$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383732303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383732303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: HHWntjyFL9s+UA8bDNVcXAxPltfkpikWre2ryZUq8Cg= Subject key identifier: 79:DE:BE:91:31:3F:CB:A2:EB:E5:99:01:2B:D0:6F:82:3D:78:F6:26 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 2976F82CDA6132F439888901C877885A88879203 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383732303a3a2f34342d3434203d3e20313333373938.roa Signing time: Tue 26 Aug 2025 11:15:19 +0000 ROA not before: Tue 26 Aug 2025 11:10:19 +0000 ROA not after: Tue 25 Aug 2026 11:15:19 +0000 asID: 133798 IP address blocks: 2402:5680:8720::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:76:f8:2c:da:61:32:f4:39:88:89:01:c8:77:88:5a:88:87:92:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 26 11:10:19 2025 GMT Not After : Aug 25 11:15:19 2026 GMT Subject: CN=79DEBE91313FCBA2EBE599012BD06F823D78F626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:04:36:b4:6e:18:b5:d6:85:3f:38:fb:3e:36: 4e:4d:05:5c:f8:da:6a:05:2e:6c:3c:cd:c5:8b:c1: 33:44:40:2a:d3:a8:02:61:41:3e:f3:89:45:15:ad: 33:a8:4a:fa:eb:df:9a:c9:9c:8e:87:86:d3:5c:55: e6:83:34:7e:8a:cf:38:ab:c4:95:17:68:a0:a7:83: b8:ab:60:1a:07:cb:d9:e6:41:1d:d0:09:22:fc:5c: 0d:17:bc:7c:e1:33:a2:58:4a:e7:0f:5d:0a:47:84: f8:83:c4:ef:e5:98:c2:ee:0a:00:4b:0a:fd:17:45: ed:37:56:b7:45:da:34:6c:5f:d7:b5:76:38:06:1d: 2e:55:bd:fb:1b:1c:f9:8a:f6:8e:2c:25:35:7b:5d: 30:ef:04:fe:bd:a6:f3:3b:87:76:54:61:76:cb:20: 73:3c:91:fc:d7:90:fd:7e:b2:0d:ef:e3:3a:4a:84: 9f:60:12:14:e2:43:53:b4:89:a2:6b:b9:c8:8d:e2: 42:c5:7f:43:7f:2f:14:1b:38:77:f8:8f:3c:2f:df: b6:9c:1e:bf:51:6a:4a:bb:ad:f1:02:62:96:f5:ba: 2f:6f:85:f7:28:6c:07:1a:f9:67:b5:01:1d:41:eb: 7f:7d:0d:12:e7:ef:3f:5e:ed:04:5b:c6:f8:de:cd: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:BE:91:31:3F:CB:A2:EB:E5:99:01:2B:D0:6F:82:3D:78:F6:26 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383732303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8720::/44 Signature Algorithm: sha256WithRSAEncryption 96:8b:5f:12:7c:c3:59:0f:c5:90:87:fe:55:25:22:37:5f:ba: 0e:52:0b:a7:c7:f2:aa:e4:b1:0e:c8:c0:df:e9:5b:52:04:a3: ba:cc:87:3a:af:24:57:a7:66:e7:7c:d0:91:b2:90:5e:d3:5a: 0f:f9:30:c6:e1:1b:1f:aa:bb:b5:f2:a7:ac:8b:82:2f:e7:42: d1:a9:cd:b0:de:01:77:9b:cb:d8:2e:f4:e9:ba:9e:ce:f4:50: 88:09:7f:17:77:c6:23:eb:1b:b3:62:65:ee:a6:72:9a:84:5e: 64:1d:01:8b:b6:f9:0f:92:71:54:15:7d:8f:0f:c1:eb:c8:70: 47:cf:4b:bd:b3:4c:3a:b8:11:99:c0:49:7e:a3:a1:d2:94:0b: f3:30:02:df:69:59:f2:5e:7f:09:00:92:64:2f:9b:75:0b:87: f3:2f:74:a8:a3:73:c7:63:23:d5:33:61:1b:c5:9e:f4:e2:57: ea:e0:c4:1a:06:62:48:07:ad:51:08:b1:2f:b5:79:69:52:84: 55:f0:5a:32:c0:dc:24:c0:f9:df:9c:88:fb:3e:f6:59:1f:9b: c5:23:52:cd:44:1d:d6:34:b5:48:9c:33:4b:51:96:05:0f:2b: b1:21:7c:c0:6d:08:28:8b:5a:2f:a0:82:d9:77:36:00:ea:f2: 3d:ca:29:02 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKXb4LNphMvQ5iIkByHeIWoiHkgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjYxMTEwMTlaFw0yNjA4MjUxMTE1MTlaMDMxMTAvBgNV BAMTKDc5REVCRTkxMzEzRkNCQTJFQkU1OTkwMTJCRDA2RjgyM0Q3OEY2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBDa0bhi11oU/OPs+Nk5NBVz4 2moFLmw8zcWLwTNEQCrTqAJhQT7ziUUVrTOoSvrr35rJnI6HhtNcVeaDNH6Kzzir xJUXaKCng7irYBoHy9nmQR3QCSL8XA0XvHzhM6JYSucPXQpHhPiDxO/lmMLuCgBL Cv0XRe03VrdF2jRsX9e1djgGHS5VvfsbHPmK9o4sJTV7XTDvBP69pvM7h3ZUYXbL IHM8kfzXkP1+sg3v4zpKhJ9gEhTiQ1O0iaJruciN4kLFf0N/LxQbOHf4jzwv37ac Hr9Rakq7rfECYpb1ui9vhfcobAca+We1AR1B6399DRLn7z9e7QRbxvjezY3JAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUed6+kTE/y6Lr5ZkBK9Bvgj149iYwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzNzMyMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAhyAwDQYJKoZIhvcNAQELBQADggEBAJaLXxJ8w1kPxZCH/lUlIjdfug5SC6fH 8qrksQ7IwN/pW1IEo7rMhzqvJFenZud80JGykF7TWg/5MMbhGx+qu7Xyp6yLgi/n QtGpzbDeAXeby9gu9Om6ns70UIgJfxd3xiPrG7NiZe6mcpqEXmQdAYu2+Q+ScVQV fY8PwevIcEfPS72zTDq4EZnASX6jodKUC/MwAt9pWfJefwkAkmQvm3ULh/MvdKij c8djI9UzYRvFnvTiV+rgxBoGYkgHrVEIsS+1eWlShFXwWjLA3CTA+d+ciPs+9lkf m8UjUs1EHdY0tUicM0tRlgUPK7EhfMBtCCiLWi+ggtl3NgDq8j3KKQI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:15 2025 by rpki-client