$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f33322d3332203d3e20313336303739.roa File: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (raw, json) Hash identifier: 0vCmw0QpQ57P9VfD/s3TMogc21/fBpntCbMwY5YhCMw= Subject key identifier: 05:5A:E6:7F:9F:19:C9:87:BF:8E:E1:58:CB:C0:7E:C9:1D:D7:A6:DF Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 3F648834775E07C1D3CD2B20F71BC693EC5C4A1E Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f33322d3332203d3e20313336303739.roa Signing time: Tue 15 Jul 2025 02:00:00 +0000 ROA not before: Tue 15 Jul 2025 01:55:00 +0000 ROA not after: Tue 14 Jul 2026 02:00:00 +0000 asID: 136079 IP address blocks: 2405:2cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:64:88:34:77:5e:07:c1:d3:cd:2b:20:f7:1b:c6:93:ec:5c:4a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Jul 15 01:55:00 2025 GMT Not After : Jul 14 02:00:00 2026 GMT Subject: CN=055AE67F9F19C987BF8EE158CBC07EC91DD7A6DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:37:79:26:c9:9b:ad:81:f0:2b:57:73:0b: 73:f3:6b:b6:6a:32:46:04:e7:a3:fc:4f:4f:d8:80: 1a:7e:dd:9c:9a:08:20:69:99:e1:4b:29:d9:b2:af: 31:55:5d:dc:96:85:e5:01:4d:31:01:f4:90:96:9a: 89:b2:e8:ce:a8:05:9a:92:49:fb:49:62:97:26:60: 88:a9:20:df:a9:02:c2:07:4e:69:4e:a7:e4:b7:71: b5:59:2b:b1:a9:a2:44:6d:fe:e7:72:c3:30:4c:ae: 95:fe:a6:44:6e:79:70:c9:38:cc:e8:19:dd:64:97: 14:b0:b3:02:6f:58:2f:3f:0c:c6:85:17:48:9b:1e: 3d:c4:f9:d6:b6:c1:43:44:5d:1f:08:65:99:1d:aa: 73:72:4d:8a:03:ca:15:ab:32:e2:de:b8:75:16:2d: ad:bf:e9:21:8b:cd:15:da:73:b8:59:f6:31:7d:a7: 70:2b:ef:46:63:21:9a:1b:ae:16:78:ac:bd:cb:0a: bc:ef:35:fa:f3:a8:ee:1d:34:e7:76:3f:41:fe:ea: f1:a6:12:1f:d7:15:d1:cc:d7:42:73:17:69:6c:10: 02:56:01:17:71:8c:f4:e0:1d:57:5c:d2:81:80:48: 43:08:7b:f9:b8:5f:eb:1f:3e:21:cf:fd:81:d3:51: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5A:E6:7F:9F:19:C9:87:BF:8E:E1:58:CB:C0:7E:C9:1D:D7:A6:DF X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a3a2f33322d3332203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:54:08:0f:e4:93:e3:6f:42:d8:aa:01:0d:6c:22:cf:17:07: a1:6a:18:6c:b4:68:e2:ba:af:30:dc:a9:00:b7:b4:61:85:c0: 40:5a:e3:e7:5e:75:b3:2c:af:67:f4:41:e4:31:5e:4b:80:77: c1:19:dc:17:f5:a2:74:20:a3:26:77:84:18:c0:05:a8:ee:9a: ae:d0:4b:f5:5a:b3:6a:24:29:5d:94:5e:bc:04:46:8d:f8:e6: 9d:b3:67:84:c2:f0:4b:ba:c9:10:f8:33:0e:e1:21:ae:6f:ba: 41:25:07:22:be:4f:07:06:0c:b8:5b:3c:16:94:51:90:ff:c6: 30:5d:3d:98:ea:ab:ae:15:86:87:93:29:00:cf:a3:c5:d1:e6: 9f:bc:26:b7:aa:6e:4a:ab:19:57:e4:3f:f9:f5:79:ed:14:40: fb:c3:b5:b3:4e:62:f9:0f:f5:0e:33:9c:2d:95:c2:14:b4:80: a3:d7:b3:6d:5d:ae:58:54:2f:59:49:c1:7c:02:06:0c:37:f8: e0:5e:1b:60:b9:14:2b:8d:12:40:f0:8e:b7:00:c1:d4:0c:f8: ef:bb:ec:aa:ad:57:dd:ff:a4:dc:7a:8f:76:fa:03:d9:af:60: da:2a:af:8b:c2:cd:aa:2e:3c:7a:8c:4e:58:f1:2c:4e:d1:ed: f1:87:da:f9 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUP2SINHdeB8HTzSsg9xvGk+xcSh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNTA3MTUwMTU1MDBaFw0yNjA3MTQwMjAwMDBaMDMxMTAvBgNV BAMTKDA1NUFFNjdGOUYxOUM5ODdCRjhFRTE1OENCQzA3RUM5MUREN0E2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvjd5JsmbrYHwK1dzC3Pza7Zq MkYE56P8T0/YgBp+3ZyaCCBpmeFLKdmyrzFVXdyWheUBTTEB9JCWmomy6M6oBZqS SftJYpcmYIipIN+pAsIHTmlOp+S3cbVZK7GpokRt/udywzBMrpX+pkRueXDJOMzo Gd1klxSwswJvWC8/DMaFF0ibHj3E+da2wUNEXR8IZZkdqnNyTYoDyhWrMuLeuHUW La2/6SGLzRXac7hZ9jF9p3Ar70ZjIZobrhZ4rL3LCrzvNfrzqO4dNOd2P0H+6vGm Eh/XFdHM10JzF2lsEAJWARdxjPTgHVdc0oGASEMIe/m4X+sfPiHP/YHTUSl3AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUBVrmf58ZyYe/juFYy8B+yR3Xpt8wHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNjMwMzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFLMAwDQYJKoZI hvcNAQELBQADggEBAA9UCA/kk+NvQtiqAQ1sIs8XB6FqGGy0aOK6rzDcqQC3tGGF wEBa4+dedbMsr2f0QeQxXkuAd8EZ3Bf1onQgoyZ3hBjABajumq7QS/Vas2okKV2U XrwERo345p2zZ4TC8Eu6yRD4Mw7hIa5vukElByK+TwcGDLhbPBaUUZD/xjBdPZjq q64VhoeTKQDPo8XR5p+8JreqbkqrGVfkP/n1ee0UQPvDtbNOYvkP9Q4znC2VwhS0 gKPXs21drlhUL1lJwXwCBgw3+OBeG2C5FCuNEkDwjrcAwdQM+O+77KqtV93/pNx6 j3b6A9mvYNoqr4vCzaouPHqMTljxLE7R7fGH2vk= -----END CERTIFICATE-----Generated at Mon Jul 21 08:27:25 2025 by rpki-client