$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa File: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (raw, json) Hash identifier: xQDobBUWeU1Hu6QGna8EC5Z5unLxEbqVdGU1COX+/Xs= Subject key identifier: 87:CD:6C:6C:80:17:20:BF:C2:F8:4E:DC:D0:44:08:93:43:90:88:F0 Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 0E69A6D98FEFCB5E17E81FA1981D0078152FA379 Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa Signing time: Tue 10 Feb 2026 13:00:02 +0000 ROA not before: Tue 10 Feb 2026 12:55:02 +0000 ROA not after: Tue 09 Feb 2027 13:00:02 +0000 asID: 137323 IP address blocks: 2001:df4:9100::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:69:a6:d9:8f:ef:cb:5e:17:e8:1f:a1:98:1d:00:78:15:2f:a3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Feb 10 12:55:02 2026 GMT Not After : Feb 9 13:00:02 2027 GMT Subject: CN=87CD6C6C801720BFC2F84EDCD0440893439088F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:02:bb:1e:71:6d:4d:4a:f9:98:7f:16:26: d9:7b:dc:45:80:6f:62:2b:48:90:fa:77:03:0b:cc: 6b:87:fd:0a:57:77:5b:2c:3f:f1:a7:fb:59:9b:24: 3e:05:94:8e:c9:10:f7:0e:e9:ea:a0:1b:92:b5:0b: cc:31:27:57:3a:3e:6e:10:32:95:dc:19:e3:12:55: 75:24:bf:39:33:98:79:3a:d2:61:36:7f:21:bd:b0: fc:ef:d0:4f:23:b8:ad:4a:03:95:78:cf:c0:94:ed: f1:d3:02:d4:73:3c:3b:8c:2c:65:8f:cb:3e:a0:6d: 1d:5e:b1:d5:f6:59:78:ba:28:51:cc:73:e4:ca:d8: b3:90:3e:f1:ea:ab:92:24:de:48:cd:30:b5:7d:24: da:a3:20:4b:46:ac:54:cd:7f:87:b1:8d:37:d6:1e: 8b:bf:9b:41:c8:6b:3d:cd:23:0c:4d:df:9b:0b:8e: 28:d0:53:9e:8b:5f:76:dd:a4:0e:be:b4:e3:f0:2f: b2:72:c2:23:0b:6b:3e:dc:26:2a:30:5b:ae:7b:03: 81:37:00:21:e1:42:86:aa:98:af:7c:ae:9f:82:e0: 64:72:0b:41:3f:99:2f:cb:01:f9:cd:89:11:ed:aa: 9c:27:07:d5:50:62:69:84:db:72:c4:c5:93:4f:cb: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CD:6C:6C:80:17:20:BF:C2:F8:4E:DC:D0:44:08:93:43:90:88:F0 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9100::/48 Signature Algorithm: sha256WithRSAEncryption 95:41:23:26:96:9e:ec:89:fa:7f:6e:d7:cf:a1:d7:75:25:32: 65:08:6c:c7:e2:dc:6f:b2:81:25:c6:57:5a:07:48:a0:95:83: c3:b4:52:ab:af:d6:a4:27:16:09:be:79:a2:cf:98:aa:33:3f: bc:3f:b2:4e:25:9a:93:f0:30:99:f0:b1:79:00:b2:29:b0:79: 4e:c6:c9:fe:6a:4f:39:77:e7:51:20:ef:cf:a8:85:f0:7f:63: 95:13:75:49:fe:44:55:32:53:22:d5:21:51:b7:69:ff:4e:67: 18:95:bb:35:80:c7:63:d7:b3:cb:f9:01:72:46:f6:5a:fc:3f: 43:d8:b8:ba:b4:96:2a:35:38:46:11:a2:5a:89:9c:80:8e:47: 7e:28:cf:f6:0d:86:7b:74:36:d1:07:2d:fa:ea:e1:d7:4f:28: a7:68:b2:bf:81:6b:01:2e:c2:db:4f:b5:2c:07:06:d2:28:53: ec:45:ad:d5:c1:97:56:79:7f:77:3b:ab:45:e6:9a:18:90:1f: a8:b1:b3:83:b4:df:10:d1:88:01:66:d0:34:4b:dd:39:b4:72: 2f:39:d7:b7:b8:f7:f3:6a:26:e0:a4:18:2e:35:35:2a:c5:58: a3:bb:df:75:b5:af:e8:be:1d:e4:20:e3:68:7e:02:ac:f2:4d: 05:02:0d:d3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDmmm2Y/vy14X6B+hmB0AeBUvo3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNjAyMTAxMjU1MDJaFw0yNzAyMDkxMzAwMDJaMDMxMTAvBgNV BAMTKDg3Q0Q2QzZDODAxNzIwQkZDMkY4NEVEQ0QwNDQwODkzNDM5MDg4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzgK7HnFtTUr5mH8WJtl73EWA b2IrSJD6dwMLzGuH/QpXd1ssP/Gn+1mbJD4FlI7JEPcO6eqgG5K1C8wxJ1c6Pm4Q MpXcGeMSVXUkvzkzmHk60mE2fyG9sPzv0E8juK1KA5V4z8CU7fHTAtRzPDuMLGWP yz6gbR1esdX2WXi6KFHMc+TK2LOQPvHqq5Ik3kjNMLV9JNqjIEtGrFTNf4exjTfW Hou/m0HIaz3NIwxN35sLjijQU56LX3bdpA6+tOPwL7JywiMLaz7cJiowW657A4E3 ACHhQoaqmK98rp+C4GRyC0E/mS/LAfnNiRHtqpwnB9VQYmmE23LExZNPy4G/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUh81sbIAXIL/C+E7c0EQIk0OQiPAwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxYWYxNDRiLWI5MmUtNGZmZi1i NjQxLWU0NmZkZGU4YzZkZi8wLzMyMzAzMDMxM2E2NDY2MzQzYTM5MzEzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzMzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9JEAMA0GCSqGSIb3DQEBCwUAA4IBAQCVQSMmlp7sifp/btfPodd1JTJlCGzH4txv soElxldaB0iglYPDtFKrr9akJxYJvnmiz5iqMz+8P7JOJZqT8DCZ8LF5ALIpsHlO xsn+ak85d+dRIO/PqIXwf2OVE3VJ/kRVMlMi1SFRt2n/TmcYlbs1gMdj17PL+QFy RvZa/D9D2Li6tJYqNThGEaJaiZyAjkd+KM/2DYZ7dDbRBy366uHXTyinaLK/gWsB LsLbT7UsBwbSKFPsRa3VwZdWeX93O6tF5poYkB+osbODtN8Q0YgBZtA0S905tHIv Ode3uPfzaibgpBguNTUqxViju991ta/ovh3kIONofgKs8k0FAg3T -----END CERTIFICATE-----Generated at Mon Mar 2 09:34:02 2026 by rpki-client