$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa File: 323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa (raw, json) Hash identifier: W+ZIrMMCtSSL/mnjYZ/OcRJKbJYf/orTAZxH6KePXWA= Subject key identifier: 51:7A:C0:94:3E:3F:E8:99:9E:2C:25:2C:E1:C8:8E:6A:C3:B2:36:52 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 29E56E67C95C711475E25C096B327E2646FF6686 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa Signing time: Fri 27 Feb 2026 12:00:03 +0000 ROA not before: Fri 27 Feb 2026 11:55:03 +0000 ROA not after: Fri 26 Feb 2027 12:00:03 +0000 asID: 23679 IP address blocks: 2401:2900:106::/47 maxlen: 47 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e5:6e:67:c9:5c:71:14:75:e2:5c:09:6b:32:7e:26:46:ff:66:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Feb 27 11:55:03 2026 GMT Not After : Feb 26 12:00:03 2027 GMT Subject: CN=517AC0943E3FE8999E2C252CE1C88E6AC3B23652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:07:97:b9:f1:66:48:7f:fb:26:f0:51:ab: 5d:b2:72:cf:33:48:74:ce:fb:99:d5:9f:ac:e7:fb: 5a:30:2e:72:98:de:e4:bd:69:60:23:94:cb:92:8d: c0:b5:97:15:5f:5a:30:62:d5:40:05:07:15:3b:9c: 07:bc:ed:aa:0a:60:c9:d8:b9:9e:89:ac:56:04:b4: 68:35:74:57:e5:66:89:6f:00:d0:81:34:54:b1:61: d4:c9:8f:a6:fe:86:86:7d:8e:1c:61:7d:b9:da:4d: 00:25:bd:22:d2:3b:9d:6a:58:7e:f3:04:9e:a4:c0: ca:89:59:ff:86:14:6b:4d:d2:6f:16:07:1f:92:56: 64:ce:fc:66:75:e3:a8:f0:7a:8e:41:aa:d1:d0:63: 7c:5c:fd:30:a8:ba:43:fa:a2:58:35:3f:9a:a0:d8: cb:be:3c:ba:b7:a3:33:c1:e7:92:d5:d7:f3:cc:c2: b5:39:58:d3:7d:d7:b0:0e:8e:a6:b7:06:ac:22:f9: 5d:19:aa:a8:01:9b:86:30:3e:b2:1f:8f:4c:41:70: db:b1:02:89:e4:56:98:d4:6b:2f:07:a3:23:16:37: e5:e0:56:5d:83:27:da:98:22:91:7b:7c:c3:d2:ca: 9a:83:7c:6d:36:00:f1:be:1d:f3:e5:2c:80:0b:82: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7A:C0:94:3E:3F:E8:99:9E:2C:25:2C:E1:C8:8E:6A:C3:B2:36:52 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:106::/47 Signature Algorithm: sha256WithRSAEncryption 56:cb:85:0e:fe:f9:dd:1b:df:6c:2f:e9:a9:e4:41:80:e0:f9: 20:2f:27:c7:9b:08:9b:b2:47:80:a0:7a:74:a2:46:9e:4b:cb: 8a:35:2d:93:f2:3d:69:6d:60:f0:a4:18:7a:f0:11:2e:f6:86: 2a:0b:48:9c:37:cc:bf:f0:9a:b9:1d:4f:82:18:cc:09:40:79: e3:02:ad:68:77:08:e5:8a:0f:c3:e4:8c:66:da:b4:0b:4c:80: 2e:6e:e7:54:35:8d:d6:47:ea:bb:07:74:83:a6:b2:29:bc:fa: 84:1a:3b:55:99:a1:6d:3b:6c:a8:9e:c6:04:1a:96:1e:4d:fd: a7:cb:21:3c:dd:06:d7:2a:a0:d2:51:10:a0:58:c8:6b:d8:db: 2d:2f:28:d0:91:42:2f:01:ca:9a:cc:9e:19:9f:ec:60:b6:eb: 50:5c:c5:76:b8:3f:5e:ff:35:31:ef:d7:9e:a0:4f:76:19:70: ac:5f:f6:d1:18:5c:99:53:6d:ba:2a:29:af:9d:2f:18:b3:ea: 06:e0:3d:7f:d1:fa:94:f9:8f:a1:32:44:16:98:a4:f0:b6:d3: 8f:32:12:4f:71:d5:87:bc:12:95:8b:a4:73:5b:f9:dd:72:04: 50:a2:4c:74:47:ee:0d:60:4f:98:4a:aa:12:76:f6:fc:6e:1c: df:9e:34:e5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKeVuZ8lccRR14lwJazJ+Jkb/ZoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNjAyMjcxMTU1MDNaFw0yNzAyMjYxMjAwMDNaMDMxMTAvBgNV BAMTKDUxN0FDMDk0M0UzRkU4OTk5RTJDMjUyQ0UxQzg4RTZBQzNCMjM2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0QeXufFmSH/7JvBRq12ycs8z SHTO+5nVn6zn+1owLnKY3uS9aWAjlMuSjcC1lxVfWjBi1UAFBxU7nAe87aoKYMnY uZ6JrFYEtGg1dFflZolvANCBNFSxYdTJj6b+hoZ9jhxhfbnaTQAlvSLSO51qWH7z BJ6kwMqJWf+GFGtN0m8WBx+SVmTO/GZ146jweo5BqtHQY3xc/TCoukP6olg1P5qg 2Mu+PLq3ozPB55LV1/PMwrU5WNN917AOjqa3Bqwi+V0ZqqgBm4YwPrIfj0xBcNux AonkVpjUay8HoyMWN+XgVl2DJ9qYIpF7fMPSypqDfG02APG+HfPlLIALgt7bAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUUXrAlD4/6JmeLCUs4ciOasOyNlIwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDM2M2Ez YTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQBKQAB BjANBgkqhkiG9w0BAQsFAAOCAQEAVsuFDv753RvfbC/pqeRBgOD5IC8nx5sIm7JH gKB6dKJGnkvLijUtk/I9aW1g8KQYevARLvaGKgtInDfMv/CauR1PghjMCUB54wKt aHcI5YoPw+SMZtq0C0yALm7nVDWN1kfquwd0g6ayKbz6hBo7VZmhbTtsqJ7GBBqW Hk39p8shPN0G1yqg0lEQoFjIa9jbLS8o0JFCLwHKmsyeGZ/sYLbrUFzFdrg/Xv81 Me/XnqBPdhlwrF/20RhcmVNtuiopr50vGLPqBuA9f9H6lPmPoTJEFpik8LbTjzIS T3HVh7wSlYukc1v53XIEUKJMdEfuDWBPmEqqEnb2/G4c35405Q== -----END CERTIFICATE-----Generated at Mon Mar 2 22:49:12 2026 by rpki-client