$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383839303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383839303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: HOO2zkxh3ob8wwuUbNYx1bguuTX/evCyFLOpWWk2IIk= Subject key identifier: 8F:52:53:86:EF:A9:39:B0:3A:48:9A:90:EE:94:76:F8:C4:22:83:26 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 0CB8489FA2E367998D8427E06B90A9489E9F8BBB Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383839303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:36:36 +0000 ROA not before: Wed 27 Aug 2025 04:31:36 +0000 ROA not after: Wed 26 Aug 2026 04:36:36 +0000 asID: 133798 IP address blocks: 2402:5680:8890::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b8:48:9f:a2:e3:67:99:8d:84:27:e0:6b:90:a9:48:9e:9f:8b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:31:36 2025 GMT Not After : Aug 26 04:36:36 2026 GMT Subject: CN=8F525386EFA939B03A489A90EE9476F8C4228326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:06:cd:09:9e:7e:31:89:21:04:ad:00:a8: 3b:07:d2:96:02:8c:4b:fa:44:9c:ea:01:e9:10:82: cb:a2:de:02:8b:49:6b:71:66:27:fc:49:8c:d2:8d: 92:b0:2a:b1:f4:4d:a3:48:0a:9b:fd:67:75:2d:d1: 2d:40:b9:bc:b9:55:bc:ea:18:66:ea:97:e3:81:c2: 2b:4f:c8:1c:27:f5:2c:0f:ff:cf:06:e0:74:44:45: 05:46:9b:11:4f:3b:99:62:9c:4e:e7:12:7b:0c:7b: 8a:1c:eb:5b:5a:aa:68:f7:b7:bc:68:f9:4a:15:b5: 9d:f7:fe:c0:90:2a:df:18:94:31:aa:2c:db:1a:ce: ab:d4:da:6c:73:52:05:29:61:f5:3f:a8:47:0f:21: 7c:f7:d6:31:09:63:d0:89:48:d3:07:87:bd:76:02: 6c:a1:c8:06:36:b6:93:3a:bf:3e:ae:ed:33:44:ef: dc:cc:0f:ad:60:1b:e3:e0:18:f1:08:12:bd:15:29: e2:0a:82:ec:5a:2f:63:d6:af:ea:68:38:79:d5:a0: de:9a:ca:24:71:08:9b:cd:8d:82:e2:1a:e2:2d:69: 09:37:d9:2f:60:a9:d5:e3:de:71:7d:85:37:9b:ba: c0:7a:5a:c2:52:58:2f:a1:ec:a0:b3:69:cd:a9:21: 19:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:52:53:86:EF:A9:39:B0:3A:48:9A:90:EE:94:76:F8:C4:22:83:26 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383839303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8890::/44 Signature Algorithm: sha256WithRSAEncryption 4a:cc:d0:f3:56:0c:f2:92:ac:b1:57:20:14:df:10:34:e4:41: 11:c7:b0:20:38:6e:31:d0:71:3c:03:af:45:ea:4f:d5:5f:45: 10:bc:61:9a:f9:b1:12:75:1d:0e:aa:65:18:c4:f1:14:47:1f: d6:8f:92:b8:d2:1c:74:05:ae:28:50:97:a2:2e:4b:84:d8:c0: 99:fc:ee:9b:e9:7c:8a:36:89:35:64:67:cf:6e:ea:25:d0:58: 2b:94:c2:e0:cf:66:c9:e1:93:71:e1:0d:c7:2c:3f:2c:76:26: 5b:db:9e:01:46:f2:b4:74:63:68:ed:6f:d0:0c:4f:aa:86:a2: 18:4f:d5:ae:56:d4:c4:b7:15:b9:fd:c7:e2:79:6a:a8:74:19: 66:41:5e:a1:0f:c9:44:a7:68:ec:66:a2:6e:c7:02:e6:4c:66: cf:56:c3:0e:4f:43:63:bb:36:cd:75:54:38:a2:a9:69:1d:f4: c6:37:88:7a:bd:f7:20:86:59:f2:78:cd:81:8a:27:50:42:0f: d6:fe:9c:7a:76:b7:1c:eb:ec:f4:69:e6:e2:d9:c1:5c:cc:e0: 19:6d:68:51:5e:42:2c:ef:03:f6:fa:20:ff:77:89:8e:c1:af: df:92:f0:b3:6b:3a:0b:d4:01:d9:db:e1:64:cd:9f:47:5c:7c: 96:6b:02:81 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUDLhIn6LjZ5mNhCfga5CpSJ6fi7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMxMzZaFw0yNjA4MjYwNDM2MzZaMDMxMTAvBgNV BAMTKDhGNTI1Mzg2RUZBOTM5QjAzQTQ4OUE5MEVFOTQ3NkY4QzQyMjgzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+AbNCZ5+MYkhBK0AqDsH0pYC jEv6RJzqAekQgsui3gKLSWtxZif8SYzSjZKwKrH0TaNICpv9Z3Ut0S1Auby5Vbzq GGbql+OBwitPyBwn9SwP/88G4HRERQVGmxFPO5linE7nEnsMe4oc61taqmj3t7xo +UoVtZ33/sCQKt8YlDGqLNsazqvU2mxzUgUpYfU/qEcPIXz31jEJY9CJSNMHh712 AmyhyAY2tpM6vz6u7TNE79zMD61gG+PgGPEIEr0VKeIKguxaL2PWr+poOHnVoN6a yiRxCJvNjYLiGuItaQk32S9gqdXj3nF9hTebusB6WsJSWC+h7KCzac2pIRk9AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUj1JThu+pObA6SJqQ7pR2+MQigyYwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODM5MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiJAwDQYJKoZIhvcNAQELBQADggEBAErM0PNWDPKSrLFXIBTfEDTkQRHHsCA4 bjHQcTwDr0XqT9VfRRC8YZr5sRJ1HQ6qZRjE8RRHH9aPkrjSHHQFrihQl6IuS4TY wJn87pvpfIo2iTVkZ89u6iXQWCuUwuDPZsnhk3HhDccsPyx2JlvbngFG8rR0Y2jt b9AMT6qGohhP1a5W1MS3Fbn9x+J5aqh0GWZBXqEPyUSnaOxmom7HAuZMZs9Www5P Q2O7Ns11VDiiqWkd9MY3iHq99yCGWfJ4zYGKJ1BCD9b+nHp2txzr7PRp5uLZwVzM 4BltaFFeQizvA/b6IP93iY7Br9+S8LNrOgvUAdnb4WTNn0dcfJZrAoE= -----END CERTIFICATE-----Generated at Mon Sep 1 02:05:47 2025 by rpki-client