$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa File: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (raw, json) Hash identifier: eJ1XGH3PQ4o+OhkD3fQ4IKKdCGLyiVJ505C/lW7FPoc= Subject key identifier: A9:02:3F:FF:EA:75:4D:4D:6F:4C:3D:FE:99:EA:B0:06:43:26:0A:3A Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 7A843AA80B62FFDF6E1FA968365D5EBD1B44468B Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa Signing time: Mon 16 Feb 2026 08:00:00 +0000 ROA not before: Mon 16 Feb 2026 07:55:00 +0000 ROA not after: Mon 15 Feb 2027 08:00:00 +0000 asID: 136112 IP address blocks: 2001:df1:2d00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:84:3a:a8:0b:62:ff:df:6e:1f:a9:68:36:5d:5e:bd:1b:44:46:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Feb 16 07:55:00 2026 GMT Not After : Feb 15 08:00:00 2027 GMT Subject: CN=A9023FFFEA754D4D6F4C3DFE99EAB00643260A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:6a:4b:b5:4b:71:f8:33:03:be:40:72:c2: b8:f2:bb:b3:ba:ca:86:03:5c:3a:6e:1b:b2:5f:10: 5e:ce:75:67:d8:53:31:16:10:21:2c:9f:57:20:cc: d4:c9:e7:4a:59:86:02:a1:aa:c7:a7:dc:c0:09:29: 4d:b2:6b:c6:eb:4b:e3:94:bd:a6:ac:4b:8b:bf:a2: 67:4e:be:e3:c9:35:6c:ca:5a:97:8e:f5:b3:92:0f: af:e1:8c:bb:59:cd:e7:d9:a8:8c:b0:4a:3e:fe:39: c6:7e:bb:31:21:01:f6:cc:00:c8:bd:c7:80:fc:69: 7d:94:90:66:86:5a:23:31:18:cf:1a:21:ab:97:1d: eb:d6:42:39:17:a7:b3:3e:bd:b8:95:86:52:be:7d: ab:31:0e:a1:c5:f9:d5:a3:ff:94:e3:cd:ce:57:0f: dc:22:ff:a6:ed:e6:d7:fc:11:d2:b0:75:7a:6d:78: ac:c0:db:b0:5a:7e:3d:fa:1d:91:14:1b:cf:4e:44: 2d:ef:84:98:1f:35:c1:b5:58:fe:a7:43:2f:66:c0: 7d:3d:11:8e:46:2d:f8:3f:d5:8e:22:32:13:bf:4f: c1:4c:15:6a:20:f3:c3:e0:46:7f:5c:e1:02:b4:36: 2a:ce:f5:40:ae:3d:0b:8a:97:3e:21:8d:a9:94:8a: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:02:3F:FF:EA:75:4D:4D:6F:4C:3D:FE:99:EA:B0:06:43:26:0A:3A X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:2d00::/48 Signature Algorithm: sha256WithRSAEncryption a3:b6:85:69:a0:ea:2a:2c:7e:17:5a:4b:c5:75:e1:88:76:32: 3b:bb:5a:90:67:c1:5a:a2:76:03:7a:8d:70:8f:f5:4b:fc:7c: 1c:6a:68:6d:f2:7a:2e:d1:b3:30:76:ea:03:2a:57:d0:59:28: 87:97:49:f5:a9:c9:a5:85:77:d0:56:21:1a:65:40:dd:f7:24: f3:85:1c:71:47:e8:66:55:96:5b:a9:74:27:bd:73:1c:89:94: f6:62:7a:45:f7:00:66:3c:91:03:1f:5f:7a:20:6a:84:38:6d: dd:a7:21:ed:d8:64:1f:85:79:01:d0:b4:ae:f1:ff:ae:43:34: e0:f0:0d:f7:91:de:5b:ec:28:25:c0:5f:dd:83:1f:43:3c:86: 39:a1:df:9a:82:02:5e:f2:c9:82:0f:26:21:a9:2a:9c:05:cd: 6a:42:d4:c5:63:ce:be:06:04:bd:79:71:9b:32:d7:b8:8e:65: 41:48:50:b9:f6:04:c2:0d:6e:44:1a:81:71:43:64:97:43:6a: 51:42:09:d6:0a:d7:da:5c:35:ec:1f:67:eb:c8:5e:e1:46:e9: 85:de:13:89:0c:8d:58:0a:f0:57:95:b1:e4:6c:67:ae:f4:5f: 3a:cf:e7:30:4b:47:16:dd:db:db:4e:45:88:f7:86:eb:2b:75: 8b:f5:b1:65 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeoQ6qAti/99uH6loNl1evRtERoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNjAyMTYwNzU1MDBaFw0yNzAyMTUwODAwMDBaMDMxMTAvBgNV BAMTKEE5MDIzRkZGRUE3NTRENEQ2RjRDM0RGRTk5RUFCMDA2NDMyNjBBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLWpLtUtx+DMDvkBywrjyu7O6 yoYDXDpuG7JfEF7OdWfYUzEWECEsn1cgzNTJ50pZhgKhqsen3MAJKU2ya8brS+OU vaasS4u/omdOvuPJNWzKWpeO9bOSD6/hjLtZzefZqIywSj7+OcZ+uzEhAfbMAMi9 x4D8aX2UkGaGWiMxGM8aIauXHevWQjkXp7M+vbiVhlK+fasxDqHF+dWj/5Tjzc5X D9wi/6bt5tf8EdKwdXpteKzA27Bafj36HZEUG89ORC3vhJgfNcG1WP6nQy9mwH09 EY5GLfg/1Y4iMhO/T8FMFWog88PgRn9c4QK0NirO9UCuPQuKlz4hjamUijTzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqQI//+p1TU1vTD3+meqwBkMmCjowHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwZTExZmZjLWU3NWEtNGJmNC04 NDQ4LWM2OGUyMDMzNWVlOC8wLzMyMzAzMDMxM2E2NDY2MzEzYTMyNjQzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzEzMTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8S0AMA0GCSqGSIb3DQEBCwUAA4IBAQCjtoVpoOoqLH4XWkvFdeGIdjI7u1qQZ8Fa onYDeo1wj/VL/Hwcamht8nou0bMwduoDKlfQWSiHl0n1qcmlhXfQViEaZUDd9yTz hRxxR+hmVZZbqXQnvXMciZT2YnpF9wBmPJEDH196IGqEOG3dpyHt2GQfhXkB0LSu 8f+uQzTg8A33kd5b7CglwF/dgx9DPIY5od+aggJe8smCDyYhqSqcBc1qQtTFY86+ BgS9eXGbMte4jmVBSFC59gTCDW5EGoFxQ2SXQ2pRQgnWCtfaXDXsH2fryF7hRumF 3hOJDI1YCvBXlbHkbGeu9F86z+cwS0cW3dvbTkWI94brK3WL9bFl -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:17 2026 by rpki-client