$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa File: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (raw, json) Hash identifier: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg= Subject key identifier: 31:FF:C0:43:2C:BC:A2:9B:44:6E:90:79:4D:44:CB:DE:4D:B8:38:40 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 20E36E392E33D1807A231F3BF004C6EAEE90481A Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa Signing time: Wed 01 Oct 2025 08:02:52 +0000 ROA not before: Wed 01 Oct 2025 07:57:52 +0000 ROA not after: Wed 30 Sep 2026 08:02:52 +0000 asID: 141113 IP address blocks: 2001:df5:1780::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e3:6e:39:2e:33:d1:80:7a:23:1f:3b:f0:04:c6:ea:ee:90:48:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Oct 1 07:57:52 2025 GMT Not After : Sep 30 08:02:52 2026 GMT Subject: CN=31FFC0432CBCA29B446E90794D44CBDE4DB83840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:bf:a8:5c:76:46:b5:81:5d:e1:07:cc:f9: 48:af:15:bc:fa:e3:b9:61:14:75:bf:9f:9d:dd:35: d3:e1:c0:02:e2:21:6b:06:4d:89:d2:bf:2d:2b:14: 44:2c:29:86:bb:7b:f2:3c:94:0d:1e:0b:5b:3c:3f: 69:16:71:e5:a9:a1:68:06:3f:35:c9:2c:09:79:86: 52:87:e9:be:dc:76:9c:65:c5:4c:bd:0e:9e:88:0b: 4a:7f:d5:e4:72:ef:58:19:46:05:e0:49:fd:ca:e7: f1:40:4c:62:ea:c4:6a:91:50:a3:cd:19:17:cd:13: 3a:bf:93:5f:3a:8c:82:54:6c:cb:5d:9a:48:e9:63: a5:1f:74:50:de:40:9a:9a:1b:03:1e:82:cd:03:d9: c0:b4:cf:db:27:09:29:46:49:98:a7:50:0a:ab:d1: 1e:0e:52:03:14:5d:54:ac:86:b5:bb:7d:aa:b9:99: b8:89:5c:e9:38:5a:51:13:e5:0b:fa:06:7b:48:ea: af:e4:77:7f:3e:5d:6b:b2:b6:7c:41:9e:f7:74:c7: c8:dd:0a:3b:dc:3c:e7:44:4e:13:0b:9a:f3:5e:8d: 08:94:bc:45:7b:a9:e3:19:c6:7d:db:66:de:b6:84: c6:37:05:43:d4:4b:bf:08:31:c1:e4:86:bd:93:0f: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FF:C0:43:2C:BC:A2:9B:44:6E:90:79:4D:44:CB:DE:4D:B8:38:40 X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:1780::/48 Signature Algorithm: sha256WithRSAEncryption 4f:4e:0a:f3:52:c6:61:51:05:55:bf:cf:a1:37:d0:48:b5:ae: 6b:25:55:da:13:7d:af:22:39:b3:47:ff:66:1a:b3:bb:b4:ce: 98:47:1c:00:43:75:09:9d:ba:20:93:01:0d:18:d1:8b:1e:18: dd:9f:90:57:88:5a:be:7b:01:65:0c:2a:c2:be:01:2d:b9:17: 36:83:a7:4b:2d:5a:dd:ae:69:ba:e2:69:4b:63:d7:91:e5:8e: 6c:58:d7:96:99:60:92:d5:ec:f5:cb:c8:05:3c:0f:f6:ea:bd: c0:90:74:63:86:fc:58:cf:a9:32:41:85:cb:bb:15:d5:e9:e4: dd:5f:b8:76:dd:86:ed:ea:51:59:89:ce:c7:25:fb:d8:85:33: 68:99:5c:df:59:85:58:77:18:33:4b:eb:8c:6b:26:03:39:98: e4:9e:0f:cd:cc:f1:ce:a2:af:77:1b:c8:1b:fc:be:92:d7:7d: 1c:e9:22:f9:89:45:65:56:80:15:94:2b:ec:ad:6f:19:fc:ad: 81:bd:ce:80:c5:b3:30:48:a6:09:07:e0:9a:81:29:17:c1:41: d6:6e:98:2f:ad:16:9e:55:27:5f:53:20:dc:2f:2d:79:f4:8b: a1:5f:f3:c5:4f:c2:05:5d:94:4b:f8:e2:bb:25:a4:e6:ba:8d: 17:9f:40:52 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIONuOS4z0YB6Ix878ATG6u6QSBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTEwMDEwNzU3NTJaFw0yNjA5MzAwODAyNTJaMDMxMTAvBgNV BAMTKDMxRkZDMDQzMkNCQ0EyOUI0NDZFOTA3OTRENDRDQkRFNERCODM4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFL+oXHZGtYFd4QfM+UivFbz6 47lhFHW/n53dNdPhwALiIWsGTYnSvy0rFEQsKYa7e/I8lA0eC1s8P2kWceWpoWgG PzXJLAl5hlKH6b7cdpxlxUy9Dp6IC0p/1eRy71gZRgXgSf3K5/FATGLqxGqRUKPN GRfNEzq/k186jIJUbMtdmkjpY6UfdFDeQJqaGwMegs0D2cC0z9snCSlGSZinUAqr 0R4OUgMUXVSshrW7faq5mbiJXOk4WlET5Qv6BntI6q/kd38+XWuytnxBnvd0x8jd CjvcPOdEThMLmvNejQiUvEV7qeMZxn3bZt62hMY3BUPUS78IMcHkhr2TDx+5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMf/AQyy8optEbpB5TUTL3k24OEAwHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmY2Y3YzllLWY4YzMtNDAxNS04 ODFiLWEyYzIxODE5ZDZiOS8wLzMyMzAzMDMxM2E2NDY2MzUzYTMxMzczODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzEzMTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9ReAMA0GCSqGSIb3DQEBCwUAA4IBAQBPTgrzUsZhUQVVv8+hN9BIta5rJVXaE32v IjmzR/9mGrO7tM6YRxwAQ3UJnbogkwENGNGLHhjdn5BXiFq+ewFlDCrCvgEtuRc2 g6dLLVrdrmm64mlLY9eR5Y5sWNeWmWCS1ez1y8gFPA/26r3AkHRjhvxYz6kyQYXL uxXV6eTdX7h23Ybt6lFZic7HJfvYhTNomVzfWYVYdxgzS+uMayYDOZjkng/NzPHO oq93G8gb/L6S130c6SL5iUVlVoAVlCvsrW8Z/K2Bvc6AxbMwSKYJB+CagSkXwUHW bpgvrRaeVSdfUyDcLy159IuhX/PFT8IFXZRL+OK7JaTmuo0Xn0BS -----END CERTIFICATE-----Generated at Mon Oct 20 18:03:55 2025 by rpki-client