$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa File: 323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa (raw, json) Hash identifier: 2dQHGYiH9enpQc+xlxNiMjNrXTlWfbrKCB2xP6rUvxU= Subject key identifier: 71:BF:14:39:E2:EE:47:11:F8:DE:3B:E4:09:D7:41:19:3B:2B:CB:88 Certificate issuer: /CN=19093F7761A9E337D03405604750BFD4ADC2121E Certificate serial: 5F1934C1C22AD6FB45AFF797EB4DD15C6943307F Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa Signing time: Tue 31 Mar 2026 21:00:03 +0000 ROA not before: Tue 31 Mar 2026 20:55:03 +0000 ROA not after: Tue 30 Mar 2027 21:00:03 +0000 asID: 137329 IP address blocks: 2402:4840:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:19:34:c1:c2:2a:d6:fb:45:af:f7:97:eb:4d:d1:5c:69:43:30:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E Validity Not Before: Mar 31 20:55:03 2026 GMT Not After : Mar 30 21:00:03 2027 GMT Subject: CN=71BF1439E2EE4711F8DE3BE409D741193B2BCB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:47:5d:4d:67:25:db:ec:cc:1a:e4:36:b7: 54:50:f5:9f:2b:68:d2:ee:49:41:92:9b:3d:87:af: 2a:b1:c8:9b:37:c0:e4:e2:04:7e:df:7b:f3:95:18: de:2d:5c:08:aa:c6:cc:24:2a:fc:a4:a5:c4:03:00: 6f:92:37:1d:8e:55:97:b9:69:f8:1e:5f:d3:b7:30: 33:c5:c3:7d:5f:b7:bd:21:16:1e:ff:e3:af:3f:62: 41:44:c6:a4:08:6d:70:83:f9:44:99:a6:8c:f9:b7: 40:ea:2e:26:05:e8:4c:2d:08:ed:e1:ad:9c:76:ae: 98:be:1b:8d:cc:0b:1e:d6:35:83:6f:3a:b7:12:a3: a5:77:40:9c:a9:17:04:80:ff:01:5d:e9:9e:b0:b4: 96:09:c7:8a:dc:2c:ad:74:02:bb:ed:8c:ea:ea:d4: a5:e2:1f:c8:2e:4c:1d:be:85:66:36:ee:6d:42:37: f6:dc:72:94:6d:72:01:7e:dc:14:48:6a:94:1a:53: 07:cc:76:40:1d:46:ae:ff:93:0b:8a:4c:2a:d5:cd: c1:d1:dc:57:df:26:c4:e1:e8:bf:8b:2c:ec:05:65: 65:b0:41:46:64:6e:8e:bf:4b:d7:c1:1c:10:77:6f: c4:3e:ed:b4:08:b6:19:a9:c2:49:1e:bb:22:2b:ed: 8e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BF:14:39:E2:EE:47:11:F8:DE:3B:E4:09:D7:41:19:3B:2B:CB:88 X509v3 Authority Key Identifier: keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313030333a3a2f34382d3438203d3e20313337333239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4840:1003::/48 Signature Algorithm: sha256WithRSAEncryption 5e:a5:74:ae:01:41:56:a4:e6:a6:57:f9:77:69:6a:0d:01:87: e6:db:57:1a:73:3d:fe:38:28:3e:50:67:d7:8d:1d:1c:09:39: 18:3e:14:56:8a:af:12:41:f2:40:bc:34:96:16:15:f7:60:5a: 06:1c:13:ea:08:81:51:ae:07:da:c2:45:eb:03:7e:5a:72:59: 17:ee:3c:a3:3a:ef:4e:95:76:e6:9a:9a:66:77:e5:b0:81:84: bb:ad:9b:0d:f6:19:24:15:44:9f:d5:9f:75:3e:c6:b0:8d:9a: 73:35:9e:ba:29:89:1a:cd:b9:6d:bf:c5:45:52:82:64:fb:a9: 1c:8d:e7:41:df:0e:03:bd:4b:91:78:c8:e1:b2:44:21:8e:b5: 4b:bc:51:1a:5b:a9:7d:fe:fe:36:98:9e:e5:50:95:2d:8c:88: 54:2d:4a:2d:a9:69:4a:ec:fe:8d:ba:f1:0e:bf:2f:d2:b7:bc: 57:01:43:28:fd:16:11:41:28:2b:fe:8a:cb:6f:36:52:b7:c6: d8:5e:aa:2a:ae:9b:bf:e8:c2:d4:95:75:29:5a:be:0b:28:16: 63:ee:8b:0f:90:fc:c6:6d:4d:de:41:5a:bb:db:4a:a6:f9:60: 66:60:ab:0f:bd:c9:00:a6:c5:7c:be:ef:4c:53:f0:a3:15:70: 6b:e0:8a:d7 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUXxk0wcIq1vtFr/eX603RXGlDMH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB REMyMTIxRTAeFw0yNjAzMzEyMDU1MDNaFw0yNzAzMzAyMTAwMDNaMDMxMTAvBgNV BAMTKDcxQkYxNDM5RTJFRTQ3MTFGOERFM0JFNDA5RDc0MTE5M0IyQkNCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8UddTWcl2+zMGuQ2t1RQ9Z8r aNLuSUGSmz2HryqxyJs3wOTiBH7fe/OVGN4tXAiqxswkKvykpcQDAG+SNx2OVZe5 afgeX9O3MDPFw31ft70hFh7/468/YkFExqQIbXCD+USZpoz5t0DqLiYF6EwtCO3h rZx2rpi+G43MCx7WNYNvOrcSo6V3QJypFwSA/wFd6Z6wtJYJx4rcLK10ArvtjOrq 1KXiH8guTB2+hWY27m1CN/bccpRtcgF+3BRIapQaUwfMdkAdRq7/kwuKTCrVzcHR 3FffJsTh6L+LLOwFZWWwQUZkbo6/S9fBHBB3b8Q+7bQIthmpwkkeuyIr7Y7hAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUcb8UOeLuRxH43jvkCddBGTsry4gwHwYDVR0j BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy MTIxRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h MmFkLWQxNzU0MzY1YTQ1ZC8wLzMyMzQzMDMyM2EzNDM4MzQzMDNhMzEzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk AkhAEAMwDQYJKoZIhvcNAQELBQADggEBAF6ldK4BQVak5qZX+Xdpag0Bh+bbVxpz Pf44KD5QZ9eNHRwJORg+FFaKrxJB8kC8NJYWFfdgWgYcE+oIgVGuB9rCResDflpy WRfuPKM6706VduaammZ35bCBhLutmw32GSQVRJ/Vn3U+xrCNmnM1nropiRrNuW2/ xUVSgmT7qRyN50HfDgO9S5F4yOGyRCGOtUu8URpbqX3+/jaYnuVQlS2MiFQtSi2p aUrs/o268Q6/L9K3vFcBQyj9FhFBKCv+istvNlK3xtheqiqum7/owtSVdSlavgso FmPuiw+Q/MZtTd5BWrvbSqb5YGZgqw+9yQCmxXy+70xT8KMVcGvgitc= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:00 2026 by rpki-client