$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383863303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383863303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: gfikpt9pE7+C1X0H1LvWi70rl6mIR6eOSCFz/Ob3nOI= Subject key identifier: 9E:A4:4D:6A:3A:BF:86:00:7C:BB:0B:2D:39:FA:72:99:62:37:7A:09 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 2B1C7F019725563A80F26D7FB4C92F7A4042BF01 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383863303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:37:19 +0000 ROA not before: Wed 27 Aug 2025 04:32:19 +0000 ROA not after: Wed 26 Aug 2026 04:37:19 +0000 asID: 133798 IP address blocks: 2402:5680:88c0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1c:7f:01:97:25:56:3a:80:f2:6d:7f:b4:c9:2f:7a:40:42:bf:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:32:19 2025 GMT Not After : Aug 26 04:37:19 2026 GMT Subject: CN=9EA44D6A3ABF86007CBB0B2D39FA729962377A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:74:b6:f6:6c:56:c6:ef:92:64:73:89:38: bc:0f:40:d6:19:c9:96:88:81:74:e8:bd:16:91:f3: 33:ac:0a:49:f1:e3:d8:28:8c:27:f7:2f:0a:06:4a: 08:5f:6b:08:20:b5:b9:23:01:e7:02:e5:9a:d2:ef: 1e:a1:7e:78:02:63:26:ff:2d:28:2b:01:57:7a:ef: 07:f2:6a:4d:a9:d9:44:55:6a:2d:1b:ec:af:6b:0a: dd:c8:04:67:0f:45:9d:8d:c9:0e:f3:5c:b7:57:b2: 4b:f9:0d:c2:16:79:a1:cd:45:3a:15:3b:11:9d:35: e9:54:c3:4b:52:7e:f6:58:f8:94:b1:5b:f1:9a:ce: a5:8b:12:0c:f0:5b:8c:c8:19:95:13:0b:8f:8f:b2: c4:05:14:d5:bf:cb:46:36:7a:45:73:41:87:0c:fb: e3:7c:33:c2:48:34:12:9c:a5:12:e9:ef:9c:8d:db: e0:bd:7f:8c:5b:36:4c:b7:ea:dd:a3:59:2a:5a:5f: 0f:ed:0d:7b:72:74:2b:8c:00:87:29:f5:b2:b0:ad: 9c:24:2a:b3:75:bc:23:53:b4:44:07:ce:7b:3b:1d: 51:c3:97:0e:2a:52:b7:b3:49:e7:8d:ba:d9:1a:43: cc:02:e7:79:ee:29:1b:e3:56:a1:2f:30:aa:ec:fe: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A4:4D:6A:3A:BF:86:00:7C:BB:0B:2D:39:FA:72:99:62:37:7A:09 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383863303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:88c0::/44 Signature Algorithm: sha256WithRSAEncryption a4:69:de:91:53:71:b6:03:22:74:59:3b:37:3d:83:da:10:04: 95:04:b8:d2:dc:95:f2:ea:3e:f9:a1:04:7c:a7:8b:48:cc:df: bb:53:f3:b6:3a:e7:f9:47:33:5c:2a:48:4e:1b:08:46:89:7b: 9d:1d:a6:94:98:a1:57:d9:42:8d:bb:8e:53:e0:9b:c4:29:e3: 5d:b0:6a:ca:af:33:8b:22:1d:cf:23:d5:18:1f:b7:fa:dc:7b: 17:ea:a5:91:4c:ea:02:19:a8:9c:49:ef:eb:96:69:75:75:17: 7a:64:94:9e:fc:b1:f6:64:d2:c8:49:ca:c3:db:b1:81:be:71: b0:01:35:24:70:b7:90:47:67:ff:6d:46:00:bb:0e:ad:f6:df: d5:67:cc:7e:1d:92:94:78:b5:2c:b1:bf:94:a7:ab:40:7b:c6: fc:34:e7:e1:2e:f1:fa:dd:ee:9f:e3:8a:b5:b2:f2:b6:c8:46: 8a:9d:88:d0:85:bc:8d:07:cc:bf:d1:e4:b9:58:0e:df:fe:75: 16:5a:f8:3e:b2:08:64:b3:92:ad:ab:26:25:fb:b4:8a:83:6b: 2e:56:b9:1c:1e:e5:4b:fe:6a:32:2c:e6:e1:8a:57:86:1a:20: e8:d8:1a:a1:1e:b3:1f:ae:61:83:13:5b:8d:d9:0f:eb:b2:a4: 25:a1:40:70 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKxx/AZclVjqA8m1/tMkvekBCvwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMyMTlaFw0yNjA4MjYwNDM3MTlaMDMxMTAvBgNV BAMTKDlFQTQ0RDZBM0FCRjg2MDA3Q0JCMEIyRDM5RkE3Mjk5NjIzNzdBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSrnS29mxWxu+SZHOJOLwPQNYZ yZaIgXTovRaR8zOsCknx49gojCf3LwoGSghfawggtbkjAecC5ZrS7x6hfngCYyb/ LSgrAVd67wfyak2p2URVai0b7K9rCt3IBGcPRZ2NyQ7zXLdXskv5DcIWeaHNRToV OxGdNelUw0tSfvZY+JSxW/GazqWLEgzwW4zIGZUTC4+PssQFFNW/y0Y2ekVzQYcM ++N8M8JINBKcpRLp75yN2+C9f4xbNky36t2jWSpaXw/tDXtydCuMAIcp9bKwrZwk KrN1vCNTtEQHzns7HVHDlw4qUrezSeeNutkaQ8wC53nuKRvjVqEvMKrs/iInAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUnqRNajq/hgB8uwstOfpymWI3egkwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODYzMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiMAwDQYJKoZIhvcNAQELBQADggEBAKRp3pFTcbYDInRZOzc9g9oQBJUEuNLc lfLqPvmhBHyni0jM37tT87Y65/lHM1wqSE4bCEaJe50dppSYoVfZQo27jlPgm8Qp 412wasqvM4siHc8j1Rgft/rcexfqpZFM6gIZqJxJ7+uWaXV1F3pklJ78sfZk0shJ ysPbsYG+cbABNSRwt5BHZ/9tRgC7Dq3239VnzH4dkpR4tSyxv5Snq0B7xvw05+Eu 8frd7p/jirWy8rbIRoqdiNCFvI0HzL/R5LlYDt/+dRZa+D6yCGSzkq2rJiX7tIqD ay5WuRwe5Uv+ajIs5uGKV4YaIOjYGqEesx+uYYMTW43ZD+uypCWhQHA= -----END CERTIFICATE-----Generated at Mon Sep 1 02:04:33 2025 by rpki-client