$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383936303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383936303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: F1kQsWsseeCpNev7KdFHuJbVvrkARBOS/HRyPFWxUDo= Subject key identifier: 74:A8:A7:23:D8:A1:D3:89:0C:28:86:E1:4B:78:32:19:F8:EF:C0:29 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 62B3B99AB4CF86AB1E8D3F76BB605E8F23B7E7B1 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383936303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 07:30:07 +0000 ROA not before: Wed 27 Aug 2025 07:25:07 +0000 ROA not after: Wed 26 Aug 2026 07:30:07 +0000 asID: 133798 IP address blocks: 2402:5680:8960::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b3:b9:9a:b4:cf:86:ab:1e:8d:3f:76:bb:60:5e:8f:23:b7:e7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 07:25:07 2025 GMT Not After : Aug 26 07:30:07 2026 GMT Subject: CN=74A8A723D8A1D3890C2886E14B783219F8EFC029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:f3:11:ac:bf:23:dd:0b:12:61:ff:29:b5: 2e:96:a0:56:70:36:0d:19:cc:ff:df:ca:44:e1:5d: 23:d0:d8:0c:10:04:b6:ff:ac:b7:ea:c5:c4:42:13: 49:11:44:7f:0b:d6:4c:da:b9:d3:92:98:ad:e9:40: a9:22:2f:17:2d:1e:bf:79:b6:01:62:db:2d:85:12: a6:b6:70:f9:eb:68:64:dd:9f:c3:c7:a7:0c:75:54: 95:59:6f:04:07:b5:c5:9a:ea:15:23:bb:e8:17:b5: 24:d0:59:9e:7d:e3:d1:30:a7:da:10:9c:4e:66:f6: eb:a8:07:56:4a:b7:b0:bc:13:be:01:77:44:67:de: c2:c0:59:bc:3c:64:17:ec:61:ca:2b:e3:1a:ed:86: bd:de:b9:c1:b0:44:ee:ed:3a:0b:9c:38:23:6c:57: 7c:6d:6d:c1:b7:67:8f:40:0f:85:93:b3:60:b8:af: be:fb:b4:da:cf:de:d4:48:e2:25:46:aa:61:77:4b: 28:a9:c5:1e:50:2d:58:4f:b4:9b:05:85:2d:5a:13: 60:bd:45:86:ef:bd:89:23:92:52:58:95:73:f1:eb: 22:19:48:f2:3d:4a:06:0c:69:cf:3e:ee:da:0b:af: 90:e0:1c:3d:a2:a1:fd:98:83:02:3d:ae:0e:b2:dd: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A8:A7:23:D8:A1:D3:89:0C:28:86:E1:4B:78:32:19:F8:EF:C0:29 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383936303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8960::/44 Signature Algorithm: sha256WithRSAEncryption 1b:0f:e4:af:7c:26:a5:3f:fe:06:d7:91:08:14:fc:9b:6f:95: aa:60:07:e1:80:46:5c:e3:f5:9a:8c:c5:0e:f0:73:40:5c:ff: 5b:1b:a2:9a:64:a7:a7:b2:db:b2:88:f9:cf:56:35:25:33:6e: 3c:4e:fc:ef:67:52:38:03:b3:e3:0e:f1:52:b7:1c:c0:05:5f: e1:ae:c5:7c:68:90:2a:82:55:37:b0:3d:61:ab:5e:a5:e4:4d: 70:f2:59:58:53:62:aa:37:4e:a6:69:7a:28:21:14:5b:0e:bb: 63:5d:be:c6:2f:2d:ec:68:b0:22:68:0c:22:22:ac:6a:f7:87: f4:2d:e3:8f:eb:89:00:22:5d:75:5d:a5:c9:83:3b:69:19:2a: 02:a6:94:0b:8c:b9:01:0c:a4:6f:83:b2:1f:63:59:00:8f:d1: 43:a9:4a:2b:a3:4d:af:d4:51:d6:7d:60:5f:06:01:9e:0f:8c: 3e:91:ef:84:14:67:5d:e0:3a:04:87:0e:6a:0f:66:e5:49:bf: 05:c4:e3:4a:39:a4:1b:6a:0a:fc:21:e3:cc:e3:e9:f0:29:29: f0:4f:4b:63:10:e6:41:bb:13:9b:ec:57:8a:3b:1e:71:5a:e8: d4:78:d6:0c:ee:05:ab:92:43:85:05:23:42:9c:b8:1c:b8:f9: d8:b1:ce:35 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUYrO5mrTPhqsejT92u2BejyO357EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNzI1MDdaFw0yNjA4MjYwNzMwMDdaMDMxMTAvBgNV BAMTKDc0QThBNzIzRDhBMUQzODkwQzI4ODZFMTRCNzgzMjE5RjhFRkMwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xfMRrL8j3QsSYf8ptS6WoFZw Ng0ZzP/fykThXSPQ2AwQBLb/rLfqxcRCE0kRRH8L1kzaudOSmK3pQKkiLxctHr95 tgFi2y2FEqa2cPnraGTdn8PHpwx1VJVZbwQHtcWa6hUju+gXtSTQWZ5949Ewp9oQ nE5m9uuoB1ZKt7C8E74Bd0Rn3sLAWbw8ZBfsYcor4xrthr3eucGwRO7tOgucOCNs V3xtbcG3Z49AD4WTs2C4r777tNrP3tRI4iVGqmF3SyipxR5QLVhPtJsFhS1aE2C9 RYbvvYkjklJYlXPx6yIZSPI9SgYMac8+7toLr5DgHD2iof2YgwI9rg6y3aqPAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUdKinI9ih04kMKIbhS3gyGfjvwCkwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTM2MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiWAwDQYJKoZIhvcNAQELBQADggEBABsP5K98JqU//gbXkQgU/JtvlapgB+GA Rlzj9ZqMxQ7wc0Bc/1sboppkp6ey27KI+c9WNSUzbjxO/O9nUjgDs+MO8VK3HMAF X+GuxXxokCqCVTewPWGrXqXkTXDyWVhTYqo3TqZpeighFFsOu2NdvsYvLexosCJo DCIirGr3h/Qt44/riQAiXXVdpcmDO2kZKgKmlAuMuQEMpG+Dsh9jWQCP0UOpSiuj Ta/UUdZ9YF8GAZ4PjD6R74QUZ13gOgSHDmoPZuVJvwXE40o5pBtqCvwh48zj6fAp KfBPS2MQ5kG7E5vsV4o7HnFa6NR41gzuBauSQ4UFI0KcuBy4+dixzjU= -----END CERTIFICATE-----Generated at Mon Sep 1 02:07:27 2025 by rpki-client