$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa File: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (raw, json) Hash identifier: Q7G/cO+mdHwEtFeO3AaAW+h1sCR4ojICSfcSL5zARmI= Subject key identifier: 7C:B9:24:1C:2E:36:54:D0:E1:88:B1:4B:8C:8A:29:4B:49:34:66:01 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 193F1212E2407DF6D1A0C4525401F186FB8FD521 Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa Signing time: Tue 14 Oct 2025 11:00:00 +0000 ROA not before: Tue 14 Oct 2025 10:55:00 +0000 ROA not after: Tue 13 Oct 2026 11:00:00 +0000 asID: 153123 IP address blocks: 2001:df4:54c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3f:12:12:e2:40:7d:f6:d1:a0:c4:52:54:01:f1:86:fb:8f:d5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Oct 14 10:55:00 2025 GMT Not After : Oct 13 11:00:00 2026 GMT Subject: CN=7CB9241C2E3654D0E188B14B8C8A294B49346601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:c0:5f:00:23:01:f4:5a:2e:0b:27:0b:62: 36:c9:47:e3:36:eb:37:75:bd:1c:a2:e4:de:5d:9e: 16:15:34:e5:48:74:6b:8e:41:a5:22:b9:43:7c:1c: a3:13:85:50:b2:e5:d0:0e:6a:6d:04:12:d4:f2:62: 7c:d0:5b:61:23:ad:de:31:50:a4:62:86:1f:43:7d: 0a:5d:b9:8e:6b:c2:db:a3:0a:33:c3:ab:53:be:8f: 0c:8f:92:47:55:12:ed:c3:1b:ee:9e:7b:37:33:5c: 13:49:9b:a5:38:7a:1d:bb:b9:1a:97:d2:c5:c3:32: ba:12:b8:de:b2:8c:8a:08:27:36:a3:e9:eb:65:f8: 63:f5:38:44:e4:43:4d:66:34:f4:df:6c:22:f0:76: 67:1f:9d:c3:f8:dd:0f:da:f3:2b:0b:ae:d8:ba:a5: 1a:d5:da:db:b9:1d:78:2c:54:6e:f8:71:c0:90:0f: fa:e8:07:7d:6f:bb:82:fb:a4:e7:ca:98:34:b2:77: d1:5c:12:6c:60:ad:af:83:6d:5d:90:25:2c:4d:ec: 6f:22:17:84:05:af:69:a4:bb:45:b9:6b:49:da:87: b9:a1:9c:a0:2e:c0:88:f3:aa:f7:ec:ca:88:57:49: 00:df:27:88:8c:ca:12:39:60:d3:fb:62:e5:03:13: d4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B9:24:1C:2E:36:54:D0:E1:88:B1:4B:8C:8A:29:4B:49:34:66:01 X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:54c0::/48 Signature Algorithm: sha256WithRSAEncryption b1:b6:be:95:27:74:8b:d3:db:3d:7f:f5:9c:d1:db:05:25:aa: 77:26:17:4f:7e:f5:46:55:9d:60:fc:a5:fd:2d:48:fb:71:1c: 75:f7:13:e3:de:0b:a5:a7:c9:e5:cf:bd:1e:3c:59:81:7a:0f: f6:55:af:15:5d:bb:23:3c:a4:48:9a:12:64:c9:21:ed:9d:b3: 46:a1:eb:df:c1:31:ff:0d:08:e9:17:8d:ce:14:69:04:c4:e0: 75:6a:d0:64:f9:42:96:05:da:10:74:1b:24:53:66:28:b8:ee: 05:48:97:6c:59:09:26:84:78:c7:4b:12:bc:e6:62:48:74:fc: b8:5a:09:7a:5d:6f:b2:4f:a0:11:22:c6:b9:8b:84:c9:ae:3f: 2a:04:aa:f1:b5:40:17:73:33:09:14:15:ce:c1:62:b5:90:81: bf:e6:29:5e:18:c1:d8:33:85:00:2e:00:67:4b:d6:24:ad:ed: 1a:26:08:69:21:aa:fa:c6:bf:10:9e:6e:a0:fb:d4:4c:49:83: 64:c0:0b:e0:4f:a2:b2:a6:13:bc:5c:d5:82:c0:09:9a:ee:77: 43:b9:c8:13:f7:6f:3b:18:aa:d5:be:11:01:21:98:91:ed:d1: 16:84:bf:d5:5a:f5:c4:01:af:bf:56:b4:07:ea:82:d3:2c:89: 6a:70:de:60 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGT8SEuJAffbRoMRSVAHxhvuP1SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNTEwMTQxMDU1MDBaFw0yNjEwMTMxMTAwMDBaMDMxMTAvBgNV BAMTKDdDQjkyNDFDMkUzNjU0RDBFMTg4QjE0QjhDOEEyOTRCNDkzNDY2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaA8BfACMB9FouCycLYjbJR+M2 6zd1vRyi5N5dnhYVNOVIdGuOQaUiuUN8HKMThVCy5dAOam0EEtTyYnzQW2Ejrd4x UKRihh9DfQpduY5rwtujCjPDq1O+jwyPkkdVEu3DG+6eezczXBNJm6U4eh27uRqX 0sXDMroSuN6yjIoIJzaj6etl+GP1OETkQ01mNPTfbCLwdmcfncP43Q/a8ysLrti6 pRrV2tu5HXgsVG74ccCQD/roB31vu4L7pOfKmDSyd9FcEmxgra+DbV2QJSxN7G8i F4QFr2mku0W5a0nah7mhnKAuwIjzqvfsyohXSQDfJ4iMyhI5YNP7YuUDE9TTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUfLkkHC42VNDhiLFLjIopS0k0ZgEwHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhOTIzMzk3LThjZjgtNGNlZi04 ODU2LTBkMjY4ZDczZWRiMS8xLzMyMzAzMDMxM2E2NDY2MzQzYTM1MzQ2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9FTAMA0GCSqGSIb3DQEBCwUAA4IBAQCxtr6VJ3SL09s9f/Wc0dsFJap3JhdPfvVG VZ1g/KX9LUj7cRx19xPj3gulp8nlz70ePFmBeg/2Va8VXbsjPKRImhJkySHtnbNG oevfwTH/DQjpF43OFGkExOB1atBk+UKWBdoQdBskU2YouO4FSJdsWQkmhHjHSxK8 5mJIdPy4Wgl6XW+yT6ARIsa5i4TJrj8qBKrxtUAXczMJFBXOwWK1kIG/5ileGMHY M4UALgBnS9Ykre0aJghpIar6xr8Qnm6g+9RMSYNkwAvgT6KyphO8XNWCwAma7ndD ucgT9287GKrVvhEBIZiR7dEWhL/VWvXEAa+/VrQH6oLTLIlqcN5g -----END CERTIFICATE-----Generated at Tue Oct 21 13:23:05 2025 by rpki-client