$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa File: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (raw, json) Hash identifier: DZhIHh+Q1/lFglHPCtQYtJARiOU+Khz/cuUC8LvdiAk= Subject key identifier: 30:50:03:22:6C:4D:A6:DD:A2:4A:C8:6F:D6:47:6E:84:CA:02:BC:30 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 71FB49A6EF00C5C10C024CF608D177D28A91C629 Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa Signing time: Fri 01 Aug 2025 07:00:01 +0000 ROA not before: Fri 01 Aug 2025 06:55:01 +0000 ROA not after: Fri 31 Jul 2026 07:00:01 +0000 asID: 136070 IP address blocks: 2001:df0:1700::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fb:49:a6:ef:00:c5:c1:0c:02:4c:f6:08:d1:77:d2:8a:91:c6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Aug 1 06:55:01 2025 GMT Not After : Jul 31 07:00:01 2026 GMT Subject: CN=305003226C4DA6DDA24AC86FD6476E84CA02BC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:2c:61:44:28:fb:94:7f:05:1b:d5:4e:51: f8:0a:88:d9:7f:d6:5c:70:d2:80:6c:78:2e:da:f1: 30:e0:3c:05:80:a0:a3:fe:0d:8f:4b:f3:22:59:03: d2:32:9a:fd:c8:8e:64:cd:fc:61:bb:81:38:53:18: 2c:82:4a:b0:0f:9f:62:3a:6e:87:75:e1:67:28:3e: 67:c8:27:23:07:8d:bc:50:a7:8f:0b:fa:76:cd:2d: 48:76:09:44:d8:95:88:c2:f7:a4:12:95:51:2d:06: aa:f1:91:4d:4e:2a:5a:dd:83:7a:47:88:04:6f:44: 00:10:1e:80:25:06:cf:65:63:f1:ef:09:eb:a7:13: ef:42:14:09:7d:dd:e7:be:2d:57:41:a0:ed:97:72: d4:e0:c0:ec:13:2a:8c:85:e4:fc:4f:b0:b4:84:bb: c8:5d:e3:1d:5c:e6:67:5e:7a:8b:29:5b:0d:f2:99: f6:82:42:d4:6a:d5:f6:62:e9:8b:40:35:67:28:9c: 82:48:d2:2b:36:19:db:0d:c0:c9:d6:2b:e0:ec:b4: 53:a9:d5:18:7f:b6:79:17:99:3a:3c:50:10:2f:79: 84:e1:f0:0c:81:ec:ff:40:66:43:af:0d:ca:b9:88: 0e:49:19:b6:5d:5f:e7:f0:e6:28:dc:ca:ec:82:6e: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:50:03:22:6C:4D:A6:DD:A2:4A:C8:6F:D6:47:6E:84:CA:02:BC:30 X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:1700::/48 Signature Algorithm: sha256WithRSAEncryption a4:30:72:7f:fb:c9:da:9d:e4:e8:b6:8a:53:9c:af:b4:03:76: 86:3a:51:cd:12:e3:d7:07:33:0c:12:d8:0b:a4:c8:7d:08:e1: 87:39:77:35:df:ae:d2:02:23:e8:cd:81:e5:c0:bc:3a:8f:72: ca:25:20:91:ed:1c:33:64:d9:1b:7b:3b:71:3e:de:5a:37:f6: 44:dc:3f:01:86:a4:87:13:c5:c1:97:e0:cb:4a:7a:50:4f:26: 62:68:9e:7b:12:ae:69:e4:92:06:44:ba:da:0a:8e:58:21:cc: 64:f5:94:4c:c3:f7:4e:f9:52:df:2a:8f:6f:f9:b3:1c:5a:c2: 3c:01:f5:e7:ae:e1:fc:d4:92:1c:1f:1b:8f:ea:b6:b6:87:c9: 7d:16:c2:cb:be:d7:e9:2c:58:2e:b1:15:5c:0e:7e:c7:c9:77: 11:da:48:b3:72:91:7d:87:04:b9:f2:50:c6:26:7d:ac:7a:c9: 50:68:c7:52:07:14:0a:f2:97:1e:d7:93:18:ff:d8:81:5a:c0: 05:42:c6:5c:39:7d:e9:8a:65:09:43:d8:d9:75:e1:14:ff:93: 11:54:39:9e:bd:74:a2:69:4c:78:10:83:0e:2c:1a:59:45:45: cb:ba:dc:1d:20:2f:54:13:b6:d9:4a:81:2e:d4:62:0b:6d:c7: 0c:a3:d5:ec -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcftJpu8AxcEMAkz2CNF30oqRxikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNTA4MDEwNjU1MDFaFw0yNjA3MzEwNzAwMDFaMDMxMTAvBgNV BAMTKDMwNTAwMzIyNkM0REE2RERBMjRBQzg2RkQ2NDc2RTg0Q0EwMkJDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/CxhRCj7lH8FG9VOUfgKiNl/ 1lxw0oBseC7a8TDgPAWAoKP+DY9L8yJZA9Iymv3IjmTN/GG7gThTGCyCSrAPn2I6 bod14WcoPmfIJyMHjbxQp48L+nbNLUh2CUTYlYjC96QSlVEtBqrxkU1OKlrdg3pH iARvRAAQHoAlBs9lY/HvCeunE+9CFAl93ee+LVdBoO2XctTgwOwTKoyF5PxPsLSE u8hd4x1c5mdeeospWw3ymfaCQtRq1fZi6YtANWconIJI0is2GdsNwMnWK+DstFOp 1Rh/tnkXmTo8UBAveYTh8AyB7P9AZkOvDcq5iA5JGbZdX+fw5ijcyuyCbn2rAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMFADImxNpt2iSshv1kduhMoCvDAwHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmMzc3NzExLTFlM2QtNGU1YS1h NGFjLTA1YTFjNTAyYWQyOC8wLzMyMzAzMDMxM2E2NDY2MzAzYTMxMzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzNzMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8BcAMA0GCSqGSIb3DQEBCwUAA4IBAQCkMHJ/+8naneTotopTnK+0A3aGOlHNEuPX BzMMEtgLpMh9COGHOXc1367SAiPozYHlwLw6j3LKJSCR7RwzZNkbeztxPt5aN/ZE 3D8BhqSHE8XBl+DLSnpQTyZiaJ57Eq5p5JIGRLraCo5YIcxk9ZRMw/dO+VLfKo9v +bMcWsI8AfXnruH81JIcHxuP6ra2h8l9FsLLvtfpLFgusRVcDn7HyXcR2kizcpF9 hwS58lDGJn2seslQaMdSBxQK8pce15MY/9iBWsAFQsZcOX3pimUJQ9jZdeEU/5MR VDmevXSiaUx4EIMOLBpZRUXLutwdIC9UE7bZSoEu1GILbccMo9Xs -----END CERTIFICATE-----Generated at Fri Aug 8 10:09:39 2025 by rpki-client