$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa File: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (raw, json) Hash identifier: bKAiHhmlEj4IgvE00Lo3377sGcryUEP8JoeR2a9n6WM= Subject key identifier: D6:82:28:C0:C9:F1:DB:EB:0A:22:5B:34:11:AF:2F:88:AC:07:3E:67 Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Certificate serial: 75A6F8AB3D338D9C00E2E76297D9CB2AFB0C215B Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa Signing time: Mon 03 Nov 2025 11:00:01 +0000 ROA not before: Mon 03 Nov 2025 10:55:01 +0000 ROA not after: Mon 02 Nov 2026 11:00:01 +0000 asID: 150523 IP address blocks: 2001:df1:dfc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a6:f8:ab:3d:33:8d:9c:00:e2:e7:62:97:d9:cb:2a:fb:0c:21:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Validity Not Before: Nov 3 10:55:01 2025 GMT Not After : Nov 2 11:00:01 2026 GMT Subject: CN=D68228C0C9F1DBEB0A225B3411AF2F88AC073E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:be:c8:f4:7e:2f:c2:7a:ec:23:a5:d6:26: 67:8a:e0:6a:62:14:7c:31:cf:9f:c9:25:dc:01:02: 99:ed:f7:77:6e:65:a3:33:5e:db:97:09:49:71:cd: a0:0b:89:71:9f:ec:7e:43:66:c7:33:9e:6f:5c:7d: d9:68:a2:3c:b9:8e:81:b0:4f:c1:b9:cd:ad:af:cd: 0f:f9:09:38:d0:4e:27:7c:a9:93:8e:b0:6b:b9:49: 8e:a5:d1:3f:bf:50:fe:33:4f:30:7e:12:95:c1:8c: d5:fa:91:2f:7e:d2:a0:89:a2:9b:bf:39:d0:95:1a: 6b:8e:f5:d0:d3:62:27:07:24:6e:6c:c2:ed:2b:09: 8b:a9:6d:9a:e3:dd:13:7d:17:c4:c3:51:7d:09:57: 73:3f:0e:42:f3:9c:8d:20:90:8d:b4:51:aa:55:06: e7:87:a6:f6:03:f0:13:24:1a:c5:5d:c6:4c:00:6e: aa:ce:bf:d1:83:ee:79:f6:37:33:3a:c2:47:10:b3: 77:b2:f1:0e:a4:63:a1:ea:8b:bd:5b:59:66:56:b9: 6b:bf:dc:08:4d:c0:5a:33:26:46:9b:14:14:b6:29: 92:86:09:0b:5a:9d:a1:ce:6c:d8:48:aa:37:f5:40: 55:ad:21:c5:00:01:60:74:4f:fa:a7:ed:ce:d7:87: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:82:28:C0:C9:F1:DB:EB:0A:22:5B:34:11:AF:2F:88:AC:07:3E:67 X509v3 Authority Key Identifier: keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:dfc0::/48 Signature Algorithm: sha256WithRSAEncryption 69:af:8f:e8:1d:cb:12:9d:ed:b1:d9:b9:f6:e8:e9:bc:0d:fe: 41:d4:6b:d0:62:b6:4f:6c:97:fa:4b:5b:13:c5:a6:6d:31:b7: f7:8c:46:81:11:69:e0:10:cc:2a:8b:8d:c8:25:61:e6:82:dc: ee:5d:bc:6c:7d:68:91:15:03:11:93:96:53:57:a2:99:12:8a: d4:da:5e:1e:70:a1:59:72:63:8d:d2:90:e1:3f:03:bb:db:47: 08:ce:40:b0:4f:5b:f1:e0:ef:43:d7:1d:10:0a:6f:75:c4:df: 54:1b:7f:6f:5a:79:1b:b1:38:95:4e:ae:d0:8b:6b:df:50:08: aa:75:f0:d0:d9:2c:90:e3:44:fd:16:87:6b:a8:44:74:27:13: 4b:73:b1:e0:8d:1d:0f:6e:0a:f4:ab:1f:c9:bb:89:26:45:51: 02:5d:f6:d5:3b:31:c2:f6:28:96:d3:51:47:55:5d:5f:39:be: 44:d8:72:86:47:d9:67:58:14:4d:3f:83:4a:45:41:13:ae:90: 24:f2:1d:e4:70:6c:be:64:82:c8:ea:4a:85:47:f2:28:01:0d: a5:89:2a:09:87:8a:6d:02:db:52:cb:3c:05:d9:3e:ca:a1:d9: cb:5f:1f:a4:40:63:e7:f1:01:17:7e:0b:e9:59:ee:1d:ba:d1: a3:7d:2e:a1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdab4qz0zjZwA4udil9nLKvsMIVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF QzgyMUZGRDAeFw0yNTExMDMxMDU1MDFaFw0yNjExMDIxMTAwMDFaMDMxMTAvBgNV BAMTKEQ2ODIyOEMwQzlGMURCRUIwQTIyNUIzNDExQUYyRjg4QUMwNzNFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcIb7I9H4vwnrsI6XWJmeK4Gpi FHwxz5/JJdwBApnt93duZaMzXtuXCUlxzaALiXGf7H5DZscznm9cfdloojy5joGw T8G5za2vzQ/5CTjQTid8qZOOsGu5SY6l0T+/UP4zTzB+EpXBjNX6kS9+0qCJopu/ OdCVGmuO9dDTYicHJG5swu0rCYupbZrj3RN9F8TDUX0JV3M/DkLznI0gkI20UapV BueHpvYD8BMkGsVdxkwAbqrOv9GD7nn2NzM6wkcQs3ey8Q6kY6Hqi71bWWZWuWu/ 3AhNwFozJkabFBS2KZKGCQtanaHObNhIqjf1QFWtIcUAAWB0T/qn7c7Xh+LrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU1oIowMnx2+sKIls0Ea8viKwHPmcwHwYDVR0j BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy MUZGRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4NDYzMjg1LTdjMjgtNDM1YS04 MmJiLWZjYzMyZDU4MDIwZS8wLzMyMzAzMDMxM2E2NDY2MzEzYTY0NjY2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzUzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8d/AMA0GCSqGSIb3DQEBCwUAA4IBAQBpr4/oHcsSne2x2bn26Om8Df5B1GvQYrZP bJf6S1sTxaZtMbf3jEaBEWngEMwqi43IJWHmgtzuXbxsfWiRFQMRk5ZTV6KZEorU 2l4ecKFZcmON0pDhPwO720cIzkCwT1vx4O9D1x0QCm91xN9UG39vWnkbsTiVTq7Q i2vfUAiqdfDQ2SyQ40T9FodrqER0JxNLc7HgjR0Pbgr0qx/Ju4kmRVECXfbVOzHC 9iiW01FHVV1fOb5E2HKGR9lnWBRNP4NKRUETrpAk8h3kcGy+ZILI6kqFR/IoAQ2l iSoJh4ptAttSyzwF2T7KodnLXx+kQGPn8QEXfgvpWe4dutGjfS6h -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:21 2025 by rpki-client