw3Ne//HFw5cXY6dkvZd1PbBR37 Fyqh6ovUp1yz18sRfXtQ6e4bJqBOknxuZl0K0p6QX9Q7HGHKfyCUf57X6pdJjv6M OJSOF3RDiZKOr/jLHOg4x4z2K5H8c6mSZzP5Ax+uy3YFZ48MB/pD81uTDz6ska/7 bzWFcnaYcWPtbaysJgNEWgdltaPFzx/hmzxNGXtY0Iuhc2qX73uNMqoJVG5bTcr+ t5RTLtq4UcIDDFFKuPv2sEmnOQ8ip/JfO9bahk83M/1DmIcn+CqFVhrXfBrvbTxj PEbqp+w8is8WMPq1OxsG4vcmslaCiQG5BHsAEV0= -----END CERTIFICATE-----Generated at Thu Mar 26 22:19:50 2026 by rpki-client