$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383865303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383865303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: nvq4m0so8yrrw/hJ8jlDBh7mk+Wnwdy3uieMl8xt1do= Subject key identifier: A6:97:66:33:47:5F:0E:43:48:86:4B:79:89:A6:C7:4C:62:36:11:23 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 20AEB7451275D777682F1D7A446262A953B911EE Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383865303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:37:43 +0000 ROA not before: Wed 27 Aug 2025 04:32:43 +0000 ROA not after: Wed 26 Aug 2026 04:37:43 +0000 asID: 133798 IP address blocks: 2402:5680:88e0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ae:b7:45:12:75:d7:77:68:2f:1d:7a:44:62:62:a9:53:b9:11:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:32:43 2025 GMT Not After : Aug 26 04:37:43 2026 GMT Subject: CN=A6976633475F0E4348864B7989A6C74C62361123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:6a:66:ae:ae:d6:48:5f:3b:b2:08:07:00: 62:d4:78:6c:4a:e1:2b:00:d3:25:89:b9:0c:f0:06: 5c:4d:68:10:dd:a2:4c:fc:4d:a9:0e:07:a5:0f:3d: 16:7f:d1:d2:7d:29:6a:51:14:71:b6:a8:db:45:df: 85:8d:a8:44:9f:4c:82:57:c0:dd:f2:cd:54:e3:1f: 64:12:62:58:d4:2c:1e:15:2f:3f:9d:5f:7a:37:de: 04:22:31:72:09:d1:48:47:39:68:7c:e0:3c:d5:08: c1:1c:9c:fd:40:4c:c3:93:48:48:56:8e:6d:1c:ec: 30:0b:28:ef:85:3e:30:41:c7:99:57:3f:1e:e1:14: 45:89:0d:21:5f:e6:bd:87:c2:75:45:83:12:14:59: 7e:1f:b7:db:d8:71:89:33:03:28:f6:a7:3a:97:98: fc:23:70:04:34:ca:55:dd:75:90:93:24:3d:b9:47: c3:91:c1:18:f5:6c:17:f8:4e:a9:02:ed:4b:f7:1c: fd:2e:61:66:e2:fe:cf:ea:0e:e5:7a:64:31:ed:59: 19:4e:a0:ae:21:b2:f8:bb:d0:49:24:61:8e:ca:b5: 6c:fe:f9:3b:16:30:9b:7e:9c:bc:ee:ab:3e:e5:40: e7:0e:ac:88:26:1b:24:25:90:31:70:97:c6:5e:84: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:97:66:33:47:5F:0E:43:48:86:4B:79:89:A6:C7:4C:62:36:11:23 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383865303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:88e0::/44 Signature Algorithm: sha256WithRSAEncryption 55:5d:f2:52:71:74:aa:71:17:3d:f3:f0:d6:e0:c5:4b:07:ab: d6:63:55:de:bf:63:a4:51:d4:9c:54:85:0c:40:83:66:c1:b6: 63:0c:d6:85:04:bc:43:95:64:97:b6:3b:06:6a:ae:19:c7:b0: fe:af:52:e0:71:53:4d:cb:14:88:0d:58:a2:b1:b8:44:8d:04: 6f:29:59:68:b1:09:62:03:7f:fd:1c:43:63:66:ff:1d:04:76: 41:b8:20:7b:a5:de:d1:c5:68:06:3d:9f:86:b5:fe:0b:27:15: fb:52:19:1c:48:4f:2c:64:7d:af:99:78:a6:02:4d:63:5a:d6: 29:4f:63:55:28:39:37:41:ab:3d:34:67:90:d9:7d:47:7c:a8: 89:84:2d:c0:ca:aa:e7:d9:5d:05:c6:03:fb:9e:5a:fe:e1:00: 97:1a:da:8e:04:1d:57:ff:38:75:0c:11:40:3e:d8:fd:88:6b: 4b:80:12:bf:0f:49:ac:65:43:57:5a:65:02:8e:b1:fb:96:4a: 28:c2:32:35:55:d2:ab:bb:35:b2:8d:67:78:2b:78:b2:85:f0: 10:8f:9a:18:e6:11:fd:26:7f:1e:16:5e:69:ef:ba:60:8e:a4: 08:5a:12:ac:3e:b1:65:c7:d4:1f:dd:a6:d1:fa:fd:29:a6:3c: d5:a9:fc:de -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUIK63RRJ113doLx16RGJiqVO5Ee4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMyNDNaFw0yNjA4MjYwNDM3NDNaMDMxMTAvBgNV BAMTKEE2OTc2NjMzNDc1RjBFNDM0ODg2NEI3OTg5QTZDNzRDNjIzNjExMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUJGpmrq7WSF87sggHAGLUeGxK 4SsA0yWJuQzwBlxNaBDdokz8TakOB6UPPRZ/0dJ9KWpRFHG2qNtF34WNqESfTIJX wN3yzVTjH2QSYljULB4VLz+dX3o33gQiMXIJ0UhHOWh84DzVCMEcnP1ATMOTSEhW jm0c7DALKO+FPjBBx5lXPx7hFEWJDSFf5r2HwnVFgxIUWX4ft9vYcYkzAyj2pzqX mPwjcAQ0ylXddZCTJD25R8ORwRj1bBf4TqkC7Uv3HP0uYWbi/s/qDuV6ZDHtWRlO oK4hsvi70EkkYY7KtWz++TsWMJt+nLzuqz7lQOcOrIgmGyQlkDFwl8ZehH3HAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUppdmM0dfDkNIhkt5iabHTGI2ESMwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODY1MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiOAwDQYJKoZIhvcNAQELBQADggEBAFVd8lJxdKpxFz3z8NbgxUsHq9ZjVd6/ Y6RR1JxUhQxAg2bBtmMM1oUEvEOVZJe2OwZqrhnHsP6vUuBxU03LFIgNWKKxuESN BG8pWWixCWIDf/0cQ2Nm/x0EdkG4IHul3tHFaAY9n4a1/gsnFftSGRxITyxkfa+Z eKYCTWNa1ilPY1UoOTdBqz00Z5DZfUd8qImELcDKqufZXQXGA/ueWv7hAJca2o4E HVf/OHUMEUA+2P2Ia0uAEr8PSaxlQ1daZQKOsfuWSijCMjVV0qu7NbKNZ3greLKF 8BCPmhjmEf0mfx4WXmnvumCOpAhaEqw+sWXH1B/dptH6/SmmPNWp/N4= -----END CERTIFICATE-----Generated at Mon Sep 1 02:07:10 2025 by rpki-client