$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386130303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a386130303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: tDPXG4ETWfqH3UuVaA8j+T1Wo17amDT8qIQltkdHsYU= Subject key identifier: E7:C7:2F:E4:6E:5B:6E:EF:FE:91:E9:A6:74:D5:D7:1D:44:56:9F:08 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 234532D7D67F9C19E4E9318499705D9E58004D9E Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386130303a3a2f34342d3434203d3e20313333373938.roa Signing time: Wed 27 Aug 2025 04:35:35 +0000 ROA not before: Wed 27 Aug 2025 04:30:35 +0000 ROA not after: Wed 26 Aug 2026 04:35:35 +0000 asID: 133798 IP address blocks: 2402:5680:8a00::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:45:32:d7:d6:7f:9c:19:e4:e9:31:84:99:70:5d:9e:58:00:4d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Aug 27 04:30:35 2025 GMT Not After : Aug 26 04:35:35 2026 GMT Subject: CN=E7C72FE46E5B6EEFFE91E9A674D5D71D44569F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:e2:05:26:ed:75:85:58:83:aa:2c:64:07: 46:cc:23:e1:92:c5:c3:3a:be:24:af:e1:eb:73:47: e0:a4:83:99:7e:07:02:2b:1d:a8:2f:50:37:0c:e5: 87:26:cb:42:2b:65:50:9c:66:23:25:09:91:f6:4d: e4:0a:50:5e:14:82:f2:70:84:89:a0:11:70:d4:88: f8:41:5b:e7:f0:01:10:bf:70:9e:8d:d0:39:3d:b2: 71:99:f2:0f:58:ec:29:ea:6d:72:05:08:45:e1:4b: 31:66:12:41:16:ee:33:14:fb:81:c7:37:03:6c:da: 0d:34:71:fa:98:fd:a2:d7:b5:0d:2e:29:d1:31:24: b0:1e:2d:4f:0b:c0:5d:b0:bf:f9:9d:3b:de:ff:63: 43:ac:40:9c:42:4b:ed:db:2c:ba:e6:c5:2c:c3:be: 95:d3:48:1b:2e:db:ae:f3:ec:91:a8:d0:b4:de:ab: 4b:12:a5:3a:6b:c5:48:f0:84:79:f0:e8:3d:c5:9d: b3:6a:cc:fe:5d:69:65:1d:69:f2:90:d0:60:d2:92: e4:ac:f9:c8:4e:5d:dd:24:93:50:08:18:b2:1c:d1: 15:f3:33:6b:e0:96:aa:40:74:43:14:e3:7b:c4:6b: dd:29:f0:c1:b9:fd:40:30:c0:b7:68:09:d6:9d:ae: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C7:2F:E4:6E:5B:6E:EF:FE:91:E9:A6:74:D5:D7:1D:44:56:9F:08 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386130303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8a00::/44 Signature Algorithm: sha256WithRSAEncryption aa:19:08:a6:6a:d4:94:c5:23:d7:33:2e:9a:3d:8d:1a:ec:fd: cb:49:dd:95:ac:b8:e3:f8:8e:ab:1b:df:b7:66:79:83:28:8c: 8d:ab:29:03:0c:99:10:87:a9:77:37:7f:ab:aa:51:05:d5:ef: 95:df:e3:40:13:69:7f:2a:6a:fe:0b:49:bc:f2:4a:55:a0:8f: dd:a6:57:1a:0a:b4:81:6c:23:3d:9a:b7:d0:52:5e:d8:ec:32: 59:0b:ca:69:c1:7a:2b:a3:e3:a0:d3:e2:96:9a:a8:97:98:2c: 5a:7f:81:97:fe:5d:d9:58:83:cf:cd:69:22:f7:d4:a1:6f:5d: fc:79:14:7b:df:8a:98:b2:1f:f9:14:ff:68:45:16:8e:79:40: 6c:a9:8c:00:1e:99:6d:76:31:d4:1d:3e:51:bd:a8:d3:25:94: 95:af:50:a5:c2:6c:76:b0:af:28:e2:23:e7:bf:8e:ab:6f:72: 3a:38:ce:e5:57:a8:5c:25:5e:c2:25:94:8a:97:7d:8a:ef:af: 2c:c0:b6:a3:1f:5d:70:45:7c:78:3e:a6:3b:1b:60:a1:32:d2: 64:7a:f2:3b:fe:d2:6b:8d:22:4a:e7:76:c9:1f:27:be:f3:64: 70:25:f2:e8:c6:e2:c4:68:e8:55:c5:31:93:a0:45:48:5b:fa: f5:14:60:c5 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUI0Uy19Z/nBnk6TGEmXBdnlgATZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA4MjcwNDMwMzVaFw0yNjA4MjYwNDM1MzVaMDMxMTAvBgNV BAMTKEU3QzcyRkU0NkU1QjZFRUZGRTkxRTlBNjc0RDVENzFENDQ1NjlGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/uIFJu11hViDqixkB0bMI+GS xcM6viSv4etzR+Ckg5l+BwIrHagvUDcM5Ycmy0IrZVCcZiMlCZH2TeQKUF4UgvJw hImgEXDUiPhBW+fwARC/cJ6N0Dk9snGZ8g9Y7CnqbXIFCEXhSzFmEkEW7jMU+4HH NwNs2g00cfqY/aLXtQ0uKdExJLAeLU8LwF2wv/mdO97/Y0OsQJxCS+3bLLrmxSzD vpXTSBsu267z7JGo0LTeq0sSpTprxUjwhHnw6D3FnbNqzP5daWUdafKQ0GDSkuSs +chOXd0kk1AIGLIc0RXzM2vglqpAdEMU43vEa90p8MG5/UAwwLdoCdadrn2rAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU58cv5G5bbu/+kemmdNXXHURWnwgwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2MTMwMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAigAwDQYJKoZIhvcNAQELBQADggEBAKoZCKZq1JTFI9czLpo9jRrs/ctJ3ZWs uOP4jqsb37dmeYMojI2rKQMMmRCHqXc3f6uqUQXV75Xf40ATaX8qav4LSbzySlWg j92mVxoKtIFsIz2at9BSXtjsMlkLymnBeiuj46DT4paaqJeYLFp/gZf+XdlYg8/N aSL31KFvXfx5FHvfipiyH/kU/2hFFo55QGypjAAemW12MdQdPlG9qNMllJWvUKXC bHawryjiI+e/jqtvcjo4zuVXqFwlXsIllIqXfYrvryzAtqMfXXBFfHg+pjsbYKEy 0mR68jv+0muNIkrndskfJ77zZHAl8ujG4sRo6FXFMZOgRUhb+vUUYMU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:07 2025 by rpki-client