$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa File: 323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa (raw, json) Hash identifier: yO5cw9oxQ3eTkGW/vwlC8BaKdxLLFqod66n4hJAfrTM= Subject key identifier: 3B:A6:04:ED:7C:FE:45:FD:F0:6C:D1:96:6F:09:2B:B2:53:42:35:F8 Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 50D3BC12253EB77088AD9EFC511ED6318813C20F Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa Signing time: Thu 17 Jul 2025 04:01:59 +0000 ROA not before: Thu 17 Jul 2025 03:56:59 +0000 ROA not after: Thu 16 Jul 2026 04:01:59 +0000 asID: 58404 IP address blocks: 2001:df2:e300::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d3:bc:12:25:3e:b7:70:88:ad:9e:fc:51:1e:d6:31:88:13:c2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Jul 17 03:56:59 2025 GMT Not After : Jul 16 04:01:59 2026 GMT Subject: CN=3BA604ED7CFE45FDF06CD1966F092BB2534235F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5c:f6:f4:91:6d:ad:e5:0f:71:1b:b4:55:1a: 72:85:f3:f6:83:53:a9:fb:d4:44:24:43:dd:c7:30: d5:33:07:2f:15:b2:cf:23:bd:a6:e4:b2:ce:5b:ab: 87:34:48:65:c8:36:5f:38:c8:79:75:4e:1f:bd:b0: bb:e5:55:b1:56:8f:0e:73:8e:c3:e8:17:3d:df:da: 4a:ee:3a:38:2d:df:6d:c1:e0:a3:2c:1e:ad:60:64: 16:78:f4:64:5f:02:f7:96:f7:a2:59:ee:02:9c:04: 8b:f3:ce:c8:a9:86:a2:29:b8:2f:5b:d2:8c:e3:67: 07:ed:27:af:5d:30:21:96:20:06:20:34:04:2c:ef: 50:bf:23:87:ca:2e:a2:04:0b:92:57:19:b5:b8:5a: 2f:40:c5:8c:54:89:03:14:38:c2:e7:c2:94:ec:ad: 89:16:77:2f:97:43:84:c5:14:76:b4:e2:92:d8:91: 0f:c4:81:c1:2a:a1:5c:68:f3:96:85:71:c5:08:86: c9:9a:40:75:3e:8a:be:97:53:62:28:3a:89:12:b5: 0c:67:37:61:64:29:11:29:d1:25:a1:89:69:1e:3d: 87:92:84:cf:82:19:2e:3d:73:8d:03:57:76:37:2b: 7d:ab:e8:c5:0c:01:31:4c:8b:d8:3f:78:7e:89:49: f7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A6:04:ED:7C:FE:45:FD:F0:6C:D1:96:6F:09:2B:B2:53:42:35:F8 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/323030313a6466323a653330303a3a2f34382d3438203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:e300::/48 Signature Algorithm: sha256WithRSAEncryption 87:68:07:c1:93:ab:55:77:f0:11:4d:cd:60:9c:c8:b1:c7:4f: 48:97:5a:34:4e:fc:67:3b:77:7b:ac:84:7f:20:78:e0:9c:98: 50:4f:1a:bc:47:bd:22:c1:ee:56:90:f7:32:ac:6e:5b:39:94: 5c:07:f5:8f:3c:fc:2a:37:36:eb:e2:fe:e6:5e:34:ae:a0:e4: cd:82:7d:a6:94:f1:bd:e9:8d:49:93:3c:37:99:10:8c:4a:1d: a2:c3:56:22:f2:7b:54:06:af:b1:9c:88:2e:ab:ba:14:6b:59: e3:ac:c4:26:59:4f:4b:27:32:d0:20:73:da:96:39:b7:a7:b0: 66:c2:0c:c9:b1:21:50:71:74:2a:8a:5e:cb:0a:76:5b:33:fa: c7:a8:62:0b:96:b8:3f:ed:4b:ef:cf:79:9f:cd:bb:03:09:97: dd:a3:b8:18:09:91:20:9f:0e:7b:3f:0b:9f:b3:71:f9:a6:4d: b0:e9:11:c9:3f:ed:6e:cf:38:89:14:f9:b5:68:06:94:ad:2e: 3a:b2:52:b9:ec:04:e3:34:13:83:6a:3b:ba:24:17:6d:c5:26: 20:38:d6:6e:4c:6e:aa:60:9b:e4:06:14:66:90:82:ae:67:86: 4b:3f:e2:1e:eb:99:ea:be:89:0d:6c:58:4f:d1:35:06:fb:c9: 64:5a:cd:5d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUNO8EiU+t3CIrZ78UR7WMYgTwg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTA3MTcwMzU2NTlaFw0yNjA3MTYwNDAxNTlaMDMxMTAvBgNV BAMTKDNCQTYwNEVEN0NGRTQ1RkRGMDZDRDE5NjZGMDkyQkIyNTM0MjM1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXPb0kW2t5Q9xG7RVGnKF8/aD U6n71EQkQ93HMNUzBy8Vss8jvabkss5bq4c0SGXINl84yHl1Th+9sLvlVbFWjw5z jsPoFz3f2kruOjgt323B4KMsHq1gZBZ49GRfAveW96JZ7gKcBIvzzsiphqIpuC9b 0ozjZwftJ69dMCGWIAYgNAQs71C/I4fKLqIEC5JXGbW4Wi9AxYxUiQMUOMLnwpTs rYkWdy+XQ4TFFHa04pLYkQ/EgcEqoVxo85aFccUIhsmaQHU+ir6XU2IoOokStQxn N2FkKREp0SWhiWkePYeShM+CGS49c40DV3Y3K32r6MUMATFMi9g/eH6JSfd9AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUO6YE7Xz+Rf3wbNGWbwkrslNCNfgwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmMmI2ZWQyLWNjNTgtNDVjNS1i ZDg4LWNiOTU1MDcxNmEwNC8wLzMyMzAzMDMxM2E2NDY2MzIzYTY1MzMzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzODM0MzAzNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfLj ADANBgkqhkiG9w0BAQsFAAOCAQEAh2gHwZOrVXfwEU3NYJzIscdPSJdaNE78Zzt3 e6yEfyB44JyYUE8avEe9IsHuVpD3MqxuWzmUXAf1jzz8Kjc26+L+5l40rqDkzYJ9 ppTxvemNSZM8N5kQjEodosNWIvJ7VAavsZyILqu6FGtZ46zEJllPSycy0CBz2pY5 t6ewZsIMybEhUHF0Kopeywp2WzP6x6hiC5a4P+1L7895n827AwmX3aO4GAmRIJ8O ez8Ln7Nx+aZNsOkRyT/tbs84iRT5tWgGlK0uOrJSuewE4zQTg2o7uiQXbcUmIDjW bkxuqmCb5AYUZpCCrmeGSz/iHuuZ6r6JDWxYT9E1BvvJZFrNXQ== -----END CERTIFICATE-----Generated at Thu Aug 7 23:58:54 2025 by rpki-client