$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa File: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (raw, json) Hash identifier: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0= Subject key identifier: A8:A0:6B:A0:DF:77:48:42:A3:85:9A:27:84:43:57:2D:0E:BB:32:61 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 3E9E36892F940CD5DAE933106472552E980D3BB2 Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa Signing time: Fri 06 Jun 2025 02:00:01 +0000 ROA not before: Fri 06 Jun 2025 01:55:01 +0000 ROA not after: Fri 05 Jun 2026 02:00:01 +0000 asID: 152790 IP address blocks: 2001:df3:d3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9e:36:89:2f:94:0c:d5:da:e9:33:10:64:72:55:2e:98:0d:3b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Jun 6 01:55:01 2025 GMT Not After : Jun 5 02:00:01 2026 GMT Subject: CN=A8A06BA0DF774842A3859A278443572D0EBB3261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:bf:2a:54:eb:17:02:5b:1c:e4:e6:4b:7e: d6:b9:2a:5a:85:23:a2:70:87:28:28:68:c4:6b:75: 79:82:71:a2:53:ab:7d:af:47:f0:1d:01:9e:13:bb: 82:da:a9:1b:8d:4e:21:86:2c:ba:74:5f:19:be:12: e7:98:b6:53:7f:16:86:5b:90:5d:0f:94:a7:fa:9e: f1:a7:78:91:e2:e7:66:02:65:36:1c:ee:7b:eb:78: 8e:8a:89:52:15:ad:e9:ee:ab:75:f8:6e:c7:b8:69: 46:63:bc:9b:5c:dc:ea:64:ae:75:fe:0b:46:93:8f: 65:a5:75:65:34:0b:5b:57:77:91:1c:5e:51:08:b7: be:42:04:ee:5e:f7:f9:1e:c9:3a:ab:79:45:38:82: c9:b7:60:8c:99:c5:44:22:fd:31:74:10:23:a9:6c: 07:e5:b3:c6:6c:aa:3a:58:51:c9:10:60:6c:ea:a9: 63:44:03:d9:cf:64:ba:b3:7c:95:5c:33:0d:48:e9: b3:22:a5:46:ca:64:01:56:24:4c:f0:dc:a8:c0:a7: 70:7c:d0:16:f1:be:df:36:57:1f:41:de:f6:1c:8e: a3:b1:43:26:99:9e:77:ff:85:9c:b8:18:bc:39:1f: 01:84:4a:c8:a6:f3:a2:9d:48:aa:aa:00:80:51:ea: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A0:6B:A0:DF:77:48:42:A3:85:9A:27:84:43:57:2D:0E:BB:32:61 X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d3c0::/48 Signature Algorithm: sha256WithRSAEncryption 0f:21:a3:59:95:9f:ef:ac:45:61:1a:db:f6:f0:8e:f5:f4:26: d2:a9:fb:f1:c0:00:a8:50:ba:6a:6a:16:b5:79:d0:cf:2b:71: 52:b7:07:7e:7c:f3:78:e0:2a:c7:c6:7a:f5:6e:44:54:4f:e5: c6:16:72:bf:36:8d:0f:86:b6:2a:b6:57:89:2c:7e:04:a9:81: 1c:af:d1:53:fd:2e:5b:1e:ce:68:7b:bb:89:d8:14:9c:af:68: 02:f5:82:57:ea:97:09:55:d1:73:70:3d:65:f2:28:39:64:0c: cb:2f:3d:38:e2:bc:fb:19:de:0e:99:9b:9f:1b:fc:e3:75:bb: 93:3a:e9:2a:7f:d8:a3:ec:4d:a9:e3:c0:88:41:84:d8:4b:e4: a9:56:f6:bd:df:58:11:67:73:bf:36:a6:57:c6:ba:25:ec:00: 9d:87:d5:7e:c3:a2:12:10:80:f3:26:96:90:02:51:9b:95:8c: 93:af:be:69:fb:34:be:a3:60:d3:33:8a:92:be:50:dd:6a:5f: 89:70:0b:33:97:86:0f:45:f3:68:92:92:16:8f:c6:52:5b:da: 0c:b8:87:ff:bd:c7:53:33:1d:43:0a:02:35:1d:20:25:6f:a2: a4:9c:1d:cd:26:71:e8:20:63:fb:7a:f3:c6:b1:bc:7d:5f:0a: 7c:92:49:3e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPp42iS+UDNXa6TMQZHJVLpgNO7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTA2MDYwMTU1MDFaFw0yNjA2MDUwMjAwMDFaMDMxMTAvBgNV BAMTKEE4QTA2QkEwREY3NzQ4NDJBMzg1OUEyNzg0NDM1NzJEMEVCQjMyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy678qVOsXAlsc5OZLfta5KlqF I6JwhygoaMRrdXmCcaJTq32vR/AdAZ4Tu4LaqRuNTiGGLLp0Xxm+EueYtlN/FoZb kF0PlKf6nvGneJHi52YCZTYc7nvreI6KiVIVrenuq3X4bse4aUZjvJtc3OpkrnX+ C0aTj2WldWU0C1tXd5EcXlEIt75CBO5e9/keyTqreUU4gsm3YIyZxUQi/TF0ECOp bAfls8ZsqjpYUckQYGzqqWNEA9nPZLqzfJVcMw1I6bMipUbKZAFWJEzw3KjAp3B8 0Bbxvt82Vx9B3vYcjqOxQyaZnnf/hZy4GLw5HwGESsim86KdSKqqAIBR6q1BAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqKBroN93SEKjhZonhENXLQ67MmEwHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiYjVmYTRhLWJlYTYtNDY0Zi1i NDA5LTExZDlhMzc2MWE2Yy8xLzMyMzAzMDMxM2E2NDY2MzMzYTY0MzM2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzczOTMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89PAMA0GCSqGSIb3DQEBCwUAA4IBAQAPIaNZlZ/vrEVhGtv28I719CbSqfvxwACo ULpqaha1edDPK3FStwd+fPN44CrHxnr1bkRUT+XGFnK/No0PhrYqtleJLH4EqYEc r9FT/S5bHs5oe7uJ2BScr2gC9YJX6pcJVdFzcD1l8ig5ZAzLLz044rz7Gd4OmZuf G/zjdbuTOukqf9ij7E2p48CIQYTYS+SpVva931gRZ3O/NqZXxrol7ACdh9V+w6IS EIDzJpaQAlGblYyTr75p+zS+o2DTM4qSvlDdal+JcAszl4YPRfNokpIWj8ZSW9oM uIf/vcdTMx1DCgI1HSAlb6KknB3NJnHoIGP7evPGsbx9Xwp8kkk+ -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:45 2025 by rpki-client