$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: /2yTom7jwGzlb4veAe6YVvD3+huQIr3XqsyUuNrvFmk= Subject key identifier: A5:0E:42:0D:98:38:D3:CC:F7:49:78:6D:9C:31:E3:06:7B:01:6C:D2 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 7536D6B340019C77ED8C54469393A86432010B9C Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa Signing time: Tue 26 Aug 2025 11:15:02 +0000 ROA not before: Tue 26 Aug 2025 11:10:02 +0000 ROA not after: Tue 25 Aug 2026 11:15:02 +0000 asID: 133798 IP address blocks: 2402:5680:8700::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:36:d6:b3:40:01:9c:77:ed:8c:54:46:93:93:a8:64:32:01:0b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 26 11:10:02 2025 GMT Not After : Aug 25 11:15:02 2026 GMT Subject: CN=A50E420D9838D3CCF749786D9C31E3067B016CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:3e:41:30:b9:cc:ad:2f:99:56:7c:50:fa: aa:7d:b1:14:97:44:63:9e:5f:76:27:f3:76:2a:f3: cc:38:da:2b:2f:75:29:79:a1:28:4f:38:c9:6d:48: 84:cc:a9:2d:53:c2:b6:fa:f2:54:5f:50:20:c2:dc: 13:1e:97:9f:f5:79:63:a6:08:df:c1:c1:61:2c:a1: cb:1e:5f:0d:fc:33:68:03:47:6c:df:72:1e:13:b4: 87:9b:f8:92:b5:5d:c0:2e:66:2e:82:36:b4:e5:f9: ff:6e:1c:fa:86:6c:62:29:58:70:16:46:ee:13:b0: e9:66:e9:9b:d5:67:68:97:d4:9d:70:41:00:c0:96: 38:76:b4:c1:97:c1:ab:4e:ea:81:75:8a:16:b7:2f: f9:6c:a9:ee:ef:cd:21:f4:70:a8:0f:ea:e6:e5:9c: 22:e3:99:5a:df:18:58:77:aa:d3:86:41:73:4d:b4: 0f:0e:2a:5c:c1:b3:de:ec:63:45:13:8f:f1:73:34: 41:88:32:8b:5f:1e:e5:cb:f2:ce:9b:51:86:89:0a: 95:06:5b:31:87:66:3d:6c:65:d7:88:4a:73:c5:d5: 9a:ff:aa:19:f3:ec:24:eb:40:d7:0e:41:ef:00:3d: 89:bb:4b:4a:e2:6d:d0:22:75:5b:87:5c:31:75:8f: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0E:42:0D:98:38:D3:CC:F7:49:78:6D:9C:31:E3:06:7B:01:6C:D2 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383730303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8700::/44 Signature Algorithm: sha256WithRSAEncryption 90:a7:3a:17:44:a9:1c:77:2f:72:95:60:e2:f5:e4:97:be:86: 0d:20:73:26:f1:2b:38:b9:00:ad:59:4d:26:df:a8:d2:22:7a: 43:a1:fb:f2:38:b9:0a:7d:74:82:70:05:38:b7:f8:8e:d8:c1: 01:7a:31:36:52:76:e0:1f:a5:59:f4:1b:fc:a1:06:ae:16:af: 66:e1:93:18:5c:10:20:4e:ec:a6:20:b5:c5:d4:bd:20:58:45: f2:cd:33:ce:74:fb:c6:19:a1:82:3d:ca:6d:43:3b:72:e5:53: 3d:4d:b0:ba:02:23:ad:0d:b4:ae:f7:c7:2d:7e:d0:30:f5:6b: 39:f3:11:c9:cf:7a:d7:37:39:45:9a:91:ed:6b:53:92:d5:f5: 41:ee:f3:e2:b0:11:f3:94:59:69:86:78:a6:aa:aa:a3:67:51: 80:fe:47:00:ff:91:89:a9:f7:e8:ac:ad:64:b7:06:81:06:d7: 86:4a:37:bf:4e:46:39:e5:0f:8a:1a:7d:19:7e:2b:c3:d0:1d: ff:41:c2:b3:75:89:3f:69:b3:81:18:20:25:9f:22:6f:32:80: 53:1e:14:49:9c:9f:54:32:b6:45:82:c5:10:f2:e6:ab:ec:35: 2a:a7:e0:39:ad:ab:69:d4:cc:a5:f1:76:d7:11:e3:d7:0a:57: ef:45:4f:f6 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUdTbWs0ABnHftjFRGk5OoZDIBC5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjYxMTEwMDJaFw0yNjA4MjUxMTE1MDJaMDMxMTAvBgNV BAMTKEE1MEU0MjBEOTgzOEQzQ0NGNzQ5Nzg2RDlDMzFFMzA2N0IwMTZDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fz5BMLnMrS+ZVnxQ+qp9sRSX RGOeX3Yn83Yq88w42isvdSl5oShPOMltSITMqS1Twrb68lRfUCDC3BMel5/1eWOm CN/BwWEsocseXw38M2gDR2zfch4TtIeb+JK1XcAuZi6CNrTl+f9uHPqGbGIpWHAW Ru4TsOlm6ZvVZ2iX1J1wQQDAljh2tMGXwatO6oF1iha3L/lsqe7vzSH0cKgP6ubl nCLjmVrfGFh3qtOGQXNNtA8OKlzBs97sY0UTj/FzNEGIMotfHuXL8s6bUYaJCpUG WzGHZj1sZdeISnPF1Zr/qhnz7CTrQNcOQe8APYm7S0ribdAidVuHXDF1j5rNAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUpQ5CDZg408z3SXhtnDHjBnsBbNIwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzNzMwMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAhwAwDQYJKoZIhvcNAQELBQADggEBAJCnOhdEqRx3L3KVYOL15Je+hg0gcybx Kzi5AK1ZTSbfqNIiekOh+/I4uQp9dIJwBTi3+I7YwQF6MTZSduAfpVn0G/yhBq4W r2bhkxhcECBO7KYgtcXUvSBYRfLNM850+8YZoYI9ym1DO3LlUz1NsLoCI60NtK73 xy1+0DD1aznzEcnPetc3OUWake1rU5LV9UHu8+KwEfOUWWmGeKaqqqNnUYD+RwD/ kYmp9+isrWS3BoEG14ZKN79ORjnlD4oafRl+K8PQHf9BwrN1iT9ps4EYICWfIm8y gFMeFEmcn1QytkWCxRDy5qvsNSqn4Dmtq2nUzKXxdtcR49cKV+9FT/Y= -----END CERTIFICATE-----Generated at Mon Sep 1 02:05:47 2025 by rpki-client