$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383738303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383738303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: +FRo7QLITBecHW4sYYixVmk3N2JvsIPUTqCfKb0WWgA= Subject key identifier: 02:AF:2C:BA:3E:76:99:6C:BF:D2:9D:E6:F4:B4:B1:85:7C:CF:00:59 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 04197CC5811BA6C660AA24D3BEB297E7E3DD505C Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383738303a3a2f34342d3434203d3e20313333373938.roa Signing time: Tue 26 Aug 2025 11:16:59 +0000 ROA not before: Tue 26 Aug 2025 11:11:59 +0000 ROA not after: Tue 25 Aug 2026 11:16:59 +0000 asID: 133798 IP address blocks: 2402:5680:8780::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:19:7c:c5:81:1b:a6:c6:60:aa:24:d3:be:b2:97:e7:e3:dd:50:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 26 11:11:59 2025 GMT Not After : Aug 25 11:16:59 2026 GMT Subject: CN=02AF2CBA3E76996CBFD29DE6F4B4B1857CCF0059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:6c:e4:06:cf:13:ac:16:79:5a:8a:53:3f: ec:b4:73:6d:5b:ef:9a:f1:5e:06:54:2e:cd:93:74: 2a:28:e2:f7:54:41:ef:db:3a:75:fd:58:fd:8e:e1: a9:3d:45:bb:79:1e:d4:5e:53:a4:04:0a:3f:98:5d: 15:9f:12:37:fc:0f:f1:f2:b6:92:82:17:12:1e:7c: 03:e6:d5:ec:fe:5b:82:64:8c:83:9b:d4:56:50:d2: 47:d0:bd:40:27:b0:58:bf:cd:b2:07:88:a1:39:8b: a2:21:e5:05:b4:d7:47:ca:b4:00:cc:d6:3b:18:df: eb:35:fa:df:33:03:54:4a:6a:55:c7:8e:b9:8f:6b: 33:8b:ba:82:b7:ea:e2:5d:de:e5:ee:33:b2:d9:49: cc:e6:62:5b:f6:ff:f0:a8:c1:33:11:c6:3f:3d:90: 1c:63:5a:46:c2:ec:27:d0:8b:fa:f5:3e:2a:bd:fb: e5:01:4b:52:c0:99:21:51:a1:11:02:39:04:bd:71: 79:8f:fe:0f:37:6f:7b:bc:c2:e4:61:30:d1:84:68: 29:71:09:c2:0a:82:c4:cc:b7:a5:3c:b9:d0:e7:ea: 5d:d2:d5:f6:72:4e:ff:23:a0:a5:a9:3d:b3:5e:a6: 60:1d:3b:dc:36:7d:92:5b:50:4c:2d:c4:b8:76:02: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AF:2C:BA:3E:76:99:6C:BF:D2:9D:E6:F4:B4:B1:85:7C:CF:00:59 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383738303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8780::/44 Signature Algorithm: sha256WithRSAEncryption 4d:60:97:d7:88:a9:d7:f6:04:e4:19:a1:3f:9d:b0:37:61:13: ab:bb:40:b8:01:b7:83:80:c1:e4:2c:af:3d:c0:61:ec:b2:88: f2:0e:61:87:02:b4:52:c8:dd:7d:6e:03:df:63:40:95:a9:06: db:35:65:4c:9d:b6:a4:c9:33:7e:f9:59:1c:1e:17:8d:00:3c: f6:5a:79:b0:ba:19:02:49:82:28:15:92:92:3a:a8:01:be:76: 9f:ff:fa:31:c9:72:a3:e7:e4:80:c5:a1:a1:96:3e:b9:c7:7c: 00:85:f6:11:12:60:5b:93:8a:fd:c4:2c:51:41:da:02:dd:d8: ff:ad:b5:17:7c:bb:49:b5:69:8c:5d:d2:98:ae:1e:24:e0:b8: f7:43:22:a0:04:5c:32:4b:78:2f:27:a4:da:d4:f8:4d:d4:58: 70:d6:60:9a:26:25:af:fa:c4:de:24:5e:c2:bb:b7:f6:38:87: 76:d4:d0:60:82:da:df:c4:bb:fb:fd:5c:67:9c:ce:74:3d:02: 4e:e8:8d:cb:ca:a9:d6:eb:3e:0e:b8:cc:5a:dd:26:53:db:af: 4a:c6:e5:ca:5a:f5:10:11:84:42:59:12:3d:55:66:01:95:b2: ac:9e:c8:09:8f:e0:81:6b:50:31:fa:40:26:65:06:9b:8e:d1: 9a:59:06:e9 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUBBl8xYEbpsZgqiTTvrKX5+PdUFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjYxMTExNTlaFw0yNjA4MjUxMTE2NTlaMDMxMTAvBgNV BAMTKDAyQUYyQ0JBM0U3Njk5NkNCRkQyOURFNkY0QjRCMTg1N0NDRjAwNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjLmzkBs8TrBZ5WopTP+y0c21b 75rxXgZULs2TdCoo4vdUQe/bOnX9WP2O4ak9Rbt5HtReU6QECj+YXRWfEjf8D/Hy tpKCFxIefAPm1ez+W4JkjIOb1FZQ0kfQvUAnsFi/zbIHiKE5i6Ih5QW010fKtADM 1jsY3+s1+t8zA1RKalXHjrmPazOLuoK36uJd3uXuM7LZSczmYlv2//CowTMRxj89 kBxjWkbC7CfQi/r1Piq9++UBS1LAmSFRoRECOQS9cXmP/g83b3u8wuRhMNGEaClx CcIKgsTMt6U8udDn6l3S1fZyTv8joKWpPbNepmAdO9w2fZJbUEwtxLh2AstTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUAq8suj52mWy/0p3m9LSxhXzPAFkwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzNzM4MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAh4AwDQYJKoZIhvcNAQELBQADggEBAE1gl9eIqdf2BOQZoT+dsDdhE6u7QLgB t4OAweQsrz3AYeyyiPIOYYcCtFLI3X1uA99jQJWpBts1ZUydtqTJM375WRweF40A PPZaebC6GQJJgigVkpI6qAG+dp//+jHJcqPn5IDFoaGWPrnHfACF9hESYFuTiv3E LFFB2gLd2P+ttRd8u0m1aYxd0piuHiTguPdDIqAEXDJLeC8npNrU+E3UWHDWYJom Ja/6xN4kXsK7t/Y4h3bU0GCC2t/Eu/v9XGecznQ9Ak7ojcvKqdbrPg64zFrdJlPb r0rG5cpa9RARhEJZEj1VZgGVsqyeyAmP4IFrUDH6QCZlBpuO0ZpZBuk= -----END CERTIFICATE-----Generated at Mon Sep 1 02:12:00 2025 by rpki-client