$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa File: 323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa (raw, json) Hash identifier: uclq24jQqVhUnlWfyeF08dUAxE/t+sP22VyRmNC2lJw= Subject key identifier: C7:E4:34:AD:F8:66:20:B7:FE:3E:36:B4:56:11:96:C1:E9:5C:3C:5F Certificate issuer: /CN=19093F7761A9E337D03405604750BFD4ADC2121E Certificate serial: 190B27A4CFED7681BAFAD18C5C78FD144AB53C92 Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa Signing time: Tue 31 Mar 2026 21:00:02 +0000 ROA not before: Tue 31 Mar 2026 20:55:02 +0000 ROA not after: Tue 30 Mar 2027 21:00:02 +0000 asID: 137329 IP address blocks: 2402:4840:1113::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0b:27:a4:cf:ed:76:81:ba:fa:d1:8c:5c:78:fd:14:4a:b5:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E Validity Not Before: Mar 31 20:55:02 2026 GMT Not After : Mar 30 21:00:02 2027 GMT Subject: CN=C7E434ADF86620B7FE3E36B4561196C1E95C3C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:97:8e:e5:4e:3d:c2:58:8b:44:31:4a:e5: c6:30:d4:59:97:c7:4f:e5:cf:ee:e3:78:13:96:75: 74:6b:ea:12:4d:60:5d:11:d2:cf:a6:d1:60:c5:92: 9c:3a:6e:ee:31:1b:2d:f6:b1:f0:ce:e9:df:1c:f4: 54:75:db:cd:51:f0:79:2c:37:59:c3:6b:41:5e:14: 29:8d:19:69:3f:a6:3b:ca:e8:cc:d1:90:78:d6:2b: 67:f1:39:9c:95:fc:6c:49:21:a2:19:0d:7a:c0:ab: 6d:d9:14:88:7c:83:b4:f6:02:78:d4:50:1e:b5:26: 3b:df:85:fb:f7:fb:d0:e1:5e:12:35:36:34:6c:2a: ba:d4:b3:7d:8d:eb:7b:ef:d0:84:74:a7:4f:12:62: 85:20:ce:44:37:64:dd:e6:6b:e3:a6:0a:b0:b8:c5: e2:20:14:1b:e2:d8:23:1c:03:e9:ad:2a:54:38:48: d3:15:e6:f4:53:8a:df:45:74:ee:d9:1b:8f:98:28: 64:b5:d7:12:a5:f4:21:73:d0:4f:f2:fb:b0:3b:82: ec:95:a3:37:85:fe:c4:50:7a:cc:dc:c0:3c:a9:a9: 8b:a0:ec:6d:61:9c:b3:7c:66:46:05:fb:90:c0:18: 1b:e5:32:59:95:0a:ea:f2:5f:3c:5b:0f:fa:21:05: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E4:34:AD:F8:66:20:B7:FE:3E:36:B4:56:11:96:C1:E9:5C:3C:5F X509v3 Authority Key Identifier: keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a313131333a3a2f34382d3438203d3e20313337333239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4840:1113::/48 Signature Algorithm: sha256WithRSAEncryption c5:1f:36:f3:1c:45:d6:4f:f4:78:a7:e1:49:a2:a3:de:6c:fe: 30:ff:c5:f5:ff:b7:f7:2d:07:7b:e9:bb:03:5d:4c:68:68:54: 2f:0b:b4:79:2e:15:0b:18:35:0b:c1:dc:de:f3:fe:3d:0e:eb: f1:8d:f0:b9:87:21:e1:56:9b:41:f4:6a:2a:22:03:87:73:ff: a8:7a:5b:06:6c:16:05:84:f9:9a:ca:af:b2:16:c0:e1:19:54: a9:86:a4:9f:ec:5e:97:1e:54:b2:9e:a2:e4:71:ca:0e:eb:9c: ac:c7:c3:50:42:22:a7:23:20:4a:4d:d3:15:92:04:40:69:90: 1a:aa:19:d1:9a:29:9d:a1:00:0a:7d:cc:70:a1:c9:e1:8a:6c: 67:83:74:ff:73:ff:ef:86:c7:c3:ec:a2:2d:f5:c8:8e:54:99: 98:66:75:94:c3:13:e7:f4:40:6b:06:6e:4f:5e:80:10:a5:61: fd:cc:48:1e:4d:36:e7:12:6e:b7:f9:be:42:bf:6e:4f:23:9e: a8:e1:97:8c:9c:b3:6b:0a:14:91:77:fb:2c:7c:f3:53:2c:bd: d2:a8:e6:f0:31:c2:18:37:7d:ad:ff:2c:7e:ce:a1:84:27:d6: ee:f1:56:b4:a0:49:13:a6:5b:a8:24:e6:40:1c:13:ab:39:c3: 2a:05:44:30 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUGQsnpM/tdoG6+tGMXHj9FEq1PJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB REMyMTIxRTAeFw0yNjAzMzEyMDU1MDJaFw0yNzAzMzAyMTAwMDJaMDMxMTAvBgNV BAMTKEM3RTQzNEFERjg2NjIwQjdGRTNFMzZCNDU2MTE5NkMxRTk1QzNDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCpeO5U49wliLRDFK5cYw1FmX x0/lz+7jeBOWdXRr6hJNYF0R0s+m0WDFkpw6bu4xGy32sfDO6d8c9FR1281R8Hks N1nDa0FeFCmNGWk/pjvK6MzRkHjWK2fxOZyV/GxJIaIZDXrAq23ZFIh8g7T2AnjU UB61Jjvfhfv3+9DhXhI1NjRsKrrUs32N63vv0IR0p08SYoUgzkQ3ZN3ma+OmCrC4 xeIgFBvi2CMcA+mtKlQ4SNMV5vRTit9FdO7ZG4+YKGS11xKl9CFz0E/y+7A7guyV ozeF/sRQeszcwDypqYug7G1hnLN8ZkYF+5DAGBvlMlmVCuryXzxbD/ohBYDDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUx+Q0rfhmILf+Pja0VhGWwelcPF8wHwYDVR0j BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy MTIxRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h MmFkLWQxNzU0MzY1YTQ1ZC8wLzMyMzQzMDMyM2EzNDM4MzQzMDNhMzEzMTMxMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk AkhAERMwDQYJKoZIhvcNAQELBQADggEBAMUfNvMcRdZP9Hin4Umio95s/jD/xfX/ t/ctB3vpuwNdTGhoVC8LtHkuFQsYNQvB3N7z/j0O6/GN8LmHIeFWm0H0aioiA4dz /6h6WwZsFgWE+ZrKr7IWwOEZVKmGpJ/sXpceVLKeouRxyg7rnKzHw1BCIqcjIEpN 0xWSBEBpkBqqGdGaKZ2hAAp9zHChyeGKbGeDdP9z/++Gx8Psoi31yI5UmZhmdZTD E+f0QGsGbk9egBClYf3MSB5NNucSbrf5vkK/bk8jnqjhl4ycs2sKFJF3+yx881Ms vdKo5vAxwhg3fa3/LH7OoYQn1u7xVrSgSROmW6gk5kAcE6s5wyoFRDA= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:01 2026 by rpki-client