$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386564303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a386564303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: kNiURzncqAr0B90RK058nSv+8w27Fcqg77LfSy/Gca4= Subject key identifier: 4E:20:91:52:D8:32:51:6A:44:89:7B:08:D1:DA:D6:16:3C:9C:68:44 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 2A4B54A40954C4BF61C9CD31C6F1433B2F613121 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386564303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:36:02 +0000 ROA not before: Wed 27 Aug 2025 04:31:02 +0000 ROA not after: Wed 26 Aug 2026 04:36:02 +0000 asID: 133798 IP address blocks: 2402:5680:8ed0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4b:54:a4:09:54:c4:bf:61:c9:cd:31:c6:f1:43:3b:2f:61:31:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:31:02 2025 GMT Not After : Aug 26 04:36:02 2026 GMT Subject: CN=4E209152D832516A44897B08D1DAD6163C9C6844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:66:99:49:ff:f0:fe:60:ba:4f:69:7b:5b: 46:6a:6f:60:a0:0d:ae:21:99:1d:c6:59:7f:e9:b8: 4d:f9:b9:17:a5:d4:e8:3a:52:0a:9c:25:e8:b4:0d: c8:f2:5b:7f:ea:3e:3c:39:20:52:76:12:7d:6f:82: f1:7e:22:5f:0e:a2:6b:e6:05:68:58:75:67:0f:39: 51:3f:67:04:a6:55:8b:56:e6:ef:59:8b:0a:d9:bd: 29:e9:3d:66:23:ad:fc:22:f8:ca:90:cb:72:ab:2e: dc:96:7b:21:05:35:aa:c8:1d:52:71:a3:7d:50:6f: 4c:1f:5a:16:04:d2:96:ba:52:b9:46:fd:7e:0e:7a: e6:5f:ae:29:8d:4c:64:ee:5f:ba:ba:a3:17:e5:ee: 23:4c:13:34:63:72:ec:cb:29:6d:e7:0c:2f:61:e0: 0e:dc:d9:dc:c0:0d:59:e7:7a:5a:46:d6:6b:a0:57: ba:70:73:a1:8a:02:f2:23:62:a6:f3:72:c6:89:dd: 98:a3:02:3c:68:17:e2:8f:3f:d2:72:74:ba:a0:c3: d2:c0:ab:4c:45:e9:57:f1:8f:a6:ee:2a:e2:f5:ac: 2d:c9:61:aa:f4:c2:86:01:4d:b0:ce:7d:5a:96:d7: 10:36:12:28:2f:ce:80:ff:06:63:5f:b7:29:ee:54: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:20:91:52:D8:32:51:6A:44:89:7B:08:D1:DA:D6:16:3C:9C:68:44 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386564303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8ed0::/44 Signature Algorithm: sha256WithRSAEncryption b9:58:a9:1e:e5:b1:b5:0b:9f:a5:ab:5c:29:58:c7:7c:34:95: 07:cb:b1:5b:3e:ae:dd:8f:45:33:fb:34:df:7f:70:a8:42:be: 04:ff:87:fb:25:37:8a:4d:71:53:62:86:4f:32:31:25:8c:ed: ed:1c:73:2e:c9:2b:f0:97:90:95:2b:89:24:03:c1:73:5d:0b: 9c:1a:3e:52:26:aa:9d:3e:87:c4:c7:fc:dd:19:ca:f4:a4:c1: f0:2c:87:6b:25:af:e2:91:32:83:c9:8e:db:d1:89:e9:a2:9e: cf:8d:b6:f5:6a:90:6e:67:64:cc:ef:f1:2e:e3:6a:af:1f:2d: 2e:5c:e7:65:15:e8:47:7e:5a:7c:d2:71:94:24:9a:6b:7e:b3: 87:0a:e0:5b:69:de:0c:6f:46:2d:4b:34:a8:1d:bd:3e:3a:d4: 73:e2:35:e5:f6:33:4e:ec:f9:d1:c8:41:46:73:21:14:f2:94: 2f:13:55:7f:81:31:f7:d8:d0:ad:2d:96:ba:ca:8e:4f:c7:bc: 16:62:0e:e6:90:0e:fd:7c:3d:a8:ac:23:31:64:a6:2d:04:8c: 95:c8:61:e6:7d:1e:ae:1a:70:dc:29:a4:29:9a:92:3b:2f:7d: b9:4b:bc:7b:d6:84:a7:c4:05:79:84:c9:23:25:ec:e8:5f:b8: 1f:ab:16:36 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKktUpAlUxL9hyc0xxvFDOy9hMSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMxMDJaFw0yNjA4MjYwNDM2MDJaMDMxMTAvBgNV BAMTKDRFMjA5MTUyRDgzMjUxNkE0NDg5N0IwOEQxREFENjE2M0M5QzY4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbzWaZSf/w/mC6T2l7W0Zqb2Cg Da4hmR3GWX/puE35uRel1Og6UgqcJei0DcjyW3/qPjw5IFJ2En1vgvF+Il8Oomvm BWhYdWcPOVE/ZwSmVYtW5u9ZiwrZvSnpPWYjrfwi+MqQy3KrLtyWeyEFNarIHVJx o31Qb0wfWhYE0pa6UrlG/X4OeuZfrimNTGTuX7q6oxfl7iNMEzRjcuzLKW3nDC9h 4A7c2dzADVnnelpG1mugV7pwc6GKAvIjYqbzcsaJ3ZijAjxoF+KPP9JydLqgw9LA q0xF6Vfxj6buKuL1rC3JYar0woYBTbDOfVqW1xA2EigvzoD/BmNftynuVKx5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUTiCRUtgyUWpEiXsI0drWFjycaEQwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2NTY0MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAjtAwDQYJKoZIhvcNAQELBQADggEBALlYqR7lsbULn6WrXClYx3w0lQfLsVs+ rt2PRTP7NN9/cKhCvgT/h/slN4pNcVNihk8yMSWM7e0ccy7JK/CXkJUriSQDwXNd C5waPlImqp0+h8TH/N0ZyvSkwfAsh2slr+KRMoPJjtvRiemins+NtvVqkG5nZMzv 8S7jaq8fLS5c52UV6Ed+WnzScZQkmmt+s4cK4Ftp3gxvRi1LNKgdvT461HPiNeX2 M07s+dHIQUZzIRTylC8TVX+BMffY0K0tlrrKjk/HvBZiDuaQDv18PaisIzFkpi0E jJXIYeZ9Hq4acNwppCmakjsvfblLvHvWhKfEBXmEySMl7OhfuB+rFjY= -----END CERTIFICATE-----Generated at Mon Sep 1 02:05:41 2025 by rpki-client