$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e203338373539.roa File: 323030313a6466343a626430303a3a2f34382d3438203d3e203338373539.roa (raw, json) Hash identifier: otTw7cTD+7X2MD76zWvi6+MqPArwOlTIQa8qqypdI0I= Subject key identifier: 0C:F2:74:8A:7E:B7:C8:50:1C:8E:E2:22:7E:BF:41:49:3A:1B:8B:F9 Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 578DAE373E32EC575FF0CED59D1D5B65EA55D10F Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e203338373539.roa Signing time: Thu 12 Feb 2026 07:33:18 +0000 ROA not before: Thu 12 Feb 2026 07:28:18 +0000 ROA not after: Thu 11 Feb 2027 07:33:18 +0000 asID: 38759 IP address blocks: 2001:df4:bd00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8d:ae:37:3e:32:ec:57:5f:f0:ce:d5:9d:1d:5b:65:ea:55:d1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Feb 12 07:28:18 2026 GMT Not After : Feb 11 07:33:18 2027 GMT Subject: CN=0CF2748A7EB7C8501C8EE2227EBF41493A1B8BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:33:23:2b:02:e1:97:6e:bb:4e:88:dd:f7: db:72:09:3b:f4:62:0f:9e:d4:5e:af:5a:18:36:dc: 15:51:1c:92:ba:72:f6:6d:b4:81:24:79:2a:9b:fe: 1b:7e:9c:15:39:ba:1c:88:7a:23:db:65:8d:4d:5a: ef:7e:93:2d:6b:6c:e6:15:ee:34:a2:0a:61:55:2d: 2c:3c:1f:e5:e8:53:25:54:38:fc:18:a7:6f:70:1d: 18:f5:0d:49:9a:13:57:81:09:dd:f6:2d:b0:62:68: e3:68:69:d6:b8:39:cb:83:bb:16:17:d8:8f:22:86: ff:4a:ff:67:a2:b9:0b:50:fd:00:48:56:ca:1c:55: 49:0a:3a:98:4d:b5:ab:a1:1b:15:12:ae:bb:c4:8a: 33:d2:90:af:60:c1:db:73:33:14:38:ff:a4:54:6b: fc:f7:fa:9e:33:bd:99:6f:f3:be:3c:e3:c2:39:f6: b9:78:c8:ee:0d:1d:40:a9:b1:9b:72:71:80:40:02: 88:10:8b:36:7f:13:e1:8a:b3:89:a5:3a:13:be:a7: 96:e5:1b:b6:06:98:9a:ce:a2:91:1f:92:16:2a:68: 4c:ca:5f:8c:07:d3:5d:d4:8f:d5:27:bc:cb:3f:56: 59:7b:6a:cc:06:1b:ed:55:b7:10:cb:2e:a4:f2:1c: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:74:8A:7E:B7:C8:50:1C:8E:E2:22:7E:BF:41:49:3A:1B:8B:F9 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/323030313a6466343a626430303a3a2f34382d3438203d3e203338373539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 92:0e:a1:ee:ea:e0:41:bc:95:5e:90:18:4e:29:ac:a5:9f:cf: 46:16:d3:bc:d1:c5:3e:01:81:53:2e:25:54:27:f0:97:cf:bf: c8:1b:44:60:1e:99:7d:ad:e6:d9:48:43:5c:4d:c6:24:73:47: b3:28:90:ca:db:e4:f6:35:30:58:04:16:63:75:a7:d7:6c:f4: 1a:ad:9b:84:8c:f1:95:70:02:83:6f:17:fb:47:de:d9:5d:0a: fd:4a:6b:89:33:5a:d6:55:c1:03:a3:95:17:31:a5:c5:11:5d: 7e:c1:44:a4:a8:42:6e:7f:3b:b7:2d:7b:15:3e:b4:ff:01:d1: cf:c1:fb:70:31:33:e7:d4:68:d1:01:97:85:5e:d1:91:bd:6e: ed:0e:30:37:f1:78:47:81:be:01:49:c4:af:76:27:0e:94:ef: b7:a6:06:1d:5a:eb:cc:e6:d4:3c:29:a9:e8:ad:60:d6:0f:e1: 5f:f9:4a:49:8a:50:13:e7:4a:8f:7f:70:d4:ff:d0:7a:fb:42: 4e:fb:d4:71:3f:c3:3b:62:d9:cb:81:c8:f3:aa:bc:8b:a3:2f: db:55:95:5b:13:a1:ae:b5:5e:c7:ee:a6:1d:a7:06:a4:c1:bb: f0:48:12:d0:16:cf:40:48:29:a3:4b:c1:f5:c8:16:5d:23:a1: 6b:75:f5:11 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUV42uNz4y7Fdf8M7VnR1bZepV0Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNjAyMTIwNzI4MThaFw0yNzAyMTEwNzMzMThaMDMxMTAvBgNV BAMTKDBDRjI3NDhBN0VCN0M4NTAxQzhFRTIyMjdFQkY0MTQ5M0ExQjhCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7TMjKwLhl267Tojd99tyCTv0 Yg+e1F6vWhg23BVRHJK6cvZttIEkeSqb/ht+nBU5uhyIeiPbZY1NWu9+ky1rbOYV 7jSiCmFVLSw8H+XoUyVUOPwYp29wHRj1DUmaE1eBCd32LbBiaONoada4OcuDuxYX 2I8ihv9K/2eiuQtQ/QBIVsocVUkKOphNtauhGxUSrrvEijPSkK9gwdtzMxQ4/6RU a/z3+p4zvZlv874848I59rl4yO4NHUCpsZtycYBAAogQizZ/E+GKs4mlOhO+p5bl G7YGmJrOopEfkhYqaEzKX4wH013Uj9UnvMs/Vll7aswGG+1VtxDLLqTyHK45AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUDPJ0in63yFAcjuIifr9BSTobi/kwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyZDZkMGRmLWMyMWUtNDkxYy1i MTE2LTRhMWQ5YTJjNzRiZS8wLzMyMzAzMDMxM2E2NDY2MzQzYTYyNjQzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM3MzUzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfS9 ADANBgkqhkiG9w0BAQsFAAOCAQEAkg6h7urgQbyVXpAYTimspZ/PRhbTvNHFPgGB Uy4lVCfwl8+/yBtEYB6Zfa3m2UhDXE3GJHNHsyiQytvk9jUwWAQWY3Wn12z0Gq2b hIzxlXACg28X+0fe2V0K/UpriTNa1lXBA6OVFzGlxRFdfsFEpKhCbn87ty17FT60 /wHRz8H7cDEz59Ro0QGXhV7Rkb1u7Q4wN/F4R4G+AUnEr3YnDpTvt6YGHVrrzObU PCmp6K1g1g/hX/lKSYpQE+dKj39w1P/QevtCTvvUcT/DO2LZy4HI86q8i6Mv21WV WxOhrrVex+6mHacGpMG78EgS0BbPQEgpo0vB9cgWXSOha3X1EQ== -----END CERTIFICATE-----Generated at Mon Mar 2 23:06:16 2026 by rpki-client