$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383961303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383961303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: FYxh5lasZGh2iKFqE6+dbKj/V/qMjXbgyKOfJB05Eck= Subject key identifier: 20:48:08:45:78:A7:43:96:CF:B7:7C:70:FD:86:87:2A:A0:CE:AB:DC Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 6223BA6DCDC977EE47BE14FFB672C6D2CFD51C2A Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383961303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 07:13:09 +0000 ROA not before: Wed 27 Aug 2025 07:08:09 +0000 ROA not after: Wed 26 Aug 2026 07:13:09 +0000 asID: 133798 IP address blocks: 2402:5680:89a0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:23:ba:6d:cd:c9:77:ee:47:be:14:ff:b6:72:c6:d2:cf:d5:1c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 07:08:09 2025 GMT Not After : Aug 26 07:13:09 2026 GMT Subject: CN=2048084578A74396CFB77C70FD86872AA0CEABDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:b5:4f:3b:bb:f7:82:6a:03:e7:52:fc:a5: bf:88:07:c5:fa:79:67:41:5b:a0:08:2a:03:d9:38: fe:f3:fa:e3:10:05:4f:f1:c4:f6:e1:58:d8:7a:c1: 51:38:d8:3c:ad:54:fa:5d:15:bb:4e:5e:67:a8:79: 52:35:59:80:4a:b2:24:78:fb:56:06:39:07:bf:d9: e3:bb:a0:e1:f7:37:9f:1f:b7:6b:72:e1:ec:14:66: 0e:1c:0a:43:f3:15:41:29:8e:d9:51:77:f2:4d:03: aa:1d:a0:c9:d1:d5:0f:07:20:9b:2a:c3:a0:c0:eb: 52:ce:8f:72:b5:19:11:a4:a9:07:eb:77:8e:e8:35: 0b:79:c6:9f:21:26:fe:85:9b:d4:34:2c:92:66:c9: 6d:0b:ca:60:55:20:c3:15:45:1e:21:2e:b6:14:1c: 25:a1:55:a3:94:6a:85:80:ca:a4:5e:66:00:70:6b: 2e:8a:1d:50:de:58:d5:96:9f:bf:ab:70:3d:36:77: a9:eb:fc:56:63:da:ef:65:52:1d:19:78:b6:a8:bc: 1f:ec:2e:65:4a:da:23:93:d8:c5:60:24:38:62:4d: 00:02:49:a5:3e:73:2b:8d:e8:0f:8d:7f:7b:62:80: fc:14:d3:2a:39:38:66:5c:42:2b:85:36:17:a1:55: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:48:08:45:78:A7:43:96:CF:B7:7C:70:FD:86:87:2A:A0:CE:AB:DC X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383961303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:89a0::/44 Signature Algorithm: sha256WithRSAEncryption 69:af:14:fb:fe:e2:51:2a:49:94:87:84:7f:ec:dd:2c:04:4c: 96:a5:74:6e:ab:98:17:15:e7:01:0f:f8:0d:03:22:00:18:77: 49:55:73:58:17:03:e5:4e:af:58:ab:fa:9b:bb:4b:75:61:ed: d2:3d:78:4f:7f:37:6a:b6:4e:25:18:3a:85:a6:0f:69:48:a1: 74:85:cb:5c:60:24:e7:e9:91:5d:08:fd:32:24:86:00:4f:32: 24:6a:52:98:48:e1:fe:92:8d:bf:83:74:a3:1b:b7:ab:77:36: cd:a3:c0:4e:d6:75:87:97:e9:74:24:8b:e3:3b:22:a6:94:95: b5:dc:ad:2a:bd:8f:01:15:2c:3f:8b:4b:f6:4e:18:c8:6e:2d: 4b:dd:90:fc:43:eb:5d:40:b7:64:f8:78:84:07:29:5c:43:cc: 97:2f:a6:15:b7:07:dc:19:1c:57:e1:1c:24:9d:5b:99:09:3c: 46:14:e6:bf:09:04:7e:4a:eb:fa:13:33:f3:9d:d7:41:57:0f: f6:6c:b4:54:1a:50:29:75:9d:21:9d:0b:10:dd:02:61:91:31: 5e:14:af:4b:a9:39:a2:f5:da:c0:3d:75:e8:0e:e7:e3:03:04: f7:84:ac:f7:ee:11:e0:b5:51:df:cc:5c:77:45:eb:f9:c5:1d: d6:fb:90:72 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUYiO6bc3Jd+5HvhT/tnLG0s/VHCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNzA4MDlaFw0yNjA4MjYwNzEzMDlaMDMxMTAvBgNV BAMTKDIwNDgwODQ1NzhBNzQzOTZDRkI3N0M3MEZEODY4NzJBQTBDRUFCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpbbVPO7v3gmoD51L8pb+IB8X6 eWdBW6AIKgPZOP7z+uMQBU/xxPbhWNh6wVE42DytVPpdFbtOXmeoeVI1WYBKsiR4 +1YGOQe/2eO7oOH3N58ft2ty4ewUZg4cCkPzFUEpjtlRd/JNA6odoMnR1Q8HIJsq w6DA61LOj3K1GRGkqQfrd47oNQt5xp8hJv6Fm9Q0LJJmyW0LymBVIMMVRR4hLrYU HCWhVaOUaoWAyqReZgBway6KHVDeWNWWn7+rcD02d6nr/FZj2u9lUh0ZeLaovB/s LmVK2iOT2MVgJDhiTQACSaU+cyuN6A+Nf3tigPwU0yo5OGZcQiuFNhehVebxAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUIEgIRXinQ5bPt3xw/YaHKqDOq9wwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTYxMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiaAwDQYJKoZIhvcNAQELBQADggEBAGmvFPv+4lEqSZSHhH/s3SwETJaldG6r mBcV5wEP+A0DIgAYd0lVc1gXA+VOr1ir+pu7S3Vh7dI9eE9/N2q2TiUYOoWmD2lI oXSFy1xgJOfpkV0I/TIkhgBPMiRqUphI4f6Sjb+DdKMbt6t3Ns2jwE7WdYeX6XQk i+M7IqaUlbXcrSq9jwEVLD+LS/ZOGMhuLUvdkPxD611At2T4eIQHKVxDzJcvphW3 B9wZHFfhHCSdW5kJPEYU5r8JBH5K6/oTM/Od10FXD/ZstFQaUCl1nSGdCxDdAmGR MV4Ur0upOaL12sA9degO5+MDBPeErPfuEeC1Ud/MXHdF6/nFHdb7kHI= -----END CERTIFICATE-----Generated at Mon Sep 1 02:09:17 2025 by rpki-client