$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383835303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383835303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: Zksfz/b0qHxUSZW9GfbBtWA85AJqprAY+u05KHMhh1o= Subject key identifier: 83:B7:1D:A1:46:56:72:C6:38:CB:84:33:8D:C2:85:64:61:52:67:B7 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 6366AA862EE9A14A2ACAF08047BE652CBCDF01DD Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383835303a3a2f34342d3434203d3e20313333373938.roa Signing time: Fri 29 Aug 2025 03:17:12 +0000 ROA not before: Fri 29 Aug 2025 03:12:12 +0000 ROA not after: Fri 28 Aug 2026 03:17:12 +0000 asID: 133798 IP address blocks: 2402:5680:8850::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:66:aa:86:2e:e9:a1:4a:2a:ca:f0:80:47:be:65:2c:bc:df:01:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 29 03:12:12 2025 GMT Not After : Aug 28 03:17:12 2026 GMT Subject: CN=83B71DA1465672C638CB84338DC28564615267B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:f2:cf:9a:e5:79:f3:4b:1b:77:62:82:bc: ac:c8:ad:46:80:2a:fb:3b:5c:6b:46:68:b8:6b:f1: ee:c2:87:9e:1f:91:14:c3:a5:fa:c5:74:af:1c:8e: cb:09:f4:53:c2:70:ce:ee:11:c8:7a:17:a5:4e:f9: a1:16:e3:93:dd:03:5c:ea:fc:3c:45:19:c5:ad:c5: 6f:1b:80:6a:04:89:9c:c8:92:f4:ea:17:60:e0:69: 50:4c:46:12:4f:0b:3a:f8:6a:4d:88:ee:17:d8:bd: 38:26:45:3b:5d:b7:97:8a:2d:1f:79:e5:d0:32:e1: 6e:dc:26:d1:17:30:dd:67:87:92:b2:ba:d2:83:45: 57:e5:70:34:ae:60:33:3b:77:17:20:6c:5b:d3:59: de:71:36:57:5d:1c:c3:aa:b7:7f:aa:09:82:d7:63: a4:9b:64:3e:07:c0:54:f5:6a:9d:71:9f:fc:78:55: e3:36:b0:7b:20:59:06:37:fe:42:3d:41:c4:ba:1a: 70:53:e8:d3:44:01:18:16:9d:14:76:71:3d:db:6c: ff:34:9b:cf:9f:7a:08:ed:d9:35:a7:67:d6:f6:8b: 0f:25:49:20:11:a6:9d:d7:85:93:2a:09:07:99:f2: fd:e9:c3:38:36:80:96:4a:92:d8:c5:41:ea:f5:50: 50:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B7:1D:A1:46:56:72:C6:38:CB:84:33:8D:C2:85:64:61:52:67:B7 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383835303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8850::/44 Signature Algorithm: sha256WithRSAEncryption a3:d0:21:1c:07:6c:9d:48:56:6c:42:a0:cd:db:46:7e:b8:d4: 56:ca:72:30:56:a7:47:0a:f8:0c:2b:39:f9:58:d1:7c:bc:41: 86:b1:8a:1e:45:f0:52:6f:67:a1:4b:27:9f:c1:0a:00:e2:5f: a2:fc:64:7f:d7:50:3c:0e:ff:d7:91:43:8b:48:3e:98:54:65: 11:9e:28:c6:7d:d5:56:f5:a4:bd:65:9f:f4:a0:9e:e7:cb:fb: a6:cb:e1:87:a9:bf:47:91:0c:c0:2b:04:b2:3b:83:9d:8a:f3: 55:da:6b:f3:78:9b:f3:fd:ec:0f:6b:29:84:5b:f2:b6:7d:f6: ad:b9:a5:16:10:99:28:e0:ee:b6:7a:e6:9c:98:5f:36:e4:2d: f0:a2:bf:25:51:8b:de:72:4d:05:16:31:83:5b:ce:70:82:76: d6:d8:f0:97:f6:10:d5:54:5d:e9:ad:a1:3d:38:42:50:1e:0c: 7e:e6:25:11:23:fe:6f:79:fb:4c:8c:3a:c6:92:aa:94:ee:83: 86:82:76:03:34:33:03:96:d0:7b:cd:5d:27:01:47:52:65:05: e6:0b:31:d5:10:e4:46:98:42:d1:6d:fe:c8:da:6b:16:3d:29: c6:87:35:92:4b:7b:c1:9b:34:a0:85:f9:7f:e0:02:b7:0f:a9: 8e:c1:38:d6 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUY2aqhi7poUoqyvCAR75lLLzfAd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjkwMzEyMTJaFw0yNjA4MjgwMzE3MTJaMDMxMTAvBgNV BAMTKDgzQjcxREExNDY1NjcyQzYzOENCODQzMzhEQzI4NTY0NjE1MjY3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+PLPmuV580sbd2KCvKzIrUaA Kvs7XGtGaLhr8e7Ch54fkRTDpfrFdK8cjssJ9FPCcM7uEch6F6VO+aEW45PdA1zq /DxFGcWtxW8bgGoEiZzIkvTqF2DgaVBMRhJPCzr4ak2I7hfYvTgmRTtdt5eKLR95 5dAy4W7cJtEXMN1nh5KyutKDRVflcDSuYDM7dxcgbFvTWd5xNlddHMOqt3+qCYLX Y6SbZD4HwFT1ap1xn/x4VeM2sHsgWQY3/kI9QcS6GnBT6NNEARgWnRR2cT3bbP80 m8+fegjt2TWnZ9b2iw8lSSARpp3XhZMqCQeZ8v3pwzg2gJZKktjFQer1UFC5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUg7cdoUZWcsY4y4QzjcKFZGFSZ7cwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODM1MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiFAwDQYJKoZIhvcNAQELBQADggEBAKPQIRwHbJ1IVmxCoM3bRn641FbKcjBW p0cK+AwrOflY0Xy8QYaxih5F8FJvZ6FLJ5/BCgDiX6L8ZH/XUDwO/9eRQ4tIPphU ZRGeKMZ91Vb1pL1ln/SgnufL+6bL4Yepv0eRDMArBLI7g52K81Xaa/N4m/P97A9r KYRb8rZ99q25pRYQmSjg7rZ65pyYXzbkLfCivyVRi95yTQUWMYNbznCCdtbY8Jf2 ENVUXemtoT04QlAeDH7mJREj/m95+0yMOsaSqpTug4aCdgM0MwOW0HvNXScBR1Jl BeYLMdUQ5EaYQtFt/sjaaxY9KcaHNZJLe8GbNKCF+X/gArcPqY7BONY= -----END CERTIFICATE-----Generated at Mon Sep 1 02:05:40 2025 by rpki-client