$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa File: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (raw, json) Hash identifier: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8= Subject key identifier: 59:14:DE:9C:C6:BD:25:57:D1:13:70:F7:7C:7B:30:4B:E1:6A:BF:AF Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 7AF874C13D9156CC7F2FB49FA35F7B37B7D33269 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa Signing time: Fri 15 Aug 2025 09:02:58 +0000 ROA not before: Fri 15 Aug 2025 08:57:58 +0000 ROA not after: Fri 14 Aug 2026 09:02:58 +0000 asID: 153112 IP address blocks: 2001:df4:3a40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f8:74:c1:3d:91:56:cc:7f:2f:b4:9f:a3:5f:7b:37:b7:d3:32:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Aug 15 08:57:58 2025 GMT Not After : Aug 14 09:02:58 2026 GMT Subject: CN=5914DE9CC6BD2557D11370F77C7B304BE16ABFAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:6a:6e:53:21:d1:d3:dc:2f:d4:55:2a:6d: ba:4d:e6:d8:1e:91:83:78:d1:44:c1:03:6c:a4:19: 3a:72:ec:7c:54:d0:a1:24:94:fc:e4:28:e8:53:49: 1d:32:66:c5:ef:15:59:c3:96:37:78:e6:fb:8b:8e: 7b:ad:9c:2a:c8:7d:28:ab:0f:97:ad:75:51:4d:af: 80:9f:e9:88:1f:bd:02:25:e6:23:f1:75:21:1c:b1: 2f:48:8d:71:5f:84:64:1a:b8:15:0e:ab:33:61:b1: 88:f4:99:40:6d:bc:e7:cb:cd:78:8d:18:10:13:2d: c5:c5:70:36:3f:c0:a2:83:b8:1a:5c:05:06:d2:2d: e1:07:e3:d7:fa:d1:72:f3:7b:1d:7e:ba:76:a6:7a: 3a:d2:2f:6e:57:a7:6d:25:c7:d5:d0:08:0c:a9:77: 8a:d4:5d:08:9e:52:34:f7:18:74:7b:bd:d0:d0:8d: 6e:4e:91:da:b8:44:43:44:e5:d1:4b:11:24:91:82: 1c:11:1a:73:de:84:47:6d:aa:cd:0d:2c:15:74:f3: 35:41:5a:2a:7c:ec:50:a9:e3:1d:fc:cc:d6:10:e7: 24:e7:76:7d:43:25:39:d2:67:32:80:dd:72:84:37: ae:5a:26:d6:0a:8f:65:85:c5:c5:c8:a7:94:46:bf: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:14:DE:9C:C6:BD:25:57:D1:13:70:F7:7C:7B:30:4B:E1:6A:BF:AF X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:3a40::/48 Signature Algorithm: sha256WithRSAEncryption 6f:11:c9:54:4a:56:ce:3a:9b:8c:dc:53:00:57:64:95:fb:84: e4:a9:aa:7d:71:41:25:34:e0:aa:10:8c:02:42:4d:6c:11:a8: 71:2f:3c:99:54:7d:cc:27:55:71:b2:d6:11:0b:86:fa:b7:87: 67:ef:f3:75:e4:0a:4c:ca:54:e9:55:41:bd:ed:b4:63:cf:91: f9:83:fa:1d:86:6e:41:38:17:e3:72:bc:37:da:dd:8b:54:e3: 3e:c2:91:6c:11:e3:88:65:ed:95:e3:14:de:53:2c:15:19:5b: ca:90:52:c9:bb:f7:d7:7e:15:e4:1c:8f:18:08:67:10:33:b5: c3:9d:c2:2b:d6:bf:19:7a:65:48:ff:9e:5e:98:02:29:08:1d: 3d:6c:5c:61:03:6d:a6:ea:c9:1d:ee:30:0f:d3:eb:f9:35:04: e8:cf:9b:8f:56:6c:a0:4a:bb:ae:3c:a3:9a:0f:8c:ff:e9:9a: dc:b6:89:64:9e:d4:46:30:66:12:53:f3:eb:87:6e:30:50:b9: 5d:3c:07:44:93:89:de:6b:86:d6:fe:49:fb:cc:72:b5:30:ca: 90:9c:60:db:80:ac:f5:eb:4d:6f:80:46:f5:fb:40:97:8c:13: b7:c7:cc:40:5f:4a:9b:f3:21:e9:2c:87:e8:d4:61:88:69:de: cc:bb:95:05 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUevh0wT2RVsx/L7Sfo197N7fTMmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA4MTUwODU3NThaFw0yNjA4MTQwOTAyNThaMDMxMTAvBgNV BAMTKDU5MTRERTlDQzZCRDI1NTdEMTEzNzBGNzdDN0IzMDRCRTE2QUJGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ympuUyHR09wv1FUqbbpN5tge kYN40UTBA2ykGTpy7HxU0KEklPzkKOhTSR0yZsXvFVnDljd45vuLjnutnCrIfSir D5etdVFNr4Cf6YgfvQIl5iPxdSEcsS9IjXFfhGQauBUOqzNhsYj0mUBtvOfLzXiN GBATLcXFcDY/wKKDuBpcBQbSLeEH49f60XLzex1+unamejrSL25Xp20lx9XQCAyp d4rUXQieUjT3GHR7vdDQjW5Okdq4RENE5dFLESSRghwRGnPehEdtqs0NLBV08zVB Wip87FCp4x38zNYQ5yTndn1DJTnSZzKA3XKEN65aJtYKj2WFxcXIp5RGv+tBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWRTenMa9JVfRE3D3fHswS+Fqv68wHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTY1MTllLWFiNjEtNDk0My1i M2U4LTEwYmRkNjA4MGZkYS8xLzMyMzAzMDMxM2E2NDY2MzQzYTMzNjEzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzMTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9DpAMA0GCSqGSIb3DQEBCwUAA4IBAQBvEclUSlbOOpuM3FMAV2SV+4Tkqap9cUEl NOCqEIwCQk1sEahxLzyZVH3MJ1VxstYRC4b6t4dn7/N15ApMylTpVUG97bRjz5H5 g/odhm5BOBfjcrw32t2LVOM+wpFsEeOIZe2V4xTeUywVGVvKkFLJu/fXfhXkHI8Y CGcQM7XDncIr1r8ZemVI/55emAIpCB09bFxhA22m6skd7jAP0+v5NQToz5uPVmyg SruuPKOaD4z/6ZrctolkntRGMGYSU/Prh24wULldPAdEk4nea4bW/kn7zHK1MMqQ nGDbgKz1601vgEb1+0CXjBO3x8xAX0qb8yHpLIfo1GGIad7Mu5UF -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:00 2025 by rpki-client