$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa File: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (raw, json) Hash identifier: UmYtyoPy4ZvZZv42ISGmkzTMakpIhylvPVTLu1TKOwE= Subject key identifier: 4B:21:7D:49:70:90:1C:4D:A4:FF:C3:4D:91:C6:42:57:23:27:E5:0E Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 67D330677157B71877A7967E67564F28BD78C9C0 Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa Signing time: Mon 02 Jun 2025 01:02:40 +0000 ROA not before: Mon 02 Jun 2025 00:57:40 +0000 ROA not after: Mon 01 Jun 2026 01:02:40 +0000 asID: 131749 IP address blocks: 2402:be80:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 19:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d3:30:67:71:57:b7:18:77:a7:96:7e:67:56:4f:28:bd:78:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jun 2 00:57:40 2025 GMT Not After : Jun 1 01:02:40 2026 GMT Subject: CN=4B217D4970901C4DA4FFC34D91C642572327E50E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:ff:95:76:6c:26:d9:16:55:61:4f:db:2f: 41:4f:89:80:96:a9:e6:69:9d:2f:60:0d:29:b0:9d: 78:95:ec:f9:60:d8:92:b2:70:a5:67:e1:2f:ec:17: 80:cc:ed:6d:a5:69:bd:be:7c:06:47:77:16:0a:58: 76:44:c2:20:3a:05:61:89:4b:3b:55:70:62:0a:96: f0:74:4c:3d:e2:f8:d4:4b:4d:15:34:a1:f8:02:bf: 6b:85:71:74:00:43:f8:f1:17:82:55:4e:83:11:70: f9:91:35:62:e6:ae:36:0a:8e:9a:0d:cb:ce:9f:5c: 9c:23:82:df:93:52:fe:ea:ea:20:6d:ca:f8:81:fe: 4a:be:ee:bb:ea:7a:31:2a:e5:ca:51:f8:45:fd:4e: 5b:0f:36:72:c5:d5:26:46:d4:41:1c:87:26:94:f3: e8:46:5f:a5:69:da:2e:90:e9:05:8d:5c:df:19:92: 7f:d3:a0:c4:8a:92:43:05:ba:79:16:20:70:c0:45: 7e:c2:51:20:0f:2c:2f:d5:2b:4a:e6:95:ed:90:4c: 72:0b:31:61:c9:c1:66:f4:11:69:fe:8f:b6:82:e6: 0e:a4:cd:c3:5f:a8:fb:9a:c6:f4:85:9a:59:24:ee: 78:36:64:95:29:7a:16:6a:d9:30:80:65:93:b2:b6: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:21:7D:49:70:90:1C:4D:A4:FF:C3:4D:91:C6:42:57:23:27:E5:0E X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:8000::/33 Signature Algorithm: sha256WithRSAEncryption 7c:39:38:6e:ce:30:27:5f:39:0b:3e:1a:36:da:98:21:97:46: b4:60:cb:3d:e8:86:9b:83:a5:93:b5:f5:fe:85:00:82:12:71: 58:17:01:d4:10:aa:3c:b0:a7:3e:e6:d2:7b:3e:41:d8:c1:93: 6b:30:61:3a:ed:63:dd:24:f1:d1:05:b3:91:7c:35:55:62:7a: 27:6e:e8:98:21:ca:fa:16:61:49:fb:b4:bf:7a:56:65:fe:7c: 55:fd:0a:1e:46:79:fc:a5:4a:76:70:30:83:56:50:eb:5d:5c: 32:94:af:d7:ac:17:c1:de:3f:04:e4:ca:b0:72:4e:48:29:f5: 79:f9:4f:54:1c:b9:d5:9b:dc:90:80:48:3b:9a:49:f5:5a:b6: 8b:58:3f:d7:22:20:72:7b:13:97:26:6a:be:30:5a:c3:d4:48: 9c:87:0e:16:69:77:af:1c:5a:06:87:2d:8a:4a:8f:7f:67:e2: e4:82:5f:d7:41:e1:94:6e:93:f5:0d:52:08:5f:db:de:8c:47: 06:11:1e:2b:5a:c9:8b:e9:82:4d:4a:33:38:bf:74:b0:ad:b1: e0:9d:ae:2b:d1:7c:33:db:79:05:a2:09:45:83:bb:22:47:f9: 3d:d4:f6:9c:0c:30:a1:bb:97:5c:b3:0b:60:94:a6:05:42:7a: f6:5c:54:9d -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUZ9MwZ3FXtxh3p5Z+Z1ZPKL14ycAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA2MDIwMDU3NDBaFw0yNjA2MDEwMTAyNDBaMDMxMTAvBgNV BAMTKDRCMjE3RDQ5NzA5MDFDNERBNEZGQzM0RDkxQzY0MjU3MjMyN0U1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFof+Vdmwm2RZVYU/bL0FPiYCW qeZpnS9gDSmwnXiV7Plg2JKycKVn4S/sF4DM7W2lab2+fAZHdxYKWHZEwiA6BWGJ SztVcGIKlvB0TD3i+NRLTRU0ofgCv2uFcXQAQ/jxF4JVToMRcPmRNWLmrjYKjpoN y86fXJwjgt+TUv7q6iBtyviB/kq+7rvqejEq5cpR+EX9TlsPNnLF1SZG1EEchyaU 8+hGX6Vp2i6Q6QWNXN8Zkn/ToMSKkkMFunkWIHDARX7CUSAPLC/VK0rmle2QTHIL MWHJwWb0EWn+j7aC5g6kzcNfqPuaxvSFmlkk7ng2ZJUpehZq2TCAZZOytpvbAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUSyF9SXCQHE2k/8NNkcZCVyMn5Q4wHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzgzMDMwMzAz YTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgck Ar6AgDANBgkqhkiG9w0BAQsFAAOCAQEAfDk4bs4wJ185Cz4aNtqYIZdGtGDLPeiG m4Olk7X1/oUAghJxWBcB1BCqPLCnPubSez5B2MGTazBhOu1j3STx0QWzkXw1VWJ6 J27omCHK+hZhSfu0v3pWZf58Vf0KHkZ5/KVKdnAwg1ZQ611cMpSv16wXwd4/BOTK sHJOSCn1eflPVBy51ZvckIBIO5pJ9Vq2i1g/1yIgcnsTlyZqvjBaw9RInIcOFml3 rxxaBoctikqPf2fi5IJf10HhlG6T9Q1SCF/b3oxHBhEeK1rJi+mCTUozOL90sK2x 4J2uK9F8M9t5BaIJRYO7Ikf5PdT2nAwwobuXXLMLYJSmBUJ69lxUnQ== -----END CERTIFICATE-----Generated at Mon Nov 17 04:18:26 2025 by rpki-client