$ rpki-client -vvf repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa File: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (raw, json) Hash identifier: 72QFlEs4lj2ZXEfA6O7YDbDvXdQYKnzr/OAYVv/VuXE= Subject key identifier: D0:E4:21:AD:64:61:25:36:1D:21:DD:D0:14:CD:1D:F2:16:06:3A:21 Certificate issuer: /CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Certificate serial: 398CF6FC7C187058B67D68B546F56DE2F1747AF2 Authority key identifier: 94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa Signing time: Sat 07 Feb 2026 02:20:00 +0000 ROA not before: Sat 07 Feb 2026 02:15:00 +0000 ROA not after: Sat 06 Feb 2027 02:20:00 +0000 asID: 151600 IP address blocks: 2001:df3:d6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8c:f6:fc:7c:18:70:58:b6:7d:68:b5:46:f5:6d:e2:f1:74:7a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Validity Not Before: Feb 7 02:15:00 2026 GMT Not After : Feb 6 02:20:00 2027 GMT Subject: CN=D0E421AD646125361D21DDD014CD1DF216063A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:67:84:e5:bd:ed:95:d5:ef:ca:d6:da:25: c3:3f:cb:b9:94:da:be:75:d2:97:15:f9:0b:2d:e3: 31:2e:b5:8b:19:55:f0:88:c3:3a:51:11:54:d4:5d: fd:e4:65:f7:18:3e:ee:76:9b:21:47:fe:58:57:6c: ed:bc:96:b1:d2:56:76:f2:81:cd:79:68:2b:3f:53: 2b:b4:40:fa:5f:cd:37:74:bd:2a:ff:31:f6:0a:d0: 0e:0d:28:68:2e:0e:53:aa:e5:cd:fa:ff:08:ba:3d: 62:81:47:bb:6a:e6:3a:5e:b8:da:8b:e0:e5:91:a4: 41:9c:34:21:80:b6:d5:ac:44:4b:e4:37:62:c6:ac: 4a:db:bd:9d:15:29:e5:05:a7:0c:2a:25:46:b1:d0: 97:8a:9e:eb:c3:17:74:51:6a:48:9e:97:56:ef:7a: a2:75:b3:12:94:ad:2a:01:5a:95:58:a4:a8:96:08: 39:38:9f:87:d7:43:bf:98:be:04:1f:b2:c7:ad:81: de:59:8c:2d:d0:35:51:17:b5:92:de:7b:bd:b4:fe: 14:58:15:50:a1:7d:8d:99:4c:c4:e1:35:28:6f:91: b1:c3:18:d7:0e:55:e5:c8:52:30:58:b1:db:e7:66: 78:c0:7c:8d:7c:68:e9:19:4e:95:07:f8:c4:20:e6: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E4:21:AD:64:61:25:36:1D:21:DD:D0:14:CD:1D:F2:16:06:3A:21 X509v3 Authority Key Identifier: keyid:94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d6c0::/48 Signature Algorithm: sha256WithRSAEncryption de:d6:1f:00:de:08:59:33:3c:ca:b8:c1:7f:08:b8:ee:d0:08: c0:ad:e9:50:64:24:ae:93:92:87:09:1f:e6:8f:a7:3a:95:a0: 37:d4:11:01:d6:9f:4b:95:ab:e8:88:13:05:39:f4:1b:e1:03: e6:cc:f9:9f:43:5b:3c:5c:81:38:be:11:70:30:c6:ab:79:3b: dd:fa:41:69:48:33:bf:9f:3b:66:b6:e8:d9:4e:61:fb:4d:77: b9:38:a1:33:a9:98:d5:e3:76:b1:a6:d3:4e:f4:17:a8:7b:94: 9c:5e:68:44:9e:06:b8:d6:30:fd:4d:82:56:50:c8:c7:86:b8: 84:d6:40:3a:df:dc:22:c1:23:92:2a:9f:72:38:43:49:91:d0: 4b:fb:3d:bf:15:5c:9e:a5:b1:34:99:bb:e4:8d:f6:c2:19:44: 70:eb:de:f6:67:6f:f5:c2:e6:6e:ff:90:be:fa:85:1b:e6:d6: 22:6f:d3:e1:00:d5:df:cc:6d:cc:0f:ed:7b:ec:d3:4f:ff:8e: fa:2b:8c:2a:06:74:10:3c:a3:f2:98:c9:cd:d9:67:5d:31:bd: cb:6a:e5:3e:a5:f5:20:d5:89:f6:81:1d:d6:c2:3a:d9:c6:cf: 45:1b:a9:4c:8f:86:a2:35:23:83:73:07:c3:26:fc:75:30:87: 80:90:f1:bf -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOYz2/HwYcFi2fWi1RvVt4vF0evIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEz M0YxMTA0RTAeFw0yNjAyMDcwMjE1MDBaFw0yNzAyMDYwMjIwMDBaMDMxMTAvBgNV BAMTKEQwRTQyMUFENjQ2MTI1MzYxRDIxREREMDE0Q0QxREYyMTYwNjNBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5M2eE5b3tldXvytbaJcM/y7mU 2r510pcV+Qst4zEutYsZVfCIwzpREVTUXf3kZfcYPu52myFH/lhXbO28lrHSVnby gc15aCs/Uyu0QPpfzTd0vSr/MfYK0A4NKGguDlOq5c36/wi6PWKBR7tq5jpeuNqL 4OWRpEGcNCGAttWsREvkN2LGrErbvZ0VKeUFpwwqJUax0JeKnuvDF3RRakiel1bv eqJ1sxKUrSoBWpVYpKiWCDk4n4fXQ7+YvgQfssetgd5ZjC3QNVEXtZLee720/hRY FVChfY2ZTMThNShvkbHDGNcOVeXIUjBYsdvnZnjAfI18aOkZTpUH+MQg5o97AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0OQhrWRhJTYdId3QFM0d8hYGOiEwHwYDVR0j BBgwFoAUlDLTeCF6i+7jTZU6i//VqjPxEE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzY2MDdlYS1hZGQ3LTRjYTUtOGYyZC1kYThiNzkxYTNiNDIvMC85NDMyRDM3ODIx N0E4QkVFRTM0RDk1M0E4QkZGRDVBQTMzRjExMDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEzM0Yx MTA0RS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3NjYwN2VhLWFkZDctNGNhNS04 ZjJkLWRhOGI3OTFhM2I0Mi8wLzMyMzAzMDMxM2E2NDY2MzMzYTY0MzY2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzYzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89bAMA0GCSqGSIb3DQEBCwUAA4IBAQDe1h8A3ghZMzzKuMF/CLju0AjArelQZCSu k5KHCR/mj6c6laA31BEB1p9LlavoiBMFOfQb4QPmzPmfQ1s8XIE4vhFwMMareTvd +kFpSDO/nztmtujZTmH7TXe5OKEzqZjV43axptNO9Beoe5ScXmhEnga41jD9TYJW UMjHhriE1kA639wiwSOSKp9yOENJkdBL+z2/FVyepbE0mbvkjfbCGURw6972Z2/1 wuZu/5C++oUb5tYib9PhANXfzG3MD+177NNP/476K4wqBnQQPKPymMnN2WddMb3L auU+pfUg1Yn2gR3WwjrZxs9FG6lMj4aiNSODcwfDJvx1MIeAkPG/ -----END CERTIFICATE-----Generated at Mon Mar 2 16:39:22 2026 by rpki-client