$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa File: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (raw, json) Hash identifier: /z09OiRj3X3jdpAzL2zzsyQl3NVUfWX0DmTJAQJUjoA= Subject key identifier: F1:AA:73:A3:CD:82:BC:66:A7:DA:2C:82:DE:CF:EA:3C:45:35:EB:28 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 4ACACF4378BDD2F371F38B5461D3F312072A43DA Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa Signing time: Sun 01 Mar 2026 01:00:00 +0000 ROA not before: Sun 01 Mar 2026 00:55:00 +0000 ROA not after: Sun 28 Feb 2027 01:00:00 +0000 asID: 138089 IP address blocks: 2403:e0c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ca:cf:43:78:bd:d2:f3:71:f3:8b:54:61:d3:f3:12:07:2a:43:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Mar 1 00:55:00 2026 GMT Not After : Feb 28 01:00:00 2027 GMT Subject: CN=F1AA73A3CD82BC66A7DA2C82DECFEA3C4535EB28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:17:3a:b0:1a:be:48:45:bd:ba:82:f9:2b: 22:ec:87:f2:3b:41:27:ef:85:36:55:79:e3:4f:c1: 72:b3:75:13:e5:f1:8e:a1:b2:cc:73:24:b3:81:81: 56:1a:96:34:ea:58:31:cd:27:91:7c:73:b3:4d:fe: d0:1f:45:4a:2c:25:0f:2b:ee:c2:5b:f9:92:ca:13: 33:09:8c:da:ef:01:9d:ca:5f:89:2b:92:de:7f:d5: f9:76:c5:fc:8a:f7:ef:82:d8:50:2f:3d:40:b1:0a: ad:6e:24:7a:68:b1:fe:41:a3:f4:76:6a:a7:1a:24: 9f:0b:ca:b6:0b:44:92:56:f0:20:3c:52:7d:dd:52: b9:ce:4e:be:b1:64:3e:8e:29:05:ed:ff:22:69:80: b3:ca:c2:c1:70:fe:c4:7f:fd:fc:3d:1b:01:80:d1: 6f:34:a5:a5:6f:9b:76:7f:c7:86:e9:a5:53:72:c6: a4:53:e8:10:0f:68:82:4a:2e:aa:b0:39:4e:e9:04: 76:07:f6:b2:45:fd:e5:0a:16:88:36:d5:a2:58:e0: 5f:72:03:01:d7:c2:fc:b6:d8:2b:d5:e0:8a:29:fa: 87:0a:6b:cb:04:49:f3:9b:8f:21:8a:03:7d:9b:8b: 8c:37:54:b0:79:ab:02:61:e1:a2:96:a7:9d:8d:5b: 62:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AA:73:A3:CD:82:BC:66:A7:DA:2C:82:DE:CF:EA:3C:45:35:EB:28 X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:e0c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 26:ae:e8:f8:cf:59:36:3f:36:9b:18:56:c6:43:c3:e3:38:f3: 19:3b:9e:de:9f:e0:76:17:c2:f3:92:2d:cf:ca:48:f4:ff:d6: 43:b6:39:d5:62:65:4a:18:69:20:cf:1d:f3:2f:3a:af:0d:96: d3:d1:85:f0:5a:84:5f:04:4f:20:08:27:cd:df:1e:7f:81:f2: 36:86:0f:d8:ce:25:4e:36:d3:00:b9:a0:6e:f4:a8:e0:38:54: 72:ab:37:c3:2e:2f:84:c8:b5:fe:3b:3f:a0:3f:cd:a1:74:f8: 10:62:dd:72:d4:10:7d:15:ae:eb:77:57:62:8d:cb:5e:d5:6a: 82:53:be:df:90:2f:a3:a9:34:36:e5:de:79:21:7e:4c:2f:2e: 65:c9:8f:c8:78:4a:36:9a:01:7f:b6:b5:db:c9:68:fe:4d:96: d9:fd:6f:6a:91:b4:7e:27:00:08:b3:bb:1c:d6:37:5d:76:59: 7f:81:cb:2d:b7:6a:be:19:ef:d3:83:ea:c8:38:4d:d5:38:bd: d4:00:8e:d4:ca:00:e0:e8:24:84:fe:ab:8f:c8:e7:de:a6:25: c0:7f:ed:e2:81:bd:e8:31:e4:74:55:bd:c7:e6:0d:d1:07:7d: 14:06:26:bb:2e:2d:58:08:d5:1b:c4:d4:a3:0a:e2:0b:cd:fb: a5:ea:6f:65 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUSsrPQ3i90vNx84tUYdPzEgcqQ9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNjAzMDEwMDU1MDBaFw0yNzAyMjgwMTAwMDBaMDMxMTAvBgNV BAMTKEYxQUE3M0EzQ0Q4MkJDNjZBN0RBMkM4MkRFQ0ZFQTNDNDUzNUVCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Hhc6sBq+SEW9uoL5KyLsh/I7 QSfvhTZVeeNPwXKzdRPl8Y6hssxzJLOBgVYaljTqWDHNJ5F8c7NN/tAfRUosJQ8r 7sJb+ZLKEzMJjNrvAZ3KX4krkt5/1fl2xfyK9++C2FAvPUCxCq1uJHposf5Bo/R2 aqcaJJ8LyrYLRJJW8CA8Un3dUrnOTr6xZD6OKQXt/yJpgLPKwsFw/sR//fw9GwGA 0W80paVvm3Z/x4bppVNyxqRT6BAPaIJKLqqwOU7pBHYH9rJF/eUKFog21aJY4F9y AwHXwvy22CvV4Iop+ocKa8sESfObjyGKA32bi4w3VLB5qwJh4aKWp52NW2I5AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU8apzo82CvGan2iyC3s/qPEU16ygwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMyMzQzMDMzM2E2NTMwNjMzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkA+DAAAEw DQYJKoZIhvcNAQELBQADggEBACau6PjPWTY/NpsYVsZDw+M48xk7nt6f4HYXwvOS Lc/KSPT/1kO2OdViZUoYaSDPHfMvOq8NltPRhfBahF8ETyAIJ83fHn+B8jaGD9jO JU420wC5oG70qOA4VHKrN8MuL4TItf47P6A/zaF0+BBi3XLUEH0Vrut3V2KNy17V aoJTvt+QL6OpNDbl3nkhfkwvLmXJj8h4SjaaAX+2tdvJaP5Nltn9b2qRtH4nAAiz uxzWN112WX+Byy23ar4Z79OD6sg4TdU4vdQAjtTKAODoJIT+q4/I596mJcB/7eKB vegx5HRVvcfmDdEHfRQGJrsuLVgI1RvE1KMK4gvN+6Xqb2U= -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:18 2026 by rpki-client