$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa File: 323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa (raw, json) Hash identifier: sFtD8KLOJrCX0FoRZgKdJKGMSbEvI54GPjnVFvw5SkM= Subject key identifier: DD:1A:CD:AF:63:7C:42:78:A5:9D:0F:B0:69:55:D9:70:AC:37:8C:B6 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 2F17D7E8259DAA7926941BFC1A31F8386D361607 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa Signing time: Sun 21 Sep 2025 13:00:00 +0000 ROA not before: Sun 21 Sep 2025 12:55:00 +0000 ROA not after: Sun 20 Sep 2026 13:00:00 +0000 asID: 17727 IP address blocks: 2404:c000:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 06:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:17:d7:e8:25:9d:aa:79:26:94:1b:fc:1a:31:f8:38:6d:36:16:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Sep 21 12:55:00 2025 GMT Not After : Sep 20 13:00:00 2026 GMT Subject: CN=DD1ACDAF637C4278A59D0FB06955D970AC378CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:dc:69:55:73:3d:a0:68:fa:05:35:5a:50: e7:86:1a:30:e3:c4:70:85:db:97:b5:74:a1:eb:aa: ed:45:cf:8d:11:fa:10:69:5f:89:ce:89:fc:aa:4a: 8b:b5:81:07:18:f4:37:65:60:10:45:b7:a8:ac:18: cd:c4:52:0f:70:47:56:d5:73:06:09:ba:d2:78:ab: cb:aa:ab:a5:17:05:f4:d3:94:66:46:7f:89:f0:50: 89:88:7b:d6:f4:f2:89:39:e2:1a:17:6c:0c:65:65: 9b:80:a2:1e:ba:8b:dd:6b:45:b1:05:2f:28:08:af: 1b:39:39:d3:76:30:88:4f:2a:e4:20:9f:82:56:6c: 86:4c:ee:f7:81:64:f8:13:43:81:a7:d1:ad:46:8a: 64:48:91:02:da:17:2c:59:3c:f4:26:7b:68:7f:9a: f5:4c:2a:be:5c:0d:ce:62:43:a8:51:7d:3a:21:7f: c5:22:2f:05:2e:85:fb:da:0d:a0:e0:5e:f8:9e:89: 1d:3a:00:5d:23:97:10:c5:df:f5:d3:34:5a:69:ad: 2e:fd:00:47:4b:fe:87:62:d9:32:f3:56:74:81:d9: c6:37:bc:c5:25:ba:7a:85:e0:93:04:cb:66:93:97: 2f:f8:e7:bd:83:25:81:8d:7e:7d:ab:0d:36:5c:ae: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1A:CD:AF:63:7C:42:78:A5:9D:0F:B0:69:55:D9:70:AC:37:8C:B6 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030303a3a2f34382d3438203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:c000::/48 Signature Algorithm: sha256WithRSAEncryption 37:79:12:8e:37:10:c1:d6:e5:b4:7b:e3:4f:c7:85:ce:03:ad: 95:ca:41:0c:51:c2:f5:7a:43:a2:3b:e9:d1:a4:08:04:f3:f7: 3b:07:d4:08:38:c2:d1:e0:ca:93:04:13:91:f8:c1:ec:2c:a5: 67:e5:21:01:11:3b:a0:32:2e:33:6b:ff:4e:c7:cd:29:49:e3: 98:f7:0c:5d:2d:6c:c2:e3:59:4e:2a:78:23:db:58:54:dd:d1: bc:74:a1:95:1d:5f:4f:f9:9b:a7:43:0d:57:b2:32:50:99:4a: 0c:a5:80:e6:de:0d:1e:db:68:5d:e2:41:37:8c:2c:0c:dd:bb: 50:54:50:09:50:ef:19:ff:05:cb:34:8d:42:0f:e7:75:b5:03: 6e:17:eb:17:96:2d:91:64:57:c6:d2:74:2c:a9:f2:e1:b9:a9: ec:7f:34:ea:7a:69:96:36:5b:25:b0:b9:81:21:73:f6:d2:49: cb:6f:65:6f:9c:ff:67:12:7f:c5:b3:71:dd:7c:16:cc:22:66: 55:ec:bd:68:7e:37:1f:58:07:76:76:fd:3a:d3:b7:ac:fe:86: 0c:da:ab:15:f6:3b:bd:fa:09:c5:f4:eb:b5:74:3c:83:a5:bc: 08:51:60:ea:fc:e3:61:bb:fe:87:74:97:e1:d4:43:b2:a6:b1: 3e:35:41:05 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULxfX6CWdqnkmlBv8GjH4OG02FgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTA5MjExMjU1MDBaFw0yNjA5MjAxMzAwMDBaMDMxMTAvBgNV BAMTKEREMUFDREFGNjM3QzQyNzhBNTlEMEZCMDY5NTVEOTcwQUMzNzhDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g9xpVXM9oGj6BTVaUOeGGjDj xHCF25e1dKHrqu1Fz40R+hBpX4nOifyqSou1gQcY9DdlYBBFt6isGM3EUg9wR1bV cwYJutJ4q8uqq6UXBfTTlGZGf4nwUImIe9b08ok54hoXbAxlZZuAoh66i91rRbEF LygIrxs5OdN2MIhPKuQgn4JWbIZM7veBZPgTQ4Gn0a1GimRIkQLaFyxZPPQme2h/ mvVMKr5cDc5iQ6hRfTohf8UiLwUuhfvaDaDgXvieiR06AF0jlxDF3/XTNFpprS79 AEdL/odi2TLzVnSB2cY3vMUlunqF4JMEy2aTly/4572DJYGNfn2rDTZcrtxzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU3RrNr2N8QnilnQ+waVXZcKw3jLYwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhNjMzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATA AMAAMA0GCSqGSIb3DQEBCwUAA4IBAQA3eRKONxDB1uW0e+NPx4XOA62VykEMUcL1 ekOiO+nRpAgE8/c7B9QIOMLR4MqTBBOR+MHsLKVn5SEBETugMi4za/9Ox80pSeOY 9wxdLWzC41lOKngj21hU3dG8dKGVHV9P+ZunQw1XsjJQmUoMpYDm3g0e22hd4kE3 jCwM3btQVFAJUO8Z/wXLNI1CD+d1tQNuF+sXli2RZFfG0nQsqfLhuansfzTqemmW NlslsLmBIXP20knLb2VvnP9nEn/Fs3HdfBbMImZV7L1ofjcfWAd2dv0607es/oYM 2qsV9ju9+gnF9Ou1dDyDpbwIUWDq/ONhu/6HdJfh1EOyprE+NUEF -----END CERTIFICATE-----Generated at Sun Oct 26 08:05:16 2025 by rpki-client