$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa File: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (raw, json) Hash identifier: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE= Subject key identifier: 74:7B:5F:1F:E6:E4:DD:89:DD:63:A8:1F:82:6A:38:69:CD:CC:EF:17 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 7B08DB0E50E32B654E7C0425A08988DC08F78E4D Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa Signing time: Thu 19 Jun 2025 05:02:48 +0000 ROA not before: Thu 19 Jun 2025 04:57:48 +0000 ROA not after: Thu 18 Jun 2026 05:02:48 +0000 asID: 153069 IP address blocks: 2001:df4:c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:08:db:0e:50:e3:2b:65:4e:7c:04:25:a0:89:88:dc:08:f7:8e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Jun 19 04:57:48 2025 GMT Not After : Jun 18 05:02:48 2026 GMT Subject: CN=747B5F1FE6E4DD89DD63A81F826A3869CDCCEF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:a5:8f:0e:33:41:13:a8:0b:1f:6d:29:a0: 80:8c:57:61:b7:ea:70:2a:42:45:b1:73:19:33:ba: 6d:8e:c7:a9:05:9f:3e:01:28:78:86:9a:0f:e2:c8: 54:0f:73:46:c8:ee:99:ff:4a:69:c1:b2:5b:33:e3: 21:fc:11:ef:80:8b:45:90:78:43:09:9b:5d:93:5e: b4:21:40:02:03:d1:b4:96:26:97:fa:4f:0f:b9:7e: 14:0a:1b:b7:9b:bd:18:27:41:6e:c5:0d:9a:48:c9: 0f:c4:d0:9c:81:d2:e9:d9:72:97:8c:76:f1:c3:a4: b8:32:5b:47:d6:40:d7:a2:a4:ae:9e:66:89:9f:54: 0f:45:ee:4c:80:66:84:3a:ad:e1:54:25:34:4a:fa: 46:9c:89:ba:fb:ed:f3:ec:dc:8f:64:77:9a:f2:eb: ad:bf:a8:92:50:73:d1:3f:ed:dd:99:ff:c8:43:6f: 7b:10:1c:ec:0e:c6:9e:65:55:db:db:f0:d8:f2:67: 72:30:54:11:04:81:13:81:b7:d9:31:28:e9:54:63: 67:6e:f4:e1:1b:41:71:86:da:0f:d9:f9:ba:94:73: d4:96:f6:f4:7c:fa:6d:b8:98:a6:c4:c5:9e:d2:00: 41:b3:9d:c1:0f:1e:8e:e2:9e:cf:b6:c3:2a:92:9c: 60:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7B:5F:1F:E6:E4:DD:89:DD:63:A8:1F:82:6A:38:69:CD:CC:EF:17 X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:c40::/48 Signature Algorithm: sha256WithRSAEncryption 5b:57:96:d1:27:01:88:fc:a5:15:cb:e3:74:a4:c2:2f:d4:c0: f8:18:c1:22:d9:6b:d3:4e:b8:1f:1c:69:54:17:f8:11:b6:13: 94:31:f7:a8:ed:b6:7d:52:bc:7a:2b:68:b8:a2:ad:f8:da:e0: ea:bf:2f:ef:36:5a:8c:d5:eb:2e:3f:59:38:64:ca:c4:a7:96: c8:ef:2d:a9:db:13:88:ac:d2:64:40:9c:bb:90:0f:8f:5a:e8: de:d2:0d:7c:94:95:e2:28:4d:88:f8:b7:b3:4d:a2:25:06:b7: 3f:fd:5e:84:21:84:3c:ab:60:6c:35:6a:ee:27:05:e1:4f:1a: 26:98:4f:27:96:79:4f:2e:03:89:47:09:36:ee:89:9b:9b:b7: 8d:9f:4d:a9:8d:87:07:b3:58:a7:03:95:a1:c7:f5:e9:20:b5: ed:45:db:e0:9b:21:9c:26:49:8f:08:e5:b3:1d:b8:e1:df:ea: 2c:7e:c8:7f:e4:6b:47:c8:00:cd:0d:c6:04:46:fa:98:62:ff: 55:61:fb:9c:14:d6:9b:38:44:d4:d2:15:a7:94:ae:de:0a:6e: 0a:90:f8:09:7d:d2:16:fd:ba:b4:1f:c5:47:5c:48:d4:a7:93: 95:90:af:10:3b:2f:26:71:ac:72:24:5b:83:dc:c2:41:fb:39: b6:38:43:0d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUewjbDlDjK2VOfAQloImI3Aj3jk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNTA2MTkwNDU3NDhaFw0yNjA2MTgwNTAyNDhaMDMxMTAvBgNV BAMTKDc0N0I1RjFGRTZFNEREODlERDYzQTgxRjgyNkEzODY5Q0RDQ0VGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52aWPDjNBE6gLH20poICMV2G3 6nAqQkWxcxkzum2Ox6kFnz4BKHiGmg/iyFQPc0bI7pn/SmnBslsz4yH8Ee+Ai0WQ eEMJm12TXrQhQAID0bSWJpf6Tw+5fhQKG7ebvRgnQW7FDZpIyQ/E0JyB0unZcpeM dvHDpLgyW0fWQNeipK6eZomfVA9F7kyAZoQ6reFUJTRK+kacibr77fPs3I9kd5ry 662/qJJQc9E/7d2Z/8hDb3sQHOwOxp5lVdvb8NjyZ3IwVBEEgROBt9kxKOlUY2du 9OEbQXGG2g/Z+bqUc9SW9vR8+m24mKbExZ7SAEGzncEPHo7ins+2wyqSnGB7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUdHtfH+bk3YndY6gfgmo4ac3M7xcwHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIzNjU2MWQ0LTIzYzgtNGM5Yi04 OTBlLTRmMjYzMmU1MmM5Ny8xLzMyMzAzMDMxM2E2NDY2MzQzYTYzMzQzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMzMwMzYzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfQM QDANBgkqhkiG9w0BAQsFAAOCAQEAW1eW0ScBiPylFcvjdKTCL9TA+BjBItlr0064 HxxpVBf4EbYTlDH3qO22fVK8eitouKKt+Nrg6r8v7zZajNXrLj9ZOGTKxKeWyO8t qdsTiKzSZECcu5APj1ro3tINfJSV4ihNiPi3s02iJQa3P/1ehCGEPKtgbDVq7icF 4U8aJphPJ5Z5Ty4DiUcJNu6Jm5u3jZ9NqY2HB7NYpwOVocf16SC17UXb4JshnCZJ jwjlsx244d/qLH7If+RrR8gAzQ3GBEb6mGL/VWH7nBTWmzhE1NIVp5Su3gpuCpD4 CX3SFv26tB/FR1xI1KeTlZCvEDsvJnGsciRbg9zCQfs5tjhDDQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:38 2025 by rpki-client