$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383930303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383930303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: KKbxS8wZ9ZrUgqBY8mP1Z0p2iDYCBi/sgE9Fso0mo9w= Subject key identifier: CA:56:71:48:B6:27:A4:44:12:8B:F9:84:D4:B5:1D:D3:30:D2:E8:65 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 61684851AECC91AA290E949F0972195F1CAC5FE7 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383930303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:38:07 +0000 ROA not before: Wed 27 Aug 2025 04:33:07 +0000 ROA not after: Wed 26 Aug 2026 04:38:07 +0000 asID: 133798 IP address blocks: 2402:5680:8900::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:68:48:51:ae:cc:91:aa:29:0e:94:9f:09:72:19:5f:1c:ac:5f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:33:07 2025 GMT Not After : Aug 26 04:38:07 2026 GMT Subject: CN=CA567148B627A444128BF984D4B51DD330D2E865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:a9:3c:fb:a3:cc:92:74:14:a5:ab:d4:70: 22:90:f4:b0:db:7a:fc:b6:e0:76:44:9e:fd:b7:f1: a1:56:e1:6b:ae:c3:c7:ca:ee:d9:23:2f:41:0c:d7: 26:58:6b:bf:89:0b:10:79:ec:3b:25:cb:bb:69:e2: f4:96:01:63:d8:ff:d7:d9:b7:77:db:27:b1:13:d9: 87:90:96:dd:9f:17:28:09:96:62:51:52:de:37:c8: 84:ca:43:1c:e2:da:e1:70:ca:54:d3:2f:74:b7:0a: e0:be:b0:a9:ba:6d:4f:c2:22:a2:68:ab:a9:dc:92: 34:31:8e:2c:ac:5c:d5:38:35:1a:78:2a:cf:5b:d5: 6c:ec:f0:a0:0a:df:24:08:d7:b0:c5:b0:3a:ed:31: 09:89:6a:18:f0:75:cc:7a:ca:f5:7e:2d:71:07:1f: 0e:96:62:87:56:42:c7:53:b1:b0:84:47:ce:93:f5: 51:e3:91:45:49:a9:c3:16:80:e0:11:cc:74:79:ec: 1d:a7:8e:4d:b9:88:2b:27:5d:b0:55:4b:03:3f:cc: 0f:60:52:46:4d:5d:5e:22:be:83:95:02:9c:e9:6c: 3e:c6:69:86:6f:0d:e1:52:cf:6d:1c:b9:cf:86:4a: bb:60:cd:ea:ed:71:36:26:b3:1b:c4:48:1c:db:ed: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:56:71:48:B6:27:A4:44:12:8B:F9:84:D4:B5:1D:D3:30:D2:E8:65 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383930303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8900::/44 Signature Algorithm: sha256WithRSAEncryption 83:bb:cf:30:ad:c2:f2:ff:3a:32:9b:d3:bf:5b:96:80:1b:78: 57:af:e3:bd:a0:bb:22:f6:3d:3f:a8:f4:a3:df:1f:a7:e7:03: 9f:50:27:b8:0f:ad:bb:cd:84:22:fb:99:f0:d0:d5:a3:65:2e: 46:ff:8e:b1:ae:ef:55:d2:e4:39:e1:02:a7:66:d9:0f:e7:84: 56:74:fc:46:17:53:0a:a4:b7:8c:f1:70:de:e7:80:4e:a2:7f: bd:94:29:cb:c6:d9:00:55:a0:10:26:a1:ca:09:92:23:ac:b0: 56:2b:c0:c9:42:0f:d6:0a:de:b0:95:da:65:dd:5c:67:12:ad: 61:77:b9:ca:3d:87:68:27:3a:7f:f7:06:e5:a8:f7:4f:74:3d: da:6c:91:a9:b5:09:27:41:4c:e8:af:24:22:e4:6b:e4:f3:86: d1:ec:13:a9:77:90:b5:99:71:5d:70:0e:90:8d:71:ab:f6:66: d5:27:20:ae:da:ba:14:be:cf:bf:60:a6:b8:da:96:3c:81:6d: eb:0a:9c:f0:da:06:e1:a3:1b:e6:97:97:01:dc:b7:eb:3d:6c: 93:05:b2:0e:b2:82:c1:1d:fd:b3:1e:9d:5f:92:2b:dd:7d:64: c5:14:ba:fb:2c:d2:68:f4:74:ea:f3:b5:02:32:5e:b8:e4:91: c1:30:09:bc -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUYWhIUa7MkaopDpSfCXIZXxysX+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMzMDdaFw0yNjA4MjYwNDM4MDdaMDMxMTAvBgNV BAMTKENBNTY3MTQ4QjYyN0E0NDQxMjhCRjk4NEQ0QjUxREQzMzBEMkU4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oKk8+6PMknQUpavUcCKQ9LDb evy24HZEnv238aFW4Wuuw8fK7tkjL0EM1yZYa7+JCxB57Dsly7tp4vSWAWPY/9fZ t3fbJ7ET2YeQlt2fFygJlmJRUt43yITKQxzi2uFwylTTL3S3CuC+sKm6bU/CIqJo q6nckjQxjiysXNU4NRp4Ks9b1Wzs8KAK3yQI17DFsDrtMQmJahjwdcx6yvV+LXEH Hw6WYodWQsdTsbCER86T9VHjkUVJqcMWgOARzHR57B2njk25iCsnXbBVSwM/zA9g UkZNXV4ivoOVApzpbD7GaYZvDeFSz20cuc+GSrtgzertcTYmsxvESBzb7VklAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUylZxSLYnpEQSi/mE1LUd0zDS6GUwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTMwMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiQAwDQYJKoZIhvcNAQELBQADggEBAIO7zzCtwvL/OjKb079bloAbeFev472g uyL2PT+o9KPfH6fnA59QJ7gPrbvNhCL7mfDQ1aNlLkb/jrGu71XS5DnhAqdm2Q/n hFZ0/EYXUwqkt4zxcN7ngE6if72UKcvG2QBVoBAmocoJkiOssFYrwMlCD9YK3rCV 2mXdXGcSrWF3uco9h2gnOn/3BuWo9090Pdpskam1CSdBTOivJCLka+TzhtHsE6l3 kLWZcV1wDpCNcav2ZtUnIK7auhS+z79gprjaljyBbesKnPDaBuGjG+aXlwHct+s9 bJMFsg6ygsEd/bMenV+SK919ZMUUuvss0mj0dOrztQIyXrjkkcEwCbw= -----END CERTIFICATE-----Generated at Mon Sep 1 02:09:25 2025 by rpki-client