$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa File: 323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa (raw, json) Hash identifier: dl0z7TuYwDUuSU57FfKOeKvhobp1vKvNdUgb56XLczs= Subject key identifier: 60:7D:FA:93:2D:15:D0:49:0B:36:BC:53:6E:D7:5C:4D:DA:D8:51:91 Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 3C8DA89FACCED4ED0E6FDC915BE39EF65D598D68 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa Signing time: Tue 22 Jul 2025 09:57:47 +0000 ROA not before: Tue 22 Jul 2025 09:52:47 +0000 ROA not after: Tue 21 Jul 2026 09:57:47 +0000 asID: 131736 IP address blocks: 2404:2cc0:28::/46 maxlen: 46 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 02:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8d:a8:9f:ac:ce:d4:ed:0e:6f:dc:91:5b:e3:9e:f6:5d:59:8d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Jul 22 09:52:47 2025 GMT Not After : Jul 21 09:57:47 2026 GMT Subject: CN=607DFA932D15D0490B36BC536ED75C4DDAD85191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:03:b2:ae:b3:34:a7:4f:54:4b:13:ad:7f:6f: 91:f9:c4:6f:4a:35:d9:d1:4a:df:ac:7a:13:e9:d9: 71:34:dd:be:9d:52:77:50:2c:5e:c9:d2:65:da:53: 21:f9:4c:9f:b4:70:06:81:2d:ea:3d:d9:ae:1a:ed: 15:b0:99:b4:f8:ee:fa:d7:86:a3:ac:a7:da:70:11: a1:15:6c:aa:66:70:c4:ab:6f:1e:c6:ab:c9:a4:85: 85:d9:64:12:6c:a1:85:e5:a6:24:a8:16:25:f8:1a: e8:2c:e1:7f:24:4c:b0:eb:b8:53:9f:d6:2b:16:fd: 10:68:3d:0b:20:9f:4c:b0:d0:fe:07:56:4f:b3:27: e8:14:f0:b4:f6:3b:cb:f8:3a:6c:35:5d:f0:2c:06: 10:7d:46:45:f2:5a:02:eb:b8:5c:e4:75:31:18:8a: 97:89:91:c5:38:de:be:ac:b1:3c:58:ec:ba:80:fc: 30:14:33:4e:2c:6a:68:97:f4:e0:d6:be:48:64:04: cd:13:fa:0f:bd:a9:cb:f7:ed:56:14:8e:0e:1b:58: 2b:7f:23:9c:a6:6c:3f:29:e6:cd:19:d8:55:80:52: 91:ad:07:f8:cb:55:14:bb:6b:46:17:e8:12:ef:a0: 7a:3a:96:50:b2:35:4d:63:21:a9:52:81:3c:de:c9: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7D:FA:93:2D:15:D0:49:0B:36:BC:53:6E:D7:5C:4D:DA:D8:51:91 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:2cc0:28::/46 Signature Algorithm: sha256WithRSAEncryption 83:7f:91:35:a3:c9:45:41:e7:a5:78:94:3c:01:30:14:15:33: a1:e8:8c:d8:72:42:8f:62:5e:cd:fd:4a:cd:44:fa:ea:be:dd: 7a:4e:be:a1:e9:a5:45:f7:5d:64:93:9a:6a:f7:8d:5e:17:b5: f6:3c:fc:2d:b4:1b:1f:5a:cd:36:b0:6f:62:78:7e:17:0a:48: b4:69:f0:86:97:fd:b4:f0:ec:93:62:57:08:df:92:0e:39:c0: c8:38:20:64:2e:c5:91:af:5e:15:31:6a:37:ea:86:0f:65:65: 11:42:c0:7e:36:82:11:69:d6:3e:3a:85:fb:b5:a1:ad:cd:bb: a6:73:97:c1:72:d9:d2:17:c0:b2:fe:35:e7:e3:09:17:ef:7b: f2:93:54:ed:8d:dd:49:33:13:4a:f8:36:05:f6:39:76:39:79: 9d:c7:28:0e:0b:db:0e:b4:f9:e5:82:3e:1e:9c:3b:62:51:a0: 15:3b:b9:9f:7f:dd:03:19:6c:a7:8d:f9:61:a2:59:f8:b2:3e: 48:94:1c:67:41:f4:8c:56:b3:0b:9c:d9:d8:ea:96:8a:ea:4f: ed:ec:dd:29:b4:d0:88:56:2a:29:55:c8:fc:a5:89:65:b7:f1: f3:f3:0d:f3:03:9e:f1:45:80:7f:5f:f0:3d:cc:4c:b6:cb:28: f2:69:14:3e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPI2on6zO1O0Ob9yRW+Oe9l1ZjWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTA3MjIwOTUyNDdaFw0yNjA3MjEwOTU3NDdaMDMxMTAvBgNV BAMTKDYwN0RGQTkzMkQxNUQwNDkwQjM2QkM1MzZFRDc1QzREREFEODUxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdA7KuszSnT1RLE61/b5H5xG9K NdnRSt+sehPp2XE03b6dUndQLF7J0mXaUyH5TJ+0cAaBLeo92a4a7RWwmbT47vrX hqOsp9pwEaEVbKpmcMSrbx7Gq8mkhYXZZBJsoYXlpiSoFiX4Gugs4X8kTLDruFOf 1isW/RBoPQsgn0yw0P4HVk+zJ+gU8LT2O8v4Omw1XfAsBhB9RkXyWgLruFzkdTEY ipeJkcU43r6ssTxY7LqA/DAUM04samiX9ODWvkhkBM0T+g+9qcv37VYUjg4bWCt/ I5ymbD8p5s0Z2FWAUpGtB/jLVRS7a0YX6BLvoHo6llCyNU1jIalSgTzeyeK3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUYH36ky0V0EkLNrxTbtdcTdrYUZEwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyNWNkYTM2LTY5M2EtNGMxYS1i YTllLWUwZTE3ODExMjE0MC8wLzMyMzQzMDM0M2EzMjYzNjMzMDNhMzIzODNhM2Ey ZjM0MzYyZDM0MzYyMDNkM2UyMDMxMzMzMTM3MzMzNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAiQELMAA KDANBgkqhkiG9w0BAQsFAAOCAQEAg3+RNaPJRUHnpXiUPAEwFBUzoeiM2HJCj2Je zf1KzUT66r7dek6+oemlRfddZJOaaveNXhe19jz8LbQbH1rNNrBvYnh+FwpItGnw hpf9tPDsk2JXCN+SDjnAyDggZC7Fka9eFTFqN+qGD2VlEULAfjaCEWnWPjqF+7Wh rc27pnOXwXLZ0hfAsv415+MJF+978pNU7Y3dSTMTSvg2BfY5djl5nccoDgvbDrT5 5YI+Hpw7YlGgFTu5n3/dAxlsp435YaJZ+LI+SJQcZ0H0jFazC5zZ2OqWiupP7ezd KbTQiFYqKVXI/KWJZbfx8/MN8wOe8UWAf1/wPcxMtsso8mkUPg== -----END CERTIFICATE-----Generated at Sat Aug 9 22:44:58 2025 by rpki-client