$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa File: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (raw, json) Hash identifier: +EFXmqu3JLaq42h7z1lE1v93Bgk0y0IL5bxecaOnNys= Subject key identifier: 62:3D:19:89:E1:AA:5C:99:46:15:7F:65:72:AA:3D:1A:AC:81:E1:C2 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 5A24BD5183125EC1BC5933CFFE258A9B74DFA8D1 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa Signing time: Mon 23 Feb 2026 06:00:40 +0000 ROA not before: Mon 23 Feb 2026 05:55:40 +0000 ROA not after: Mon 22 Feb 2027 06:00:40 +0000 asID: 18103 IP address blocks: 2401:1b00::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:24:bd:51:83:12:5e:c1:bc:59:33:cf:fe:25:8a:9b:74:df:a8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Feb 23 05:55:40 2026 GMT Not After : Feb 22 06:00:40 2027 GMT Subject: CN=623D1989E1AA5C9946157F6572AA3D1AAC81E1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:c4:68:fe:a0:fd:a7:66:ab:f4:d9:b5:e6: 3e:28:93:fc:b3:3f:3c:70:63:8c:48:6a:50:b5:f2: 5a:70:7d:07:47:e7:af:50:8b:92:ec:36:51:17:1c: b0:28:14:67:0c:2b:fb:4c:f8:13:78:e3:52:c0:e0: 76:8a:65:6c:21:dc:71:7b:8a:d1:a8:47:6b:77:bf: 18:82:95:f8:57:b6:99:ce:f2:6c:e8:95:c7:94:b9: 74:47:ff:42:2d:b7:d0:03:30:92:4b:97:87:71:c8: 46:ea:34:b1:1a:6d:22:34:b4:1a:31:e1:71:48:b1: 3b:96:0a:1c:b6:4b:b3:34:b3:6e:06:e3:81:5e:4b: 98:5f:00:ed:a4:98:94:a6:76:b6:22:a1:96:04:3f: 13:15:79:52:a4:c5:ee:0f:3f:60:29:6f:e2:32:92: be:61:32:23:e3:d5:9d:df:dc:b3:ce:41:41:f8:51: 82:81:cf:86:1b:ce:ca:42:fc:62:0f:c6:2c:f5:53: bf:30:9e:3d:3f:02:7f:ee:74:51:ba:d3:1b:ff:e6: 04:9d:0f:10:3f:0a:a4:1b:e6:b2:e2:8c:44:69:52: 7d:69:b9:d3:ad:22:87:d3:2e:30:67:5b:7e:80:71: d0:85:56:bc:6f:e1:94:91:37:10:85:2f:22:4f:6d: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3D:19:89:E1:AA:5C:99:46:15:7F:65:72:AA:3D:1A:AC:81:E1:C2 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:1b00::/32 Signature Algorithm: sha256WithRSAEncryption 4d:5d:e7:4a:1e:29:c5:71:cf:81:27:57:f0:9f:db:2c:53:05: dc:98:2a:21:32:bd:ed:91:8d:0e:b4:75:59:ed:33:6e:e9:d1: 4c:2a:7f:f6:74:da:41:8a:54:5a:49:cb:9d:98:c5:2e:dd:02: 35:47:27:1f:be:78:71:26:96:f7:46:6c:6b:77:bc:61:c6:9f: 38:ea:ce:16:dc:a1:db:18:ed:4b:f0:7f:a3:a8:0d:10:89:e0: c5:8b:ab:83:f4:dc:f4:c9:10:9a:1e:53:3a:14:db:45:da:db: c5:9d:6a:90:3e:e4:97:58:61:14:2c:eb:4e:de:4a:aa:03:a4: e6:c0:96:f6:df:0e:7a:5b:46:9c:49:c7:1b:82:a9:e1:f5:6a: 4a:23:cd:de:6d:f6:7e:04:2a:74:05:2e:fa:af:c9:b5:af:d2: 3f:0f:51:29:d3:6a:8c:c9:a0:df:08:02:76:4a:b0:dd:a2:3a: 6d:bf:ee:f5:ea:12:2a:1a:91:2c:1e:1f:77:4a:1c:e2:e6:3d: 2f:67:a7:5f:4e:0f:d4:c5:60:de:5f:0b:9a:17:74:e5:04:8b: a5:a6:f8:12:52:98:56:c6:31:0c:95:ce:5e:e1:89:aa:9a:be: 0b:ef:da:3a:8a:4c:05:23:10:23:6d:84:ea:67:3e:6e:bd:64: 93:90:27:53 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUWiS9UYMSXsG8WTPP/iWKm3TfqNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNjAyMjMwNTU1NDBaFw0yNzAyMjIwNjAwNDBaMDMxMTAvBgNV BAMTKDYyM0QxOTg5RTFBQTVDOTk0NjE1N0Y2NTcyQUEzRDFBQUM4MUUxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+cRo/qD9p2ar9Nm15j4ok/yz PzxwY4xIalC18lpwfQdH569Qi5LsNlEXHLAoFGcMK/tM+BN441LA4HaKZWwh3HF7 itGoR2t3vxiClfhXtpnO8mzolceUuXRH/0Itt9ADMJJLl4dxyEbqNLEabSI0tBox 4XFIsTuWChy2S7M0s24G44FeS5hfAO2kmJSmdrYioZYEPxMVeVKkxe4PP2Apb+Iy kr5hMiPj1Z3f3LPOQUH4UYKBz4YbzspC/GIPxiz1U78wnj0/An/udFG60xv/5gSd DxA/CqQb5rLijERpUn1pudOtIofTLjBnW36AcdCFVrxv4ZSRNxCFLyJPbTz/AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUYj0ZieGqXJlGFX9lcqo9GqyB4cIwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFmLWQ5YzctNGZmZC1i YTAzLWEzZTFjZGQ4YWVlMC8wLzMyMzQzMDMxM2EzMTYyMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzgzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkARsAMA0GCSqGSIb3 DQEBCwUAA4IBAQBNXedKHinFcc+BJ1fwn9ssUwXcmCohMr3tkY0OtHVZ7TNu6dFM Kn/2dNpBilRaScudmMUu3QI1RycfvnhxJpb3Rmxrd7xhxp846s4W3KHbGO1L8H+j qA0QieDFi6uD9Nz0yRCaHlM6FNtF2tvFnWqQPuSXWGEULOtO3kqqA6TmwJb23w56 W0acSccbgqnh9WpKI83ebfZ+BCp0BS76r8m1r9I/D1Ep02qMyaDfCAJ2SrDdojpt v+716hIqGpEsHh93Shzi5j0vZ6dfTg/UxWDeXwuaF3TlBIulpvgSUphWxjEMlc5e 4Ymqmr4L79o6ikwFIxAjbYTqZz5uvWSTkCdT -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:29 2026 by rpki-client