$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f34382d3438203d3e20313338303839.roa File: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (raw, json) Hash identifier: +seHZcuWtkwwgdY5gf9yiLnl5NtpTzkJHA183uWwsjQ= Subject key identifier: 20:80:92:81:3D:49:F1:45:94:4E:4D:1F:32:48:6A:FF:45:8F:77:8E Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 20528274C8C69FEDF1D8EF17F9AAD55F75511C29 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f34382d3438203d3e20313338303839.roa Signing time: Sat 07 Feb 2026 09:00:00 +0000 ROA not before: Sat 07 Feb 2026 08:55:00 +0000 ROA not after: Sat 06 Feb 2027 09:00:00 +0000 asID: 138089 IP address blocks: 2403:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:52:82:74:c8:c6:9f:ed:f1:d8:ef:17:f9:aa:d5:5f:75:51:1c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Feb 7 08:55:00 2026 GMT Not After : Feb 6 09:00:00 2027 GMT Subject: CN=208092813D49F145944E4D1F32486AFF458F778E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:51:ff:8d:e0:16:8a:83:22:04:c0:37:43:81: a4:66:fe:2d:ed:14:fe:75:b1:12:c4:2b:37:b3:77: ef:26:87:2b:09:60:b8:5a:f2:7b:48:71:eb:1b:9a: c3:3b:0a:87:16:b0:e6:9e:d0:c7:b4:2a:03:f5:4a: 78:94:6a:f6:d7:6b:1f:cf:55:16:4e:62:c4:0d:56: 94:e6:fa:1c:ea:79:7f:e7:f1:7c:02:d6:a8:21:31: 00:1a:0d:e0:fa:2d:c6:cf:0b:bf:e6:91:ef:d7:fe: 90:7f:37:8e:b0:b5:f4:62:b9:af:97:0a:45:ff:83: df:de:46:6c:9c:c0:41:b3:f7:9f:33:bb:4c:0b:03: 80:72:9d:f1:40:4a:61:f5:a1:c3:f2:15:df:ab:87: fa:2f:ab:e6:66:b8:f7:1c:47:f2:e0:5d:a5:bc:a8: 4a:de:7a:4d:2f:14:83:e6:f7:b7:72:e9:5f:95:79: ad:75:f5:9d:26:fa:7f:eb:84:9d:bb:9a:42:67:d9: c3:49:74:70:a2:e2:e7:b4:4e:54:e6:9e:02:6f:50: 9a:e9:15:0c:f7:da:e5:ee:88:71:23:38:2a:29:90: a3:1e:77:fb:2e:9e:5d:b2:e3:97:cc:9e:a6:89:af: 92:1a:2f:c8:3b:7b:c0:76:9b:df:e7:3b:71:ca:a6: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:80:92:81:3D:49:F1:45:94:4E:4D:1F:32:48:6A:FF:45:8F:77:8E X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f34382d3438203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 50:bf:99:aa:e2:43:c6:2a:22:5a:35:7c:7b:fe:b1:5f:2b:31: 8e:4b:76:58:8c:dc:9f:b6:06:b2:8b:1b:03:9f:bf:78:ae:12: be:75:27:1b:23:13:8f:25:1c:ef:53:ee:9c:41:2c:0f:13:8e: 2d:fe:f3:c4:84:fa:2a:05:53:e8:a2:a8:25:ca:8e:ff:82:43: 06:3f:db:3a:95:b3:f1:e3:2d:ee:5a:e6:6b:d8:fe:d9:b5:39: 6a:7c:b7:8b:64:af:9b:f8:0f:fa:aa:7e:d8:56:ed:b0:b9:05: c8:91:84:5e:04:b3:0c:e4:6c:50:fb:4d:41:fc:9f:2f:b5:1e: e4:57:00:8d:ad:df:f0:c4:d2:e4:bc:9c:5c:c2:e2:62:5d:dd: 3f:81:ac:ef:61:9a:f4:c4:fb:56:e5:11:d5:26:d1:17:0c:4a: 35:5f:30:9a:4b:49:87:53:f1:fd:24:82:66:50:e2:f2:2f:33: d9:1a:ee:99:81:1a:92:3e:d2:62:f6:04:34:b6:76:af:0f:8a: da:f0:bf:42:e5:6b:69:72:31:34:89:bb:1a:fc:68:01:da:7c: d9:cb:f7:62:ef:17:21:8f:ec:d9:4e:61:d7:6a:ce:4b:ce:8c: ca:53:8c:57:31:e8:23:3e:d3:3b:56:b3:d2:0b:c6:6f:47:5f: 3d:9e:2d:20 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUIFKCdMjGn+3x2O8X+arVX3VRHCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNjAyMDcwODU1MDBaFw0yNzAyMDYwOTAwMDBaMDMxMTAvBgNV BAMTKDIwODA5MjgxM0Q0OUYxNDU5NDRFNEQxRjMyNDg2QUZGNDU4Rjc3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtUf+N4BaKgyIEwDdDgaRm/i3t FP51sRLEKzezd+8mhysJYLha8ntIcesbmsM7CocWsOae0Me0KgP1SniUavbXax/P VRZOYsQNVpTm+hzqeX/n8XwC1qghMQAaDeD6LcbPC7/mke/X/pB/N46wtfRiua+X CkX/g9/eRmycwEGz958zu0wLA4BynfFASmH1ocPyFd+rh/ovq+ZmuPccR/LgXaW8 qEreek0vFIPm97dy6V+Vea119Z0m+n/rhJ27mkJn2cNJdHCi4ue0TlTmngJvUJrp FQz32uXuiHEjOCopkKMed/sunl2y45fMnqaJr5IaL8g7e8B2m9/nO3HKpgdTAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUIICSgT1J8UWUTk0fMkhq/0WPd44wHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMyMzQzMDMzM2E2NTMwNjMzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMxMzMzODMwMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQD4MAAADANBgkq hkiG9w0BAQsFAAOCAQEAUL+ZquJDxioiWjV8e/6xXysxjkt2WIzcn7YGsosbA5+/ eK4SvnUnGyMTjyUc71PunEEsDxOOLf7zxIT6KgVT6KKoJcqO/4JDBj/bOpWz8eMt 7lrma9j+2bU5any3i2Svm/gP+qp+2FbtsLkFyJGEXgSzDORsUPtNQfyfL7Ue5FcA ja3f8MTS5LycXMLiYl3dP4Gs72Ga9MT7VuUR1SbRFwxKNV8wmktJh1Px/SSCZlDi 8i8z2RrumYEakj7SYvYENLZ2rw+K2vC/QuVraXIxNIm7GvxoAdp82cv3Yu8XIY/s 2U5h12rOS86MylOMVzHoIz7TO1az0gvGb0dfPZ4tIA== -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:42 2026 by rpki-client