$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396132303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a396132303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: DEiu65UI+RHgNygMA3d4V9BUxCdGQYcP3apMzQTyu7s= Subject key identifier: ED:47:AF:D6:77:37:15:2E:5F:F6:DB:3E:37:83:D6:72:F7:0E:42:8D Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 7E32767BE2CBE1AAE7E41C5D5E0B35F99A4B7BD3 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396132303a3a2f34342d3434203d3e20313333373938.roa Signing time: Tue 26 Aug 2025 11:13:05 +0000 ROA not before: Tue 26 Aug 2025 11:08:05 +0000 ROA not after: Tue 25 Aug 2026 11:13:05 +0000 asID: 133798 IP address blocks: 2402:5680:9a20::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 00:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:32:76:7b:e2:cb:e1:aa:e7:e4:1c:5d:5e:0b:35:f9:9a:4b:7b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 26 11:08:05 2025 GMT Not After : Aug 25 11:13:05 2026 GMT Subject: CN=ED47AFD67737152E5FF6DB3E3783D672F70E428D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:39:ce:0c:2e:42:7d:2d:32:bf:12:42:b2: f0:a3:18:46:7a:67:5a:88:84:d6:8d:a3:b1:ae:6e: 61:f6:e4:a4:6d:ed:38:a7:e7:1b:b8:80:17:bf:51: 64:50:c6:b2:e6:5b:8f:01:7e:e5:8b:c5:9b:e4:16: 47:97:af:67:c0:af:e6:63:8d:15:56:92:91:87:53: be:b5:ff:99:65:f3:b8:fe:71:6f:48:61:ef:1e:f2: e5:7d:1a:05:31:fe:d4:ee:72:f5:c5:a9:28:af:02: 4b:d3:dd:3c:00:c3:19:ba:ac:d7:66:87:60:34:ca: 51:34:cc:4b:31:57:3d:f1:8e:0d:00:78:dd:7d:46: 49:9f:be:2c:ab:c9:47:53:17:69:49:ca:36:33:ad: 4c:c5:82:68:31:e7:d7:0d:06:05:9d:77:6d:1d:89: 44:a9:32:ad:c0:90:96:93:9d:e0:bd:df:13:f8:12: f4:40:63:92:7f:8f:06:6d:57:cd:e7:d1:85:d4:60: dc:e9:8a:00:82:95:19:8e:aa:30:24:f6:e5:96:22: b6:15:e3:5b:77:e2:b9:8d:66:2f:45:7e:f7:cc:db: 5d:d5:88:ef:81:1b:f4:fb:90:f2:2c:aa:10:c2:e7: a3:5f:54:d1:b4:fc:56:bc:d9:62:68:ab:10:68:1e: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:47:AF:D6:77:37:15:2E:5F:F6:DB:3E:37:83:D6:72:F7:0E:42:8D X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396132303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:9a20::/44 Signature Algorithm: sha256WithRSAEncryption 45:24:29:37:36:eb:47:7c:21:32:1e:c6:9f:98:e2:26:68:2c: d0:b5:99:22:1f:0c:67:18:ae:4b:56:e7:c0:2d:ce:73:d3:7e: 22:9e:01:dd:c5:78:6b:73:c3:f5:f0:6a:85:dd:3d:f0:75:cc: 0a:05:5d:25:a6:79:74:e3:e6:14:41:dd:f0:e2:31:52:11:d0: 97:45:f8:88:c7:5a:5a:3f:56:11:77:49:4b:10:93:cb:75:be: 1e:89:41:21:d1:83:ab:16:f4:aa:cb:eb:41:cb:b9:c4:e7:98: f1:b1:9a:8b:63:ba:ef:e2:8f:89:04:2f:3d:34:16:d0:c5:ba: 2a:2a:8c:8b:90:33:4e:de:b3:00:86:7a:c9:7a:fb:7a:3b:51: 52:08:61:0f:de:28:6d:1c:9e:21:77:2f:27:2a:80:0c:ea:7c: c8:aa:5a:5c:38:6b:3c:43:2e:e2:d9:86:c4:76:67:42:b2:82: f8:40:30:7c:7f:7c:35:a6:c4:a4:ea:3c:0e:38:99:e6:0b:0a: ed:06:b4:95:26:bd:b1:65:f9:28:e7:63:38:f1:8a:96:7b:1f: 6e:b0:1c:c2:f8:54:77:4d:97:be:2a:0a:65:e7:c9:b1:ae:2b: 51:29:db:e3:2e:ae:f4:a5:bf:ca:d9:d1:a5:f2:1e:7e:2a:82: 18:ae:ec:f1 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUfjJ2e+LL4arn5BxdXgs1+ZpLe9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjYxMTA4MDVaFw0yNjA4MjUxMTEzMDVaMDMxMTAvBgNV BAMTKEVENDdBRkQ2NzczNzE1MkU1RkY2REIzRTM3ODNENjcyRjcwRTQyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSznODC5CfS0yvxJCsvCjGEZ6 Z1qIhNaNo7GubmH25KRt7Tin5xu4gBe/UWRQxrLmW48BfuWLxZvkFkeXr2fAr+Zj jRVWkpGHU761/5ll87j+cW9IYe8e8uV9GgUx/tTucvXFqSivAkvT3TwAwxm6rNdm h2A0ylE0zEsxVz3xjg0AeN19RkmfviyryUdTF2lJyjYzrUzFgmgx59cNBgWdd20d iUSpMq3AkJaTneC93xP4EvRAY5J/jwZtV83n0YXUYNzpigCClRmOqjAk9uWWIrYV 41t34rmNZi9FfvfM213ViO+BG/T7kPIsqhDC56NfVNG0/Fa82WJoqxBoHsutAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU7Uev1nc3FS5f9ts+N4PWcvcOQo0wHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzk2MTMyMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAmiAwDQYJKoZIhvcNAQELBQADggEBAEUkKTc260d8ITIexp+Y4iZoLNC1mSIf DGcYrktW58AtznPTfiKeAd3FeGtzw/XwaoXdPfB1zAoFXSWmeXTj5hRB3fDiMVIR 0JdF+IjHWlo/VhF3SUsQk8t1vh6JQSHRg6sW9KrL60HLucTnmPGxmotjuu/ij4kE Lz00FtDFuioqjIuQM07eswCGesl6+3o7UVIIYQ/eKG0cniF3LycqgAzqfMiqWlw4 azxDLuLZhsR2Z0KygvhAMHx/fDWmxKTqPA44meYLCu0GtJUmvbFl+SjnYzjxipZ7 H26wHML4VHdNl74qCmXnybGuK1Ep2+MurvSlv8rZ0aXyHn4qghiu7PE= -----END CERTIFICATE-----Generated at Mon Sep 1 02:09:22 2025 by rpki-client