$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a3a2f33342d3334203d3e203234323131.roa File: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (raw, json) Hash identifier: 4jp4D5hGaWte1m9qxFKzFTLNIkMefUQAPu+RDi1XoZE= Subject key identifier: 87:37:AD:DB:D8:D6:2F:BF:C0:6B:50:C3:EC:BA:A2:08:15:D9:5A:A7 Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 1552FA6812BFC0D674F2FFFF10C128D0CEE34DF4 Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a3a2f33342d3334203d3e203234323131.roa Signing time: Mon 02 Jun 2025 01:03:24 +0000 ROA not before: Mon 02 Jun 2025 00:58:24 +0000 ROA not after: Mon 01 Jun 2026 01:03:24 +0000 asID: 24211 IP address blocks: 2402:a000::/34 maxlen: 34 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:52:fa:68:12:bf:c0:d6:74:f2:ff:ff:10:c1:28:d0:ce:e3:4d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Jun 2 00:58:24 2025 GMT Not After : Jun 1 01:03:24 2026 GMT Subject: CN=8737ADDBD8D62FBFC06B50C3ECBAA20815D95AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c5:da:26:cf:1b:a5:e9:87:15:bd:17:95:24: 0e:15:b0:e0:2c:07:64:bc:eb:9f:13:a1:06:75:86: 77:2e:0d:63:48:f1:4a:2f:dc:8f:5e:f7:da:81:a4: 49:74:5d:24:9f:1d:1c:20:28:74:c0:90:4a:ca:c0: 62:20:a7:56:71:cc:ed:cb:22:f9:df:3e:5d:8b:60: f5:66:f4:28:77:62:63:41:14:dc:44:58:85:47:16: 75:2e:15:89:f3:3a:9b:58:64:08:2a:20:ec:37:cf: 7f:d8:ba:10:a6:56:3b:32:71:b6:2c:36:21:d0:2f: 69:09:87:7b:b5:35:b0:56:c8:b5:f2:bb:0a:c1:dc: 8d:54:9d:60:81:94:c6:2b:e2:85:6e:bb:43:03:49: d0:4d:b9:a6:3c:a1:3c:bb:6b:2b:8c:d8:89:23:61: a5:05:dd:6e:8d:a9:03:9b:39:b0:db:e9:58:45:f6: d4:4d:3a:c0:a7:4b:45:b9:fd:f6:85:d3:4f:d1:02: e6:e8:e9:7a:ed:21:53:6e:8b:da:5c:a6:3c:3b:68: c8:26:3e:35:f0:5c:62:a4:f4:16:eb:93:df:72:2c: 2c:da:1c:bc:1b:f6:cf:3e:9e:59:9b:97:b7:2a:13: 89:41:c4:72:b6:4b:1e:76:73:c7:de:d3:10:d3:cf: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:37:AD:DB:D8:D6:2F:BF:C0:6B:50:C3:EC:BA:A2:08:15:D9:5A:A7 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/323430323a613030303a3a2f33342d3334203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:a000::/34 Signature Algorithm: sha256WithRSAEncryption 84:85:f4:44:ab:70:47:af:fa:06:07:32:69:70:8b:77:10:0c: 66:37:19:ca:0f:2c:66:e4:1f:a9:76:48:fe:c7:7a:56:17:64: b4:29:8a:6b:7e:ad:f5:10:5a:d4:71:93:94:6d:9a:21:e8:e1: 48:b4:9e:15:0d:02:18:d5:34:5c:22:78:6d:fa:41:dd:97:03: 32:73:28:18:f1:af:4d:e3:bb:7b:6d:ad:a4:aa:f3:b9:d3:03: d1:4c:31:d6:12:c3:92:84:37:85:2a:1f:7a:4d:ea:20:57:3c: f2:c9:06:b5:66:72:98:21:02:ec:bc:60:54:44:4d:f3:d5:b7: 4c:12:9a:90:51:b3:90:4c:82:89:9e:85:97:bb:a3:2e:f5:b2: 10:87:9a:cb:71:0c:90:c0:6f:e9:77:1a:99:4c:b3:90:10:d6: 65:2f:33:e1:a9:ff:3f:5c:d9:6f:00:bc:12:ed:68:19:9f:03: d5:91:0e:a7:75:82:45:7a:a2:26:13:b9:56:16:9a:9b:b4:46: 6f:38:ae:ca:ac:bd:94:c4:09:0c:5c:49:96:09:78:d3:d0:4d: 84:da:63:37:6f:cd:79:eb:8e:89:a4:73:69:02:c5:5d:bf:aa: 72:ba:1a:16:d1:74:4c:08:cd:21:e6:ea:58:5d:9e:12:9c:58: 3b:a9:4b:92 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFVL6aBK/wNZ08v//EMEo0M7jTfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yNTA2MDIwMDU4MjRaFw0yNjA2MDEwMTAzMjRaMDMxMTAvBgNV BAMTKDg3MzdBRERCRDhENjJGQkZDMDZCNTBDM0VDQkFBMjA4MTVEOTVBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxdomzxul6YcVvReVJA4VsOAs B2S8658ToQZ1hncuDWNI8Uov3I9e99qBpEl0XSSfHRwgKHTAkErKwGIgp1ZxzO3L IvnfPl2LYPVm9Ch3YmNBFNxEWIVHFnUuFYnzOptYZAgqIOw3z3/YuhCmVjsycbYs NiHQL2kJh3u1NbBWyLXyuwrB3I1UnWCBlMYr4oVuu0MDSdBNuaY8oTy7ayuM2Ikj YaUF3W6NqQObObDb6VhF9tRNOsCnS0W5/faF00/RAubo6XrtIVNui9pcpjw7aMgm PjXwXGKk9Bbrk99yLCzaHLwb9s8+nlmbl7cqE4lBxHK2Sx52c8fe0xDTzzEfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhzet29jWL7/Aa1DD7LqiCBXZWqcwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzQzMDMyM2E2MTMwMzAzMDNhM2EyZjMzMzQy ZDMzMzQyMDNkM2UyMDMyMzQzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYkAqAAADANBgkqhkiG 9w0BAQsFAAOCAQEAhIX0RKtwR6/6BgcyaXCLdxAMZjcZyg8sZuQfqXZI/sd6Vhdk tCmKa36t9RBa1HGTlG2aIejhSLSeFQ0CGNU0XCJ4bfpB3ZcDMnMoGPGvTeO7e22t pKrzudMD0Uwx1hLDkoQ3hSofek3qIFc88skGtWZymCEC7LxgVERN89W3TBKakFGz kEyCiZ6Fl7ujLvWyEIeay3EMkMBv6XcamUyzkBDWZS8z4an/P1zZbwC8Eu1oGZ8D 1ZEOp3WCRXqiJhO5Vhaam7RGbziuyqy9lMQJDFxJlgl409BNhNpjN2/NeeuOiaRz aQLFXb+qcroaFtF0TAjNIebqWF2eEpxYO6lLkg== -----END CERTIFICATE-----Generated at Tue Oct 28 06:29:16 2025 by rpki-client