$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa File: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (raw, json) Hash identifier: Jtgb1GmrFRQ4cpKfP6dk+0sfbheEljd6r8vfGr6lzqY= Subject key identifier: 39:F0:D4:6C:2B:6F:12:91:59:54:70:85:6F:58:5B:6B:AF:AB:BE:08 Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 099F6B7F5C8895CB5E21C7819D6CFF3B6663A95E Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa Signing time: Thu 09 Apr 2026 04:04:35 +0000 ROA not before: Thu 09 Apr 2026 03:59:35 +0000 ROA not after: Thu 08 Apr 2027 04:04:35 +0000 asID: 132637 IP address blocks: 2402:32c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9f:6b:7f:5c:88:95:cb:5e:21:c7:81:9d:6c:ff:3b:66:63:a9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Apr 9 03:59:35 2026 GMT Not After : Apr 8 04:04:35 2027 GMT Subject: CN=39F0D46C2B6F1291595470856F585B6BAFABBE08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:cb:f4:b5:fe:cf:ac:d5:66:be:7d:7a:8c: b5:9d:5c:8d:25:ba:01:75:2e:0c:4a:6d:8e:7b:3a: 4f:3b:59:4b:26:7c:dd:64:40:5a:e6:c8:20:62:e6: 0c:4c:0e:2d:5f:e4:bd:38:2b:a6:f4:c4:48:12:b6: 21:aa:51:69:3d:92:56:c6:5f:40:e2:e9:41:b9:89: 56:68:e3:66:82:21:8f:5c:b2:7b:6b:67:ce:9d:22: 34:a0:e9:ec:97:e1:c4:2e:24:d9:79:fb:1e:6c:42: f3:8c:aa:2b:9b:39:7d:25:cd:a0:a3:b7:48:1a:28: e0:58:9a:18:cd:f7:ff:e5:af:26:8e:e7:61:27:76: 61:ea:b3:b9:b0:d9:91:1a:9a:e0:95:91:92:71:60: 0c:46:f1:8e:ae:52:c2:9f:99:0a:05:7e:9f:c5:ad: 89:bf:0f:f4:e7:a9:a1:40:a9:cd:21:39:4b:10:d9: 4b:10:6b:e5:1a:2c:16:0d:4a:cc:42:12:27:da:c7: b5:54:9f:7e:22:22:7e:ac:ca:37:41:a4:8a:ea:c8: b2:e2:f4:3d:64:aa:c7:58:c2:a9:3b:4f:83:a0:13: 84:c2:bd:57:d8:6e:d3:b2:04:da:47:97:3a:25:0f: 2e:c9:b8:34:b8:92:1d:6a:cd:36:13:cb:e3:30:d3: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F0:D4:6C:2B:6F:12:91:59:54:70:85:6F:58:5B:6B:AF:AB:BE:08 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/323430323a333263303a3a2f33322d3332203d3e20313332363337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:32c0::/32 Signature Algorithm: sha256WithRSAEncryption 61:2a:dd:89:51:35:19:bc:17:56:c1:f6:a8:4d:d0:9e:c0:2a: 0d:b7:f5:31:6d:20:90:bb:a5:74:58:0e:72:54:15:ba:3c:45: 23:d7:38:31:8d:74:a5:47:d2:cf:2b:2f:64:a9:5b:d6:95:c6: b6:e9:53:1c:1e:f0:59:ce:a7:f8:0f:23:9b:01:46:e6:73:b2: 98:1b:b1:a4:a4:e1:5c:38:55:c2:09:9e:d0:15:39:37:68:43: 8d:b8:05:84:69:f2:cf:37:01:c4:b7:c0:57:d4:df:bb:56:c2: 63:b2:2b:ec:43:3a:c2:18:6d:b9:9d:55:42:74:c6:d4:9a:c9: 84:9c:52:1a:41:60:2b:39:25:2f:e7:70:01:01:d6:e0:f0:d6: d7:6d:0b:f7:4a:25:61:ca:1d:aa:19:8f:87:f5:f9:66:ae:e6: f1:d7:a0:15:39:5c:41:81:d5:c8:49:0e:57:e1:eb:a7:84:dc: a1:a9:be:f1:d7:b2:c2:02:4c:34:47:d3:f8:25:54:ff:de:e3: 05:25:2f:8a:ea:3a:ea:dd:e3:d9:a9:97:03:fc:c4:0c:8c:32: 31:cf:8c:14:f0:62:6b:3a:22:55:f4:2a:31:16:18:4f:24:bb: 31:ac:fb:3e:b2:f5:54:4b:6e:6a:3a:1c:0a:2d:71:88:28:d6: 62:b6:98:36 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUCZ9rf1yIlcteIceBnWz/O2ZjqV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNjA0MDkwMzU5MzVaFw0yNzA0MDgwNDA0MzVaMDMxMTAvBgNV BAMTKDM5RjBENDZDMkI2RjEyOTE1OTU0NzA4NTZGNTg1QjZCQUZBQkJFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYsv0tf7PrNVmvn16jLWdXI0l ugF1LgxKbY57Ok87WUsmfN1kQFrmyCBi5gxMDi1f5L04K6b0xEgStiGqUWk9klbG X0Di6UG5iVZo42aCIY9csntrZ86dIjSg6eyX4cQuJNl5+x5sQvOMqiubOX0lzaCj t0gaKOBYmhjN9//lryaO52EndmHqs7mw2ZEamuCVkZJxYAxG8Y6uUsKfmQoFfp/F rYm/D/TnqaFAqc0hOUsQ2UsQa+UaLBYNSsxCEifax7VUn34iIn6syjdBpIrqyLLi 9D1kqsdYwqk7T4OgE4TCvVfYbtOyBNpHlzolDy7JuDS4kh1qzTYTy+Mw0z77AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUOfDUbCtvEpFZVHCFb1hba6+rvggwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkMDkyN2U2LThhMGEtNGZhNy04 OTY5LTlmYjlkNjk0Mzk3Yy8wLzMyMzQzMDMyM2EzMzMyNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMjM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCMsAwDQYJKoZI hvcNAQELBQADggEBAGEq3YlRNRm8F1bB9qhN0J7AKg239TFtIJC7pXRYDnJUFbo8 RSPXODGNdKVH0s8rL2SpW9aVxrbpUxwe8FnOp/gPI5sBRuZzspgbsaSk4Vw4VcIJ ntAVOTdoQ424BYRp8s83AcS3wFfU37tWwmOyK+xDOsIYbbmdVUJ0xtSayYScUhpB YCs5JS/ncAEB1uDw1tdtC/dKJWHKHaoZj4f1+Wau5vHXoBU5XEGB1chJDlfh66eE 3KGpvvHXssICTDRH0/glVP/e4wUlL4rqOurd49mplwP8xAyMMjHPjBTwYms6IlX0 KjEWGE8kuzGs+z6y9VRLbmo6HAotcYgo1mK2mDY= -----END CERTIFICATE-----Generated at Sun Apr 19 14:46:53 2026 by rpki-client