$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa File: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (raw, json) Hash identifier: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U= Subject key identifier: EB:3C:14:36:1F:A1:C5:D6:AA:1B:C2:F8:BA:D9:E4:99:E6:D6:CB:11 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 04402D51A72DDCD728E070CA56F2260ED9045C26 Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa Signing time: Mon 16 Jun 2025 04:00:46 +0000 ROA not before: Mon 16 Jun 2025 03:55:46 +0000 ROA not after: Mon 15 Jun 2026 04:00:46 +0000 asID: 152392 IP address blocks: 2001:df3:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:40:2d:51:a7:2d:dc:d7:28:e0:70:ca:56:f2:26:0e:d9:04:5c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Jun 16 03:55:46 2025 GMT Not After : Jun 15 04:00:46 2026 GMT Subject: CN=EB3C14361FA1C5D6AA1BC2F8BAD9E499E6D6CB11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:84:30:27:6b:51:8a:14:6a:2a:58:9c:c8: a9:21:2b:7e:ee:d9:26:02:62:75:1c:c7:11:d1:ef: 36:87:cd:0c:8b:c0:b3:eb:2f:6a:17:d2:fd:46:f0: af:36:3b:ed:b3:f2:bb:66:d2:44:ce:18:21:fd:2f: 3a:9c:14:4f:59:5f:9a:31:fb:70:23:58:29:28:16: dd:b1:61:f4:a5:16:f8:5e:1b:d3:2d:2d:75:bb:45: 37:22:34:86:16:38:5f:30:f0:72:3e:33:3f:b8:35: 50:0c:f6:df:ca:df:c0:53:b5:9b:ce:c7:87:a8:e5: dc:99:2e:83:84:2f:5a:bc:df:1a:45:50:fa:b6:f9: 35:e5:f8:5c:84:75:be:d1:e9:47:7e:ad:54:5f:ef: 9b:58:48:f8:08:1d:d9:b6:fd:e3:de:99:a5:fd:a8: 02:35:a8:a8:74:1c:dc:d9:7e:7a:f1:17:f9:ef:2c: 86:de:da:00:aa:36:30:12:9d:61:41:40:ed:f8:32: cc:00:68:4b:2d:6b:b7:4e:4c:c1:3a:6b:dc:9c:b2: 58:37:ae:e1:22:70:fd:9e:36:46:e7:b2:bd:9d:03: bc:64:07:d1:4b:3a:31:5a:87:b3:a1:fe:76:aa:0a: a4:7f:f4:a4:0d:0d:01:75:7a:c4:5a:63:5a:77:92: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3C:14:36:1F:A1:C5:D6:AA:1B:C2:F8:BA:D9:E4:99:E6:D6:CB:11 X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:c340::/48 Signature Algorithm: sha256WithRSAEncryption 09:19:91:68:95:e0:4d:d9:2e:fc:45:ec:21:2a:5d:40:30:87: c0:96:4f:f7:fc:b0:da:86:5b:aa:47:22:6d:47:01:ec:01:6b: 8e:9c:fc:f7:8d:ee:ba:f0:28:7c:a4:59:77:ee:91:50:63:b8: 19:a8:46:bd:fc:22:3a:0b:8a:57:12:6e:a4:0d:18:89:7e:79: 73:b1:60:9c:cb:90:1f:fc:1f:07:9f:a8:67:87:06:7c:c5:75: d9:2a:4e:6e:19:70:73:c1:de:5c:c6:f1:a5:3d:47:74:f4:c3: 93:de:0c:83:4b:8f:f1:29:d6:d9:6e:59:1a:90:c1:78:9f:5b: 1e:09:cd:d7:be:26:09:96:2d:ef:62:d7:eb:76:74:29:4b:bb: 8f:dd:f9:2c:34:7b:26:ef:28:8e:63:1d:33:96:a6:ca:61:96: 2f:c5:9b:11:c5:5c:fd:bd:d3:67:94:2e:a3:6e:2d:42:c6:b1: e4:c5:e4:5f:b3:85:95:21:4d:01:64:bf:7f:f2:c0:a3:b0:92: a3:d0:0b:04:1f:ca:97:d4:6c:8c:87:0c:c5:51:bf:16:35:9c: 4e:5e:0f:61:84:ed:3f:cb:6d:91:9c:72:c0:8e:47:a3:5c:f0: 80:fd:75:5d:89:21:88:ac:58:65:e6:4a:c4:22:a9:fa:65:01: 2b:df:2e:2c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBEAtUact3Nco4HDKVvImDtkEXCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNTA2MTYwMzU1NDZaFw0yNjA2MTUwNDAwNDZaMDMxMTAvBgNV BAMTKEVCM0MxNDM2MUZBMUM1RDZBQTFCQzJGOEJBRDlFNDk5RTZENkNCMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HIQwJ2tRihRqKlicyKkhK37u 2SYCYnUcxxHR7zaHzQyLwLPrL2oX0v1G8K82O+2z8rtm0kTOGCH9LzqcFE9ZX5ox +3AjWCkoFt2xYfSlFvheG9MtLXW7RTciNIYWOF8w8HI+Mz+4NVAM9t/K38BTtZvO x4eo5dyZLoOEL1q83xpFUPq2+TXl+FyEdb7R6Ud+rVRf75tYSPgIHdm2/ePemaX9 qAI1qKh0HNzZfnrxF/nvLIbe2gCqNjASnWFBQO34MswAaEsta7dOTME6a9ycslg3 ruEicP2eNkbnsr2dA7xkB9FLOjFah7Oh/naqCqR/9KQNDQF1esRaY1p3kgxXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6zwUNh+hxdaqG8L4utnkmebWyxEwHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ODhkZmY3LTZhOTItNDI5My04 ODAwLWI1M2UyYTkxOGFjYS8xLzMyMzAzMDMxM2E2NDY2MzMzYTYzMzMzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzMzOTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 88NAMA0GCSqGSIb3DQEBCwUAA4IBAQAJGZFoleBN2S78RewhKl1AMIfAlk/3/LDa hluqRyJtRwHsAWuOnPz3je668Ch8pFl37pFQY7gZqEa9/CI6C4pXEm6kDRiJfnlz sWCcy5Af/B8Hn6hnhwZ8xXXZKk5uGXBzwd5cxvGlPUd09MOT3gyDS4/xKdbZblka kMF4n1seCc3XviYJli3vYtfrdnQpS7uP3fksNHsm7yiOYx0zlqbKYZYvxZsRxVz9 vdNnlC6jbi1CxrHkxeRfs4WVIU0BZL9/8sCjsJKj0AsEH8qX1GyMhwzFUb8WNZxO Xg9hhO0/y22RnHLAjkejXPCA/XVdiSGIrFhl5krEIqn6ZQEr3y4s -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:05 2025 by rpki-client