$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa File: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (raw, json) Hash identifier: jGoXC4NtMGtzcx+R9/Q81p54SI3SY8CoW+n8Kb2SzRU= Subject key identifier: 1F:D0:FA:AB:DF:EB:DD:F4:FD:26:3D:D8:7E:59:26:39:A5:A8:90:C8 Certificate issuer: /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Certificate serial: 317562459F9DC5C23520ED6F93F2BD0A216C152B Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa Signing time: Mon 02 Jun 2025 02:04:31 +0000 ROA not before: Mon 02 Jun 2025 01:59:31 +0000 ROA not after: Mon 01 Jun 2026 02:04:31 +0000 asID: 58477 IP address blocks: 2001:df0:273::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:75:62:45:9f:9d:c5:c2:35:20:ed:6f:93:f2:bd:0a:21:6c:15:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Validity Not Before: Jun 2 01:59:31 2025 GMT Not After : Jun 1 02:04:31 2026 GMT Subject: CN=1FD0FAABDFEBDDF4FD263DD87E592639A5A890C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:85:b0:02:56:2b:07:15:1e:66:61:5a:16: c7:55:f0:7f:09:da:f3:af:f4:44:51:ad:68:8f:f7: 3a:7e:02:dd:fb:26:25:b6:d3:c2:21:e8:18:8b:70: 46:e0:e3:7b:14:10:61:34:86:77:58:11:03:bf:57: 9c:72:d2:35:49:39:99:4f:db:e7:d9:cf:b8:88:d8: bb:8d:1d:ec:59:55:08:f3:0a:84:96:99:73:42:48: 98:d3:7e:c0:ba:19:6c:17:62:af:60:ab:49:35:32: 22:b5:87:96:46:c1:9f:03:c1:23:04:44:ad:58:65: 33:54:b9:52:ce:c5:d0:66:c8:0b:ac:6d:15:f4:6d: cb:b1:7c:98:7f:8f:74:fe:af:ef:ef:e5:ce:48:de: de:16:4d:b9:b6:c8:65:25:d5:92:f4:28:7f:8e:95: 41:1f:65:3b:dd:57:5d:8c:73:e3:47:9c:9f:be:ef: 1f:18:2c:6f:44:85:99:c0:77:09:b3:05:7f:a8:54: c1:76:4b:a5:4c:7c:95:47:c9:ef:ff:da:84:09:c4: 9c:ae:f0:87:ba:b5:79:4b:da:08:a8:c9:39:af:97: 75:66:56:da:95:ee:f1:69:fa:aa:3f:b5:38:66:f9: cb:9f:46:78:c5:b2:eb:03:cf:36:6a:c9:a4:e7:df: 1c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:FA:AB:DF:EB:DD:F4:FD:26:3D:D8:7E:59:26:39:A5:A8:90:C8 X509v3 Authority Key Identifier: keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:273::/48 Signature Algorithm: sha256WithRSAEncryption 6b:c3:1f:d2:18:43:cd:7b:b0:50:e3:31:ac:23:57:6a:76:82: 96:d7:52:1f:ae:72:1b:23:f3:1a:88:49:c3:f9:bb:6b:a1:bf: 89:f9:55:db:bf:e5:03:1c:3d:b8:ac:08:63:31:54:16:41:67: 5b:20:6c:6e:93:7d:be:b9:7f:00:a6:40:8a:70:31:aa:0b:36: 94:d8:32:d5:c3:4d:1d:50:11:67:70:0e:81:ad:77:af:c3:ce: e0:cb:7d:bf:7f:17:06:1f:40:b9:31:07:00:8a:c9:1c:73:f4: 9c:c9:a0:87:7e:5e:96:9c:76:28:aa:4e:73:41:db:09:fa:10: 44:b9:b9:10:4f:2c:11:f3:d3:6d:d9:f8:a6:a1:b6:d5:f4:9b: e1:05:eb:7d:1d:41:26:f3:14:90:b1:92:f8:b2:b7:93:2f:30: 19:3f:19:b7:95:a9:ff:97:48:28:8f:75:53:5a:8b:90:65:89: 45:95:07:b5:75:29:6d:12:5c:dc:0c:86:02:65:2d:db:58:ab: b0:bd:01:91:e8:cd:e7:e5:b5:be:97:39:81:d0:4c:e6:4c:66: f1:30:db:7b:ef:14:2d:9e:b5:ec:96:9b:0c:5b:95:93:68:cb: 59:88:4a:e6:c0:f2:f3:57:d6:9f:09:89:94:0b:3d:48:d9:a2: ae:dc:0c:7d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUMXViRZ+dxcI1IO1vk/K9CiFsFSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy N0MxOTFBNjAeFw0yNTA2MDIwMTU5MzFaFw0yNjA2MDEwMjA0MzFaMDMxMTAvBgNV BAMTKDFGRDBGQUFCREZFQkRERjRGRDI2M0REODdFNTkyNjM5QTVBODkwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46oWwAlYrBxUeZmFaFsdV8H8J 2vOv9ERRrWiP9zp+At37JiW208Ih6BiLcEbg43sUEGE0hndYEQO/V5xy0jVJOZlP 2+fZz7iI2LuNHexZVQjzCoSWmXNCSJjTfsC6GWwXYq9gq0k1MiK1h5ZGwZ8DwSME RK1YZTNUuVLOxdBmyAusbRX0bcuxfJh/j3T+r+/v5c5I3t4WTbm2yGUl1ZL0KH+O lUEfZTvdV12Mc+NHnJ++7x8YLG9EhZnAdwmzBX+oVMF2S6VMfJVHye//2oQJxJyu 8Ie6tXlL2gioyTmvl3VmVtqV7vFp+qo/tThm+cufRnjFsusDzzZqyaTn3xw1AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUH9D6q9/r3fT9Jj3YflkmOaWokMgwHwYDVR0j BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx OTFBNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzZhYTAzLTFiNGQtNDM4ZS1h OWYzLWVmZWFhZTZiMDkyMS8wLzMyMzAzMDMxM2E2NDY2MzAzYTMyMzczMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wAnMw DQYJKoZIhvcNAQELBQADggEBAGvDH9IYQ817sFDjMawjV2p2gpbXUh+uchsj8xqI ScP5u2uhv4n5Vdu/5QMcPbisCGMxVBZBZ1sgbG6Tfb65fwCmQIpwMaoLNpTYMtXD TR1QEWdwDoGtd6/DzuDLfb9/FwYfQLkxBwCKyRxz9JzJoId+XpacdiiqTnNB2wn6 EES5uRBPLBHz023Z+KahttX0m+EF630dQSbzFJCxkviyt5MvMBk/GbeVqf+XSCiP dVNai5BliUWVB7V1KW0SXNwMhgJlLdtYq7C9AZHozefltb6XOYHQTOZMZvEw23vv FC2eteyWmwxblZNoy1mISubA8vNX1p8JiZQLPUjZoq7cDH0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:24 2025 by rpki-client