$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa File: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (raw, json) Hash identifier: lrGsnHWNUUeWw86IHGDadF3wESv1aEvqYzkKNtLSTYI= Subject key identifier: 0A:6E:9C:A1:5B:30:CF:17:FE:08:65:9E:33:A2:7D:66:EB:5F:9C:DE Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 15103AD1B204AECB41BF06ADB6AD1738F3E07DEB Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa Signing time: Wed 23 Jul 2025 02:00:00 +0000 ROA not before: Wed 23 Jul 2025 01:55:00 +0000 ROA not after: Wed 22 Jul 2026 02:00:00 +0000 asID: 131749 IP address blocks: 2402:be80:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 19:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:10:3a:d1:b2:04:ae:cb:41:bf:06:ad:b6:ad:17:38:f3:e0:7d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Jul 23 01:55:00 2025 GMT Not After : Jul 22 02:00:00 2026 GMT Subject: CN=0A6E9CA15B30CF17FE08659E33A27D66EB5F9CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:07:1b:dd:4d:d8:48:e0:04:fb:62:7e:0c: 1e:9b:40:3c:c8:85:e7:a7:0e:4b:39:d2:f3:7d:7b: 31:cc:05:4b:98:a8:00:8e:9c:c7:9a:ec:23:84:0e: 69:36:cf:a7:5d:7f:6e:74:3e:30:10:06:3c:83:2b: 87:fd:90:6e:f9:71:dc:5c:dd:40:02:d2:a1:f7:b9: 14:c6:b1:36:89:de:0b:ab:45:82:14:9f:b7:4b:9f: 05:cf:a7:44:06:1d:db:b4:6d:31:54:8f:35:07:1f: 65:a5:63:d8:81:6d:b6:e9:e8:d1:24:86:f2:83:f7: 2d:c4:1e:31:91:2e:5e:5f:7d:b7:23:bf:43:e7:9a: df:23:2c:f9:33:87:ff:3d:3a:e4:8b:9f:b4:40:f7: 4c:c0:1f:e4:2b:6f:d8:61:e1:e0:21:4a:32:3f:6e: 89:49:a9:6e:be:20:52:28:7f:6e:87:b0:23:0a:3f: f8:27:5d:6f:96:f3:84:d2:5f:a7:bc:21:ba:d3:92: 35:43:28:82:b2:72:02:71:11:e9:3d:1e:2f:dd:9f: 5f:10:83:e7:d1:ea:1a:41:e1:86:e3:4c:ee:40:01: 64:91:dd:19:06:25:aa:60:05:73:a7:a7:13:d8:ff: c8:5d:4a:e1:9c:43:6c:2b:9f:43:88:7b:56:8d:70: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6E:9C:A1:5B:30:CF:17:FE:08:65:9E:33:A2:7D:66:EB:5F:9C:DE X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:8000::/34 Signature Algorithm: sha256WithRSAEncryption 83:a7:5e:4d:23:42:17:7f:13:83:c3:90:a1:07:e4:29:ae:d2: 28:ed:0d:da:74:82:23:58:87:8a:65:4a:7e:ec:a0:27:b4:e5: f3:d7:01:0e:71:b7:52:37:51:f0:45:ee:2e:49:2b:f6:68:50: 0b:4a:f2:32:6e:1e:05:9c:1c:e3:a3:cc:c5:62:b2:db:ea:c8: 58:d1:be:ab:ab:3b:7a:a0:ae:08:d5:bc:de:f7:e0:48:8a:1f: 91:ed:23:f4:50:97:b3:6e:9a:60:6d:65:b0:17:b0:81:23:3c: ed:8d:be:2f:9b:c3:04:24:2a:ed:86:17:cd:d0:73:e9:de:99: 82:c3:ca:83:16:7b:0e:f0:08:7e:aa:6e:70:c8:ff:af:09:40: 7f:2a:5c:87:8f:81:bf:35:be:38:aa:c8:ca:10:ac:16:cb:94: 3b:6d:f5:40:1c:79:a9:69:4d:c9:98:6a:67:87:d6:e7:c7:cb: 09:03:1b:5a:39:d8:05:16:0c:87:f2:bf:97:b0:10:fe:a0:5f: e9:2a:e7:f1:2b:08:18:00:8c:1a:7c:c6:ac:98:9f:f5:d7:45: ab:d1:69:55:47:69:94:28:d0:fa:43:68:69:33:f9:fa:81:48: 99:7e:71:36:b1:a1:a6:85:22:92:11:37:0e:54:9b:46:a0:b3: f0:78:27:80 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFRA60bIErstBvwattq0XOPPgfeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTA3MjMwMTU1MDBaFw0yNjA3MjIwMjAwMDBaMDMxMTAvBgNV BAMTKDBBNkU5Q0ExNUIzMENGMTdGRTA4NjU5RTMzQTI3RDY2RUI1RjlDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fgcb3U3YSOAE+2J+DB6bQDzI heenDks50vN9ezHMBUuYqACOnMea7COEDmk2z6ddf250PjAQBjyDK4f9kG75cdxc 3UAC0qH3uRTGsTaJ3gurRYIUn7dLnwXPp0QGHdu0bTFUjzUHH2WlY9iBbbbp6NEk hvKD9y3EHjGRLl5ffbcjv0Pnmt8jLPkzh/89OuSLn7RA90zAH+Qrb9hh4eAhSjI/ bolJqW6+IFIof26HsCMKP/gnXW+W84TSX6e8IbrTkjVDKIKycgJxEek9Hi/dn18Q g+fR6hpB4YbjTO5AAWSR3RkGJapgBXOnpxPY/8hdSuGcQ2wrn0OIe1aNcNcvAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUCm6coVswzxf+CGWeM6J9ZutfnN4wHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhMzgzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYk Ar6AgDANBgkqhkiG9w0BAQsFAAOCAQEAg6deTSNCF38Tg8OQoQfkKa7SKO0N2nSC I1iHimVKfuygJ7Tl89cBDnG3UjdR8EXuLkkr9mhQC0ryMm4eBZwc46PMxWKy2+rI WNG+q6s7eqCuCNW83vfgSIofke0j9FCXs26aYG1lsBewgSM87Y2+L5vDBCQq7YYX zdBz6d6ZgsPKgxZ7DvAIfqpucMj/rwlAfypch4+BvzW+OKrIyhCsFsuUO231QBx5 qWlNyZhqZ4fW58fLCQMbWjnYBRYMh/K/l7AQ/qBf6Srn8SsIGACMGnzGrJif9ddF q9FpVUdplCjQ+kNoaTP5+oFImX5xNrGhpoUikhE3DlSbRqCz8HgngA== -----END CERTIFICATE-----Generated at Sat Aug 9 22:36:08 2025 by rpki-client