$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383861303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383861303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: nOfS2WmsbGFk8C0WMOclh/zwFxgJLkCkbe76kM/6hPM= Subject key identifier: BE:22:B9:3F:E6:F7:A2:16:30:59:3A:56:47:20:0D:C9:FA:09:97:22 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 23DB2E38EA5AAB0E6882D030A3308EBC9A88B2AB Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383861303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:36:53 +0000 ROA not before: Wed 27 Aug 2025 04:31:53 +0000 ROA not after: Wed 26 Aug 2026 04:36:53 +0000 asID: 133798 IP address blocks: 2402:5680:88a0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:db:2e:38:ea:5a:ab:0e:68:82:d0:30:a3:30:8e:bc:9a:88:b2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:31:53 2025 GMT Not After : Aug 26 04:36:53 2026 GMT Subject: CN=BE22B93FE6F7A21630593A5647200DC9FA099722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:a8:9f:6a:8b:74:44:33:38:5a:27:d5:4a: 6b:a9:24:27:e1:21:9a:fe:1e:04:5d:62:69:2f:cb: 7c:e6:c5:65:82:24:b8:21:99:94:8b:14:08:ff:c1: f3:61:5f:a2:0a:11:ad:f7:c2:b3:1b:82:9d:b3:67: 1e:5a:97:ee:4c:bb:b8:e5:02:85:24:f1:62:08:44: 5f:c0:a2:9d:da:84:ea:b0:01:65:4a:77:96:13:5c: 91:d5:0e:76:e5:73:ba:22:3b:2d:63:9c:9a:5a:b4: fe:8d:41:69:3c:d9:85:ea:4f:c4:6a:7f:d2:b9:45: 28:a0:0c:03:5d:b5:7b:ac:9b:50:ab:c9:46:a0:a5: 91:80:71:d4:01:df:4e:ed:d4:78:46:12:3d:b9:be: 1e:63:93:95:15:3a:74:0f:5a:27:00:bd:72:1e:30: a4:3e:6d:41:91:c0:12:13:4e:8e:00:ae:37:88:1b: 00:4b:20:21:aa:fc:a1:41:cd:50:61:17:71:d5:b1: 45:49:9d:15:52:e7:ee:23:8e:d3:a7:50:11:84:30: 85:e4:13:98:66:5c:95:bb:5a:0e:e7:dc:f6:bf:0e: 85:13:eb:d4:1e:88:1e:cc:99:53:bf:56:85:87:36: 33:eb:e8:8d:d2:70:b0:a0:20:7a:88:e8:e3:f7:75: c9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:22:B9:3F:E6:F7:A2:16:30:59:3A:56:47:20:0D:C9:FA:09:97:22 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383861303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:88a0::/44 Signature Algorithm: sha256WithRSAEncryption 97:5b:ec:e9:c4:ff:86:84:48:2e:85:28:4a:5f:3a:75:97:de: ba:8f:d7:62:17:7b:51:17:15:32:e3:e4:70:5b:2c:09:97:6b: 69:90:9f:27:4f:10:bf:d9:6f:3e:d1:f9:95:73:36:0a:7f:5b: 82:f5:87:49:21:94:78:c4:f3:2a:ac:7c:8c:3c:9d:4f:56:30: 2a:95:c8:66:3e:c4:4e:99:89:26:19:f4:d3:58:38:91:77:04: 9f:f3:49:30:6f:87:9e:14:91:c2:84:c4:89:b2:d4:3c:8f:51: c0:a6:c5:5a:b1:4e:cf:2a:c9:08:aa:48:26:18:07:0a:ba:9b: 3a:fd:d2:ba:fe:08:d1:d9:fa:6c:7f:45:a9:f5:82:77:60:31: 8f:17:81:84:2c:dd:cd:9b:6a:3c:43:e1:77:ed:2c:b0:47:ba: 36:0f:35:ab:81:01:55:f4:b2:ac:0b:b2:03:53:c2:80:5f:1b: 8b:39:18:a3:a9:fc:74:42:14:3a:2e:9e:a3:8d:f6:d0:d9:66: 9c:47:3a:e2:10:a7:07:ec:5a:84:e4:7f:b3:22:57:7b:79:5c: ef:70:57:eb:a1:6f:9b:be:3f:f0:1b:8f:fb:23:61:b2:01:ee: d5:b2:ed:06:fa:d0:0d:8f:7f:8d:80:2c:a9:c8:51:20:23:38: b0:1f:63:2d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUI9suOOpaqw5ogtAwozCOvJqIsqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMxNTNaFw0yNjA4MjYwNDM2NTNaMDMxMTAvBgNV BAMTKEJFMjJCOTNGRTZGN0EyMTYzMDU5M0E1NjQ3MjAwREM5RkEwOTk3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHaifaot0RDM4WifVSmupJCfh IZr+HgRdYmkvy3zmxWWCJLghmZSLFAj/wfNhX6IKEa33wrMbgp2zZx5al+5Mu7jl AoUk8WIIRF/Aop3ahOqwAWVKd5YTXJHVDnblc7oiOy1jnJpatP6NQWk82YXqT8Rq f9K5RSigDANdtXusm1CryUagpZGAcdQB307t1HhGEj25vh5jk5UVOnQPWicAvXIe MKQ+bUGRwBITTo4ArjeIGwBLICGq/KFBzVBhF3HVsUVJnRVS5+4jjtOnUBGEMIXk E5hmXJW7Wg7n3Pa/DoUT69QeiB7MmVO/VoWHNjPr6I3ScLCgIHqI6OP3dckDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUviK5P+b3ohYwWTpWRyANyfoJlyIwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODYxMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiKAwDQYJKoZIhvcNAQELBQADggEBAJdb7OnE/4aESC6FKEpfOnWX3rqP12IX e1EXFTLj5HBbLAmXa2mQnydPEL/Zbz7R+ZVzNgp/W4L1h0khlHjE8yqsfIw8nU9W MCqVyGY+xE6ZiSYZ9NNYOJF3BJ/zSTBvh54UkcKExImy1DyPUcCmxVqxTs8qyQiq SCYYBwq6mzr90rr+CNHZ+mx/Ran1gndgMY8XgYQs3c2bajxD4XftLLBHujYPNauB AVX0sqwLsgNTwoBfG4s5GKOp/HRCFDounqON9tDZZpxHOuIQpwfsWoTkf7MiV3t5 XO9wV+uhb5u+P/Abj/sjYbIB7tWy7Qb60A2Pf42ALKnIUSAjOLAfYy0= -----END CERTIFICATE-----Generated at Mon Sep 1 02:07:26 2025 by rpki-client