$ rpki-client -vvf repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa File: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (raw, json) Hash identifier: S9qtO6NNat29VwWXnPO9Ad1pn0XLAWnDz3QkqSTjTbI= Subject key identifier: A8:82:D3:45:7C:49:57:A6:2B:92:A9:A0:1D:E9:91:9F:0C:1D:EF:3C Certificate issuer: /CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3 Certificate serial: 73FE83D6378732FD2D92EAED3B6C54EFC88D7C3C Authority key identifier: 0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa Signing time: Fri 04 Jul 2025 04:00:00 +0000 ROA not before: Fri 04 Jul 2025 03:55:00 +0000 ROA not after: Fri 03 Jul 2026 04:00:00 +0000 asID: 140421 IP address blocks: 2001:df2:c980::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 10:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:fe:83:d6:37:87:32:fd:2d:92:ea:ed:3b:6c:54:ef:c8:8d:7c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3 Validity Not Before: Jul 4 03:55:00 2025 GMT Not After : Jul 3 04:00:00 2026 GMT Subject: CN=A882D3457C4957A62B92A9A01DE9919F0C1DEF3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:a2:61:83:6f:4c:ba:6c:40:83:3e:71:d6: eb:ed:64:10:1e:f1:0b:c8:64:05:68:f2:3c:44:67: 8f:0e:80:d1:0f:8e:04:ee:2d:06:a5:e8:b5:8b:45: ed:d8:f0:6a:6a:03:0a:c2:a7:61:0a:3d:22:95:fd: 29:4f:70:87:2c:db:e2:6d:b2:dd:2e:d7:1e:9e:ce: 20:33:27:7f:41:32:b3:ca:6d:8d:13:92:23:0a:80: 55:64:73:2a:ea:fd:4a:46:73:3c:71:cb:08:9e:f9: 23:49:f9:f5:1c:ef:ff:ad:e6:9b:7d:26:22:7e:35: 67:34:23:79:5e:dc:61:9c:80:a1:1f:4d:28:80:28: c5:86:ed:7e:43:e9:51:13:70:f2:1e:0d:14:23:b1: d8:9e:04:2f:9f:5b:e6:d2:75:71:ae:43:eb:a7:cb: 84:cc:6b:c4:e2:6d:4f:79:54:90:93:62:4a:dc:e4: e8:b2:94:00:a8:47:fc:8b:7e:0f:db:5a:21:62:c4: 9a:05:ab:98:5e:1b:ca:c2:ce:30:37:c1:10:84:02: ee:74:e1:b9:29:24:94:4f:1f:6a:9a:e2:ca:72:44: 16:15:aa:7e:19:e4:71:6f:1a:15:79:87:c1:03:c2: 4b:e1:59:82:12:1e:25:2b:23:04:d0:d5:9e:3a:4e: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:82:D3:45:7C:49:57:A6:2B:92:A9:A0:1D:E9:91:9F:0C:1D:EF:3C X509v3 Authority Key Identifier: keyid:0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:c980::/48 Signature Algorithm: sha256WithRSAEncryption 2a:4b:b6:37:93:51:55:45:b4:29:ba:7e:35:36:8a:7b:f9:d5: 9f:46:1b:e4:cd:b1:7f:eb:c5:7f:2a:36:e9:a7:c0:56:c6:79: 30:35:06:0b:c9:13:ee:5b:fc:98:a6:9f:b1:8d:da:3c:42:5a: f5:4e:23:cd:af:d3:3e:18:7e:19:15:89:65:4b:56:f1:2c:48: 84:08:b7:8e:04:7b:5e:ce:c7:18:80:d7:f2:bf:9b:bc:c0:05: 28:d5:03:fb:36:4f:1c:70:b9:3c:35:c2:ab:4e:7c:45:4f:ec: 9e:e5:cb:4a:47:d6:dd:6f:d2:d0:95:4a:b5:bc:92:64:ca:a8: 34:15:2c:83:30:ac:3f:9d:32:88:dc:3a:da:8e:52:c5:92:e8: c7:c5:04:10:76:53:13:b0:5a:6d:51:d7:42:4a:a8:e7:12:92: 2d:73:af:52:c4:04:56:d9:f5:17:3c:75:96:cc:09:10:96:36: 95:3b:7b:8e:44:be:96:ea:cf:35:66:ef:44:8f:02:3f:01:89: c4:89:d0:3c:5b:84:9b:0d:14:58:d4:8b:15:6f:25:d2:6e:b0: 2d:3f:18:1c:34:cb:53:01:85:81:57:11:e5:2b:87:69:82:48: cd:3d:6f:49:ed:9c:c1:c8:fd:c0:10:76:02:a4:fd:e1:12:29: 09:3f:09:62 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUc/6D1jeHMv0tkurtO2xU78iNfDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNGNDM0 NDk3QkZFMzAeFw0yNTA3MDQwMzU1MDBaFw0yNjA3MDMwNDAwMDBaMDMxMTAvBgNV BAMTKEE4ODJEMzQ1N0M0OTU3QTYyQjkyQTlBMDFERTk5MTlGMEMxREVGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8qJhg29MumxAgz5x1uvtZBAe 8QvIZAVo8jxEZ48OgNEPjgTuLQal6LWLRe3Y8GpqAwrCp2EKPSKV/SlPcIcs2+Jt st0u1x6eziAzJ39BMrPKbY0TkiMKgFVkcyrq/UpGczxxywie+SNJ+fUc7/+t5pt9 JiJ+NWc0I3le3GGcgKEfTSiAKMWG7X5D6VETcPIeDRQjsdieBC+fW+bSdXGuQ+un y4TMa8TibU95VJCTYkrc5OiylACoR/yLfg/bWiFixJoFq5heG8rCzjA3wRCEAu50 4bkpJJRPH2qa4spyRBYVqn4Z5HFvGhV5h8EDwkvhWYISHiUrIwTQ1Z46TgUrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqILTRXxJV6YrkqmgHemRnwwd7zwwHwYDVR0j BBgwFoAUC7TpUniaxQL6DPuVwuA/Q0SXv+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjcyZWNhNC03M2FkLTRlMGItYTZhNi03YTY1Njk4YjczYmUvMC8wQkI0RTk1Mjc4 OUFDNTAyRkEwQ0ZCOTVDMkUwM0Y0MzQ0OTdCRkUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNGNDM0NDk3 QkZFMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNzJlY2E0LTczYWQtNGUwYi1h NmE2LTdhNjU2OThiNzNiZS8wLzMyMzAzMDMxM2E2NDY2MzIzYTYzMzkzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzQzMjMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8smAMA0GCSqGSIb3DQEBCwUAA4IBAQAqS7Y3k1FVRbQpun41Nop7+dWfRhvkzbF/ 68V/Kjbpp8BWxnkwNQYLyRPuW/yYpp+xjdo8Qlr1TiPNr9M+GH4ZFYllS1bxLEiE CLeOBHtezscYgNfyv5u8wAUo1QP7Nk8ccLk8NcKrTnxFT+ye5ctKR9bdb9LQlUq1 vJJkyqg0FSyDMKw/nTKI3DrajlLFkujHxQQQdlMTsFptUddCSqjnEpItc69SxARW 2fUXPHWWzAkQljaVO3uORL6W6s81Zu9EjwI/AYnEidA8W4SbDRRY1IsVbyXSbrAt PxgcNMtTAYWBVxHlK4dpgkjNPW9J7ZzByP3AEHYCpP3hEikJPwli -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:53 2025 by rpki-client