$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa File: 323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa (raw, json) Hash identifier: hKScYBKHwcWFN1mdw1cxrqoK5zViMFkzR4ss3nLGGSE= Subject key identifier: AD:EF:DE:75:78:28:3D:61:26:9F:AA:B5:9B:9B:34:1E:80:E5:09:40 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 17BF598461A17D23591E1E80D8B430C5D9432450 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa Signing time: Sat 21 Feb 2026 06:00:03 +0000 ROA not before: Sat 21 Feb 2026 05:55:03 +0000 ROA not after: Sat 20 Feb 2027 06:00:03 +0000 asID: 133840 IP address blocks: 2404:e100:3007::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bf:59:84:61:a1:7d:23:59:1e:1e:80:d8:b4:30:c5:d9:43:24:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Feb 21 05:55:03 2026 GMT Not After : Feb 20 06:00:03 2027 GMT Subject: CN=ADEFDE7578283D61269FAAB59B9B341E80E50940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:32:a7:81:03:ef:14:f8:34:2f:68:9b:c7: 76:bc:93:54:35:b5:15:ee:69:43:6a:88:b2:e6:de: c4:11:e3:bd:f4:6d:20:8c:51:48:db:06:a5:47:b2: e5:46:19:1e:0e:42:57:97:4a:c7:ee:da:4a:9c:b8: cd:3d:59:ef:b8:c2:9e:25:89:09:07:e7:08:b7:d7: 90:af:da:51:10:63:fe:c8:73:8a:2f:ff:e7:e1:13: 88:a8:f7:00:c3:a4:1c:80:96:86:40:27:63:74:a4: c4:2d:78:3a:bd:bf:9e:db:92:b8:ef:10:aa:95:af: 72:12:c7:30:81:c7:6a:4e:6b:0d:d1:91:ac:b2:7f: 5a:b7:6e:79:fc:97:36:65:e8:a2:a3:e0:dc:d4:dd: 6f:15:e9:9a:01:de:63:9e:4b:e5:4f:ae:e5:38:d7: 96:e2:c5:75:53:57:d0:c7:c7:49:69:2b:06:e1:cc: 1c:91:3a:c4:7d:81:03:9d:16:d8:2b:1f:07:e0:c7: 9c:21:59:63:59:ef:12:cf:bb:8e:22:28:f9:18:7f: 25:98:e8:ba:a7:ad:dc:6e:9d:6f:0e:6f:40:dc:ed: 6c:e6:83:3b:85:18:58:9b:11:e2:62:ff:f1:55:6d: e6:6a:5a:5c:e1:28:d1:83:5f:88:d1:67:96:92:ab: 92:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EF:DE:75:78:28:3D:61:26:9F:AA:B5:9B:9B:34:1E:80:E5:09:40 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030373a3a2f34382d3438203d3e20313333383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:3007::/48 Signature Algorithm: sha256WithRSAEncryption 46:73:cc:4d:ae:15:5a:cd:77:37:3c:67:d3:c7:86:a2:ab:65: ab:12:52:7d:8a:ad:f4:ee:60:dc:4b:e0:7f:9a:6a:a1:80:27: b7:56:06:07:e5:69:c7:70:ed:04:08:5a:6d:9a:80:21:31:a2: 18:1d:72:ec:d0:fd:66:4a:e9:bf:9e:98:28:72:73:5a:f4:93: b7:96:b9:27:6a:db:4b:59:44:8c:7b:09:9f:7b:6b:7d:99:62: 5c:9d:1b:04:f8:47:17:4d:c9:33:c0:9c:5c:d1:fe:87:b3:50: 38:48:dc:d8:89:7d:4d:dc:c2:e3:c6:ec:70:4a:4b:1e:e2:28: a7:ee:39:f8:77:4a:b4:c0:fd:56:96:ea:1d:18:f1:8f:f1:66: 07:7a:a6:1a:af:4b:14:40:c5:62:4b:e1:1e:a2:cf:ae:5f:9c: e1:00:54:c6:a5:77:71:4c:32:e6:af:5f:a9:f7:1f:ae:a7:03: 84:df:2f:47:93:e9:74:f4:ad:e4:9e:91:28:81:ac:b8:94:87: cc:a2:ce:87:90:e5:1d:67:ec:9b:d0:3f:f4:e0:90:e1:b1:89: a8:fa:23:a6:f1:fd:45:a0:4f:36:38:7f:f3:6b:1c:67:6c:9a: 52:58:82:4c:46:7a:ca:ff:e7:b4:c1:ee:05:6b:f5:c8:5c:76: 65:9d:6b:7c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUF79ZhGGhfSNZHh6A2LQwxdlDJFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNjAyMjEwNTU1MDNaFw0yNzAyMjAwNjAwMDNaMDMxMTAvBgNV BAMTKEFERUZERTc1NzgyODNENjEyNjlGQUFCNTlCOUIzNDFFODBFNTA5NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJzKngQPvFPg0L2ibx3a8k1Q1 tRXuaUNqiLLm3sQR4730bSCMUUjbBqVHsuVGGR4OQleXSsfu2kqcuM09We+4wp4l iQkH5wi315Cv2lEQY/7Ic4ov/+fhE4io9wDDpByAloZAJ2N0pMQteDq9v57bkrjv EKqVr3ISxzCBx2pOaw3Rkayyf1q3bnn8lzZl6KKj4NzU3W8V6ZoB3mOeS+VPruU4 15bixXVTV9DHx0lpKwbhzByROsR9gQOdFtgrHwfgx5whWWNZ7xLPu44iKPkYfyWY 6LqnrdxunW8Ob0Dc7WzmgzuFGFibEeJi//FVbeZqWlzhKNGDX4jRZ5aSq5I7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUre/edXgoPWEmn6q1m5s0HoDlCUAwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzMzMDMwMzcz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzMzODM0MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BOEAMAcwDQYJKoZIhvcNAQELBQADggEBAEZzzE2uFVrNdzc8Z9PHhqKrZasSUn2K rfTuYNxL4H+aaqGAJ7dWBgflacdw7QQIWm2agCExohgdcuzQ/WZK6b+emChyc1r0 k7eWuSdq20tZRIx7CZ97a32ZYlydGwT4RxdNyTPAnFzR/oezUDhI3NiJfU3cwuPG 7HBKSx7iKKfuOfh3SrTA/VaW6h0Y8Y/xZgd6phqvSxRAxWJL4R6iz65fnOEAVMal d3FMMuavX6n3H66nA4TfL0eT6XT0reSekSiBrLiUh8yizoeQ5R1n7JvQP/TgkOGx iaj6I6bx/UWgTzY4f/NrHGdsmlJYgkxGesr/57TB7gVr9chcdmWda3w= -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:40 2026 by rpki-client