$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa File: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (raw, json) Hash identifier: ea0BH5+9TDEtitqep4Xyx8IGG6HIfg5zxzhcj4dvnnA= Subject key identifier: C0:BD:AD:88:D1:DC:7C:3D:1A:A8:A2:36:35:6F:6C:81:D7:4C:2C:1B Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Certificate serial: 173F13FF5BB2FC18E32E5BA3906727680EC60520 Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa Signing time: Mon 22 Sep 2025 06:30:23 +0000 ROA not before: Mon 22 Sep 2025 06:25:23 +0000 ROA not after: Mon 21 Sep 2026 06:30:23 +0000 asID: 132647 IP address blocks: 2001:df5:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3f:13:ff:5b:b2:fc:18:e3:2e:5b:a3:90:67:27:68:0e:c6:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Validity Not Before: Sep 22 06:25:23 2025 GMT Not After : Sep 21 06:30:23 2026 GMT Subject: CN=C0BDAD88D1DC7C3D1AA8A236356F6C81D74C2C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:5c:7b:6a:8b:27:09:44:c3:bf:cc:73:86: 9c:25:68:96:5f:2d:1f:53:98:44:5b:97:55:f8:50: 35:b4:4a:bf:7d:3b:5c:c5:41:b5:2f:3f:f2:f1:a1: 0c:cc:58:ca:6f:0a:65:2a:73:5d:d5:71:f3:d1:a2: bc:4e:79:7c:64:60:05:14:0d:f1:43:fc:28:c6:28: 75:8f:dc:ba:0f:fc:a0:8d:ff:4d:28:e2:56:a0:1e: 29:77:c0:0b:40:ec:97:99:83:50:0a:73:81:14:db: b2:e2:a3:c4:5e:0e:1d:be:de:ae:76:6a:d8:40:e4: 0d:ba:98:d1:32:77:92:dd:c7:72:d2:27:8b:29:de: 6a:b1:32:ed:cf:f9:40:cc:c4:6b:10:7d:ec:1d:1e: 5c:1a:ef:1f:3a:7f:8e:87:62:0b:9d:39:20:af:d5: cd:e4:34:3d:3a:9d:57:88:2c:a0:e9:03:1b:98:dd: ee:fb:7a:4a:3b:71:9b:41:d6:e2:cd:50:fa:00:4e: a2:3b:33:c9:08:4d:5b:f8:28:74:e2:62:88:20:d1: 51:17:de:cc:a1:74:d6:3d:21:74:72:8e:67:a3:4a: 18:aa:2f:f0:d9:21:4a:e6:61:42:cc:42:cf:73:c3: 0c:d3:31:b1:0c:6a:fa:a8:6d:0a:e0:94:be:41:84: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BD:AD:88:D1:DC:7C:3D:1A:A8:A2:36:35:6F:6C:81:D7:4C:2C:1B X509v3 Authority Key Identifier: keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:4000::/48 Signature Algorithm: sha256WithRSAEncryption 3c:16:c7:e0:ee:4c:ff:1c:e3:ea:b9:21:bd:7c:18:de:dd:43: 20:74:97:26:ab:44:07:de:d8:c5:34:f6:29:be:9e:54:e3:1b: 03:ef:3a:80:95:bb:4b:86:c4:e8:e4:62:b4:84:9d:a5:09:81: 46:e3:00:83:78:04:62:73:d5:f7:f9:ff:33:12:97:92:47:4e: b9:3f:96:72:5f:6a:ad:46:93:93:2e:02:80:b0:30:8d:2b:15: 04:f1:ff:bc:02:dc:0a:73:ab:80:f9:19:95:5b:b0:11:08:62: ee:77:0d:3c:a1:c2:59:bd:3a:52:8a:ea:2b:e5:e7:89:0f:63: 1e:1c:e1:bf:b2:d5:a9:88:bc:4c:f5:76:bc:79:b8:a0:28:96: 47:fa:c6:a0:6a:af:c1:36:75:4a:5d:9f:41:e3:b2:86:ef:19: 92:fc:d7:34:cb:38:35:22:fc:39:e5:57:b5:e3:3e:d8:34:70: 4b:fa:9d:be:cd:9f:49:aa:6d:34:6d:47:1c:30:42:88:e9:17: 0e:c7:78:03:d8:72:f7:ef:9f:cc:d0:fb:f2:2b:86:ec:3f:6b: fc:ef:24:0c:22:42:da:ea:96:1b:40:fa:59:f9:07:1f:98:5c: c0:14:81:a4:3e:9a:7f:52:94:87:0d:fb:50:60:6c:42:d4:10: fc:75:d2:26 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFz8T/1uy/BjjLlujkGcnaA7GBSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE RjdEQzFENjAeFw0yNTA5MjIwNjI1MjNaFw0yNjA5MjEwNjMwMjNaMDMxMTAvBgNV BAMTKEMwQkRBRDg4RDFEQzdDM0QxQUE4QTIzNjM1NkY2QzgxRDc0QzJDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+Fx7aosnCUTDv8xzhpwlaJZf LR9TmERbl1X4UDW0Sr99O1zFQbUvP/LxoQzMWMpvCmUqc13VcfPRorxOeXxkYAUU DfFD/CjGKHWP3LoP/KCN/00o4lagHil3wAtA7JeZg1AKc4EU27Lio8ReDh2+3q52 athA5A26mNEyd5Ldx3LSJ4sp3mqxMu3P+UDMxGsQfewdHlwa7x86f46HYgudOSCv 1c3kND06nVeILKDpAxuY3e77eko7cZtB1uLNUPoATqI7M8kITVv4KHTiYogg0VEX 3syhdNY9IXRyjmejShiqL/DZIUrmYULMQs9zwwzTMbEMavqobQrglL5BhIuDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUwL2tiNHcfD0aqKI2NW9sgddMLBswHwYDVR0j BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3 MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE QzFENi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzMyMzAzMDMxM2E2NDY2MzUzYTM0MzAzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMyMzYzNDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9UAAMA0GCSqGSIb3DQEBCwUAA4IBAQA8Fsfg7kz/HOPquSG9fBje3UMgdJcmq0QH 3tjFNPYpvp5U4xsD7zqAlbtLhsTo5GK0hJ2lCYFG4wCDeARic9X3+f8zEpeSR065 P5ZyX2qtRpOTLgKAsDCNKxUE8f+8AtwKc6uA+RmVW7ARCGLudw08ocJZvTpSiuor 5eeJD2MeHOG/stWpiLxM9Xa8ebigKJZH+sagaq/BNnVKXZ9B47KG7xmS/Nc0yzg1 Ivw55Ve14z7YNHBL+p2+zZ9Jqm00bUccMEKI6RcOx3gD2HL375/M0PvyK4bsP2v8 7yQMIkLa6pYbQPpZ+QcfmFzAFIGkPpp/UpSHDftQYGxC1BD8ddIm -----END CERTIFICATE-----Generated at Wed Nov 5 11:07:36 2025 by rpki-client