$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383731303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383731303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: ocZKmnm862i1x2W6r6NcTHCqsOswiOWFuwo+UwxRALc= Subject key identifier: 03:73:A5:3F:1B:B0:C4:7B:42:CE:35:47:E6:42:78:98:F6:55:2C:49 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 3EE1C812CB650D581601674D7540590D9B48C740 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383731303a3a2f34342d3434203d3e20313333373938.roa Signing time: Thu 26 Feb 2026 08:00:00 +0000 ROA not before: Thu 26 Feb 2026 07:55:00 +0000 ROA not after: Thu 25 Feb 2027 08:00:00 +0000 asID: 133798 IP address blocks: 2402:5680:8710::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e1:c8:12:cb:65:0d:58:16:01:67:4d:75:40:59:0d:9b:48:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Feb 26 07:55:00 2026 GMT Not After : Feb 25 08:00:00 2027 GMT Subject: CN=0373A53F1BB0C47B42CE3547E6427898F6552C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bc:16:7e:6b:e5:94:4c:b7:d8:88:44:38:fd: 58:e5:b0:c1:9e:c9:f3:0a:0e:a8:4f:b2:1a:de:e3: ce:f1:a2:10:ec:94:21:f0:83:81:f0:dd:23:ab:9a: d3:dc:1e:2d:50:ed:ea:d0:05:b7:a7:6f:ab:cf:49: f5:c8:1b:2c:58:ac:96:f6:34:ad:1a:32:d2:d2:e9: d1:78:5a:52:54:1c:48:a4:82:6f:fc:2c:ea:37:0b: 99:ca:31:de:e2:6f:6d:45:7f:6e:33:a5:7c:47:b0: 42:6e:49:9a:aa:fb:7f:32:16:e3:6e:4c:79:06:77: 39:e0:bd:42:2b:a5:e3:e3:36:52:1f:a3:54:10:5c: 0f:dd:cb:4d:b3:a9:e3:94:e9:75:43:82:c9:8d:bb: b0:c3:fe:d7:77:2a:b3:e0:66:22:42:94:68:6b:ff: 4c:78:a2:9d:01:5b:0d:60:10:69:61:33:37:8b:57: 76:09:e8:40:3b:2e:0d:6f:e3:e5:0d:71:1b:0e:a8: c8:ed:43:92:28:2e:54:e6:81:71:d5:c8:88:a1:ce: 4f:ca:a6:13:6f:7f:a6:4a:d6:dd:9e:8d:59:37:7b: 0a:00:9c:70:69:c8:76:41:9d:a4:51:7e:f7:d0:88: c8:bf:d1:2a:c5:3a:39:68:fa:5c:03:df:eb:a7:81: 21:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:73:A5:3F:1B:B0:C4:7B:42:CE:35:47:E6:42:78:98:F6:55:2C:49 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383731303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8710::/44 Signature Algorithm: sha256WithRSAEncryption 0e:e9:c7:69:17:2c:44:1a:26:fd:a5:06:0e:11:c8:07:56:f5: b4:3c:61:40:1a:f4:b0:d8:d9:aa:9b:22:a6:cc:4b:fc:00:c7: 28:a4:00:99:97:49:80:dd:e8:0d:b8:74:15:9c:de:38:ba:32: 9b:2b:4c:ab:e3:cd:04:6c:bf:6c:1a:14:8b:83:8f:06:d8:ab: e6:99:73:30:be:47:be:40:ea:fc:64:4e:0e:1c:82:66:05:81: 32:50:41:35:04:1f:66:bd:17:45:ad:0e:d4:f5:8a:68:60:6b: 33:ca:e2:8c:a3:c7:97:ee:80:0e:4d:3b:7e:e3:b2:84:0c:72: cf:4e:9f:d4:28:d1:fe:cc:d4:2f:f3:bb:e4:3c:d6:a5:01:a5: 72:4e:28:0f:e0:18:c9:ea:94:2b:9e:16:f4:42:a9:d1:e8:b8: f4:d4:a2:48:c2:50:fc:5a:fa:db:bc:78:2a:16:5d:44:3f:61: 22:eb:d0:84:58:cf:9a:ef:47:ee:cf:7e:39:17:ff:87:a7:79: cc:85:35:79:8f:29:5f:c4:d8:44:90:95:e1:f1:29:91:1b:fe: 8a:e0:39:01:95:05:6c:61:5e:44:97:5b:ce:d6:00:8e:24:1a: 44:a8:70:f3:b8:f6:24:86:2a:12:15:8f:59:89:c2:56:f4:32: eb:c1:75:04 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPuHIEstlDVgWAWdNdUBZDZtIx0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNjAyMjYwNzU1MDBaFw0yNzAyMjUwODAwMDBaMDMxMTAvBgNV BAMTKDAzNzNBNTNGMUJCMEM0N0I0MkNFMzU0N0U2NDI3ODk4RjY1NTJDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSvBZ+a+WUTLfYiEQ4/VjlsMGe yfMKDqhPshre487xohDslCHwg4Hw3SOrmtPcHi1Q7erQBbenb6vPSfXIGyxYrJb2 NK0aMtLS6dF4WlJUHEikgm/8LOo3C5nKMd7ib21Ff24zpXxHsEJuSZqq+38yFuNu THkGdzngvUIrpePjNlIfo1QQXA/dy02zqeOU6XVDgsmNu7DD/td3KrPgZiJClGhr /0x4op0BWw1gEGlhMzeLV3YJ6EA7Lg1v4+UNcRsOqMjtQ5IoLlTmgXHVyIihzk/K phNvf6ZK1t2ejVk3ewoAnHBpyHZBnaRRfvfQiMi/0SrFOjlo+lwD3+ungSGvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUA3OlPxuwxHtCzjVH5kJ4mPZVLEkwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzNzMxMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAhxAwDQYJKoZIhvcNAQELBQADggEBAA7px2kXLEQaJv2lBg4RyAdW9bQ8YUAa 9LDY2aqbIqbMS/wAxyikAJmXSYDd6A24dBWc3ji6MpsrTKvjzQRsv2waFIuDjwbY q+aZczC+R75A6vxkTg4cgmYFgTJQQTUEH2a9F0WtDtT1imhgazPK4oyjx5fugA5N O37jsoQMcs9On9Qo0f7M1C/zu+Q81qUBpXJOKA/gGMnqlCueFvRCqdHouPTUokjC UPxa+tu8eCoWXUQ/YSLr0IRYz5rvR+7PfjkX/4enecyFNXmPKV/E2ESQleHxKZEb /orgOQGVBWxhXkSXW87WAI4kGkSocPO49iSGKhIVj1mJwlb0MuvBdQQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:07 2026 by rpki-client