$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386631303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a386631303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: C5MVAMjBB2iyVo+s3Jy0pFuRvFVSld8XLLI6Rj5JbYc= Subject key identifier: 0A:70:61:51:66:5F:FC:A7:40:C5:65:12:74:AD:96:46:BE:5E:23:42 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 2152D0A9F951138CC52D0F9B729A6D864968F973 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386631303a3a2f34342d3434203d3e20313333373938.roa Signing time: Tue 26 Aug 2025 11:14:22 +0000 ROA not before: Tue 26 Aug 2025 11:09:22 +0000 ROA not after: Tue 25 Aug 2026 11:14:22 +0000 asID: 133798 IP address blocks: 2402:5680:8f10::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:52:d0:a9:f9:51:13:8c:c5:2d:0f:9b:72:9a:6d:86:49:68:f9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 26 11:09:22 2025 GMT Not After : Aug 25 11:14:22 2026 GMT Subject: CN=0A706151665FFCA740C5651274AD9646BE5E2342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:42:58:d0:8b:b1:69:d3:d6:37:67:c3:df:b2: ea:92:c7:81:4f:70:7d:b0:27:77:c5:16:0d:b5:a4: 77:f9:e1:a5:c7:bf:a0:ea:2c:81:34:55:89:3e:bc: 2a:99:ad:ef:16:df:af:c3:7e:57:67:e0:c8:74:00: 17:9d:c2:ea:14:9a:b6:23:63:0e:1e:d3:bb:4a:52: c8:94:0e:eb:79:05:3f:78:e5:21:a6:9b:63:ad:90: fb:83:1e:c1:2e:bb:66:fa:71:d5:d9:1f:26:9d:a0: 22:2f:0e:e2:f7:a9:df:5b:8a:d2:d0:09:07:16:b9: 56:91:7d:11:71:27:a8:97:d2:98:d4:6c:30:30:e3: 01:c2:84:c3:f4:30:5b:84:9c:d3:2d:d5:06:d5:e1: 61:38:cc:2f:3c:fc:38:2f:f8:f7:d4:14:b1:d8:a9: 70:a4:93:02:5b:ad:1f:10:f1:bc:31:dc:90:71:79: 41:fb:1c:c7:70:ab:93:fe:c3:40:b8:a2:08:b3:88: c4:1b:b1:ce:42:9e:51:32:b3:ab:ce:ac:44:e3:02: a3:a4:f1:fa:b6:2b:6d:08:12:26:c4:1d:d6:3e:1a: 4c:ed:42:b9:d9:f6:38:0a:5a:7a:38:50:b1:ef:cb: 48:b7:3a:32:57:57:46:75:c9:b2:5a:e2:8b:9d:7b: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:70:61:51:66:5F:FC:A7:40:C5:65:12:74:AD:96:46:BE:5E:23:42 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386631303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8f10::/44 Signature Algorithm: sha256WithRSAEncryption 1c:1c:14:25:a9:ed:6a:10:38:d5:47:e1:96:36:5d:f3:f9:af: d8:10:6d:c1:07:4b:e1:fe:0a:20:56:19:f7:07:d2:41:5b:a4: f2:10:e2:2e:64:16:53:2d:ce:ea:f8:46:80:f7:ea:8c:8c:15: a1:5c:16:06:7c:47:45:bd:5c:89:65:ad:ae:8e:c5:bb:ca:73: 8f:56:73:b1:e9:38:27:48:b1:66:4d:2b:97:ea:97:d4:b0:1e: d0:dc:3b:f8:2c:3b:a0:87:60:85:b8:79:03:1c:b0:88:94:f9: 69:8b:d9:be:94:e0:ee:73:65:1a:04:35:85:1d:e0:fd:1b:b2: f0:f0:20:94:cc:6f:53:f4:80:da:27:87:b9:c5:7f:21:8a:8d: 12:51:fe:d9:a0:6a:f1:03:91:0f:d9:2e:18:0e:f6:49:36:66: 41:b1:ca:99:15:f8:2b:02:ae:c4:24:2b:95:51:8e:6d:dc:44: ad:09:5d:be:67:b4:ee:b8:b3:05:e0:2d:97:18:8f:7e:fd:8d: c7:cc:b2:d4:2b:af:dd:97:ad:3d:ae:5d:ab:96:80:04:dd:e0: 76:4e:57:02:7d:2d:68:f2:d1:35:fe:36:8a:97:88:c1:85:41: 5d:fb:a4:33:1a:e1:5d:3a:f8:47:dc:bd:55:ff:42:7f:04:1e: f7:03:e5:de -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUIVLQqflRE4zFLQ+bcppthklo+XMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjYxMTA5MjJaFw0yNjA4MjUxMTE0MjJaMDMxMTAvBgNV BAMTKDBBNzA2MTUxNjY1RkZDQTc0MEM1NjUxMjc0QUQ5NjQ2QkU1RTIzNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxQljQi7Fp09Y3Z8PfsuqSx4FP cH2wJ3fFFg21pHf54aXHv6DqLIE0VYk+vCqZre8W36/Dfldn4Mh0ABedwuoUmrYj Yw4e07tKUsiUDut5BT945SGmm2OtkPuDHsEuu2b6cdXZHyadoCIvDuL3qd9bitLQ CQcWuVaRfRFxJ6iX0pjUbDAw4wHChMP0MFuEnNMt1QbV4WE4zC88/Dgv+PfUFLHY qXCkkwJbrR8Q8bwx3JBxeUH7HMdwq5P+w0C4ogiziMQbsc5CnlEys6vOrETjAqOk 8fq2K20IEibEHdY+GkztQrnZ9jgKWno4ULHvy0i3OjJXV0Z1ybJa4oude1QvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUCnBhUWZf/KdAxWUSdK2WRr5eI0IwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2NjMxMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAjxAwDQYJKoZIhvcNAQELBQADggEBABwcFCWp7WoQONVH4ZY2XfP5r9gQbcEH S+H+CiBWGfcH0kFbpPIQ4i5kFlMtzur4RoD36oyMFaFcFgZ8R0W9XIllra6OxbvK c49Wc7HpOCdIsWZNK5fql9SwHtDcO/gsO6CHYIW4eQMcsIiU+WmL2b6U4O5zZRoE NYUd4P0bsvDwIJTMb1P0gNonh7nFfyGKjRJR/tmgavEDkQ/ZLhgO9kk2ZkGxypkV +CsCrsQkK5VRjm3cRK0JXb5ntO64swXgLZcYj379jcfMstQrr92XrT2uXauWgATd 4HZOVwJ9LWjy0TX+NoqXiMGFQV37pDMa4V06+EfcvVX/Qn8EHvcD5d4= -----END CERTIFICATE-----Generated at Mon Sep 1 02:12:08 2025 by rpki-client