$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa File: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (raw, json) Hash identifier: xx/q8Pg4Xq4PjVzlGqUqXNKdPIEC0luemVSHSnJC5jE= Subject key identifier: 2A:41:2C:34:11:42:63:8D:8C:FC:24:87:9F:56:C0:25:5C:3F:F3:AB Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 4F441AF5CA84222ECF6861A082D631D40DD9A282 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa Signing time: Mon 03 Nov 2025 10:02:23 +0000 ROA not before: Mon 03 Nov 2025 09:57:23 +0000 ROA not after: Mon 02 Nov 2026 10:02:23 +0000 asID: 132678 IP address blocks: 2001:df3:7000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:44:1a:f5:ca:84:22:2e:cf:68:61:a0:82:d6:31:d4:0d:d9:a2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Nov 3 09:57:23 2025 GMT Not After : Nov 2 10:02:23 2026 GMT Subject: CN=2A412C341142638D8CFC24879F56C0255C3FF3AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:7f:78:49:35:f4:5e:ed:1e:b2:fc:75:87: 8a:be:73:5a:7f:b6:91:15:74:b7:e7:a9:35:97:04: 3c:d5:62:1e:9e:43:e6:ab:cc:07:9a:12:3d:55:da: 52:e3:4a:6a:27:be:12:97:60:c6:5a:3a:57:25:9a: 5c:3f:14:5a:b0:97:e4:eb:2d:ac:8c:69:7b:28:30: e1:2a:fc:b0:28:6e:3a:da:5b:3f:b3:e2:0e:d8:8d: 79:48:a0:49:3f:7e:7b:9b:fe:f4:34:36:1a:a6:c2: ce:04:ef:58:4d:a2:e7:2c:75:9a:e0:4e:b0:f2:2d: 17:cd:6f:49:cf:5c:08:54:f9:75:61:e7:1f:bc:be: 51:f3:f4:54:29:1f:54:4d:6d:c8:6d:0f:44:e6:af: de:80:c2:a7:11:c0:43:78:92:cb:bb:3a:88:6c:a2: be:96:b9:e8:fa:be:84:14:74:f2:3d:e1:c3:58:a4: 40:40:4b:b4:62:64:41:ab:0c:2a:83:d0:3f:a8:7c: eb:8e:42:16:5e:79:dc:48:fc:cd:27:50:11:36:a9: 38:38:03:25:3e:45:d1:a0:f5:59:e6:a1:80:b5:3f: 83:f9:31:10:f3:a8:33:24:3d:eb:6a:2b:e3:57:92: bd:3e:87:5c:8b:4e:9e:d6:70:8f:d1:d8:96:fa:da: a0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:2C:34:11:42:63:8D:8C:FC:24:87:9F:56:C0:25:5C:3F:F3:AB X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:7000::/48 Signature Algorithm: sha256WithRSAEncryption 87:38:c2:78:d8:fe:93:6f:9b:91:22:46:f3:c3:92:13:e4:b3: e8:e9:b5:62:73:24:4e:cb:76:9e:1a:cf:01:49:a7:18:92:66: 84:a3:83:8b:ae:ce:91:b1:f1:67:22:4d:de:56:24:4d:d6:82: e1:fb:ba:df:b2:c3:06:90:f4:20:8c:42:5c:05:b2:34:64:c6: 8a:ae:bf:f7:9b:06:36:7e:01:dd:e3:5f:fa:0e:55:9f:24:a5: 01:27:40:7e:cf:b5:b8:d6:7a:fa:e2:ad:2d:ad:bf:af:59:fb: 46:18:5b:23:9e:17:5f:b3:c9:6d:e7:ce:f6:7c:03:11:f9:10: 89:e3:2c:8c:90:e5:3f:c5:e0:e7:46:0a:77:45:3c:8d:6d:36: 5c:ae:82:ab:57:20:b5:49:c2:64:cb:e8:35:7b:32:ff:54:2a: 81:df:f0:09:11:c3:46:c6:25:7d:9f:a2:d0:01:fc:74:81:51: bb:2b:c4:e4:02:9f:71:56:da:fc:8c:3d:a7:8e:a8:cb:d3:2b: 74:81:53:d8:cd:41:f0:00:ea:90:20:ab:fc:31:3b:25:df:38: 4c:53:a6:0d:69:24:9a:bb:50:08:63:b9:a1:5f:99:7e:ac:a7: 30:91:48:34:77:27:00:92:e9:79:0c:5b:63:6c:f5:94:c9:84: 15:71:de:32 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUT0Qa9cqEIi7PaGGggtYx1A3ZooIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTExMDMwOTU3MjNaFw0yNjExMDIxMDAyMjNaMDMxMTAvBgNV BAMTKDJBNDEyQzM0MTE0MjYzOEQ4Q0ZDMjQ4NzlGNTZDMDI1NUMzRkYzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOf394STX0Xu0esvx1h4q+c1p/ tpEVdLfnqTWXBDzVYh6eQ+arzAeaEj1V2lLjSmonvhKXYMZaOlclmlw/FFqwl+Tr LayMaXsoMOEq/LAobjraWz+z4g7YjXlIoEk/fnub/vQ0Nhqmws4E71hNoucsdZrg TrDyLRfNb0nPXAhU+XVh5x+8vlHz9FQpH1RNbchtD0Tmr96AwqcRwEN4ksu7Oohs or6Wuej6voQUdPI94cNYpEBAS7RiZEGrDCqD0D+ofOuOQhZeedxI/M0nUBE2qTg4 AyU+RdGg9VnmoYC1P4P5MRDzqDMkPetqK+NXkr0+h1yLTp7WcI/R2Jb62qCRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUKkEsNBFCY42M/CSHn1bAJVw/86swHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlYTBjZjlhLWM1N2QtNDM5NS05 MjQ5LWJmY2Y0NjcyNDI4Mi8wLzMyMzAzMDMxM2E2NDY2MzMzYTM3MzAzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMyMzYzNzM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 83AAMA0GCSqGSIb3DQEBCwUAA4IBAQCHOMJ42P6Tb5uRIkbzw5IT5LPo6bVicyRO y3aeGs8BSacYkmaEo4OLrs6RsfFnIk3eViRN1oLh+7rfssMGkPQgjEJcBbI0ZMaK rr/3mwY2fgHd41/6DlWfJKUBJ0B+z7W41nr64q0trb+vWftGGFsjnhdfs8lt5872 fAMR+RCJ4yyMkOU/xeDnRgp3RTyNbTZcroKrVyC1ScJky+g1ezL/VCqB3/AJEcNG xiV9n6LQAfx0gVG7K8TkAp9xVtr8jD2njqjL0yt0gVPYzUHwAOqQIKv8MTsl3zhM U6YNaSSau1AIY7mhX5l+rKcwkUg0dycAkul5DFtjbPWUyYQVcd4y -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:36 2025 by rpki-client