$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa File: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (raw, json) Hash identifier: 0Va8dfmQpSBmOg74IAPb4RGOIS0UpCgpkBTTVh/iLok= Subject key identifier: EF:25:2D:3E:3C:C1:0F:09:E7:98:E6:1A:78:84:9B:5E:AA:1B:73:59 Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: 7D2C39F20840076E4D8677405AB0089345711A94 Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa Signing time: Fri 25 Jul 2025 05:00:02 +0000 ROA not before: Fri 25 Jul 2025 04:55:02 +0000 ROA not after: Fri 24 Jul 2026 05:00:02 +0000 asID: 45731 IP address blocks: 2001:df0:bc::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2c:39:f2:08:40:07:6e:4d:86:77:40:5a:b0:08:93:45:71:1a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Jul 25 04:55:02 2025 GMT Not After : Jul 24 05:00:02 2026 GMT Subject: CN=EF252D3E3CC10F09E798E61A78849B5EAA1B7359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:2d:eb:65:da:93:55:5e:d6:75:5e:6c:5d: 51:30:7c:93:39:45:c7:ae:ee:fe:6c:f9:e7:53:6a: 98:98:db:4c:da:5a:b0:d0:5f:d5:4e:1c:b4:98:3b: 39:ba:75:6f:da:3b:0e:8d:25:0e:02:28:24:bb:24: 6e:56:e5:64:68:e9:0a:04:3a:80:af:21:5a:8e:f3: f2:06:97:14:13:bd:c4:a4:2f:15:49:8e:67:1e:a1: f2:8e:c7:40:a5:76:83:c4:a2:b7:51:f1:49:3c:32: 5b:81:32:23:d9:1a:d4:8a:06:fb:de:b7:94:53:7a: c6:1c:bd:c0:71:ed:93:d4:dd:b2:ba:37:67:ff:24: de:ac:39:d0:4b:57:43:c0:65:2a:f8:c6:d2:fa:a5: ba:0d:47:0f:38:55:76:b8:18:7a:5b:5e:00:60:ac: 1d:dc:7b:51:24:95:f4:4e:e4:e0:4e:5f:0d:4b:fa: 4e:b2:ee:22:68:fe:b8:7d:03:87:28:ee:e6:d8:02: cb:58:a5:85:b2:27:c9:a5:3f:f3:eb:c2:d8:8a:a4: 73:92:32:88:f0:f8:f2:e5:15:14:48:68:a3:62:48: 28:23:59:53:b5:9e:c0:e5:28:9a:d4:f2:ea:75:a0: 74:2b:3d:2a:8d:32:b1:4c:c8:f7:61:ba:f2:45:47: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:25:2D:3E:3C:C1:0F:09:E7:98:E6:1A:78:84:9B:5E:AA:1B:73:59 X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:bc::/48 Signature Algorithm: sha256WithRSAEncryption c2:09:3d:ce:11:f3:eb:a4:03:e1:7a:0a:85:57:f7:8f:e5:cb: 58:63:da:fb:b4:ff:aa:c7:8d:80:59:8c:9b:8f:56:18:a0:e6: da:7d:67:5f:59:96:34:fe:c6:a8:b8:4f:11:22:f0:cd:73:4c: b2:93:2c:db:2d:ea:d5:cd:a7:ec:ac:cb:5f:39:72:41:ed:fc: d9:69:06:1f:87:da:12:c5:13:e4:92:08:03:48:f1:be:30:27: 8a:92:a5:73:33:ef:9f:16:1a:2c:04:c8:e5:29:09:28:51:46: c2:b1:88:9d:fa:31:c5:8d:fc:e5:39:f4:c1:4a:93:f3:86:bc: 71:06:83:71:78:8e:e1:d5:50:77:ef:19:cd:df:af:1f:c3:d2: 1c:51:92:5c:09:9e:07:bb:93:93:15:6c:5c:24:cd:8c:52:d2: 5e:10:9a:2a:c8:71:f7:77:9d:3e:98:23:10:8b:f4:35:72:40: c5:cd:9b:cd:88:bf:08:4a:df:31:ba:7f:53:7b:2d:fc:59:4c: 86:2f:f5:3e:e1:92:fa:85:17:59:35:dc:8c:96:67:e7:1c:50: 31:7e:84:a7:fa:a2:62:06:92:23:48:7a:ad:fc:af:96:80:c6: 34:f6:40:0b:6b:f5:ba:8b:2a:81:4a:75:c6:1f:dc:31:f5:f8: 24:d4:47:13 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUfSw58ghAB25NhndAWrAIk0VxGpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yNTA3MjUwNDU1MDJaFw0yNjA3MjQwNTAwMDJaMDMxMTAvBgNV BAMTKEVGMjUyRDNFM0NDMTBGMDlFNzk4RTYxQTc4ODQ5QjVFQUExQjczNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMC3rZdqTVV7WdV5sXVEwfJM5 Rceu7v5s+edTapiY20zaWrDQX9VOHLSYOzm6dW/aOw6NJQ4CKCS7JG5W5WRo6QoE OoCvIVqO8/IGlxQTvcSkLxVJjmceofKOx0CldoPEordR8Uk8MluBMiPZGtSKBvve t5RTesYcvcBx7ZPU3bK6N2f/JN6sOdBLV0PAZSr4xtL6pboNRw84VXa4GHpbXgBg rB3ce1EklfRO5OBOXw1L+k6y7iJo/rh9A4co7ubYAstYpYWyJ8mlP/PrwtiKpHOS Mojw+PLlFRRIaKNiSCgjWVO1nsDlKJrU8up1oHQrPSqNMrFMyPdhuvJFRxcfAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU7yUtPjzBDwnnmOYaeISbXqobc1kwHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZGJiYzA4LTRlOGUtNDRiYS1h NGNmLTA1ZTIzM2RkYTNhNS8wLzMyMzAzMDMxM2E2NDY2MzAzYTYyNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNDM1MzczMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN8AC8MA0G CSqGSIb3DQEBCwUAA4IBAQDCCT3OEfPrpAPhegqFV/eP5ctYY9r7tP+qx42AWYyb j1YYoObafWdfWZY0/saouE8RIvDNc0yykyzbLerVzafsrMtfOXJB7fzZaQYfh9oS xRPkkggDSPG+MCeKkqVzM++fFhosBMjlKQkoUUbCsYid+jHFjfzlOfTBSpPzhrxx BoNxeI7h1VB37xnN368fw9IcUZJcCZ4Hu5OTFWxcJM2MUtJeEJoqyHH3d50+mCMQ i/Q1ckDFzZvNiL8ISt8xun9Tey38WUyGL/U+4ZL6hRdZNdyMlmfnHFAxfoSn+qJi BpIjSHqt/K+WgMY09kALa/W6iyqBSnXGH9wx9fgk1EcT -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:00 2025 by rpki-client