$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: oyCCj0fHJ8LqlRVf/JTJXW/O70o5I6DOT8e3ZUsAhKY= Subject key identifier: 16:A2:A4:D2:EC:DF:4E:46:E6:21:11:42:C8:B8:CD:56:60:86:9A:D6 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 6598647A465107DAEB018720CA135972F84C4E05 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa Signing time: Thu 22 May 2025 04:45:46 +0000 ROA not before: Thu 22 May 2025 04:40:46 +0000 ROA not after: Thu 21 May 2026 04:45:46 +0000 asID: 133798 IP address blocks: 2402:5680:9b00::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:98:64:7a:46:51:07:da:eb:01:87:20:ca:13:59:72:f8:4c:4e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: May 22 04:40:46 2025 GMT Not After : May 21 04:45:46 2026 GMT Subject: CN=16A2A4D2ECDF4E46E6211142C8B8CD5660869AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:88:eb:fa:0a:a9:83:2e:80:8d:ab:08:77: 59:72:ce:d7:76:a3:8f:2b:d8:af:b4:75:a1:ff:57: 2f:30:58:9e:0c:62:0f:22:1b:07:04:64:75:02:a5: f1:2e:ff:e8:ce:00:f8:8f:3c:08:4f:85:48:6e:d4: 16:64:2c:03:be:69:16:7f:68:c0:d8:1f:4f:45:e5: 3f:4e:0c:c9:a7:28:d7:66:87:69:60:10:2c:fc:55: bf:93:b8:d3:84:0a:9f:1d:9e:5e:c5:5b:c7:cb:bb: 43:6d:4a:a1:80:af:52:4e:c5:99:38:f1:72:ee:7c: e6:09:e4:15:fa:2f:29:eb:d5:88:19:9a:d0:c3:a4: 84:6d:40:96:77:22:2e:11:2b:6d:be:0d:e9:7b:0f: 05:7a:41:2e:57:42:d0:8a:7a:d0:8d:b0:bc:6b:12: 9d:ea:98:07:ec:df:41:10:84:25:00:86:a5:09:b5: b6:0f:7f:50:dc:0b:cd:71:8a:f9:58:f8:3c:e4:ae: 13:02:70:fe:36:36:0c:16:bb:ad:05:f5:3d:d4:80: 96:34:64:4c:ce:5e:f7:37:2d:1b:90:07:83:85:a6: 45:9c:4f:6d:84:c8:68:01:46:97:0b:f5:69:ed:80: 82:88:a5:83:7d:3a:78:c1:59:a4:58:9e:90:a2:7a: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A2:A4:D2:EC:DF:4E:46:E6:21:11:42:C8:B8:CD:56:60:86:9A:D6 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396230303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:9b00::/44 Signature Algorithm: sha256WithRSAEncryption a7:d9:d9:0c:9f:5e:f3:9d:d7:38:05:8d:5e:fd:2f:cf:28:ba: a6:55:e8:de:52:e8:a3:fd:e3:20:57:33:76:58:3e:f0:68:1b: 3e:85:c6:b8:ca:ec:ad:d1:07:45:c0:95:4e:a2:9c:4f:bd:5a: 98:a0:de:b8:28:1f:50:6f:28:bc:ed:d3:b1:e7:e5:9c:20:8f: 8a:6f:5b:42:fc:e5:46:b4:68:ca:1a:35:b2:13:f2:fa:49:8f: e3:61:42:4b:17:b6:da:2d:41:27:54:47:29:a7:bc:1d:5f:88: 67:73:4a:3e:02:26:43:1b:49:f0:bb:1c:e5:c0:aa:95:a1:cd: f4:84:65:69:2a:db:91:63:a4:ef:23:b5:01:bd:c2:24:25:e1: 59:4f:e8:f3:2c:81:18:d4:00:58:eb:17:4b:0f:04:9a:43:6c: 07:b8:14:c6:2d:c5:d2:b9:35:8c:6a:04:f3:63:8e:c3:78:93: 8b:d8:cd:7e:8b:5f:c3:4d:47:54:12:d7:cc:78:0c:73:f0:33: 37:7e:49:da:96:ed:55:7c:82:8c:95:09:57:70:a8:17:1b:7f: ac:61:35:fd:ee:59:1e:ad:b8:d4:fa:90:a8:94:ec:bf:32:dd: 75:e0:f3:d7:cf:65:71:70:08:12:92:64:e8:14:de:b5:4f:62: 89:3f:e5:1c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZZhkekZRB9rrAYcgyhNZcvhMTgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA1MjIwNDQwNDZaFw0yNjA1MjEwNDQ1NDZaMDMxMTAvBgNV BAMTKDE2QTJBNEQyRUNERjRFNDZFNjIxMTE0MkM4QjhDRDU2NjA4NjlBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnIjr+gqpgy6AjasId1lyztd2 o48r2K+0daH/Vy8wWJ4MYg8iGwcEZHUCpfEu/+jOAPiPPAhPhUhu1BZkLAO+aRZ/ aMDYH09F5T9ODMmnKNdmh2lgECz8Vb+TuNOECp8dnl7FW8fLu0NtSqGAr1JOxZk4 8XLufOYJ5BX6Lynr1YgZmtDDpIRtQJZ3Ii4RK22+Del7DwV6QS5XQtCKetCNsLxr Ep3qmAfs30EQhCUAhqUJtbYPf1DcC81xivlY+DzkrhMCcP42NgwWu60F9T3UgJY0 ZEzOXvc3LRuQB4OFpkWcT22EyGgBRpcL9WntgIKIpYN9OnjBWaRYnpCieqbdAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUFqKk0uzfTkbmIRFCyLjNVmCGmtYwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzk2MjMwMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAmwAwDQYJKoZIhvcNAQELBQADggEBAKfZ2QyfXvOd1zgFjV79L88ouqZV6N5S 6KP94yBXM3ZYPvBoGz6FxrjK7K3RB0XAlU6inE+9Wpig3rgoH1BvKLzt07Hn5Zwg j4pvW0L85Ua0aMoaNbIT8vpJj+NhQksXttotQSdURymnvB1fiGdzSj4CJkMbSfC7 HOXAqpWhzfSEZWkq25FjpO8jtQG9wiQl4VlP6PMsgRjUAFjrF0sPBJpDbAe4FMYt xdK5NYxqBPNjjsN4k4vYzX6LX8NNR1QS18x4DHPwMzd+SdqW7VV8goyVCVdwqBcb f6xhNf3uWR6tuNT6kKiU7L8y3XXg89fPZXFwCBKSZOgU3rVPYok/5Rw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:07 2025 by rpki-client