$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa File: 34392e302e302e302f32322d3234203d3e203535373031.roa (raw, json) Hash identifier: YSMhsGgSxUexXfUzO8M+1dzvbXdKTz+R7UgsWo9f99w= Subject key identifier: 68:32:BE:07:FD:1B:C5:7B:32:C6:68:7D:D4:32:70:5B:9D:27:4E:C3 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 42E01A223B66FD68C8F414743EE97C158ECE8498 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa Signing time: Wed 18 Mar 2026 14:00:03 +0000 ROA not before: Wed 18 Mar 2026 13:55:03 +0000 ROA not after: Wed 17 Mar 2027 14:00:03 +0000 asID: 55701 IP address blocks: 49.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 11:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e0:1a:22:3b:66:fd:68:c8:f4:14:74:3e:e9:7c:15:8e:ce:84:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Mar 18 13:55:03 2026 GMT Not After : Mar 17 14:00:03 2027 GMT Subject: CN=6832BE07FD1BC57B32C6687DD432705B9D274EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6f:5b:6c:47:36:82:31:62:66:62:48:a9:0b: 2a:c9:99:1d:13:b4:ce:f9:c5:ea:7c:bb:1e:19:14: 34:33:81:a5:b5:af:68:b8:f7:ec:2e:65:cf:44:96: 32:11:e4:ae:1d:50:29:6c:d3:e8:94:5f:55:5b:25: 63:4f:f2:5c:26:f7:f3:1e:f0:3e:38:27:aa:f5:b5: 93:a5:39:91:8a:82:b2:96:5f:75:32:c6:94:fb:0d: 07:25:cb:58:38:69:af:f3:0b:3b:db:72:b9:cc:fd: 52:69:01:9b:24:2d:01:4c:a7:1f:f0:a1:c2:a6:4b: 1b:9c:16:c3:07:fc:f7:19:0d:f7:23:6a:9b:9c:a6: 34:12:a2:7f:58:ff:ce:64:ca:e6:cf:6a:f5:70:c7: 57:1e:65:bf:94:1e:35:d3:2d:25:df:7b:1f:7c:ac: f8:b8:ce:0d:51:53:ab:9f:bb:b9:f1:a3:85:e7:98: 27:fc:6e:ef:c1:f2:4b:ee:ea:8f:21:08:cb:01:00: a7:f2:97:c7:c6:53:72:5e:2b:19:01:61:60:86:63: 12:21:a5:9b:9d:06:85:1f:59:6b:e6:cc:89:7f:34: d3:db:9f:96:ee:2e:b8:6e:b5:0a:15:d8:7d:ba:dd: c9:26:40:16:e0:61:02:0d:c5:32:cb:69:52:20:ea: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:BE:07:FD:1B:C5:7B:32:C6:68:7D:D4:32:70:5B:9D:27:4E:C3 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/34392e302e302e302f32322d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.0.0.0/22 Signature Algorithm: sha256WithRSAEncryption 86:93:28:52:a0:cb:ff:d1:8a:bb:86:70:e5:c8:ff:31:6c:3c: fe:68:44:00:90:37:f1:2d:74:e9:0b:3e:25:d0:bb:ae:a5:27: 78:cd:b7:2b:87:4e:c3:0f:72:e2:1a:a1:7a:86:e1:97:2b:78: fb:c3:35:6b:dc:2d:31:91:1c:15:61:a7:ca:8d:97:71:71:35: 67:4d:04:ec:5e:6c:2f:76:e6:83:8f:b1:71:10:8c:19:9a:e2: e2:ac:e4:e8:4a:32:1e:18:78:c5:ed:9c:70:48:85:e7:dc:67: 04:0e:f9:30:99:29:41:41:e4:d5:c5:96:e0:4e:bd:46:98:ff: 99:d9:4d:54:99:46:e8:91:37:18:ee:97:82:1f:07:e8:87:5a: c4:11:2c:d9:a8:0a:ab:3c:b2:7c:78:f7:37:a1:ee:e2:90:61: 29:c8:fb:4c:8b:07:2e:5d:fc:83:e5:de:7c:99:a8:c0:c5:dc: 13:e7:ac:e9:ef:37:14:6c:e9:35:27:3a:48:83:c2:0c:15:a1: f9:00:44:cf:be:fa:66:a3:8a:b5:4f:79:b2:5e:1a:17:8d:ca: 88:5c:7e:25:b2:d7:21:75:0d:35:8b:35:da:44:8e:d3:e8:6c: 50:6d:98:9c:33:79:f6:58:fc:c3:08:cf:da:d9:5f:88:dd:31: 7f:67:23:c6 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgIUQuAaIjtm/WjI9BR0Pul8FY7OhJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNjAzMTgxMzU1MDNaFw0yNzAzMTcxNDAwMDNaMDMxMTAvBgNV BAMTKDY4MzJCRTA3RkQxQkM1N0IzMkM2Njg3REQ0MzI3MDVCOUQyNzRFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6b1tsRzaCMWJmYkipCyrJmR0T tM75xep8ux4ZFDQzgaW1r2i49+wuZc9EljIR5K4dUCls0+iUX1VbJWNP8lwm9/Me 8D44J6r1tZOlOZGKgrKWX3UyxpT7DQcly1g4aa/zCzvbcrnM/VJpAZskLQFMpx/w ocKmSxucFsMH/PcZDfcjapucpjQSon9Y/85kyubPavVwx1ceZb+UHjXTLSXfex98 rPi4zg1RU6ufu7nxo4XnmCf8bu/B8kvu6o8hCMsBAKfyl8fGU3JeKxkBYWCGYxIh pZudBoUfWWvmzIl/NNPbn5buLrhutQoV2H263ckmQBbgYQINxTLLaVIg6orLAgMB AAGjggIpMIICJTAdBgNVHQ4EFgQUaDK+B/0bxXsyxmh91DJwW50nTsMwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvMzQzOTJlMzAyZTMwMmUzMDJmMzIzMjJkMzIzNDIw M2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjEAADANBgkqhkiG9w0BAQsFAAOC AQEAhpMoUqDL/9GKu4Zw5cj/MWw8/mhEAJA38S106Qs+JdC7rqUneM23K4dOww9y 4hqheobhlyt4+8M1a9wtMZEcFWGnyo2XcXE1Z00E7F5sL3bmg4+xcRCMGZri4qzk 6EoyHhh4xe2ccEiF59xnBA75MJkpQUHk1cWW4E69Rpj/mdlNVJlG6JE3GO6Xgh8H 6IdaxBEs2agKqzyyfHj3N6Hu4pBhKcj7TIsHLl38g+XefJmowMXcE+es6e83FGzp NSc6SIPCDBWh+QBEz776ZqOKtU95sl4aF43KiFx+JbLXIXUNNYs12kSO0+hsUG2Y nDN59lj8wwjP2tlfiN0xf2cjxg== -----END CERTIFICATE-----Generated at Sun Mar 22 11:34:12 2026 by rpki-client