$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: RZPEGt/tJAT1AiUVlkcarS0mWZ0uy+X+344pc3J1l7M= Subject key identifier: 5F:C6:76:89:57:93:B3:C6:D1:F8:01:C6:DF:3A:E7:F1:56:DF:E7:05 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 13AAD5A7CCB01314C946A2472568F5F0525F961E Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 07:13:31 +0000 ROA not before: Wed 27 Aug 2025 07:08:31 +0000 ROA not after: Wed 26 Aug 2026 07:13:31 +0000 asID: 133798 IP address blocks: 2402:5680:8980::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:aa:d5:a7:cc:b0:13:14:c9:46:a2:47:25:68:f5:f0:52:5f:96:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 07:08:31 2025 GMT Not After : Aug 26 07:13:31 2026 GMT Subject: CN=5FC676895793B3C6D1F801C6DF3AE7F156DFE705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:7e:ea:e1:9b:fe:da:8f:47:fd:40:00:0d: 4d:0c:52:34:50:df:d9:2e:9a:85:de:4b:86:b6:d5: 7f:83:40:20:a9:d7:10:a7:32:5d:4e:e1:8a:98:2d: 05:b4:8c:cf:0e:92:f6:4c:86:7d:4a:94:fb:ea:2a: 4d:e2:93:39:a6:2f:a7:cc:d9:7b:21:0b:34:ed:39: f7:fa:71:34:00:2d:ae:7b:23:0d:80:11:e2:02:4c: 66:8e:0e:3b:1d:6d:dc:15:66:db:b7:de:04:d0:14: 6f:49:36:80:c7:4f:2e:f1:58:ff:62:ea:9b:eb:2f: 78:5c:3e:c6:d9:4c:47:9c:09:1e:9f:42:f5:b3:73: 3b:b8:5a:5b:ee:9b:04:7a:ed:ed:84:8f:f5:6b:f3: 1c:f3:38:d8:7c:2c:81:3d:ca:46:e5:30:f2:da:b9: 14:ab:0a:89:dd:22:ba:10:41:71:4b:08:1f:97:18: 0b:f8:83:3d:30:62:c5:7a:59:b2:7d:06:95:11:3b: 48:2e:92:45:07:1e:0d:c2:95:c4:5a:07:a2:be:6d: 57:17:91:6d:f0:cf:0a:a8:84:29:ae:fa:dc:68:08: 1c:39:82:a4:01:27:8a:03:68:49:1c:ac:9d:5b:aa: 83:ec:7e:c9:60:a0:da:72:f5:bd:21:f9:a7:a4:9a: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C6:76:89:57:93:B3:C6:D1:F8:01:C6:DF:3A:E7:F1:56:DF:E7:05 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383938303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8980::/44 Signature Algorithm: sha256WithRSAEncryption 28:01:e4:d2:1c:6d:27:4e:2a:06:74:9d:35:c2:f4:a0:49:5f: bf:bb:b8:85:e7:ec:7e:79:6d:cf:9b:45:af:9f:d3:92:3b:cf: fd:72:6d:e4:47:9e:b2:8a:3c:f5:4e:e8:85:45:86:aa:cc:f9: e7:a6:4a:b4:5b:ad:b6:cf:37:34:12:27:a2:8a:23:91:9a:f2: 81:4a:bd:43:13:c5:2e:fe:b3:dc:c5:89:53:90:e3:8f:0f:c0: 5d:13:99:07:1d:fe:78:27:15:c1:a5:6b:84:bf:45:8c:b8:70: a2:72:5f:a7:e5:f7:c9:3d:cc:05:51:8a:55:63:08:a0:37:cb: 95:01:e4:69:45:e1:84:7e:57:ef:83:f0:18:2e:6e:4d:65:63: df:41:8a:ff:7c:0c:22:96:23:04:ab:38:95:71:67:78:d2:ef: 93:01:2e:34:64:07:db:7f:cb:6c:5f:9b:e1:88:0b:a0:d3:b0: 63:a1:59:a5:18:fa:d6:6b:66:7c:d0:8a:d2:36:1f:07:0c:4f: 76:c3:cd:5e:7e:b0:70:30:0f:7c:86:06:18:30:b6:d1:25:88: d6:48:99:5c:d6:03:99:79:4f:9c:7c:6f:08:c8:c5:12:3f:96: cb:e1:77:92:74:c8:a5:1c:9a:b0:a9:b5:5b:da:22:0d:cd:67: d9:cd:3e:fb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUE6rVp8ywExTJRqJHJWj18FJflh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNzA4MzFaFw0yNjA4MjYwNzEzMzFaMDMxMTAvBgNV BAMTKDVGQzY3Njg5NTc5M0IzQzZEMUY4MDFDNkRGM0FFN0YxNTZERkU3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCts37q4Zv+2o9H/UAADU0MUjRQ 39kumoXeS4a21X+DQCCp1xCnMl1O4YqYLQW0jM8OkvZMhn1KlPvqKk3ikzmmL6fM 2XshCzTtOff6cTQALa57Iw2AEeICTGaODjsdbdwVZtu33gTQFG9JNoDHTy7xWP9i 6pvrL3hcPsbZTEecCR6fQvWzczu4WlvumwR67e2Ej/Vr8xzzONh8LIE9ykblMPLa uRSrCondIroQQXFLCB+XGAv4gz0wYsV6WbJ9BpURO0gukkUHHg3ClcRaB6K+bVcX kW3wzwqohCmu+txoCBw5gqQBJ4oDaEkcrJ1bqoPsfslgoNpy9b0h+aekmpq/AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUX8Z2iVeTs8bR+AHG3zrn8Vbf5wUwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTM4MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiYAwDQYJKoZIhvcNAQELBQADggEBACgB5NIcbSdOKgZ0nTXC9KBJX7+7uIXn 7H55bc+bRa+f05I7z/1ybeRHnrKKPPVO6IVFhqrM+eemSrRbrbbPNzQSJ6KKI5Ga 8oFKvUMTxS7+s9zFiVOQ448PwF0TmQcd/ngnFcGla4S/RYy4cKJyX6fl98k9zAVR ilVjCKA3y5UB5GlF4YR+V++D8Bgubk1lY99Biv98DCKWIwSrOJVxZ3jS75MBLjRk B9t/y2xfm+GIC6DTsGOhWaUY+tZrZnzQitI2HwcMT3bDzV5+sHAwD3yGBhgwttEl iNZImVzWA5l5T5x8bwjIxRI/lsvhd5J0yKUcmrCptVvaIg3NZ9nNPvs= -----END CERTIFICATE-----Generated at Mon Sep 1 02:10:47 2025 by rpki-client