$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3438203d3e203338353035.roa File: 323430313a316430303a3a2f33322d3438203d3e203338353035.roa (raw, json) Hash identifier: f3MW9MRtW/VCaCOx6xmUJmKr1hGfG/0h6/MnEScZWs0= Subject key identifier: 98:AE:43:05:13:9C:B8:42:78:CF:F7:9B:1F:23:4E:F0:25:43:4E:30 Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Certificate serial: 22E587108C10186D643C1147256F0D790777F6CA Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3438203d3e203338353035.roa Signing time: Fri 06 Feb 2026 14:22:23 +0000 ROA not before: Fri 06 Feb 2026 14:17:23 +0000 ROA not after: Fri 05 Feb 2027 14:22:23 +0000 asID: 38505 IP address blocks: 2401:1d00::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e5:87:10:8c:10:18:6d:64:3c:11:47:25:6f:0d:79:07:77:f6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Validity Not Before: Feb 6 14:17:23 2026 GMT Not After : Feb 5 14:22:23 2027 GMT Subject: CN=98AE4305139CB84278CFF79B1F234EF025434E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:03:d0:4d:bf:d8:3e:59:7f:e0:f7:87:d8:2d: bc:36:52:cc:dc:01:66:94:b5:90:81:13:67:69:85: ec:5e:5e:82:6d:88:eb:e6:ec:62:a6:72:5e:e8:25: a8:e1:58:b2:2f:ff:72:d8:fd:e4:41:19:04:57:7f: aa:c1:75:34:cb:38:38:f0:3d:dd:10:0f:0f:84:32: b1:ba:ba:67:69:1d:2b:44:4c:d6:10:f2:33:da:80: a9:5d:fe:c7:bc:1f:f0:dd:28:22:73:6a:71:bd:17: ea:d3:df:8a:43:cf:90:a2:40:31:42:96:33:36:36: 3e:9a:df:f1:f7:94:6b:21:1b:1b:70:c3:64:27:b1: c8:77:8f:d3:ba:8f:41:92:47:a2:34:89:23:c9:a8: 47:e4:bf:42:50:d5:66:e7:e4:c8:75:a6:6e:68:7e: 9c:31:68:b5:e6:34:45:d2:5d:2d:dd:6d:55:88:4e: 5c:92:65:52:50:21:60:a7:0b:4d:ee:92:31:a3:ee: 3c:89:fa:14:aa:3f:ff:35:18:f4:f7:27:93:42:cb: 50:76:44:af:83:3b:57:01:63:c8:a6:25:82:83:c0: 6b:a7:5b:c2:21:33:08:89:5d:6b:94:8b:3f:d6:aa: 2c:43:36:a0:d0:08:ab:4f:7b:ee:43:71:f3:4e:e0: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AE:43:05:13:9C:B8:42:78:CF:F7:9B:1F:23:4E:F0:25:43:4E:30 X509v3 Authority Key Identifier: keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/323430313a316430303a3a2f33322d3438203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:1d00::/32 Signature Algorithm: sha256WithRSAEncryption 28:b3:ca:c4:84:75:99:7f:8d:82:99:a9:fb:af:ac:e2:19:f7: e1:95:4a:64:ee:b6:31:f0:8b:bb:a6:b4:fd:dd:8f:f0:0a:fc: e4:cd:f1:9d:0f:84:4c:46:ba:c9:4d:88:f9:bb:6c:3d:ed:6f: 7d:85:ce:16:ef:ac:da:bf:74:ac:26:ef:4c:fd:ef:d9:a5:c7: 78:e3:ff:a6:d9:07:22:21:62:2b:d2:53:c4:e0:52:62:a6:81: 24:d1:3f:eb:73:13:40:1f:8a:ae:3d:97:32:80:d1:eb:06:5c: 40:d4:e3:91:b9:f1:f8:0f:0a:38:f1:d6:f1:c1:c6:b5:92:7d: 10:f7:9f:c6:fe:20:d9:de:a9:06:90:a6:88:c8:e6:87:90:03: b6:fb:2c:41:b1:12:a3:1b:ea:cb:41:0a:76:5b:0a:dd:5b:11: 29:ae:4f:5f:b1:b4:4a:cc:fa:9e:9f:55:c9:ad:d6:e2:69:c3: bb:29:ce:58:06:30:7d:16:ac:e2:f3:33:2b:64:bf:76:b5:01: 1d:7e:18:34:9a:95:d8:76:6b:95:cd:59:40:52:50:43:ed:59: fb:68:c0:b6:eb:e0:10:66:7c:80:11:3d:b0:ac:48:78:32:c5: 24:4c:cc:1c:c8:fa:95:38:62:2f:33:34:f8:d3:af:47:54:ab: 49:0c:e7:59 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUIuWHEIwQGG1kPBFHJW8NeQd39sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE MTFEMzNBNjAeFw0yNjAyMDYxNDE3MjNaFw0yNzAyMDUxNDIyMjNaMDMxMTAvBgNV BAMTKDk4QUU0MzA1MTM5Q0I4NDI3OENGRjc5QjFGMjM0RUYwMjU0MzRFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwA9BNv9g+WX/g94fYLbw2Uszc AWaUtZCBE2dphexeXoJtiOvm7GKmcl7oJajhWLIv/3LY/eRBGQRXf6rBdTTLODjw Pd0QDw+EMrG6umdpHStETNYQ8jPagKld/se8H/DdKCJzanG9F+rT34pDz5CiQDFC ljM2Nj6a3/H3lGshGxtww2Qnsch3j9O6j0GSR6I0iSPJqEfkv0JQ1Wbn5Mh1pm5o fpwxaLXmNEXSXS3dbVWITlySZVJQIWCnC03ukjGj7jyJ+hSqP/81GPT3J5NCy1B2 RK+DO1cBY8imJYKDwGunW8IhMwiJXWuUiz/WqixDNqDQCKtPe+5DcfNO4NhFAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUmK5DBROcuEJ4z/ebHyNO8CVDTjAwHwYDVR0j BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE MzNBNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzQzMDMxM2EzMTY0MzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMzMzgzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAR0AMA0GCSqGSIb3 DQEBCwUAA4IBAQAos8rEhHWZf42Cman7r6ziGffhlUpk7rYx8Iu7prT93Y/wCvzk zfGdD4RMRrrJTYj5u2w97W99hc4W76zav3SsJu9M/e/Zpcd44/+m2QciIWIr0lPE 4FJipoEk0T/rcxNAH4quPZcygNHrBlxA1OORufH4Dwo48dbxwca1kn0Q95/G/iDZ 3qkGkKaIyOaHkAO2+yxBsRKjG+rLQQp2WwrdWxEprk9fsbRKzPqen1XJrdbiacO7 Kc5YBjB9Fqzi8zMrZL92tQEdfhg0mpXYdmuVzVlAUlBD7Vn7aMC26+AQZnyAET2w rEh4MsUkTMwcyPqVOGIvMzT4069HVKtJDOdZ -----END CERTIFICATE-----Generated at Mon Mar 2 16:38:12 2026 by rpki-client