$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa File: 323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa (raw, json) Hash identifier: ogviCQ1PUMqGbUsUt/nJTfXJdA5B2r30skR2WIteFM0= Subject key identifier: 0D:72:3E:F9:78:3D:A0:B9:87:88:6E:16:5D:7F:50:2D:9F:C3:DC:99 Certificate issuer: /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Certificate serial: 6F2F4CD4001691239313F3379612DFCA809ED98D Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa Signing time: Mon 02 Mar 2026 03:47:56 +0000 ROA not before: Mon 02 Mar 2026 03:42:56 +0000 ROA not after: Mon 01 Mar 2027 03:47:56 +0000 asID: 134632 IP address blocks: 2001:df7:5400::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2f:4c:d4:00:16:91:23:93:13:f3:37:96:12:df:ca:80:9e:d9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Validity Not Before: Mar 2 03:42:56 2026 GMT Not After : Mar 1 03:47:56 2027 GMT Subject: CN=0D723EF9783DA0B987886E165D7F502D9FC3DC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:6e:e1:4e:f5:52:eb:c4:59:41:fc:01:8b: ab:4c:5c:8f:a2:b8:ac:92:5c:91:46:9b:e0:37:fb: 12:b0:a8:b5:4c:e7:4b:50:92:ca:3a:b8:3d:0a:d5: 7f:75:2d:af:32:c7:f5:81:24:c5:b0:3f:c3:a0:87: f6:a4:d0:9c:7b:24:21:07:f8:39:ff:9f:0c:ca:8f: 9f:fc:f4:e3:a5:7c:d0:76:61:d7:42:c0:c9:f0:fa: 18:da:3b:3a:2f:d1:4b:78:a7:cc:a0:10:8b:d8:87: 13:57:37:ab:3e:2b:18:62:bb:43:ac:bb:03:50:9f: 32:71:ae:a5:f1:3c:cc:30:6d:3e:73:1d:e0:43:f5: d8:82:02:dc:ff:24:58:27:7a:f0:9d:8d:1a:8d:3e: ac:ff:4b:c1:dc:a9:a3:be:a0:8c:44:a9:3e:1d:8e: c9:1e:8b:12:58:e3:03:fd:f0:23:57:f8:dd:ae:5d: 68:7c:b4:40:a9:0a:f5:33:d3:58:b5:c2:65:87:f2: 8e:82:ef:8f:44:51:06:8d:1e:a2:a1:ce:34:19:16: 4f:59:18:58:68:c4:42:57:88:04:cc:ec:f0:84:82: fd:56:b3:99:d6:3d:f9:47:89:94:cb:07:c8:3c:21: e7:2c:9f:c7:8b:63:14:45:59:64:bc:83:95:64:82: cd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:72:3E:F9:78:3D:A0:B9:87:88:6E:16:5D:7F:50:2D:9F:C3:DC:99 X509v3 Authority Key Identifier: keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/323030313a6466373a353430303a3a2f34382d3438203d3e20313334363332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:5400::/48 Signature Algorithm: sha256WithRSAEncryption 75:5b:17:64:92:3e:bb:81:b9:bf:f4:f1:2e:cb:f0:9c:af:8c: 18:7c:e3:f6:31:24:e4:c1:70:68:a9:53:28:08:bd:38:49:b3: 22:d0:3c:f9:98:66:b5:8b:bd:85:e6:4f:51:a3:9b:f0:20:57: 62:dd:9b:b3:03:98:e4:06:24:10:7c:3b:67:cf:99:dd:30:51: 68:67:66:53:5e:38:e7:a1:e3:5e:34:6b:cf:62:61:70:e1:67: 89:52:61:dc:f4:5a:56:f0:e4:9a:bf:a7:e0:5d:be:8f:de:77: 47:ce:b6:60:ec:84:e3:11:54:9a:d8:e0:a4:c4:75:8c:4c:1b: ac:ae:a5:12:f5:2b:17:a1:f0:6a:67:01:91:e8:e4:05:70:17: ef:d8:24:66:91:59:42:08:93:f5:f8:cf:c8:f1:3d:a6:dc:13: 03:26:39:03:49:42:4e:fd:cc:b8:d1:b8:fa:45:69:02:2e:4d: 46:1f:31:95:5f:fa:ca:40:c3:6c:dd:d2:c5:d1:b6:a4:76:e8: ae:53:26:f3:ce:35:68:ad:1a:e5:91:16:c7:e1:60:a2:0d:e1: 54:93:6e:5d:e3:dd:4f:4d:87:61:72:e1:85:87:8b:a7:e8:98: 50:3c:c2:0e:ac:06:09:d2:f6:e5:5f:cc:3b:f8:cd:7e:57:0d: b6:10:e2:69 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUby9M1AAWkSOTE/M3lhLfyoCe2Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5 MjdFQzczMTAeFw0yNjAzMDIwMzQyNTZaFw0yNzAzMDEwMzQ3NTZaMDMxMTAvBgNV BAMTKDBENzIzRUY5NzgzREEwQjk4Nzg4NkUxNjVEN0Y1MDJEOUZDM0RDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFm7hTvVS68RZQfwBi6tMXI+i uKySXJFGm+A3+xKwqLVM50tQkso6uD0K1X91La8yx/WBJMWwP8Ogh/ak0Jx7JCEH +Dn/nwzKj5/89OOlfNB2YddCwMnw+hjaOzov0Ut4p8ygEIvYhxNXN6s+Kxhiu0Os uwNQnzJxrqXxPMwwbT5zHeBD9diCAtz/JFgnevCdjRqNPqz/S8HcqaO+oIxEqT4d jskeixJY4wP98CNX+N2uXWh8tECpCvUz01i1wmWH8o6C749EUQaNHqKhzjQZFk9Z GFhoxEJXiATM7PCEgv1Ws5nWPflHiZTLB8g8Iecsn8eLYxRFWWS8g5Vkgs0nAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUDXI++Xg9oLmHiG4WXX9QLZ/D3JkwHwYDVR0j BBgwFoAUHupxtMcKR9U74yBP4sSM75J+xzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDAwZTIzZS1mNDRhLTRjZmMtYmY1Ni1kOTlhMDkyZDczMTQvMC8xRUVBNzFCNEM3 MEE0N0Q1M0JFMzIwNEZFMkM0OENFRjkyN0VDNzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5MjdF QzczMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwMDBlMjNlLWY0NGEtNGNmYy1i ZjU2LWQ5OWEwOTJkNzMxNC8wLzMyMzAzMDMxM2E2NDY2MzczYTM1MzQzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM0MzYzMzMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 91QAMA0GCSqGSIb3DQEBCwUAA4IBAQB1Wxdkkj67gbm/9PEuy/Ccr4wYfOP2MSTk wXBoqVMoCL04SbMi0Dz5mGa1i72F5k9Ro5vwIFdi3ZuzA5jkBiQQfDtnz5ndMFFo Z2ZTXjjnoeNeNGvPYmFw4WeJUmHc9FpW8OSav6fgXb6P3ndHzrZg7ITjEVSa2OCk xHWMTBusrqUS9SsXofBqZwGR6OQFcBfv2CRmkVlCCJP1+M/I8T2m3BMDJjkDSUJO /cy40bj6RWkCLk1GHzGVX/rKQMNs3dLF0bakduiuUybzzjVorRrlkRbH4WCiDeFU k25d491PTYdhcuGFh4un6JhQPMIOrAYJ0vblX8w7+M1+Vw22EOJp -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:36 2026 by rpki-client