$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383933303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a383933303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: qRghME1f8dgVAjb39jc5odHpivXQ17yiRBccEqpu4uY= Subject key identifier: 29:01:E1:4B:5A:CA:75:2F:04:B2:DA:D8:73:86:97:D8:FD:A7:10:A3 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 51C98436926228ED85A00DEEFE1F4D7064E8BDCC Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383933303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 07:29:33 +0000 ROA not before: Wed 27 Aug 2025 07:24:33 +0000 ROA not after: Wed 26 Aug 2026 07:29:33 +0000 asID: 133798 IP address blocks: 2402:5680:8930::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c9:84:36:92:62:28:ed:85:a0:0d:ee:fe:1f:4d:70:64:e8:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 07:24:33 2025 GMT Not After : Aug 26 07:29:33 2026 GMT Subject: CN=2901E14B5ACA752F04B2DAD8738697D8FDA710A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:bc:2e:c2:05:8f:64:58:fc:23:3a:08:0f: e0:e6:b9:89:59:88:06:de:f2:1a:56:01:2f:1a:de: 99:29:9f:d6:f7:62:1c:60:4a:6a:85:88:77:f2:03: f1:2a:2c:1e:85:11:40:01:13:fc:fe:d0:78:38:d0: 3b:4a:da:53:57:c6:23:ab:3d:c7:6f:a6:86:44:29: 08:27:c8:11:ed:c4:79:48:3f:c6:0f:cb:52:be:08: ea:c0:67:85:91:bc:4b:95:be:ee:1e:6a:86:18:76: 78:b8:da:42:3a:cd:a2:85:da:be:6e:28:f7:10:ba: f6:f2:94:07:30:39:f0:f1:ee:af:f8:7c:9e:f2:01: d0:64:80:3b:9f:b5:f9:da:b1:70:dd:24:6b:8e:9f: 73:e8:9a:80:e0:dc:24:3b:d5:a6:96:48:6a:1c:1d: 5e:ec:e8:ae:25:5c:05:7f:1a:e3:1b:f4:f7:3c:b5: 06:6e:9a:f5:ec:43:9a:2b:e7:87:84:c6:c9:97:bf: 10:df:07:8e:3b:31:a5:6f:a6:12:51:8b:30:f8:b7: a7:1d:a6:d9:9e:7f:01:ed:ce:50:1b:4a:38:cc:7d: cc:f3:1f:f4:62:43:20:d1:6e:51:0f:b0:d6:03:55: a2:46:2d:c6:2f:5d:ab:d8:5a:9d:c9:46:1a:4c:84: 52:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:01:E1:4B:5A:CA:75:2F:04:B2:DA:D8:73:86:97:D8:FD:A7:10:A3 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a383933303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8930::/44 Signature Algorithm: sha256WithRSAEncryption 70:e2:33:c9:31:4e:4f:0b:74:c5:d5:3c:34:8c:1b:31:0f:7b: cf:5e:db:f1:c9:81:5d:2c:74:eb:5f:01:cc:94:e7:6b:f7:87: 59:f6:39:e3:72:10:02:8c:b1:c6:31:09:49:33:6d:9d:a7:bc: a7:f6:35:0c:ad:d9:46:c7:07:16:d6:80:07:80:a0:70:2c:cf: b5:0d:fb:6f:71:bd:bc:41:ad:45:57:6d:b3:ca:93:2b:e4:d5: b2:65:b1:59:7d:92:29:31:07:f6:75:9b:5d:73:fc:1f:40:fb: 00:4c:1b:76:0b:59:29:07:b7:d7:b6:08:c7:8e:08:5d:50:6d: 49:6e:fa:f2:11:8e:cc:26:0d:bc:18:b4:03:7a:82:b9:8f:e9: bf:f7:b3:34:77:9b:c5:dd:ee:c5:62:78:7f:4b:5a:4f:86:ec: b8:76:fd:42:34:a3:c9:4a:34:e9:e4:1b:34:17:f6:e2:4d:52: ff:29:46:3c:5d:1f:ce:76:f0:4a:30:a7:72:80:21:56:d0:ef: b4:19:06:f7:a7:9b:2f:bb:83:e2:2b:4d:71:82:b1:85:23:fd: 25:10:9f:01:7b:62:5f:6e:5a:9c:07:e5:d9:17:e9:45:80:8d: ff:c4:2f:35:0f:6c:40:47:fd:db:2a:75:05:39:4f:9d:bf:6a: 37:17:d3:4e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUcmENpJiKO2FoA3u/h9NcGTovcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNzI0MzNaFw0yNjA4MjYwNzI5MzNaMDMxMTAvBgNV BAMTKDI5MDFFMTRCNUFDQTc1MkYwNEIyREFEODczODY5N0Q4RkRBNzEwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC107wuwgWPZFj8IzoID+DmuYlZ iAbe8hpWAS8a3pkpn9b3YhxgSmqFiHfyA/EqLB6FEUABE/z+0Hg40DtK2lNXxiOr PcdvpoZEKQgnyBHtxHlIP8YPy1K+COrAZ4WRvEuVvu4eaoYYdni42kI6zaKF2r5u KPcQuvbylAcwOfDx7q/4fJ7yAdBkgDuftfnasXDdJGuOn3PomoDg3CQ71aaWSGoc HV7s6K4lXAV/GuMb9Pc8tQZumvXsQ5or54eExsmXvxDfB447MaVvphJRizD4t6cd ptmefwHtzlAbSjjMfczzH/RiQyDRblEPsNYDVaJGLcYvXavYWp3JRhpMhFJ5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUKQHhS1rKdS8EstrYc4aX2P2nEKMwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzgzOTMzMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAiTAwDQYJKoZIhvcNAQELBQADggEBAHDiM8kxTk8LdMXVPDSMGzEPe89e2/HJ gV0sdOtfAcyU52v3h1n2OeNyEAKMscYxCUkzbZ2nvKf2NQyt2UbHBxbWgAeAoHAs z7UN+29xvbxBrUVXbbPKkyvk1bJlsVl9kikxB/Z1m11z/B9A+wBMG3YLWSkHt9e2 CMeOCF1QbUlu+vIRjswmDbwYtAN6grmP6b/3szR3m8Xd7sVieH9LWk+G7Lh2/UI0 o8lKNOnkGzQX9uJNUv8pRjxdH8528Eowp3KAIVbQ77QZBvenmy+7g+IrTXGCsYUj /SUQnwF7Yl9uWpwH5dkX6UWAjf/ELzUPbEBH/dsqdQU5T52/ajcX004= -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:12 2025 by rpki-client