$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa File: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (raw, json) Hash identifier: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk= Subject key identifier: F3:49:38:5E:BE:23:08:AB:44:2E:4E:52:74:08:69:01:7A:78:92:55 Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 70BFADF23273F952C74BA4C94B0D600F97A72C73 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa Signing time: Fri 27 Jun 2025 11:10:53 +0000 ROA not before: Fri 27 Jun 2025 11:05:53 +0000 ROA not after: Fri 26 Jun 2026 11:10:53 +0000 asID: 153131 IP address blocks: 2001:df4:6b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bf:ad:f2:32:73:f9:52:c7:4b:a4:c9:4b:0d:60:0f:97:a7:2c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Jun 27 11:05:53 2025 GMT Not After : Jun 26 11:10:53 2026 GMT Subject: CN=F349385EBE2308AB442E4E52740869017A789255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:71:81:f7:5a:7c:ba:ab:ac:04:71:be:fe:96: 14:19:cd:15:69:de:e6:0e:af:a0:76:2e:0c:bc:16: 49:5b:4b:0c:2e:bd:cf:41:36:df:d9:b0:21:d3:95: 33:2f:86:b1:2c:0c:57:2a:a3:3a:58:61:df:67:22: 2e:87:32:7c:62:48:69:d8:59:3b:12:79:f6:68:a1: 90:d0:bd:66:ba:30:31:08:8c:9f:eb:b8:7c:2a:46: d9:37:0f:34:93:ed:d1:e5:dc:17:1b:98:d2:21:e7: 7e:19:fd:f3:ed:21:0c:fe:82:ba:b1:3e:6b:ba:b0: 01:df:98:36:93:76:c7:c8:63:ca:b3:f1:86:b9:e9: 7d:8b:bc:4c:6e:ac:d7:30:14:23:15:97:e7:7a:7f: ab:b5:bf:78:ca:0e:0c:dd:c0:4b:66:64:d7:a2:33: f8:d3:b7:c6:ba:43:36:90:6f:f4:48:61:b5:a3:43: c5:50:a8:4c:8b:76:0b:b7:80:ea:6b:9b:b4:41:1b: 3b:f3:d5:59:c4:ff:a9:87:e2:75:07:3c:d4:36:86: 8a:43:2e:b3:fc:29:8b:15:4b:a6:9d:df:42:06:4d: 72:77:17:fd:bf:03:da:75:e6:66:d2:34:61:bf:d9: 8f:6c:39:af:e2:bf:05:65:45:11:74:63:6c:a9:f5: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:49:38:5E:BE:23:08:AB:44:2E:4E:52:74:08:69:01:7A:78:92:55 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:6b40::/48 Signature Algorithm: sha256WithRSAEncryption cb:3c:e0:93:b5:a0:f3:c4:49:6f:bf:23:43:8e:43:bb:b1:71: b9:9d:a5:04:1b:29:a9:41:08:91:c0:5a:5c:d1:09:88:be:8a: 8f:e2:27:eb:e7:35:9c:d9:7a:62:d5:a3:56:d5:b8:53:f6:4f: 75:83:34:f6:47:00:82:57:76:bf:5d:29:16:56:ce:c1:90:fd: 97:c2:c0:f2:4f:2b:34:73:73:33:58:77:76:50:aa:0e:db:37: fd:28:b1:8e:b1:0f:77:02:7f:d5:82:87:c8:e4:84:f2:9b:ed: 7d:f4:58:83:ef:15:85:43:7e:81:c6:66:77:f6:cc:28:69:54: b3:af:6f:ea:d1:4d:f9:36:c3:c1:b0:8e:34:23:af:af:ed:b0: fb:aa:91:f8:af:21:9b:86:d0:8a:f1:4a:a1:2f:1a:fc:d2:f7: b6:19:a1:3f:8a:3b:ad:36:4c:34:4f:e5:82:cc:4d:e8:63:bf: 32:b9:a3:96:13:82:f1:6e:54:10:ac:01:4c:5b:1e:2e:ff:28: 16:de:e2:ce:b5:e1:e8:4c:7d:04:79:c9:3f:ee:e1:07:77:b3: 5a:c9:7b:99:d8:f8:ec:97:0d:7a:e9:b9:9d:b2:4a:45:c3:54: 9b:de:65:c9:6d:c5:33:15:f7:45:ac:1d:72:3b:f5:e7:fd:ee: e5:39:e5:6f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcL+t8jJz+VLHS6TJSw1gD5enLHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTA2MjcxMTA1NTNaFw0yNjA2MjYxMTEwNTNaMDMxMTAvBgNV BAMTKEYzNDkzODVFQkUyMzA4QUI0NDJFNEU1Mjc0MDg2OTAxN0E3ODkyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcYH3Wny6q6wEcb7+lhQZzRVp 3uYOr6B2Lgy8FklbSwwuvc9BNt/ZsCHTlTMvhrEsDFcqozpYYd9nIi6HMnxiSGnY WTsSefZooZDQvWa6MDEIjJ/ruHwqRtk3DzST7dHl3BcbmNIh534Z/fPtIQz+grqx Pmu6sAHfmDaTdsfIY8qz8Ya56X2LvExurNcwFCMVl+d6f6u1v3jKDgzdwEtmZNei M/jTt8a6QzaQb/RIYbWjQ8VQqEyLdgu3gOprm7RBGzvz1VnE/6mH4nUHPNQ2hopD LrP8KYsVS6ad30IGTXJ3F/2/A9p15mbSNGG/2Y9sOa/ivwVlRRF0Y2yp9cLHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU80k4Xr4jCKtELk5SdAhpAXp4klUwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyMTFmMzQ3LWExZTctNDcxZC1h ZDIwLWRhNzZhYWJmMzg0Yy8xLzMyMzAzMDMxM2E2NDY2MzQzYTM2NjIzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzMzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9GtAMA0GCSqGSIb3DQEBCwUAA4IBAQDLPOCTtaDzxElvvyNDjkO7sXG5naUEGymp QQiRwFpc0QmIvoqP4ifr5zWc2Xpi1aNW1bhT9k91gzT2RwCCV3a/XSkWVs7BkP2X wsDyTys0c3MzWHd2UKoO2zf9KLGOsQ93An/VgofI5ITym+199FiD7xWFQ36BxmZ3 9swoaVSzr2/q0U35NsPBsI40I6+v7bD7qpH4ryGbhtCK8UqhLxr80ve2GaE/ijut Nkw0T+WCzE3oY78yuaOWE4LxblQQrAFMWx4u/ygW3uLOteHoTH0Eeck/7uEHd7Na yXuZ2Pjslw166bmdskpFw1Sb3mXJbcUzFfdFrB1yO/Xn/e7lOeVv -----END CERTIFICATE-----Generated at Wed Nov 5 19:13:38 2025 by rpki-client