$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f33322d3332203d3e20313338303839.roa File: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (raw, json) Hash identifier: W0KpE+rUhEn171HevcbczmdRBRinyTjaRQYX3+eLx8w= Subject key identifier: 8D:43:DE:BF:18:3E:4E:74:E0:01:C2:A6:59:5F:9D:F4:18:C0:CA:6F Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 1E34543D21CBE36CFF49715CE21676F75F0F90D4 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f33322d3332203d3e20313338303839.roa Signing time: Thu 05 Feb 2026 05:00:00 +0000 ROA not before: Thu 05 Feb 2026 04:55:00 +0000 ROA not after: Thu 04 Feb 2027 05:00:00 +0000 asID: 138089 IP address blocks: 2403:e0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:34:54:3d:21:cb:e3:6c:ff:49:71:5c:e2:16:76:f7:5f:0f:90:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Feb 5 04:55:00 2026 GMT Not After : Feb 4 05:00:00 2027 GMT Subject: CN=8D43DEBF183E4E74E001C2A6595F9DF418C0CA6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:ad:92:2a:a7:5a:89:c8:19:bc:a6:c0:3b: 81:ee:e8:43:37:ee:31:6a:48:59:62:81:f2:27:31: 34:62:39:97:09:03:7c:b8:61:dc:27:bd:93:10:06: fa:9d:90:7b:56:88:95:c6:0c:f0:b2:6e:33:ed:10: 87:e4:0d:e1:6e:76:7d:c3:a8:84:bd:88:e2:9d:57: ad:47:80:86:5c:87:9a:99:c2:04:5d:56:b0:c8:24: 59:c9:27:0e:0a:3a:3b:0a:88:d7:4f:9c:2e:df:72: d8:74:44:9b:ba:79:80:b9:c7:dd:12:37:d1:68:f5: 8c:cd:79:c0:51:f2:3b:d6:49:52:60:7a:94:4f:ca: 3b:e0:6f:d1:e1:2f:e8:e6:a4:a8:0c:10:7b:f7:49: 1b:7a:30:d2:ce:1d:c3:ae:9d:00:ca:31:eb:a6:ca: ff:29:2f:28:c0:76:ea:2e:61:ef:99:01:61:6f:1b: 80:c5:f0:7c:59:8e:b9:ef:ff:19:91:00:e5:30:50: 4e:e5:c8:e1:66:31:e0:53:d2:28:7e:ef:38:e5:b7: 08:57:e7:50:11:a5:10:e4:30:63:01:fd:b3:15:84: 56:f8:bf:74:b5:96:f3:27:b6:35:42:09:3a:11:07: a5:9b:41:f5:72:d8:c3:ac:79:63:24:6c:ab:45:e2: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:43:DE:BF:18:3E:4E:74:E0:01:C2:A6:59:5F:9D:F4:18:C0:CA:6F X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f33322d3332203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:e0c0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:37:ac:36:cb:5e:c0:32:26:43:ee:32:0a:63:ec:25:88:c0: b3:7c:f4:a5:c7:3b:2a:d8:e6:1f:84:ea:5b:60:2a:3e:84:b2: 6b:33:f0:ff:5f:1f:28:56:b8:15:70:d7:2e:63:7c:66:ab:43: 91:41:a5:6c:f7:3f:44:3a:65:72:21:f7:02:16:cb:73:bf:33: b7:37:79:9b:f3:86:f5:64:9c:72:30:e2:d8:07:de:8e:ec:b6: 2c:50:a2:ca:1b:c2:3a:b0:de:72:8e:ef:8b:45:a8:5e:01:43: 89:a5:76:89:37:88:ce:20:72:94:35:1f:92:ac:ea:37:c1:3d: 3b:11:96:ea:be:7c:f6:ab:d7:55:13:0c:55:a6:a8:d3:cb:71: ca:2a:bb:8a:76:58:ff:14:94:d2:da:fb:29:42:d8:cb:1a:54: 19:e0:85:df:7d:a3:12:b1:d2:00:ec:bc:67:54:73:69:31:7e: 54:3b:fa:30:46:96:2c:3d:30:7a:fd:11:4f:52:ae:52:cf:4e: 43:81:68:19:d6:26:3f:0d:9c:27:79:ab:70:28:ca:fd:0b:6c: c4:c5:32:e3:26:23:3c:b5:6a:27:99:fb:00:9c:4d:b4:92:21: 91:b5:3b:06:2c:61:1d:19:0f:a2:5f:f0:ed:6a:84:35:2b:72: 20:2c:4e:a0 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUHjRUPSHL42z/SXFc4hZ2918PkNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNjAyMDUwNDU1MDBaFw0yNzAyMDQwNTAwMDBaMDMxMTAvBgNV BAMTKDhENDNERUJGMTgzRTRFNzRFMDAxQzJBNjU5NUY5REY0MThDMENBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTK2SKqdaicgZvKbAO4Hu6EM3 7jFqSFligfInMTRiOZcJA3y4YdwnvZMQBvqdkHtWiJXGDPCybjPtEIfkDeFudn3D qIS9iOKdV61HgIZch5qZwgRdVrDIJFnJJw4KOjsKiNdPnC7fcth0RJu6eYC5x90S N9Fo9YzNecBR8jvWSVJgepRPyjvgb9HhL+jmpKgMEHv3SRt6MNLOHcOunQDKMeum yv8pLyjAduouYe+ZAWFvG4DF8HxZjrnv/xmRAOUwUE7lyOFmMeBT0ih+7zjltwhX 51ARpRDkMGMB/bMVhFb4v3S1lvMntjVCCToRB6WbQfVy2MOseWMkbKtF4g69AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUjUPevxg+TnTgAcKmWV+d9BjAym8wHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMyMzQzMDMzM2E2NTMwNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzODMwMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQD4MAwDQYJKoZI hvcNAQELBQADggEBAF03rDbLXsAyJkPuMgpj7CWIwLN89KXHOyrY5h+E6ltgKj6E smsz8P9fHyhWuBVw1y5jfGarQ5FBpWz3P0Q6ZXIh9wIWy3O/M7c3eZvzhvVknHIw 4tgH3o7stixQosobwjqw3nKO74tFqF4BQ4mldok3iM4gcpQ1H5Ks6jfBPTsRluq+ fPar11UTDFWmqNPLccoqu4p2WP8UlNLa+ylC2MsaVBnghd99oxKx0gDsvGdUc2kx flQ7+jBGliw9MHr9EU9SrlLPTkOBaBnWJj8NnCd5q3Aoyv0LbMTFMuMmIzy1aieZ +wCcTbSSIZG1OwYsYR0ZD6Jf8O1qhDUrciAsTqA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:31 2026 by rpki-client