$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393330303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a393330303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: c8B7IUmyUEj6soK+hmKg+StqYVbq7DPKgnjR0QDfKe8= Subject key identifier: 0E:C5:10:54:E6:51:04:41:93:42:CC:3A:63:96:81:2D:62:65:AA:A6 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 3EDE892B5E6DB9574182AEC150682BB0D0ED5777 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393330303a3a2f34342d3434203d3e20313333373938.roa Signing time: Tue 27 May 2025 17:29:30 +0000 ROA not before: Tue 27 May 2025 17:24:30 +0000 ROA not after: Tue 26 May 2026 17:29:30 +0000 asID: 133798 IP address blocks: 2402:5680:9300::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:de:89:2b:5e:6d:b9:57:41:82:ae:c1:50:68:2b:b0:d0:ed:57:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: May 27 17:24:30 2025 GMT Not After : May 26 17:29:30 2026 GMT Subject: CN=0EC51054E65104419342CC3A6396812D6265AAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:a3:b2:47:2a:84:cc:d9:cb:c3:7e:1b:81: da:11:74:7f:40:1c:eb:8e:82:e5:23:22:5a:e3:ef: c7:a5:8d:9a:d1:38:9b:19:86:4f:0d:82:d2:de:b1: 50:c6:3b:5b:3d:e6:2a:01:f3:29:cc:0f:13:f3:57: 88:5c:b3:50:29:a5:15:88:2e:6f:89:f6:2d:ac:75: 1b:29:66:1b:33:d9:11:26:0e:f2:02:7b:27:71:9f: a4:fe:a6:7f:6b:8b:3b:23:0e:fc:2d:3c:3a:60:04: 62:80:13:9b:bd:2d:a5:61:d3:1d:7f:8e:46:96:80: ea:73:e5:cb:91:85:cc:6d:f0:b4:de:97:5a:d5:6f: de:8b:1e:76:b6:d2:dc:3b:20:2e:9b:7e:36:7a:10: 0e:2a:52:df:cd:5f:b5:43:2a:cf:2e:aa:3e:17:d8: 34:a1:2a:e3:e8:c2:ee:a0:70:09:53:1d:e1:6d:49: 56:06:ff:56:08:a5:94:6f:e3:04:05:10:3d:79:3b: 2e:0b:e9:fc:4f:3b:70:74:f7:27:d5:8e:20:14:e1: ea:c1:e6:bb:7e:a2:08:73:e9:ef:2f:f7:93:86:73: 55:97:a5:05:1f:ae:09:d4:e1:5c:33:8c:52:cf:1c: a5:df:91:7c:36:57:b0:c1:a9:2c:38:9c:fb:1e:d0: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C5:10:54:E6:51:04:41:93:42:CC:3A:63:96:81:2D:62:65:AA:A6 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393330303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:9300::/44 Signature Algorithm: sha256WithRSAEncryption a8:e1:14:0a:3d:98:8b:b5:27:eb:42:15:29:2b:30:01:41:33: 46:b9:8e:03:f9:09:75:b7:d3:ef:ca:a0:e9:a3:fc:18:77:4d: 18:3c:87:49:df:fe:d0:e5:76:99:7a:49:18:f6:23:49:40:e9: 74:ea:3f:82:5e:e5:f3:45:65:6b:39:2c:c6:f7:6b:37:c1:a2: da:ce:97:69:f1:e8:7d:52:00:b0:f1:6e:4e:eb:61:d5:4c:26: 22:8a:4d:75:5b:92:6c:f4:07:ee:6e:b9:8e:a7:7e:69:57:a0: ce:cf:8a:0d:be:4c:ff:6c:ff:0f:4d:4a:ef:b1:32:7f:b8:77: 1a:f1:be:b5:07:7b:2e:6f:11:f7:95:07:c2:4b:6e:02:a0:f6: 2d:89:e6:7a:3c:39:ec:7a:c4:0e:3b:06:80:01:96:92:e4:90: dc:57:08:ae:56:58:7e:3e:e0:8e:7a:5e:84:90:c3:cb:5c:fc: 93:28:c0:3f:a7:74:df:ff:aa:e8:d4:c3:20:09:4d:8f:91:26: e8:f1:0c:b4:89:3d:71:ed:4c:3e:a7:5f:42:c0:9f:d0:14:4b: 0f:22:08:60:2f:78:b1:f9:55:2b:28:cc:5e:64:97:38:25:bb: 67:1f:20:65:88:80:dc:32:03:a7:9e:44:ac:ca:d5:f8:29:32: d2:3d:a3:a8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPt6JK15tuVdBgq7BUGgrsNDtV3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA1MjcxNzI0MzBaFw0yNjA1MjYxNzI5MzBaMDMxMTAvBgNV BAMTKDBFQzUxMDU0RTY1MTA0NDE5MzQyQ0MzQTYzOTY4MTJENjI2NUFBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClqOyRyqEzNnLw34bgdoRdH9A HOuOguUjIlrj78eljZrROJsZhk8NgtLesVDGO1s95ioB8ynMDxPzV4hcs1AppRWI Lm+J9i2sdRspZhsz2REmDvICeydxn6T+pn9rizsjDvwtPDpgBGKAE5u9LaVh0x1/ jkaWgOpz5cuRhcxt8LTel1rVb96LHna20tw7IC6bfjZ6EA4qUt/NX7VDKs8uqj4X 2DShKuPowu6gcAlTHeFtSVYG/1YIpZRv4wQFED15Oy4L6fxPO3B09yfVjiAU4erB 5rt+oghz6e8v95OGc1WXpQUfrgnU4VwzjFLPHKXfkXw2V7DBqSw4nPse0EunAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUDsUQVOZRBEGTQsw6Y5aBLWJlqqYwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzMzMwMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAkwAwDQYJKoZIhvcNAQELBQADggEBAKjhFAo9mIu1J+tCFSkrMAFBM0a5jgP5 CXW30+/KoOmj/Bh3TRg8h0nf/tDldpl6SRj2I0lA6XTqP4Je5fNFZWs5LMb3azfB otrOl2nx6H1SALDxbk7rYdVMJiKKTXVbkmz0B+5uuY6nfmlXoM7Pig2+TP9s/w9N Su+xMn+4dxrxvrUHey5vEfeVB8JLbgKg9i2J5no8Oex6xA47BoABlpLkkNxXCK5W WH4+4I56XoSQw8tc/JMowD+ndN//qujUwyAJTY+RJujxDLSJPXHtTD6nX0LAn9AU Sw8iCGAveLH5VSsozF5klzglu2cfIGWIgNwyA6eeRKzK1fgpMtI9o6g= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:19 2025 by rpki-client