$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa File: 323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa (raw, json) Hash identifier: e9MuQpUdmZSWJyLwqKXY1nxQlgwTqEZ4CpPjIrRXOr8= Subject key identifier: 45:79:73:33:85:52:17:A8:32:E2:0A:5F:F5:0F:7C:68:0B:E1:CF:0A Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 5A7045B08E35A595111F8DC390157CA9FD83D277 Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa Signing time: Fri 30 Jan 2026 09:12:44 +0000 ROA not before: Fri 30 Jan 2026 09:07:44 +0000 ROA not after: Fri 29 Jan 2027 09:12:44 +0000 asID: 136841 IP address blocks: 2401:be40:100::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:70:45:b0:8e:35:a5:95:11:1f:8d:c3:90:15:7c:a9:fd:83:d2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Jan 30 09:07:44 2026 GMT Not After : Jan 29 09:12:44 2027 GMT Subject: CN=45797333855217A832E20A5FF50F7C680BE1CF0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:14:02:6e:80:a9:89:f3:e3:ae:b9:d8:85: d5:4e:b2:3e:f2:bc:02:07:f4:bb:01:fe:4b:63:c2: ce:0b:96:fa:73:06:0b:2d:c7:23:b6:ed:41:0b:d8: 48:a9:30:42:47:a4:5d:6f:bd:81:83:64:b0:7e:be: 3e:c3:b8:16:02:b0:12:8a:42:31:67:3e:8e:8c:a5: 22:c9:22:77:8f:c7:5d:1b:6e:40:36:02:42:86:46: d7:03:43:70:2e:4c:dd:6f:53:43:81:e6:e8:0d:61: 5b:26:54:28:57:0c:5a:f0:3b:9a:88:41:09:e1:57: e4:9b:19:91:54:79:0c:f4:93:fe:21:79:e2:23:9c: 69:cc:42:84:39:09:91:3a:5b:59:d7:aa:a2:8e:1f: 67:7f:f3:20:b8:36:84:ab:c4:f5:df:f1:14:d3:77: 55:9d:50:aa:bf:13:0e:43:24:cd:aa:fa:08:67:c1: ab:ba:23:8c:54:34:30:da:9d:24:1e:f7:ec:93:08: 24:42:a1:9c:4b:52:75:82:b1:0f:42:0c:df:68:a7: be:d8:f9:9b:87:c0:dc:81:60:6a:de:23:5e:58:ee: 1b:51:c3:58:b2:8f:d4:5a:ab:7e:9f:0f:42:e7:04: 82:6b:b1:f2:94:c8:87:81:24:2b:68:2e:fb:15:61: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:79:73:33:85:52:17:A8:32:E2:0A:5F:F5:0F:7C:68:0B:E1:CF:0A X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/323430313a626534303a3130303a3a2f34382d3438203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:be40:100::/48 Signature Algorithm: sha256WithRSAEncryption 06:65:d0:5c:ed:e2:4c:5f:a1:a1:f0:34:3e:9b:5a:18:a1:a0: 28:6d:2a:7b:9d:4a:c7:f2:b9:84:3f:70:fb:cd:00:bc:2a:6d: e7:cc:08:b0:75:c8:b6:ef:92:12:d4:1c:1a:ac:b0:7a:13:e7: 8f:12:45:e2:75:60:00:bb:89:1c:3a:93:2c:59:b8:57:0c:8d: 89:c5:0a:8e:c2:c8:59:55:c6:81:69:a1:62:48:4f:b7:af:bc: 0a:03:c5:a2:e6:2d:23:ec:12:90:a0:a7:80:77:58:f1:74:08: aa:f2:ff:98:ab:6d:69:33:da:cc:d0:09:2d:e6:8e:7c:95:6e: bf:ec:f2:51:60:fb:e3:03:c2:c4:de:4b:ad:b8:ba:e1:6c:7e: d2:3e:2f:af:5d:85:80:89:d6:6d:f4:6f:40:b4:a3:2a:68:a1: da:fb:b6:1f:4c:a3:fb:0e:ca:b1:cb:05:ff:7c:21:29:7d:06: ee:d7:7b:5f:b7:20:7b:b9:27:b9:b9:9a:54:04:9f:0d:a8:5f: 36:4a:18:a7:d0:90:88:df:0c:88:48:71:89:8d:0a:5f:0f:90: db:2e:e5:bc:cb:a3:2b:05:93:63:b9:7e:38:3e:74:ad:9a:09: fb:a8:27:c0:42:c3:43:26:35:13:30:36:17:02:d5:0b:f7:f0: 23:c1:b3:c7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWnBFsI41pZURH43DkBV8qf2D0ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNjAxMzAwOTA3NDRaFw0yNzAxMjkwOTEyNDRaMDMxMTAvBgNV BAMTKDQ1Nzk3MzMzODU1MjE3QTgzMkUyMEE1RkY1MEY3QzY4MEJFMUNGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeARQCboCpifPjrrnYhdVOsj7y vAIH9LsB/ktjws4LlvpzBgstxyO27UEL2EipMEJHpF1vvYGDZLB+vj7DuBYCsBKK QjFnPo6MpSLJInePx10bbkA2AkKGRtcDQ3AuTN1vU0OB5ugNYVsmVChXDFrwO5qI QQnhV+SbGZFUeQz0k/4heeIjnGnMQoQ5CZE6W1nXqqKOH2d/8yC4NoSrxPXf8RTT d1WdUKq/Ew5DJM2q+ghnwau6I4xUNDDanSQe9+yTCCRCoZxLUnWCsQ9CDN9op77Y +ZuHwNyBYGreI15Y7htRw1iyj9Raq36fD0LnBIJrsfKUyIeBJCtoLvsVYZWrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURXlzM4VSF6gy4gpf9Q98aAvhzwowHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMyMzQzMDMxM2E2MjY1MzQzMDNhMzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzgzNDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAG+ QAEAMA0GCSqGSIb3DQEBCwUAA4IBAQAGZdBc7eJMX6Gh8DQ+m1oYoaAobSp7nUrH 8rmEP3D7zQC8Km3nzAiwdci275IS1BwarLB6E+ePEkXidWAAu4kcOpMsWbhXDI2J xQqOwshZVcaBaaFiSE+3r7wKA8Wi5i0j7BKQoKeAd1jxdAiq8v+Yq21pM9rM0Akt 5o58lW6/7PJRYPvjA8LE3kutuLrhbH7SPi+vXYWAidZt9G9AtKMqaKHa+7YfTKP7 DsqxywX/fCEpfQbu13tftyB7uSe5uZpUBJ8NqF82Shin0JCI3wyISHGJjQpfD5Db LuW8y6MrBZNjuX44PnStmgn7qCfAQsNDJjUTMDYXAtUL9/AjwbPH -----END CERTIFICATE-----Generated at Mon Mar 2 14:39:37 2026 by rpki-client