$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa File: 323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa (raw, json) Hash identifier: Oiz1BQaWC6Pw5mM460J247XeLFTe18P4yPkYnCCMgsE= Subject key identifier: E1:D8:46:1F:44:1E:15:32:38:CF:C6:4D:02:8C:40:73:D6:50:40:12 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 57BF14B1B6E30077F3026B2EFFE08B2B1E0CB44D Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa Signing time: Sun 31 Aug 2025 16:00:00 +0000 ROA not before: Sun 31 Aug 2025 15:55:00 +0000 ROA not after: Sun 30 Aug 2026 16:00:00 +0000 asID: 17727 IP address blocks: 2404:c000:c003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:bf:14:b1:b6:e3:00:77:f3:02:6b:2e:ff:e0:8b:2b:1e:0c:b4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Aug 31 15:55:00 2025 GMT Not After : Aug 30 16:00:00 2026 GMT Subject: CN=E1D8461F441E153238CFC64D028C4073D6504012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:f8:b3:6e:7a:49:0c:f7:cd:41:85:c0:f5: b3:5d:34:31:c6:40:e2:1a:5e:b2:82:51:c6:35:22: f0:4c:a3:36:7a:3c:68:0a:3a:95:13:1d:e3:69:26: bb:4d:a5:26:cd:48:95:80:f0:a6:54:7f:94:92:c9: 48:69:9d:52:fb:94:80:92:1e:81:d4:d5:e0:88:b4: 23:3f:ef:9f:51:de:0b:e1:2e:06:f9:51:7d:74:57: ad:f6:7d:d0:9c:a4:ba:5a:45:09:e1:5e:f4:c7:f6: 5f:c7:91:77:b1:88:8a:0e:16:7e:b4:60:e8:8d:59: 6e:1d:bd:bc:e6:86:ae:c6:9d:2d:29:c4:f1:18:ce: 05:a9:62:85:50:5b:e2:19:f5:82:fe:44:b8:cf:7d: fb:27:18:2f:d0:3a:52:e7:ec:92:31:11:c5:be:88: ac:b3:f8:61:1c:ee:f3:3e:26:ae:5f:0f:a9:28:6b: 8f:01:1a:ed:af:a3:de:94:61:22:40:d0:55:c9:2e: 4c:0b:62:79:fc:60:aa:17:90:6d:10:0c:d0:10:fb: 15:72:e3:ae:dd:45:27:e6:8a:c6:4a:2f:d7:81:76: de:1b:96:4b:f4:27:f3:4c:36:b7:97:3c:e4:77:8c: 67:75:ea:fd:bc:6a:67:2e:b2:6a:1c:79:2b:a1:32: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D8:46:1F:44:1E:15:32:38:CF:C6:4D:02:8C:40:73:D6:50:40:12 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/323430343a633030303a633030333a3a2f34382d3438203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:c000:c003::/48 Signature Algorithm: sha256WithRSAEncryption 16:2d:dc:64:6a:e3:32:86:eb:0b:d8:c0:96:b6:1f:73:ed:95: 74:49:a1:0b:dd:af:6a:88:fb:b6:ab:1e:1b:37:6f:d7:d4:8a: 35:2f:20:cc:0e:34:fa:f7:4f:33:d4:75:41:cc:59:7e:6a:f5: 6f:55:66:1a:bc:36:09:98:fb:f3:46:9f:9e:7e:f0:f3:5a:a9: c2:4b:d4:bf:e1:aa:d5:e3:73:09:87:6b:6a:2a:15:53:dd:25: 56:35:4d:bb:1d:e9:38:ae:65:f0:c4:bd:5a:34:f5:45:ac:94: b8:ce:bc:23:aa:d6:d2:a9:2f:c5:18:f3:f6:1e:58:40:56:ec: e3:0f:7f:31:09:e0:02:ff:15:5a:34:ba:61:77:e8:17:f8:33: 19:87:74:a1:c6:d0:1a:98:7a:91:f1:0d:3b:85:a3:e3:55:f1: d4:7d:29:a0:cf:47:fc:ae:62:39:7c:e8:f4:e6:a9:ba:a2:75: bb:6b:55:12:e7:61:df:1d:f6:9c:44:5b:69:90:85:f7:d8:36: ae:19:01:95:05:43:d9:8d:6e:6d:cc:15:cf:95:1f:d3:58:64: 55:5a:f3:3b:dd:18:f9:a5:70:fa:30:80:3c:2f:fe:a2:f7:e7: 94:64:7e:af:ff:cb:c1:93:83:f5:6d:a5:10:84:97:b5:8a:2b: 9f:5d:16:02 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUV78UsbbjAHfzAmsu/+CLKx4MtE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTA4MzExNTU1MDBaFw0yNjA4MzAxNjAwMDBaMDMxMTAvBgNV BAMTKEUxRDg0NjFGNDQxRTE1MzIzOENGQzY0RDAyOEM0MDczRDY1MDQwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwPizbnpJDPfNQYXA9bNdNDHG QOIaXrKCUcY1IvBMozZ6PGgKOpUTHeNpJrtNpSbNSJWA8KZUf5SSyUhpnVL7lICS HoHU1eCItCM/759R3gvhLgb5UX10V632fdCcpLpaRQnhXvTH9l/HkXexiIoOFn60 YOiNWW4dvbzmhq7GnS0pxPEYzgWpYoVQW+IZ9YL+RLjPffsnGC/QOlLn7JIxEcW+ iKyz+GEc7vM+Jq5fD6koa48BGu2vo96UYSJA0FXJLkwLYnn8YKoXkG0QDNAQ+xVy 467dRSfmisZKL9eBdt4blkv0J/NMNreXPOR3jGd16v28amcusmoceSuhMp31AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4dhGH0QeFTI4z8ZNAoxAc9ZQQBIwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMyMzQzMDM0M2E2MzMwMzAzMDNhNjMzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATA AMADMA0GCSqGSIb3DQEBCwUAA4IBAQAWLdxkauMyhusL2MCWth9z7ZV0SaEL3a9q iPu2qx4bN2/X1Io1LyDMDjT6908z1HVBzFl+avVvVWYavDYJmPvzRp+efvDzWqnC S9S/4arV43MJh2tqKhVT3SVWNU27Hek4rmXwxL1aNPVFrJS4zrwjqtbSqS/FGPP2 HlhAVuzjD38xCeAC/xVaNLphd+gX+DMZh3ShxtAamHqR8Q07haPjVfHUfSmgz0f8 rmI5fOj05qm6onW7a1US52HfHfacRFtpkIX32DauGQGVBUPZjW5tzBXPlR/TWGRV WvM73Rj5pXD6MIA8L/6i9+eUZH6v/8vBk4P1baUQhJe1iiufXRYC -----END CERTIFICATE-----Generated at Mon Sep 8 09:35:47 2025 by rpki-client