$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: eXXU5fC7qdfGtz8rYyP8imA2Ijbkpyz7czy8HcAgczI= Subject key identifier: 81:71:C5:16:0A:BB:C2:BB:9B:66:D4:CF:7D:3B:74:69:F3:D6:5A:7C Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 2A77EE646DDC9EE9452FEF9400638179B6DD6F48 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa Signing time: Thu 03 Apr 2025 08:22:28 +0000 ROA not before: Thu 03 Apr 2025 08:17:28 +0000 ROA not after: Thu 02 Apr 2026 08:22:28 +0000 asID: 133798 IP address blocks: 2402:5680:8100::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:77:ee:64:6d:dc:9e:e9:45:2f:ef:94:00:63:81:79:b6:dd:6f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Apr 3 08:17:28 2025 GMT Not After : Apr 2 08:22:28 2026 GMT Subject: CN=8171C5160ABBC2BB9B66D4CF7D3B7469F3D65A7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:83:f1:52:66:f9:58:14:7e:c6:94:87:2e: 25:2a:0c:4f:15:f1:28:7a:cb:3b:04:db:ec:86:94: 37:5d:28:0c:05:1b:2b:6d:17:88:f5:5e:ec:f1:75: 3b:3d:cb:82:07:ad:03:c7:b3:00:16:b9:3e:ac:e0: 33:fd:c2:41:90:db:90:25:4a:6a:0c:5f:0b:9d:e3: be:e5:96:fb:b3:31:f2:82:3e:77:48:96:3f:5f:bd: 94:4c:8c:f0:ad:8e:85:37:05:ee:25:e1:c1:52:3f: b1:62:71:c4:4f:3d:c1:4a:d5:c7:93:b8:16:58:98: 14:17:8b:3f:e5:00:d9:3a:da:33:5e:dc:df:73:44: 57:c3:1a:f9:1c:4e:c1:11:a0:e8:0c:50:3e:c1:9f: 8e:5c:86:43:c2:e5:1c:ac:d8:1a:67:36:34:97:c2: 3b:79:6a:01:e4:78:75:55:fb:5e:fe:bd:59:dc:83: 2a:55:06:2b:81:13:55:9b:4a:ff:df:28:49:89:f2: 31:58:7f:86:6a:ee:70:8a:fa:db:c7:ae:2c:9d:d7: 5e:10:05:87:d4:b8:74:5a:bb:da:d2:80:f3:65:46: de:ab:36:a6:9d:34:f9:a9:de:7b:6b:5f:a0:b3:ef: 02:a9:4a:33:a0:20:3e:7f:4c:0b:e5:91:a5:09:8e: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:71:C5:16:0A:BB:C2:BB:9B:66:D4:CF:7D:3B:74:69:F3:D6:5A:7C X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383130303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8100::/44 Signature Algorithm: sha256WithRSAEncryption 18:fe:a6:af:f9:77:58:a8:ab:bd:3e:7a:32:c9:c0:ef:73:7b: 05:b7:9e:80:ba:a9:df:75:fb:c4:b6:da:db:8f:b5:60:54:67: 9c:4d:74:ad:43:0e:2e:ea:ff:8b:5c:df:70:6c:97:fd:6d:48: 4d:67:94:39:42:c5:67:89:78:3d:16:46:bc:ab:f0:36:62:85: da:8c:36:b6:6f:1d:1e:7c:1c:cc:c6:8c:1b:2a:67:de:58:a9: 2f:d7:77:d3:81:de:0e:1b:75:f2:7e:78:ae:cf:00:08:41:e9: 2b:64:b8:c0:31:b7:0a:8e:46:f2:30:cc:cf:3a:24:10:3d:04: 6b:3d:a6:6c:77:3b:f3:99:c6:ff:a6:12:a9:d6:a8:ab:16:3b: 4e:a5:95:a4:18:7b:9e:d7:9e:a9:c8:92:c7:5a:e8:d1:7b:4f: be:57:4f:10:23:f7:98:d3:c9:db:95:7b:65:1c:e9:cd:2b:86: 51:f9:cb:e6:e6:13:e2:be:f7:48:5c:e5:9b:6a:c9:3e:60:66: e4:8a:1c:c1:19:cd:29:95:cc:77:9c:5d:4b:c7:d2:49:6e:f5: 08:42:a4:f5:ea:41:85:2f:c0:cc:fd:02:3f:3b:e2:48:13:35: c2:26:e2:a5:f0:55:f0:ff:ad:a2:cb:0c:df:60:fb:a4:2b:1b: 16:e2:78:52 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKnfuZG3cnulFL++UAGOBebbdb0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA0MDMwODE3MjhaFw0yNjA0MDIwODIyMjhaMDMxMTAvBgNV BAMTKDgxNzFDNTE2MEFCQkMyQkI5QjY2RDRDRjdEM0I3NDY5RjNENjVBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQIPxUmb5WBR+xpSHLiUqDE8V 8Sh6yzsE2+yGlDddKAwFGyttF4j1XuzxdTs9y4IHrQPHswAWuT6s4DP9wkGQ25Al SmoMXwud477llvuzMfKCPndIlj9fvZRMjPCtjoU3Be4l4cFSP7FiccRPPcFK1ceT uBZYmBQXiz/lANk62jNe3N9zRFfDGvkcTsERoOgMUD7Bn45chkPC5Rys2BpnNjSX wjt5agHkeHVV+17+vVncgypVBiuBE1WbSv/fKEmJ8jFYf4Zq7nCK+tvHriyd114Q BYfUuHRau9rSgPNlRt6rNqadNPmp3ntrX6Cz7wKpSjOgID5/TAvlkaUJjvj3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUgXHFFgq7wrubZtTPfTt0afPWWnwwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzMTMwMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAgQAwDQYJKoZIhvcNAQELBQADggEBABj+pq/5d1ioq70+ejLJwO9zewW3noC6 qd91+8S22tuPtWBUZ5xNdK1DDi7q/4tc33Bsl/1tSE1nlDlCxWeJeD0WRryr8DZi hdqMNrZvHR58HMzGjBsqZ95YqS/Xd9OB3g4bdfJ+eK7PAAhB6StkuMAxtwqORvIw zM86JBA9BGs9pmx3O/OZxv+mEqnWqKsWO06llaQYe57XnqnIksda6NF7T75XTxAj 95jTyduVe2Uc6c0rhlH5y+bmE+K+90hc5ZtqyT5gZuSKHMEZzSmVzHecXUvH0klu 9QhCpPXqQYUvwMz9Aj874kgTNcIm4qXwVfD/raLLDN9g+6QrGxbieFI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:18 2025 by rpki-client