$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: zzz4sdR5gzKzpAbEJCRzN6BkviHvm/Eab9wuvzBGW3s= Subject key identifier: 07:F7:2D:65:D4:30:07:B8:F5:57:79:92:E4:48:DC:CD:2C:98:FB:B4 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 72D379C1227AD529809F8747DC3959943C5CD401 Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa Signing time: Tue 15 Jul 2025 02:00:02 +0000 ROA not before: Tue 15 Jul 2025 01:55:02 +0000 ROA not after: Tue 14 Jul 2026 02:00:02 +0000 asID: 136079 IP address blocks: 2405:2cc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 03:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d3:79:c1:22:7a:d5:29:80:9f:87:47:dc:39:59:94:3c:5c:d4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Jul 15 01:55:02 2025 GMT Not After : Jul 14 02:00:02 2026 GMT Subject: CN=07F72D65D43007B8F5577992E448DCCD2C98FBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:43:3e:a4:b3:eb:25:f3:88:92:ed:c0:af: 88:36:a0:31:d4:9d:87:83:90:53:6e:4f:8c:b8:0e: 5d:1d:27:a6:2e:be:63:9d:41:68:63:74:97:69:96: df:fb:6d:23:b4:a5:44:bc:0e:1e:75:ef:6d:2a:95: c7:02:88:e5:d3:0c:cd:b2:4e:2a:80:a9:d5:13:33: 1c:e8:31:f8:9a:34:ac:0f:6f:67:15:e5:f9:71:f6: d0:90:8d:8c:fb:ed:ac:d4:1c:f5:fb:8e:e6:6c:f9: 5c:20:dd:21:3e:10:f4:9b:b6:10:0c:72:23:30:d8: f7:6f:71:63:79:9f:ba:b5:2f:d5:87:bd:8d:45:74: 97:df:f7:cb:e6:35:4f:46:70:d5:c7:c2:cf:9d:a7: 19:21:85:45:36:2d:fb:bb:f9:04:1a:27:db:2f:00: f2:65:0b:41:02:d5:43:c8:60:c5:42:99:73:50:dc: 8e:da:78:0d:ff:08:b7:be:8b:55:c1:ee:0c:f9:e6: 1e:44:af:b4:db:6b:a8:cc:4d:44:4c:65:fd:df:63: 54:1d:1c:38:30:2b:25:fd:70:49:23:40:11:74:96: 30:1f:aa:ae:26:3b:54:dc:85:8f:fd:80:af:0b:90: db:cc:62:2e:7c:78:56:9a:00:73:d3:37:d7:46:c9: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F7:2D:65:D4:30:07:B8:F5:57:79:92:E4:48:DC:CD:2C:98:FB:B4 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:1::/48 Signature Algorithm: sha256WithRSAEncryption 68:78:35:3d:fb:0e:46:fd:ef:f1:1c:7a:30:2e:62:0d:b7:aa: 06:9f:3b:9a:3e:35:f6:27:4c:00:e3:74:ee:30:76:e5:41:b6: f2:44:be:a1:c2:d6:1c:bd:36:75:5f:5f:5d:63:6d:0b:6a:b6: 13:4d:3d:74:2b:21:6c:bc:86:2e:5d:ed:40:d1:7c:5e:4a:4b: 26:aa:a1:d5:cb:68:d7:35:55:ff:f6:44:2a:c2:13:bb:1b:a2: df:b6:fb:a2:bc:70:94:99:e0:ba:d5:a4:82:9a:d6:24:cc:88: 9f:3b:25:68:c3:8f:19:4e:dd:a8:83:0e:02:57:b1:52:c4:1a: 34:a2:3d:f8:6e:37:91:cd:41:a8:b3:d0:dc:72:ed:ef:cb:9f: 1c:19:07:87:4c:1c:4b:56:b6:de:0c:9c:68:d7:2a:46:90:80: 5f:9e:ff:a3:17:34:ed:46:1d:b4:28:47:ab:4f:44:74:8b:c6: f0:f6:76:64:cf:78:dc:1d:c1:74:11:c5:ae:bd:7c:83:9e:98: 6a:2b:57:5d:b8:de:d5:d6:08:46:6e:fd:3e:1a:ae:77:b6:3b: 3e:c7:3b:05:ab:6c:2d:67:6a:eb:89:39:53:45:85:65:1f:e9: fb:96:25:46:dd:a5:45:37:8d:bc:e2:bd:65:1b:62:2a:0b:bf: c4:66:86:6c -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUctN5wSJ61SmAn4dH3DlZlDxc1AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNTA3MTUwMTU1MDJaFw0yNjA3MTQwMjAwMDJaMDMxMTAvBgNV BAMTKDA3RjcyRDY1RDQzMDA3QjhGNTU3Nzk5MkU0NDhEQ0NEMkM5OEZCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5EM+pLPrJfOIku3Ar4g2oDHU nYeDkFNuT4y4Dl0dJ6YuvmOdQWhjdJdplt/7bSO0pUS8Dh51720qlccCiOXTDM2y TiqAqdUTMxzoMfiaNKwPb2cV5flx9tCQjYz77azUHPX7juZs+Vwg3SE+EPSbthAM ciMw2PdvcWN5n7q1L9WHvY1FdJff98vmNU9GcNXHws+dpxkhhUU2Lfu7+QQaJ9sv APJlC0EC1UPIYMVCmXNQ3I7aeA3/CLe+i1XB7gz55h5Er7Tba6jMTURMZf3fY1Qd HDgwKyX9cEkjQBF0ljAfqq4mO1TchY/9gK8LkNvMYi58eFaaAHPTN9dGyVwdAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUB/ctZdQwB7j1V3mS5EjczSyY+7QwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBSzAAAEw DQYJKoZIhvcNAQELBQADggEBAGh4NT37Dkb97/EcejAuYg23qgafO5o+NfYnTADj dO4wduVBtvJEvqHC1hy9NnVfX11jbQtqthNNPXQrIWy8hi5d7UDRfF5KSyaqodXL aNc1Vf/2RCrCE7sbot+2+6K8cJSZ4LrVpIKa1iTMiJ87JWjDjxlO3aiDDgJXsVLE GjSiPfhuN5HNQaiz0Nxy7e/LnxwZB4dMHEtWtt4MnGjXKkaQgF+e/6MXNO1GHbQo R6tPRHSLxvD2dmTPeNwdwXQRxa69fIOemGorV1243tXWCEZu/T4arne2Oz7HOwWr bC1nauuJOVNFhWUf6fuWJUbdpUU3jbzivWUbYioLv8Rmhmw= -----END CERTIFICATE-----Generated at Thu Jul 24 12:05:57 2025 by rpki-client