$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383966303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383966303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: a91l/WDg5A1ZKHEMmpEIIbsR4Dfs+U1TOIppf00jtYg= Subject key identifier: F4:E2:CF:6A:B5:F3:2F:69:89:F2:A4:EC:AE:8D:4B:24:39:06:30:BF Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 82A3F04D46A2297834488BBB359B072F1AEBD2 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383966303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 07:11:18 +0000 ROA not before: Wed 27 Aug 2025 07:06:18 +0000 ROA not after: Wed 26 Aug 2026 07:11:18 +0000 asID: 133798 IP address blocks: 2402:5680:89f0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82:a3:f0:4d:46:a2:29:78:34:48:8b:bb:35:9b:07:2f:1a:eb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 07:06:18 2025 GMT Not After : Aug 26 07:11:18 2026 GMT Subject: CN=F4E2CF6AB5F32F6989F2A4ECAE8D4B24390630BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:e3:b6:4a:c1:4f:23:fe:4b:d3:4d:8e:60: 88:dd:99:17:8e:71:9f:48:f4:fd:d2:32:49:ce:88: da:56:20:c7:39:bd:4d:ae:05:ba:00:17:b8:97:70: 56:d2:dd:fd:6b:b3:cb:ae:05:65:5a:49:ec:d8:21: c4:f0:e1:50:7d:02:1d:66:00:3f:7e:34:ae:d1:08: 58:eb:b2:ec:dc:dc:d5:81:99:98:e3:02:1a:c2:d6: 4d:c2:0f:07:97:28:d2:35:c7:57:1f:51:a9:96:2a: b2:44:4d:2b:31:43:3a:99:a6:ee:80:e2:74:47:0d: 9a:1e:0c:aa:79:79:5b:df:6d:e7:30:a3:03:e8:d9: b0:31:47:e9:e8:36:04:ee:0e:51:e0:f1:39:ef:6b: 88:7b:fb:e6:fe:ed:67:4f:ee:e0:f6:93:53:d8:05: 10:68:58:5d:4f:c8:a1:73:7d:80:4d:eb:13:9e:0b: d4:e0:c9:15:6e:11:d9:3d:73:e3:9c:fb:99:d4:d9: d6:18:31:ff:55:d8:93:d0:1a:a8:c5:c0:78:fe:bb: 49:08:29:a7:f1:26:ef:21:81:3a:05:b8:a9:63:38: e4:41:3c:b0:b8:43:ff:cc:f7:32:27:02:a6:d5:fa: 26:4d:2c:46:92:2e:d3:32:83:4e:23:1a:2c:f7:09: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E2:CF:6A:B5:F3:2F:69:89:F2:A4:EC:AE:8D:4B:24:39:06:30:BF X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383966303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:89f0::/44 Signature Algorithm: sha256WithRSAEncryption 4d:ac:1c:37:b7:1e:ff:b8:48:eb:0f:ba:70:8b:29:ce:b7:e1: f0:5b:8e:60:82:08:2a:ba:c8:d5:60:e5:fa:c4:96:c8:2f:48: a4:f7:3c:6b:a6:b5:f9:88:ee:5d:47:39:ff:20:1f:28:75:76: b8:5f:dd:02:15:a9:c7:64:a7:c6:0e:2f:6e:23:dc:d3:e1:7a: 81:d4:10:0e:15:00:22:27:36:74:21:55:5a:31:a6:b1:e4:1f: 83:79:f6:67:94:33:6b:c7:98:c1:5f:f5:69:06:e5:dc:c7:db: 14:c1:83:e3:74:34:0d:7d:73:fc:b9:bc:06:cc:c0:38:bf:7f: ff:30:73:41:ba:ab:73:d9:83:0b:19:21:a8:dd:6b:a3:b0:f7: 06:24:48:69:f2:ff:ba:f0:47:61:76:97:f7:3b:ea:13:2e:e7: f4:d7:f9:68:08:1e:f0:bf:2b:c6:78:31:70:a6:c9:8d:cc:eb: 6e:56:81:0a:e8:da:c8:e7:ff:fd:9d:a4:d0:65:9d:b8:7a:09: 04:91:62:52:56:c8:66:4c:ce:47:c5:34:5a:b8:9a:95:d8:1e: d5:e0:bb:f5:00:7b:6d:e2:ae:a0:67:a6:7e:4a:f1:05:9b:80: ec:f3:15:a6:9e:c6:e0:57:f4:75:5c:db:69:19:29:ad:de:3c: b5:28:7f:29 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUAIKj8E1Goil4NEiLuzWbBy8a69IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNzA2MThaFw0yNjA4MjYwNzExMThaMDMxMTAvBgNV BAMTKEY0RTJDRjZBQjVGMzJGNjk4OUYyQTRFQ0FFOEQ0QjI0MzkwNjMwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGeO2SsFPI/5L002OYIjdmReO cZ9I9P3SMknOiNpWIMc5vU2uBboAF7iXcFbS3f1rs8uuBWVaSezYIcTw4VB9Ah1m AD9+NK7RCFjrsuzc3NWBmZjjAhrC1k3CDweXKNI1x1cfUamWKrJETSsxQzqZpu6A 4nRHDZoeDKp5eVvfbecwowPo2bAxR+noNgTuDlHg8Tnva4h7++b+7WdP7uD2k1PY BRBoWF1PyKFzfYBN6xOeC9TgyRVuEdk9c+Oc+5nU2dYYMf9V2JPQGqjFwHj+u0kI KafxJu8hgToFuKljOORBPLC4Q//M9zInAqbV+iZNLEaSLtMyg04jGiz3CSd5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU9OLParXzL2mJ8qTsro1LJDkGML8wHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTY2MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAifAwDQYJKoZIhvcNAQELBQADggEBAE2sHDe3Hv+4SOsPunCLKc634fBbjmCC CCq6yNVg5frElsgvSKT3PGumtfmI7l1HOf8gHyh1drhf3QIVqcdkp8YOL24j3NPh eoHUEA4VACInNnQhVVoxprHkH4N59meUM2vHmMFf9WkG5dzH2xTBg+N0NA19c/y5 vAbMwDi/f/8wc0G6q3PZgwsZIajda6Ow9wYkSGny/7rwR2F2l/c76hMu5/TX+WgI HvC/K8Z4MXCmyY3M625WgQro2sjn//2dpNBlnbh6CQSRYlJWyGZMzkfFNFq4mpXY HtXgu/UAe23irqBnpn5K8QWbgOzzFaaexuBX9HVc22kZKa3ePLUofyk= -----END CERTIFICATE-----Generated at Mon Sep 1 02:12:06 2025 by rpki-client