$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa File: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (raw, json) Hash identifier: k8Mluks9NLDeIH36Z86fJ5gozvV2Rw7S1TNUUAWYhlE= Subject key identifier: 7B:7F:D7:D1:A4:07:27:C9:FD:E4:17:71:9E:A2:8E:BA:78:E5:89:82 Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 4DD3235DE6CF03AF8AB3DC7E7BE188DC3ED59FB8 Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa Signing time: Fri 12 Sep 2025 12:00:00 +0000 ROA not before: Fri 12 Sep 2025 11:55:00 +0000 ROA not after: Fri 11 Sep 2026 12:00:00 +0000 asID: 149395 IP address blocks: 2001:df0:7bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d3:23:5d:e6:cf:03:af:8a:b3:dc:7e:7b:e1:88:dc:3e:d5:9f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Sep 12 11:55:00 2025 GMT Not After : Sep 11 12:00:00 2026 GMT Subject: CN=7B7FD7D1A40727C9FDE417719EA28EBA78E58982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:8a:36:e5:91:05:b5:36:1e:c2:0c:ab:1f: 91:f8:36:a4:bc:9c:e4:75:97:8a:d4:ce:20:0b:b5: 71:95:cc:5a:cd:a0:63:ee:1d:16:51:6a:96:01:61: 21:2c:ea:bf:47:18:de:a6:db:ab:4a:81:a8:e4:fe: 9e:49:13:83:6b:d4:2a:c2:25:e5:30:18:25:70:9d: d6:6a:0e:38:fe:02:b6:8e:1c:b7:94:71:94:0a:5a: 97:92:00:c0:9e:34:3c:df:31:d7:bc:88:91:d6:cd: 76:c1:7a:3e:63:bf:00:43:93:90:7a:17:49:47:2c: 04:3a:eb:f6:88:c8:9b:a6:2e:e1:28:1f:2b:d4:e3: 8c:f3:b0:33:d3:02:a2:dc:09:12:7f:09:da:6c:3c: 5e:a9:99:1b:e8:1d:7b:61:7f:ad:5c:85:d5:c2:0c: 95:49:b2:6c:6e:78:06:83:d9:fd:27:64:99:6b:21: 8b:a0:d1:65:47:4e:e4:db:4d:48:cc:26:42:e9:b5: 23:9a:fb:0e:46:7b:21:e3:82:92:8f:51:df:53:7d: 89:1a:17:fc:5a:09:60:e7:f8:7b:f3:88:c1:ce:46: 86:5b:db:cf:b9:8d:19:7f:ba:9b:b4:b9:7f:16:ef: 1d:08:bc:16:fa:e5:d0:00:99:a4:f5:5c:76:d3:60: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7F:D7:D1:A4:07:27:C9:FD:E4:17:71:9E:A2:8E:BA:78:E5:89:82 X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 80:3f:e6:18:a9:b0:c8:b6:19:57:58:39:90:2f:b8:83:aa:ef: 6e:63:03:09:07:e3:31:05:ef:e2:53:8e:26:4f:18:84:dc:3f: 38:8e:cc:e4:6d:21:3b:3e:e9:11:6b:23:1a:0e:43:7e:c9:9c: ef:4d:a0:0b:ba:6c:b8:d6:9d:1b:3f:60:02:66:75:40:84:c6: b5:70:dd:e7:2c:27:ce:0b:68:3c:cf:94:5d:f5:81:02:b2:08: 15:a7:b5:b7:d3:09:4c:49:f5:7f:5b:ff:00:bd:4b:74:cd:37: 69:53:00:d8:43:49:64:9f:7a:6c:43:17:7d:2d:9c:84:64:28: 81:1d:f1:70:0c:3a:c6:f0:15:ca:0c:f3:c5:fc:10:21:83:a9: c5:02:60:4b:84:53:a7:b0:2b:d9:d4:ef:b8:82:53:6f:84:d0: 65:7f:50:4c:04:5a:10:96:81:8c:1d:37:f4:89:51:b8:80:7f: f4:7d:97:13:5f:20:11:72:6b:7e:2b:bb:2e:42:a5:7b:7d:7b: fd:8e:b1:bb:c3:f1:fa:cb:c2:13:b1:ce:e3:db:0f:2b:fd:64: 05:b9:df:38:b5:28:01:52:ba:38:de:c9:eb:49:42:fc:ef:b9: 48:50:1a:78:9c:03:65:a9:80:5c:1c:5c:b7:48:6a:80:a4:98: 06:90:59:c3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTdMjXebPA6+Ks9x+e+GI3D7Vn7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNTA5MTIxMTU1MDBaFw0yNjA5MTExMjAwMDBaMDMxMTAvBgNV BAMTKDdCN0ZEN0QxQTQwNzI3QzlGREU0MTc3MTlFQTI4RUJBNzhFNTg5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/voo25ZEFtTYewgyrH5H4NqS8 nOR1l4rUziALtXGVzFrNoGPuHRZRapYBYSEs6r9HGN6m26tKgajk/p5JE4Nr1CrC JeUwGCVwndZqDjj+AraOHLeUcZQKWpeSAMCeNDzfMde8iJHWzXbBej5jvwBDk5B6 F0lHLAQ66/aIyJumLuEoHyvU44zzsDPTAqLcCRJ/CdpsPF6pmRvoHXthf61chdXC DJVJsmxueAaD2f0nZJlrIYug0WVHTuTbTUjMJkLptSOa+w5GeyHjgpKPUd9TfYka F/xaCWDn+HvziMHORoZb28+5jRl/upu0uX8W7x0IvBb65dAAmaT1XHbTYH+rAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUe3/X0aQHJ8n95BdxnqKOunjliYIwHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0MWUwOGVmLTNhZTYtNGI5MC1i NDc3LTBlOTE0MGQwNDM4MC8wLzMyMzAzMDMxM2E2NDY2MzAzYTM3NjI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM5MzMzOTM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8HvAMA0GCSqGSIb3DQEBCwUAA4IBAQCAP+YYqbDIthlXWDmQL7iDqu9uYwMJB+Mx Be/iU44mTxiE3D84jszkbSE7PukRayMaDkN+yZzvTaALumy41p0bP2ACZnVAhMa1 cN3nLCfOC2g8z5Rd9YECsggVp7W30wlMSfV/W/8AvUt0zTdpUwDYQ0lkn3psQxd9 LZyEZCiBHfFwDDrG8BXKDPPF/BAhg6nFAmBLhFOnsCvZ1O+4glNvhNBlf1BMBFoQ loGMHTf0iVG4gH/0fZcTXyARcmt+K7suQqV7fXv9jrG7w/H6y8ITsc7j2w8r/WQF ud84tSgBUro43snrSUL877lIUBp4nANlqYBcHFy3SGqApJgGkFnD -----END CERTIFICATE-----Generated at Wed Nov 5 03:44:12 2025 by rpki-client