$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: U25XxYHsdDHg45kmjqy0PPmW/5GPYURDN/+SgVMDWdQ= Subject key identifier: A2:EB:04:C2:D0:40:A5:E7:E1:47:BB:92:44:15:3E:68:69:44:E3:01 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 662AAE1656E45718C2156CDD7110A8D35DC4D4FD Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa Signing time: Tue 15 Jul 2025 02:00:03 +0000 ROA not before: Tue 15 Jul 2025 01:55:03 +0000 ROA not after: Tue 14 Jul 2026 02:00:03 +0000 asID: 136079 IP address blocks: 2405:2cc0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2a:ae:16:56:e4:57:18:c2:15:6c:dd:71:10:a8:d3:5d:c4:d4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Jul 15 01:55:03 2025 GMT Not After : Jul 14 02:00:03 2026 GMT Subject: CN=A2EB04C2D040A5E7E147BB9244153E686944E301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:e4:8d:8a:75:b1:88:0f:45:0b:00:af:75: 7d:76:e7:1d:81:96:15:41:5e:fa:dd:f5:36:71:29: b4:77:c5:84:57:d4:f7:34:d5:b5:04:f3:53:28:8a: ee:37:b9:b4:52:b9:0c:0c:f2:cf:e3:ee:0f:99:20: ac:95:49:44:19:90:ee:a4:f1:4c:3b:b8:0c:c2:2f: e1:8d:ef:10:b3:8c:7c:cd:4b:6b:19:38:dc:b9:0b: b6:e7:c9:21:c8:60:21:cf:52:2f:ca:ae:ff:d5:1f: 0a:df:17:4a:66:84:8c:2a:be:77:61:a2:d7:bc:e0: 1c:59:ff:e8:07:11:9b:3f:61:f8:b2:08:01:45:c6: c4:99:28:c0:a4:4e:ec:bd:3b:fb:a0:af:7b:ce:c0: 71:41:d2:38:ee:fc:d7:a5:3c:c8:a9:2b:02:bb:6d: 47:76:30:5b:e5:12:e8:1d:54:8e:4b:bb:e5:67:3c: 41:7b:82:78:d6:85:61:88:23:28:2c:78:36:1d:1f: 6c:97:78:a2:18:c7:fd:6e:da:15:95:be:d2:ee:35: 4d:b1:3a:ce:f9:de:47:16:c2:e5:76:f1:92:c9:e3: 9d:3e:e7:85:8c:36:d5:54:1b:3b:53:f0:88:6a:20: 47:04:33:10:94:be:96:29:83:a9:34:a0:c6:ec:98: 30:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EB:04:C2:D0:40:A5:E7:E1:47:BB:92:44:15:3E:68:69:44:E3:01 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:3::/48 Signature Algorithm: sha256WithRSAEncryption 99:8a:bb:f2:41:b2:ae:c6:a6:e4:2b:4a:45:d1:51:bb:ca:ef: da:59:40:16:87:aa:23:28:c7:33:78:1b:bf:f9:76:ff:13:50: b9:f0:64:82:10:1f:10:29:2d:8e:ae:7b:57:02:2f:fa:46:cb: a5:58:76:67:0a:c6:bb:8a:88:92:99:ac:62:43:c3:4a:16:30: fb:d0:eb:17:70:9a:04:88:09:76:44:76:bd:84:14:64:62:2f: c7:e0:c6:2f:dc:1b:40:f9:62:64:56:ec:70:3a:e6:43:ca:0b: de:d9:23:70:5e:13:fa:46:68:1e:09:8f:f0:7c:53:9d:e2:d8: e6:e7:07:56:08:35:a3:3e:29:b7:90:e7:f2:57:dd:07:6c:31: c4:c5:b0:05:92:88:51:bc:06:0f:4b:f4:a8:0c:fc:5e:8d:cf: 9b:9f:f5:16:ac:45:c9:13:1c:34:cf:24:c4:03:fd:8f:1b:d8: a1:f1:8c:64:10:71:ac:84:73:6e:53:42:fd:08:27:83:4d:b5: 05:d1:b3:31:f1:6b:1d:4a:97:eb:c8:8c:9f:76:0f:de:a5:5f: 80:99:dd:5c:66:ce:20:de:d6:b8:b9:a1:73:45:93:ee:6f:a6: b6:56:82:d6:58:cd:83:ac:68:19:1a:12:61:a5:0c:f4:23:69: 51:c0:ed:a4 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUZiquFlbkVxjCFWzdcRCo013E1P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNTA3MTUwMTU1MDNaFw0yNjA3MTQwMjAwMDNaMDMxMTAvBgNV BAMTKEEyRUIwNEMyRDA0MEE1RTdFMTQ3QkI5MjQ0MTUzRTY4Njk0NEUzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuOSNinWxiA9FCwCvdX125x2B lhVBXvrd9TZxKbR3xYRX1Pc01bUE81Moiu43ubRSuQwM8s/j7g+ZIKyVSUQZkO6k 8Uw7uAzCL+GN7xCzjHzNS2sZONy5C7bnySHIYCHPUi/Krv/VHwrfF0pmhIwqvndh ote84BxZ/+gHEZs/YfiyCAFFxsSZKMCkTuy9O/ugr3vOwHFB0jju/NelPMipKwK7 bUd2MFvlEugdVI5Lu+VnPEF7gnjWhWGIIygseDYdH2yXeKIYx/1u2hWVvtLuNU2x Os753kcWwuV28ZLJ450+54WMNtVUGztT8IhqIEcEMxCUvpYpg6k0oMbsmDCRAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUousEwtBApefhR7uSRBU+aGlE4wEwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBSzAAAMw DQYJKoZIhvcNAQELBQADggEBAJmKu/JBsq7GpuQrSkXRUbvK79pZQBaHqiMoxzN4 G7/5dv8TULnwZIIQHxApLY6ue1cCL/pGy6VYdmcKxruKiJKZrGJDw0oWMPvQ6xdw mgSICXZEdr2EFGRiL8fgxi/cG0D5YmRW7HA65kPKC97ZI3BeE/pGaB4Jj/B8U53i 2ObnB1YINaM+KbeQ5/JX3QdsMcTFsAWSiFG8Bg9L9KgM/F6Nz5uf9RasRckTHDTP JMQD/Y8b2KHxjGQQcayEc25TQv0IJ4NNtQXRszHxax1Kl+vIjJ92D96lX4CZ3Vxm ziDe1ri5oXNFk+5vprZWgtZYzYOsaBkaEmGlDPQjaVHA7aQ= -----END CERTIFICATE-----Generated at Mon Jul 21 08:27:50 2025 by rpki-client