$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa File: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (raw, json) Hash identifier: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE= Subject key identifier: 3D:0C:98:E4:D6:93:F6:53:64:91:C5:19:E4:2C:B2:B7:F6:FD:EC:1E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 7D683957D4DDD892A96DA37A9C2DE4A8793E1963 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa Signing time: Mon 02 Jun 2025 02:04:23 +0000 ROA not before: Mon 02 Jun 2025 01:59:23 +0000 ROA not after: Mon 01 Jun 2026 02:04:23 +0000 asID: 58476 IP address blocks: 2001:df0:26f::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:68:39:57:d4:dd:d8:92:a9:6d:a3:7a:9c:2d:e4:a8:79:3e:19:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Jun 2 01:59:23 2025 GMT Not After : Jun 1 02:04:23 2026 GMT Subject: CN=3D0C98E4D693F6536491C519E42CB2B7F6FDEC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:9b:a8:bd:54:a7:f9:2f:ad:53:1d:39:e8: be:36:af:07:ec:a9:d1:3a:7b:6d:b5:20:1f:7d:6f: 87:bb:bd:ed:49:dd:3f:35:40:e6:a0:36:27:f7:b5: 46:6f:b2:70:ba:8e:1a:8b:22:87:88:bf:32:22:34: d3:55:06:59:46:8d:7e:27:8c:3b:18:9c:9e:26:a1: 03:3f:e1:34:55:83:1b:9e:44:29:f5:3d:74:4d:05: fc:f3:b6:3b:97:19:86:49:e1:87:df:8c:df:34:43: 98:40:e2:e9:8c:10:22:25:b0:cf:7b:11:d6:3a:1f: ba:ae:e0:89:89:60:e1:32:1e:d6:64:f4:e0:80:a2: 48:aa:28:86:3d:b1:31:46:da:0f:21:40:44:e1:63: a5:6e:97:be:a3:84:cf:63:05:fa:c5:d3:d0:a4:0c: 10:5e:7e:65:85:52:bc:8e:4e:b6:a2:25:67:e2:e4: b5:94:5a:c7:6f:b2:d1:dc:1c:74:d9:1c:20:16:3f: ce:15:2b:c1:08:69:45:bd:ec:c3:36:35:7e:de:40: 6f:57:b2:4e:7c:2d:73:63:44:11:f2:9c:7f:b7:50: d7:ed:57:7a:92:db:98:bb:eb:61:c4:73:cc:dc:53: af:a5:93:cb:03:d4:d3:fb:2e:05:31:01:90:1e:fd: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0C:98:E4:D6:93:F6:53:64:91:C5:19:E4:2C:B2:B7:F6:FD:EC:1E X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:26f::/48 Signature Algorithm: sha256WithRSAEncryption 5a:15:ec:47:9a:3e:2d:0c:bf:e3:01:15:a8:3d:ac:c1:32:db: 0b:f3:2a:6b:84:57:13:e0:e3:16:b8:64:e0:60:d3:b3:4d:c1: 35:96:21:a0:6f:80:ad:12:22:d1:94:14:72:61:49:a0:0d:a1: 7f:83:75:28:bd:f3:d6:19:52:97:38:8e:de:ce:c4:97:fc:b5: 50:14:f9:c4:6d:ef:a0:f9:65:8e:8d:a9:18:1b:64:08:c0:53: 04:4a:a0:b3:0d:7c:fb:18:14:8a:bb:ee:3d:90:c8:35:ba:01: 5c:74:b3:56:ca:85:77:15:5e:51:cd:83:e6:75:1f:5a:c2:d2: 33:3a:2b:4b:b2:0b:4f:fc:24:56:da:76:99:b4:f5:b4:61:c7: a0:b9:60:5f:41:d7:1c:f3:f8:6f:78:22:48:83:fa:b1:0d:ca: 52:27:fa:04:9b:8d:08:ba:eb:cf:5c:7d:a6:30:49:88:f5:4a: da:ff:98:d5:56:32:50:a9:b0:d6:33:57:91:98:83:0d:e0:a0: c5:f7:d3:c2:b8:26:a3:03:b0:2e:6e:d9:ba:bf:a9:59:bd:2f: 54:85:1c:b4:fb:e1:c0:76:17:02:51:c6:51:80:ea:92:e9:97: 3c:52:a6:22:4e:36:55:6c:b7:1e:35:6a:57:ac:38:2f:02:98: c8:8c:86:2a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUfWg5V9Td2JKpbaN6nC3kqHk+GWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTA2MDIwMTU5MjNaFw0yNjA2MDEwMjA0MjNaMDMxMTAvBgNV BAMTKDNEMEM5OEU0RDY5M0Y2NTM2NDkxQzUxOUU0MkNCMkI3RjZGREVDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBpuovVSn+S+tUx056L42rwfs qdE6e221IB99b4e7ve1J3T81QOagNif3tUZvsnC6jhqLIoeIvzIiNNNVBllGjX4n jDsYnJ4moQM/4TRVgxueRCn1PXRNBfzztjuXGYZJ4YffjN80Q5hA4umMECIlsM97 EdY6H7qu4ImJYOEyHtZk9OCAokiqKIY9sTFG2g8hQEThY6Vul76jhM9jBfrF09Ck DBBefmWFUryOTraiJWfi5LWUWsdvstHcHHTZHCAWP84VK8EIaUW97MM2NX7eQG9X sk58LXNjRBHynH+3UNftV3qS25i762HEc8zcU6+lk8sD1NP7LgUxAZAe/boJAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUPQyY5NaT9lNkkcUZ5Cyyt/b97B4wHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3ZjQ5MDY4LWMwY2EtNGEyMS05 YThhLWVlZDI2ZmNkZDFhYS8wLzMyMzAzMDMxM2E2NDY2MzAzYTMyMzY2NjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNDM3MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wAm8w DQYJKoZIhvcNAQELBQADggEBAFoV7EeaPi0Mv+MBFag9rMEy2wvzKmuEVxPg4xa4 ZOBg07NNwTWWIaBvgK0SItGUFHJhSaANoX+DdSi989YZUpc4jt7OxJf8tVAU+cRt 76D5ZY6NqRgbZAjAUwRKoLMNfPsYFIq77j2QyDW6AVx0s1bKhXcVXlHNg+Z1H1rC 0jM6K0uyC0/8JFbadpm09bRhx6C5YF9B1xzz+G94IkiD+rENylIn+gSbjQi6689c faYwSYj1Str/mNVWMlCpsNYzV5GYgw3goMX308K4JqMDsC5u2bq/qVm9L1SFHLT7 4cB2FwJRxlGA6pLplzxSpiJONlVstx41alesOC8CmMiMhio= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:45 2025 by rpki-client