$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383866303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383866303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: zHC8k+4IJfdqitP4LT6mFgLiFKobx2Pds2jSuNy3VGs= Subject key identifier: AC:32:6A:B9:2F:60:6C:3F:04:D2:F3:7A:F3:42:F6:F3:0F:4F:C0:C7 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 5039875F2B1C147F1DB864554622F9DC88BA145B Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383866303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:37:56 +0000 ROA not before: Wed 27 Aug 2025 04:32:56 +0000 ROA not after: Wed 26 Aug 2026 04:37:56 +0000 asID: 133798 IP address blocks: 2402:5680:88f0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:39:87:5f:2b:1c:14:7f:1d:b8:64:55:46:22:f9:dc:88:ba:14:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:32:56 2025 GMT Not After : Aug 26 04:37:56 2026 GMT Subject: CN=AC326AB92F606C3F04D2F37AF342F6F30F4FC0C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5c:d4:bc:e0:11:16:4a:c4:fa:57:17:17:d0: 5a:6f:6e:1c:2c:60:66:cc:fe:de:b3:95:61:c8:2a: f6:9b:8d:f5:a9:70:13:2a:96:79:9b:ee:be:46:32: f6:1c:61:76:74:b1:9c:35:39:75:cd:f0:94:95:1e: ba:2d:79:6b:48:9e:7d:0f:f1:73:33:25:68:91:ba: e4:4e:70:14:e5:23:34:ec:4e:ed:e3:4e:ef:2e:6a: 60:73:d7:7c:a1:f5:fa:f8:db:64:dd:b5:9d:65:38: 4b:5f:5c:b0:2c:b0:fa:af:0c:4b:98:10:3e:43:ad: 3c:0a:4a:b6:ec:4e:b6:99:4b:e5:f9:11:03:59:4a: fb:cd:17:c3:75:00:63:2c:6b:23:0a:19:19:d0:12: f6:c4:f8:3b:2d:db:c6:82:41:29:fb:64:7b:2a:8c: 52:3a:31:e8:71:9f:46:e0:5f:e0:18:2f:a0:c8:34: 8a:85:5c:2f:e4:91:32:3b:37:e7:28:28:c7:26:fc: 58:99:d0:8d:89:26:65:e3:28:4a:40:48:90:61:16: 73:a1:8f:d1:38:e8:ba:fb:7c:69:04:2d:da:e6:b6: 32:3b:99:42:95:03:5b:a5:32:f9:a8:b7:b8:28:fd: 03:22:d6:ea:0f:65:9e:8a:4d:fa:65:3f:02:69:b5: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:32:6A:B9:2F:60:6C:3F:04:D2:F3:7A:F3:42:F6:F3:0F:4F:C0:C7 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383866303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:88f0::/44 Signature Algorithm: sha256WithRSAEncryption 0b:d5:1a:af:72:95:95:9c:68:73:a1:a3:29:a9:ea:41:4e:66: 66:a8:98:14:e4:83:88:c6:03:f0:bc:8c:cd:35:67:eb:7f:9d: ff:76:df:8e:f2:e4:b2:cf:93:39:f2:06:41:bb:6b:91:ee:66: 9e:77:b7:1a:d2:6c:1e:97:4c:96:96:b0:13:45:e1:db:0b:7b: 30:51:b1:6a:5e:46:c9:c3:d5:14:f2:b1:ab:2a:69:c9:e3:dc: a6:a5:42:0f:dc:42:53:9d:15:6b:f7:78:85:84:b1:95:f0:a3: 31:f3:7e:b7:69:4f:0f:17:6a:33:46:a2:0f:a7:94:4d:84:83: aa:bb:ed:31:fc:c2:49:df:35:0f:d9:58:39:44:ca:48:4f:a6: f9:43:18:2a:64:b2:4b:b7:18:26:16:c9:4d:1f:98:7e:5d:7c: 72:4d:54:56:fe:97:9c:3b:90:44:2f:53:28:c6:15:3c:68:5f: a9:16:06:1b:aa:68:fc:61:28:41:f7:07:87:05:98:6b:4d:57: 49:61:9c:2b:f6:c7:bf:6e:b9:43:8c:5a:98:2a:45:f6:ba:51: b1:4f:49:94:4f:79:f0:cd:a4:7b:ca:bd:ae:21:35:4c:ab:48: 42:7b:91:c2:d9:08:39:06:2e:ab:f1:33:5a:22:6b:04:12:c6: 0c:49:f4:3f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUDmHXyscFH8duGRVRiL53Ii6FFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMyNTZaFw0yNjA4MjYwNDM3NTZaMDMxMTAvBgNV BAMTKEFDMzI2QUI5MkY2MDZDM0YwNEQyRjM3QUYzNDJGNkYzMEY0RkMwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXNS84BEWSsT6VxcX0Fpvbhws YGbM/t6zlWHIKvabjfWpcBMqlnmb7r5GMvYcYXZ0sZw1OXXN8JSVHroteWtInn0P 8XMzJWiRuuROcBTlIzTsTu3jTu8uamBz13yh9fr422TdtZ1lOEtfXLAssPqvDEuY ED5DrTwKSrbsTraZS+X5EQNZSvvNF8N1AGMsayMKGRnQEvbE+Dst28aCQSn7ZHsq jFI6Mehxn0bgX+AYL6DINIqFXC/kkTI7N+coKMcm/FiZ0I2JJmXjKEpASJBhFnOh j9E46Lr7fGkELdrmtjI7mUKVA1ulMvmot7go/QMi1uoPZZ6KTfplPwJptZwVAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUrDJquS9gbD8E0vN680L28w9PwMcwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzODY2MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiPAwDQYJKoZIhvcNAQELBQADggEBAAvVGq9ylZWcaHOhoymp6kFOZmaomBTk g4jGA/C8jM01Z+t/nf92347y5LLPkznyBkG7a5HuZp53txrSbB6XTJaWsBNF4dsL ezBRsWpeRsnD1RTysasqacnj3KalQg/cQlOdFWv3eIWEsZXwozHzfrdpTw8XajNG og+nlE2Eg6q77TH8wknfNQ/ZWDlEykhPpvlDGCpksku3GCYWyU0fmH5dfHJNVFb+ l5w7kEQvUyjGFTxoX6kWBhuqaPxhKEH3B4cFmGtNV0lhnCv2x79uuUOMWpgqRfa6 UbFPSZRPefDNpHvKva4hNUyrSEJ7kcLZCDkGLqvxM1oiawQSxgxJ9D8= -----END CERTIFICATE-----Generated at Mon Sep 1 02:11:58 2025 by rpki-client