$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386565303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a386565303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: FKIUw4RW1nAgmVAsRfZi+Jpz5/y3Mxy02sy1LB4pkqo= Subject key identifier: 1C:D7:36:AA:76:54:4A:E8:55:6C:BA:8E:2C:02:36:B6:0B:65:5D:40 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 1E90CEF326B725342C3ADDE271629AC0E7C49EB0 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386565303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:36:17 +0000 ROA not before: Wed 27 Aug 2025 04:31:17 +0000 ROA not after: Wed 26 Aug 2026 04:36:17 +0000 asID: 133798 IP address blocks: 2402:5680:8ee0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:90:ce:f3:26:b7:25:34:2c:3a:dd:e2:71:62:9a:c0:e7:c4:9e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:31:17 2025 GMT Not After : Aug 26 04:36:17 2026 GMT Subject: CN=1CD736AA76544AE8556CBA8E2C0236B60B655D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:ee:a6:99:bc:31:ef:d4:cc:2f:e3:d7:d8: 99:76:00:98:b9:37:7a:be:fe:32:43:13:35:cc:f9: 3e:e4:17:32:34:ea:d2:59:74:c0:f9:99:e2:28:b5: e9:71:b2:c5:24:7b:72:45:70:d8:9b:38:19:85:6e: 6d:ea:72:99:80:54:12:9f:73:f3:08:0c:ad:12:22: fb:48:fc:d4:5c:8d:c5:e2:42:36:f2:cf:06:09:a7: bd:e7:45:c5:a8:c5:b2:8d:3c:74:f0:67:1a:e1:87: c7:5e:5e:d4:dd:29:b6:ff:bf:ca:da:10:f0:d9:28: 44:d8:6d:a2:1f:0b:71:9a:63:ed:36:65:af:09:39: 1d:4d:ac:d3:d0:7a:e4:94:8f:76:d7:18:b8:0a:aa: 37:c2:d9:c6:cd:99:b6:71:0f:d4:ca:95:79:dd:b8: d4:c9:f2:56:2e:86:5e:9e:08:9f:aa:83:ae:69:18: 5b:86:99:90:ab:a3:88:3a:f1:9c:cf:8f:ac:41:4f: 43:7d:8f:79:58:0d:da:80:ce:ec:09:b4:3a:cf:ef: d0:b8:1a:53:cb:79:81:8e:0a:c9:5c:88:cf:d1:fd: e4:5f:63:5e:9f:7d:df:1e:78:37:69:cd:1f:24:d3: ad:e0:50:a6:cf:8f:5a:3f:25:e0:c3:fe:15:c5:98: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D7:36:AA:76:54:4A:E8:55:6C:BA:8E:2C:02:36:B6:0B:65:5D:40 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386565303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8ee0::/44 Signature Algorithm: sha256WithRSAEncryption b4:3a:56:8d:b0:b3:ae:60:0e:49:dc:64:2a:47:05:d8:2b:60: c2:68:07:88:94:29:ae:c6:7f:5b:3d:b9:69:f7:a9:74:a6:37: a3:f3:2a:5f:ba:50:57:68:16:71:3e:f5:94:e0:1b:35:70:44: 0c:9b:a0:9e:94:79:d1:59:f0:3d:28:a8:3a:4b:68:70:48:1b: 0d:d3:26:8c:26:e8:bc:f3:0c:39:84:c0:e9:aa:58:b8:6d:24: b3:cf:68:0c:fc:64:fe:0a:54:41:4d:28:4e:20:90:ba:6e:a0: 2e:19:58:b0:4c:e3:11:58:61:bd:58:c6:b2:67:38:b7:b0:61: ea:c9:3b:0f:22:99:a6:25:1a:42:45:a5:c1:8c:49:ca:04:7a: 19:90:f3:b0:70:e6:e6:9f:a4:03:cd:51:05:52:75:af:01:b6: b3:cc:b3:7e:57:43:b0:60:06:f9:aa:e6:1f:a2:eb:e5:a9:26: 54:2c:fe:77:30:1e:b7:a8:96:90:87:cf:23:81:6a:d8:68:5c: 27:ff:ad:89:4a:3b:1b:af:5f:7c:94:78:20:56:8a:3e:23:98: fc:a4:9f:b5:ee:21:23:84:4e:53:1f:c2:48:3e:36:2c:f9:44: de:3b:42:ad:f2:ad:a6:f8:a8:d7:ab:38:e9:bd:01:4c:3b:a9: 28:4e:5f:f4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUHpDO8ya3JTQsOt3icWKawOfEnrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMxMTdaFw0yNjA4MjYwNDM2MTdaMDMxMTAvBgNV BAMTKDFDRDczNkFBNzY1NDRBRTg1NTZDQkE4RTJDMDIzNkI2MEI2NTVENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXMu6mmbwx79TML+PX2Jl2AJi5 N3q+/jJDEzXM+T7kFzI06tJZdMD5meIotelxssUke3JFcNibOBmFbm3qcpmAVBKf c/MIDK0SIvtI/NRcjcXiQjbyzwYJp73nRcWoxbKNPHTwZxrhh8deXtTdKbb/v8ra EPDZKETYbaIfC3GaY+02Za8JOR1NrNPQeuSUj3bXGLgKqjfC2cbNmbZxD9TKlXnd uNTJ8lYuhl6eCJ+qg65pGFuGmZCro4g68ZzPj6xBT0N9j3lYDdqAzuwJtDrP79C4 GlPLeYGOCslciM/R/eRfY16ffd8eeDdpzR8k063gUKbPj1o/JeDD/hXFmD/jAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUHNc2qnZUSuhVbLqOLAI2tgtlXUAwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2NTY1MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAjuAwDQYJKoZIhvcNAQELBQADggEBALQ6Vo2ws65gDkncZCpHBdgrYMJoB4iU Ka7Gf1s9uWn3qXSmN6PzKl+6UFdoFnE+9ZTgGzVwRAyboJ6UedFZ8D0oqDpLaHBI Gw3TJowm6LzzDDmEwOmqWLhtJLPPaAz8ZP4KVEFNKE4gkLpuoC4ZWLBM4xFYYb1Y xrJnOLewYerJOw8imaYlGkJFpcGMScoEehmQ87Bw5uafpAPNUQVSda8BtrPMs35X Q7BgBvmq5h+i6+WpJlQs/ncwHreolpCHzyOBathoXCf/rYlKOxuvX3yUeCBWij4j mPykn7XuISOETlMfwkg+Niz5RN47Qq3yrab4qNerOOm9AUw7qShOX/Q= -----END CERTIFICATE-----Generated at Mon Sep 1 02:05:49 2025 by rpki-client