$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383831303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383831303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: ja8ScmSuJtyL0lvqfBNcjPEymb/A+l9QtK3FvtCC9Sw= Subject key identifier: 8E:E7:C8:CB:A4:EF:7E:8F:79:26:0F:59:A8:AC:D9:F6:BF:80:D1:9E Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 6F5D58255807E8C5A484BF1DC2DD3D6EC8F1BF44 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383831303a3a2f34342d3434203d3e20313333373938.roa Signing time: Fri 29 Aug 2025 03:16:20 +0000 ROA not before: Fri 29 Aug 2025 03:11:20 +0000 ROA not after: Fri 28 Aug 2026 03:16:20 +0000 asID: 133798 IP address blocks: 2402:5680:8810::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5d:58:25:58:07:e8:c5:a4:84:bf:1d:c2:dd:3d:6e:c8:f1:bf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 29 03:11:20 2025 GMT Not After : Aug 28 03:16:20 2026 GMT Subject: CN=8EE7C8CBA4EF7E8F79260F59A8ACD9F6BF80D19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:fe:bd:c3:64:86:3d:bc:74:55:3e:1c:9d: 8c:ab:52:39:a7:96:84:18:58:af:52:d4:2b:66:7e: d8:d1:c8:fc:90:4c:7c:61:54:95:08:ab:50:cd:c0: d0:4c:72:ac:2a:07:f1:c7:36:3c:42:37:ff:c1:9f: 0b:02:db:6e:6c:42:7b:4a:f3:37:0d:d4:8d:10:28: a1:26:c0:df:6a:c6:cc:ce:c0:98:ff:85:6f:6f:e0: b6:84:f2:fe:8c:1a:14:9b:81:1a:3b:3c:c1:eb:16: 82:5c:04:2f:b2:c1:b2:fa:83:fc:5f:22:aa:66:9f: 1e:d9:1d:f5:7a:1d:fa:27:7c:04:6d:4a:88:7f:f7: 4b:1d:44:06:8c:e3:fd:9e:a8:10:17:7d:1a:60:89: 63:ad:b3:8c:68:5a:b8:84:a9:0a:e1:5f:8d:48:b5: 53:fb:16:de:5c:8c:76:1e:ae:ab:54:35:95:a4:dd: bb:bf:2c:dd:2b:f1:94:af:4b:d1:91:8e:b5:16:0f: 4b:80:d5:16:8a:44:b3:c7:15:11:ea:d1:22:6b:a0: 2e:0d:9b:ab:d5:0a:bd:97:7b:4a:4b:9e:61:4b:fb: 43:41:4d:01:16:fb:58:33:6c:d0:2f:e4:c6:4d:4b: 45:6f:51:85:36:c3:a5:07:c8:c8:28:e4:54:78:79: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:C8:CB:A4:EF:7E:8F:79:26:0F:59:A8:AC:D9:F6:BF:80:D1:9E X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383831303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8810::/44 Signature Algorithm: sha256WithRSAEncryption 85:ff:22:c2:48:5c:23:ac:e6:34:cb:26:dc:cb:73:95:f6:7a: 15:90:7d:7a:57:6b:66:a5:e7:88:70:9e:e4:a7:09:79:79:5c: 5c:3f:0a:62:ce:b6:c1:27:ef:5e:b4:ec:c5:95:1a:58:88:87: c8:fd:28:da:a3:40:29:cb:b0:19:09:79:f6:3f:a9:e6:7c:ac: 87:65:d6:2f:b2:bb:f0:85:55:1e:1c:41:b2:04:ec:b7:e6:73: 1b:5a:42:af:84:f2:bb:47:e6:78:26:6c:7d:2f:37:0c:de:39: 91:46:ab:56:be:27:dc:f0:21:c3:af:18:d6:0e:87:3c:fd:73: a3:55:24:97:98:df:9e:77:43:ac:83:17:20:a7:5d:6b:ee:3e: 46:89:fd:d5:e5:ee:fd:a4:f6:28:ec:00:6a:6f:82:85:dd:63: 6a:38:d3:49:2b:3a:b0:07:bf:11:e7:aa:b3:fc:a2:27:71:47: 24:a5:3f:82:67:16:82:73:d2:c5:b6:06:7b:f6:67:7c:ee:56: 2b:c4:88:a2:a1:ea:47:80:28:0f:e9:9a:30:11:0a:ef:c6:1f: 3a:f5:ab:24:3b:81:cf:62:06:43:49:7f:06:39:5f:5c:f7:6b: 4a:2d:0e:4b:70:16:e9:44:52:a5:19:d0:bc:5d:3b:d1:7a:58: 6a:ba:aa:75 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUb11YJVgH6MWkhL8dwt09bsjxv0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjkwMzExMjBaFw0yNjA4MjgwMzE2MjBaMDMxMTAvBgNV BAMTKDhFRTdDOENCQTRFRjdFOEY3OTI2MEY1OUE4QUNEOUY2QkY4MEQxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMf69w2SGPbx0VT4cnYyrUjmn loQYWK9S1CtmftjRyPyQTHxhVJUIq1DNwNBMcqwqB/HHNjxCN//BnwsC225sQntK 8zcN1I0QKKEmwN9qxszOwJj/hW9v4LaE8v6MGhSbgRo7PMHrFoJcBC+ywbL6g/xf Iqpmnx7ZHfV6HfonfARtSoh/90sdRAaM4/2eqBAXfRpgiWOts4xoWriEqQrhX41I tVP7Ft5cjHYerqtUNZWk3bu/LN0r8ZSvS9GRjrUWD0uA1RaKRLPHFRHq0SJroC4N m6vVCr2Xe0pLnmFL+0NBTQEW+1gzbNAv5MZNS0VvUYU2w6UHyMgo5FR4eVHJAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUjufIy6Tvfo95Jg9ZqKzZ9r+A0Z4wHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODMxMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiBAwDQYJKoZIhvcNAQELBQADggEBAIX/IsJIXCOs5jTLJtzLc5X2ehWQfXpX a2al54hwnuSnCXl5XFw/CmLOtsEn71607MWVGliIh8j9KNqjQCnLsBkJefY/qeZ8 rIdl1i+yu/CFVR4cQbIE7LfmcxtaQq+E8rtH5ngmbH0vNwzeOZFGq1a+J9zwIcOv GNYOhzz9c6NVJJeY3553Q6yDFyCnXWvuPkaJ/dXl7v2k9ijsAGpvgoXdY2o400kr OrAHvxHnqrP8oidxRySlP4JnFoJz0sW2Bnv2Z3zuVivEiKKh6keAKA/pmjARCu/G Hzr1qyQ7gc9iBkNJfwY5X1z3a0otDktwFulEUqUZ0LxdO9F6WGq6qnU= -----END CERTIFICATE-----Generated at Mon Sep 1 02:07:29 2025 by rpki-client