$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: yYEaUcYB9H8oV/EVCv1fG9dfpmssJwfxmFnwxQrj5H4= Subject key identifier: 9E:89:6C:56:D2:EE:60:22:3E:C5:67:98:C5:28:D2:94:A6:EE:6C:1E Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 1DA021B98F3396C3F1FF1769B540FDA49A0B2788 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa Signing time: Tue 26 Aug 2025 11:15:38 +0000 ROA not before: Tue 26 Aug 2025 11:10:38 +0000 ROA not after: Tue 25 Aug 2026 11:15:38 +0000 asID: 133798 IP address blocks: 2402:5680:8730::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a0:21:b9:8f:33:96:c3:f1:ff:17:69:b5:40:fd:a4:9a:0b:27:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 26 11:10:38 2025 GMT Not After : Aug 25 11:15:38 2026 GMT Subject: CN=9E896C56D2EE60223EC56798C528D294A6EE6C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4c:a1:3f:60:a7:cf:87:2c:93:e0:1f:8c:e4: 7f:93:7e:e9:13:54:99:5d:6f:01:5d:49:5e:36:d5: a1:ce:71:c0:db:aa:72:25:69:00:a4:a6:2d:fa:1c: d3:f9:d4:b7:25:31:fa:75:24:bb:4f:82:b5:e7:3c: b4:45:7f:73:1c:a7:92:42:bb:c6:56:bb:22:2b:b6: 99:de:34:ed:12:de:c9:18:05:ee:72:8b:8f:85:a6: c5:e7:60:c3:d5:5c:69:51:7a:77:95:cc:6e:5f:c0: e5:3b:68:c0:3c:ea:e8:2f:d4:c8:c8:c7:ef:90:f5: 6f:4c:58:86:66:73:41:05:8d:22:1f:33:52:2e:f8: 83:c2:41:d6:08:84:c2:65:c3:c2:6b:ba:f6:77:8d: 62:4e:01:41:d9:4f:9d:27:49:46:b6:5c:f9:12:95: da:7e:33:a8:1d:23:87:8d:d1:f7:ce:b0:24:c8:31: 91:16:aa:a4:cb:7b:78:0c:63:54:e5:a5:36:3e:99: fa:13:c5:e1:ca:45:d1:a2:55:ce:dd:81:77:2d:9f: db:7e:da:b6:8c:37:99:a4:5c:bf:ff:5e:d5:7b:cc: b1:4f:49:ed:42:96:67:04:85:a1:01:c0:ca:13:9d: 34:2d:38:d6:07:0e:46:5b:16:a2:b9:86:41:e4:ea: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:89:6C:56:D2:EE:60:22:3E:C5:67:98:C5:28:D2:94:A6:EE:6C:1E X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383733303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8730::/44 Signature Algorithm: sha256WithRSAEncryption 9c:f2:eb:f1:a3:6d:42:a7:ee:d7:be:29:d0:0b:7b:a8:d7:d0: 65:e2:29:96:7d:0b:ec:e0:70:0d:c9:16:bb:fc:89:62:60:01: 43:d6:89:54:0f:dd:b0:bc:35:96:4b:0a:6e:d3:29:7a:25:81: dc:c2:1f:aa:bf:01:66:59:3f:e1:0b:b7:0d:8e:c4:4f:d8:1e: 08:e7:3e:f8:95:25:10:fc:ad:b6:d1:31:5b:0b:0c:6e:73:3b: d3:79:6f:78:92:4e:bc:84:b8:bf:6e:f6:31:ac:7b:79:f1:aa: 21:54:09:f0:c7:ce:5b:0c:7f:f0:9e:78:0b:ad:16:0e:54:a3: c2:b6:62:05:9a:a5:a6:9b:7b:3d:30:0a:1e:03:3f:e4:21:25: 5c:2a:a5:11:e6:61:85:61:ba:23:5d:6a:93:31:fb:75:02:ab: 7f:99:e2:d7:79:2c:a3:b4:c8:90:5c:62:31:e2:72:86:b3:48: fc:1d:93:64:fa:b3:bb:7a:48:65:d9:01:49:fc:8b:36:87:a7: 38:8d:58:10:e1:39:91:4f:28:34:b2:68:0d:60:1f:52:90:08: e0:99:2a:73:4e:22:a6:51:c4:bc:f9:e8:ae:ce:31:a3:1e:e2: c5:81:73:99:35:17:4f:07:5b:e5:0f:01:17:59:a1:1d:bc:d4: c8:8e:bf:b9 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUHaAhuY8zlsPx/xdptUD9pJoLJ4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjYxMTEwMzhaFw0yNjA4MjUxMTE1MzhaMDMxMTAvBgNV BAMTKDlFODk2QzU2RDJFRTYwMjIzRUM1Njc5OEM1MjhEMjk0QTZFRTZDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0TKE/YKfPhyyT4B+M5H+TfukT VJldbwFdSV421aHOccDbqnIlaQCkpi36HNP51LclMfp1JLtPgrXnPLRFf3Mcp5JC u8ZWuyIrtpneNO0S3skYBe5yi4+FpsXnYMPVXGlReneVzG5fwOU7aMA86ugv1MjI x++Q9W9MWIZmc0EFjSIfM1Iu+IPCQdYIhMJlw8JruvZ3jWJOAUHZT50nSUa2XPkS ldp+M6gdI4eN0ffOsCTIMZEWqqTLe3gMY1TlpTY+mfoTxeHKRdGiVc7dgXctn9t+ 2raMN5mkXL//XtV7zLFPSe1ClmcEhaEBwMoTnTQtONYHDkZbFqK5hkHk6jYjAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUnolsVtLuYCI+xWeYxSjSlKbubB4wHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzNzMzMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAhzAwDQYJKoZIhvcNAQELBQADggEBAJzy6/GjbUKn7te+KdALe6jX0GXiKZZ9 C+zgcA3JFrv8iWJgAUPWiVQP3bC8NZZLCm7TKXolgdzCH6q/AWZZP+ELtw2OxE/Y HgjnPviVJRD8rbbRMVsLDG5zO9N5b3iSTryEuL9u9jGse3nxqiFUCfDHzlsMf/Ce eAutFg5Uo8K2YgWapaabez0wCh4DP+QhJVwqpRHmYYVhuiNdapMx+3UCq3+Z4td5 LKO0yJBcYjHicoazSPwdk2T6s7t6SGXZAUn8izaHpziNWBDhOZFPKDSyaA1gH1KQ COCZKnNOIqZRxLz56K7OMaMe4sWBc5k1F08HW+UPARdZoR281MiOv7k= -----END CERTIFICATE-----Generated at Mon Sep 1 02:04:31 2025 by rpki-client