$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: mMTvqwq6tOjXMfHw3B/KvCLdGUhOs2AQKarAbV3hCtc= Subject key identifier: A9:83:E6:66:46:13:04:90:69:69:AE:01:69:C8:EF:57:64:82:F7:68 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 71D05F27345B9540C3703E2EAC8B851C80A376E2 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa Signing time: Fri 23 May 2025 04:06:39 +0000 ROA not before: Fri 23 May 2025 04:01:39 +0000 ROA not after: Fri 22 May 2026 04:06:39 +0000 asID: 133798 IP address blocks: 2402:5680:9b20::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d0:5f:27:34:5b:95:40:c3:70:3e:2e:ac:8b:85:1c:80:a3:76:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: May 23 04:01:39 2025 GMT Not After : May 22 04:06:39 2026 GMT Subject: CN=A983E666461304906969AE0169C8EF576482F768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8a:81:e6:7a:bd:f3:fa:1f:3e:cc:65:e8:0e: 00:34:05:8c:0a:92:e9:f6:36:ca:65:3a:73:8a:70: 9d:05:09:14:6b:3a:d6:74:0f:6d:34:c4:3b:ac:bf: be:f5:47:96:a1:56:c7:4a:25:54:a7:e5:b3:26:59: 85:00:1d:77:76:35:12:6d:fb:cd:64:98:29:11:1c: 56:92:d1:18:47:e1:43:19:2c:95:71:12:4c:10:58: 91:69:5e:fb:ed:99:61:ff:c5:f5:f3:45:55:ae:06: fb:76:44:6c:09:a3:7b:27:61:88:b1:81:8f:c3:9d: c2:ef:4c:20:1d:05:c9:b3:a4:cf:c3:f0:67:70:73: 61:5c:18:9d:c3:52:08:60:12:11:22:60:9f:ba:06: d8:7d:2f:75:ef:0a:0a:be:ff:cd:17:f0:0a:22:1f: 48:fe:87:14:14:78:11:c4:64:38:ed:e4:2f:2a:ac: 97:73:25:86:13:33:69:47:9a:fb:af:d3:16:95:76: 38:0b:6e:b7:89:b1:6a:f6:19:ac:3a:ac:82:a7:2f: c4:b2:91:de:0d:32:1a:92:5c:85:e1:62:bf:b0:01: eb:dd:ee:07:66:18:06:09:97:84:3a:4a:eb:77:e0: ca:04:48:0d:11:b6:5c:00:0a:22:e3:52:7d:40:3a: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:83:E6:66:46:13:04:90:69:69:AE:01:69:C8:EF:57:64:82:F7:68 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a396232303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:9b20::/44 Signature Algorithm: sha256WithRSAEncryption 37:71:33:ae:71:cd:ee:bf:96:64:ee:40:b5:49:1b:89:4e:2e: c7:80:70:9d:88:60:65:35:00:29:a8:fa:e7:61:79:a0:cf:54: f4:7f:7e:03:dd:b9:34:32:d4:5e:57:e2:26:5c:d7:f9:66:1b: 22:47:f2:f9:41:1f:69:11:f9:0b:06:a3:1b:b7:7d:12:9d:d8: a6:62:a0:ef:2f:d3:d3:7c:8c:1c:b5:09:61:7c:ce:2c:8f:ff: 0e:7a:c7:90:87:ae:a4:24:21:5e:91:58:fd:5b:43:1f:64:e1: da:24:aa:78:e6:9c:91:95:2b:f2:e9:8a:07:98:fa:4d:fd:dd: f4:80:cb:92:ac:ed:8b:90:a4:bb:4a:05:20:fc:11:59:64:bf: 27:7b:c5:5f:d8:1b:f8:43:dd:8c:f3:57:a8:94:7f:b0:54:af: 3b:c9:79:a5:62:c6:da:eb:e1:33:62:fd:f9:35:1a:72:38:07: fe:83:dc:46:dc:4b:02:c9:cf:74:cc:5c:3b:d9:9b:45:6f:a1: c0:1c:2f:ed:4a:ec:ff:89:51:dc:49:b2:70:d0:99:ba:70:3c: bb:74:d7:a9:6c:72:b1:fa:03:33:1e:0d:5a:81:a3:35:a7:fd: 1c:9c:e9:f7:4b:37:1d:50:36:00:23:09:b6:e5:7d:c6:e5:f8: 9c:d3:14:ec -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUcdBfJzRblUDDcD4urIuFHICjduIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA1MjMwNDAxMzlaFw0yNjA1MjIwNDA2MzlaMDMxMTAvBgNV BAMTKEE5ODNFNjY2NDYxMzA0OTA2OTY5QUUwMTY5QzhFRjU3NjQ4MkY3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoioHmer3z+h8+zGXoDgA0BYwK kun2NsplOnOKcJ0FCRRrOtZ0D200xDusv771R5ahVsdKJVSn5bMmWYUAHXd2NRJt +81kmCkRHFaS0RhH4UMZLJVxEkwQWJFpXvvtmWH/xfXzRVWuBvt2RGwJo3snYYix gY/DncLvTCAdBcmzpM/D8Gdwc2FcGJ3DUghgEhEiYJ+6Bth9L3XvCgq+/80X8Aoi H0j+hxQUeBHEZDjt5C8qrJdzJYYTM2lHmvuv0xaVdjgLbreJsWr2Gaw6rIKnL8Sy kd4NMhqSXIXhYr+wAevd7gdmGAYJl4Q6Sut34MoESA0RtlwACiLjUn1AOgH3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUqYPmZkYTBJBpaa4BacjvV2SC92gwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzk2MjMyMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAmyAwDQYJKoZIhvcNAQELBQADggEBADdxM65xze6/lmTuQLVJG4lOLseAcJ2I YGU1ACmo+udheaDPVPR/fgPduTQy1F5X4iZc1/lmGyJH8vlBH2kR+QsGoxu3fRKd 2KZioO8v09N8jBy1CWF8ziyP/w56x5CHrqQkIV6RWP1bQx9k4dokqnjmnJGVK/Lp igeY+k393fSAy5Ks7YuQpLtKBSD8EVlkvyd7xV/YG/hD3YzzV6iUf7BUrzvJeaVi xtrr4TNi/fk1GnI4B/6D3EbcSwLJz3TMXDvZm0VvocAcL+1K7P+JUdxJsnDQmbpw PLt016lscrH6AzMeDVqBozWn/Ryc6fdLNx1QNgAjCbblfcbl+JzTFOw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:20 2025 by rpki-client