$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa File: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (raw, json) Hash identifier: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc= Subject key identifier: E9:24:04:FE:CE:BD:A0:6C:4D:03:D7:CB:1C:A3:F3:A7:C5:BC:A6:1F Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 7D1EEC6CB8A7B7BA41722E0EDB8C894A9306EBB2 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa Signing time: Fri 19 Sep 2025 08:52:36 +0000 ROA not before: Fri 19 Sep 2025 08:47:36 +0000 ROA not after: Fri 18 Sep 2026 08:52:36 +0000 asID: 136871 IP address blocks: 2001:df3:3f00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1e:ec:6c:b8:a7:b7:ba:41:72:2e:0e:db:8c:89:4a:93:06:eb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Sep 19 08:47:36 2025 GMT Not After : Sep 18 08:52:36 2026 GMT Subject: CN=E92404FECEBDA06C4D03D7CB1CA3F3A7C5BCA61F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:ce:ce:24:6d:38:04:64:bc:51:92:67:3e:93: c1:c5:d0:bc:de:90:24:d5:9e:30:e1:63:da:32:a7: 83:2e:00:ff:33:9d:36:e2:1e:7b:77:77:64:38:11: 57:41:87:9b:ea:62:f8:80:5d:1f:f4:b6:46:2a:f2: 2c:bf:6c:30:14:b9:55:e6:89:87:f9:fe:06:c7:83: 43:19:a9:8c:94:d8:30:4f:f4:f2:2f:9b:7b:3d:18: 35:33:1c:ba:36:1b:ab:19:c6:2b:14:6f:32:02:e4: f5:b1:24:f8:c3:e6:71:5a:20:c3:f5:38:20:ed:2a: 0d:65:51:89:ce:0a:bc:7a:38:b8:58:95:e2:6d:7f: 6d:b5:56:fc:1f:64:04:bd:8f:86:43:fd:9c:a6:ff: 0f:3c:86:2e:52:c2:77:8c:4a:97:4c:36:8a:b4:2b: b9:da:9e:b8:40:aa:6f:eb:87:56:42:5c:a4:55:3f: 93:0f:c2:96:7d:e9:8c:f3:d8:1c:6e:ef:23:1a:3c: a0:7d:64:14:e3:a0:af:1b:69:46:3f:8d:0e:11:45: 2e:e0:46:c4:23:a0:40:58:0e:64:e8:f5:c4:15:63: 26:93:45:03:4a:fd:84:7e:db:a5:e3:ea:be:ad:71: 2b:88:ac:a1:27:95:c0:e2:20:f4:ff:f6:24:2c:d4: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:24:04:FE:CE:BD:A0:6C:4D:03:D7:CB:1C:A3:F3:A7:C5:BC:A6:1F X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:3f00::/48 Signature Algorithm: sha256WithRSAEncryption a4:a7:22:9a:b6:b8:ff:2a:b3:7f:41:d1:57:bc:fd:b8:cf:5d: e8:d5:82:f2:2e:0c:1a:a6:84:c3:35:f9:2b:49:66:f4:89:e1: 99:9f:da:6e:59:87:7d:ee:3d:4b:de:6c:fb:2d:88:1f:84:3b: 8f:f4:c9:5c:4e:38:fe:b7:fa:18:51:e7:26:be:d2:2c:80:fe: 2e:69:3c:6b:29:bb:6d:da:c5:3c:35:c8:28:bc:90:82:c5:1a: 2f:5a:d5:9e:33:35:2a:45:82:52:e6:77:97:4b:00:d9:3f:a1: cb:a7:92:c2:34:17:a3:6a:2c:07:26:9c:20:71:5b:ec:80:7b: d3:89:d9:8c:f4:ea:3e:1c:2d:c8:32:2d:55:6d:e9:57:1a:5d: 4c:c4:d4:36:a3:9f:85:20:95:d4:57:70:be:ca:57:9d:0d:7e: 64:94:1f:cf:4f:f9:2c:ac:24:31:66:96:ad:18:a1:da:27:11: ad:d5:81:63:34:90:c0:f0:f0:c2:fb:79:19:ab:ab:6b:88:64: 24:30:f0:36:6b:09:df:63:f7:e3:ae:a3:54:98:b7:d0:ad:32: a5:14:1f:36:a9:66:31:5c:cb:ef:b1:d4:e3:82:40:51:0a:94: 44:66:58:41:be:66:36:64:69:0b:98:8e:a4:96:e3:30:b0:f9: bc:d2:71:e6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfR7sbLint7pBci4O24yJSpMG67IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTA5MTkwODQ3MzZaFw0yNjA5MTgwODUyMzZaMDMxMTAvBgNV BAMTKEU5MjQwNEZFQ0VCREEwNkM0RDAzRDdDQjFDQTNGM0E3QzVCQ0E2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+zs4kbTgEZLxRkmc+k8HF0Lze kCTVnjDhY9oyp4MuAP8znTbiHnt3d2Q4EVdBh5vqYviAXR/0tkYq8iy/bDAUuVXm iYf5/gbHg0MZqYyU2DBP9PIvm3s9GDUzHLo2G6sZxisUbzIC5PWxJPjD5nFaIMP1 OCDtKg1lUYnOCrx6OLhYleJtf221VvwfZAS9j4ZD/Zym/w88hi5SwneMSpdMNoq0 K7nanrhAqm/rh1ZCXKRVP5MPwpZ96Yzz2Bxu7yMaPKB9ZBTjoK8baUY/jQ4RRS7g RsQjoEBYDmTo9cQVYyaTRQNK/YR+26Xj6r6tcSuIrKEnlcDiIPT/9iQs1HBFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6SQE/s69oGxNA9fLHKPzp8W8ph8wHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MDc0NGIxLTI1MjktNGFlMi1i NWQ1LTVkNDk5ZDNmNTJjMi8wLzMyMzAzMDMxM2E2NDY2MzMzYTMzNjYzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzgzNzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8z8AMA0GCSqGSIb3DQEBCwUAA4IBAQCkpyKatrj/KrN/QdFXvP24z13o1YLyLgwa poTDNfkrSWb0ieGZn9puWYd97j1L3mz7LYgfhDuP9MlcTjj+t/oYUecmvtIsgP4u aTxrKbtt2sU8NcgovJCCxRovWtWeMzUqRYJS5neXSwDZP6HLp5LCNBejaiwHJpwg cVvsgHvTidmM9Oo+HC3IMi1VbelXGl1MxNQ2o5+FIJXUV3C+yledDX5klB/PT/ks rCQxZpatGKHaJxGt1YFjNJDA8PDC+3kZq6triGQkMPA2awnfY/fjrqNUmLfQrTKl FB82qWYxXMvvsdTjgkBRCpREZlhBvmY2ZGkLmI6kluMwsPm80nHm -----END CERTIFICATE-----Generated at Tue Oct 21 01:55:10 2025 by rpki-client