$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa File: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (raw, json) Hash identifier: UnWzJ48Nx645Ud0DTEThTJUyGBI60lPLzC3swH45IOM= Subject key identifier: 26:A8:4A:5A:E4:A9:ED:A0:53:80:D6:DB:A6:52:45:B9:F1:55:95:1E Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Certificate serial: 018FD46822218A5BFD22366F53DED9D883D01FC0 Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa Signing time: Tue 14 Oct 2025 03:02:56 +0000 ROA not before: Tue 14 Oct 2025 02:57:56 +0000 ROA not after: Tue 13 Oct 2026 03:02:56 +0000 asID: 136071 IP address blocks: 2001:df0:2900::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:d4:68:22:21:8a:5b:fd:22:36:6f:53:de:d9:d8:83:d0:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Validity Not Before: Oct 14 02:57:56 2025 GMT Not After : Oct 13 03:02:56 2026 GMT Subject: CN=26A84A5AE4A9EDA05380D6DBA65245B9F155951E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:f5:5d:61:93:6e:b1:e4:71:dd:0a:08:d2: 7c:01:89:95:61:09:38:b3:ce:dc:cd:16:23:f6:f3: 73:11:e4:28:dc:00:bf:0d:07:97:79:1e:f0:60:d5: 7f:10:ea:30:e1:75:19:f9:30:12:b8:77:5a:7e:f4: 69:43:58:6b:49:f3:e8:70:93:5b:00:be:6c:54:8b: df:a4:9e:5e:79:f0:27:7a:10:d9:e0:98:be:80:6f: f4:b9:f7:ab:12:6b:3c:88:d2:3f:af:88:a5:23:c7: f5:61:70:b6:c4:bb:a4:9d:57:39:84:ee:a3:16:0f: 91:b8:ea:75:4c:10:1a:95:71:c2:d0:a9:40:59:f2: 0b:bd:6b:9e:2b:29:83:8b:e4:83:63:c2:27:be:5b: 23:d0:44:ea:37:81:c1:f5:e1:ae:2d:f2:9d:4e:27: 3b:05:57:c9:e9:3e:cb:71:cc:e6:a4:ab:8a:c4:3c: c7:4e:e5:88:03:5e:12:15:66:d0:c3:ac:5d:92:57: bd:32:5d:33:b8:7e:81:21:5d:df:6d:40:05:53:af: a0:bf:0c:61:ab:7d:d5:d7:2e:46:48:84:bd:77:83: b6:c6:2d:4f:14:da:95:e9:c4:21:25:75:b5:d0:de: fc:f4:b0:e0:9f:24:bf:c4:7b:fd:33:38:b1:48:f0: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A8:4A:5A:E4:A9:ED:A0:53:80:D6:DB:A6:52:45:B9:F1:55:95:1E X509v3 Authority Key Identifier: keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:2900::/48 Signature Algorithm: sha256WithRSAEncryption e9:de:4b:ca:65:a4:5c:4b:43:53:1b:7a:ab:09:c1:31:91:a7: 7e:32:d3:24:b9:64:64:38:ea:f0:7f:85:bd:b1:5b:60:19:91: ab:3c:b5:6a:f6:da:d2:da:8b:2d:63:7a:7a:6a:1d:6d:50:bf: ba:be:94:fe:e5:e3:3d:b9:e1:6b:54:db:63:74:17:28:6d:4d: bd:01:bb:f8:2e:a4:94:32:af:16:a2:ea:91:d8:4f:3f:6b:0d: 10:5d:fb:ee:ae:b0:8f:fe:5c:24:9b:f8:72:d1:1a:78:f7:c4: dc:59:ba:52:8d:fb:ed:3a:d3:39:af:1b:88:31:40:1b:6c:29: d3:bc:1a:0c:fb:9e:80:cb:d8:fa:66:22:5c:9f:43:78:80:b0: 53:86:25:9e:16:be:dd:79:b8:de:be:ef:38:25:e3:06:5a:7f: f4:f0:3c:ed:0d:20:47:c3:d6:cb:ea:dc:11:53:7c:51:fb:0f: 15:5a:f9:96:ec:5e:9b:04:a9:61:13:f8:79:2a:95:70:d2:7e: 97:8d:cf:31:a8:76:9d:21:de:9e:52:2a:4c:b4:52:fc:f4:e3: 1d:2b:5a:5f:1a:37:c8:c8:9d:a2:45:cc:c7:bc:73:b0:3a:eb: f2:39:3b:3f:06:03:1f:73:42:68:5f:a8:a7:f0:62:13:8d:50: b3:13:b0:00 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAY/UaCIhilv9IjZvU97Z2IPQH8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEw OUVDNjE3ODAeFw0yNTEwMTQwMjU3NTZaFw0yNjEwMTMwMzAyNTZaMDMxMTAvBgNV BAMTKDI2QTg0QTVBRTRBOUVEQTA1MzgwRDZEQkE2NTI0NUI5RjE1NTk1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcvVdYZNuseRx3QoI0nwBiZVh CTizztzNFiP283MR5CjcAL8NB5d5HvBg1X8Q6jDhdRn5MBK4d1p+9GlDWGtJ8+hw k1sAvmxUi9+knl558Cd6ENngmL6Ab/S596sSazyI0j+viKUjx/VhcLbEu6SdVzmE 7qMWD5G46nVMEBqVccLQqUBZ8gu9a54rKYOL5INjwie+WyPQROo3gcH14a4t8p1O JzsFV8npPstxzOakq4rEPMdO5YgDXhIVZtDDrF2SV70yXTO4foEhXd9tQAVTr6C/ DGGrfdXXLkZIhL13g7bGLU8U2pXpxCEldbXQ3vz0sOCfJL/Ee/0zOLFI8GBlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUJqhKWuSp7aBTgNbbplJFufFVlR4wHwYDVR0j BBgwFoAUL+xgc57wh/DU+UfHIwpyUQnsYXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE3ZTJmYS0yZjY4LTQ1MmUtYTQwNC04ZTdjY2I2ODcyMTUvMC8yRkVDNjA3MzlF RjA4N0YwRDRGOTQ3QzcyMzBBNzI1MTA5RUM2MTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEwOUVD NjE3OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1MTdlMmZhLTJmNjgtNDUyZS1h NDA0LThlN2NjYjY4NzIxNS8wLzMyMzAzMDMxM2E2NDY2MzAzYTMyMzkzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzNzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8CkAMA0GCSqGSIb3DQEBCwUAA4IBAQDp3kvKZaRcS0NTG3qrCcExkad+MtMkuWRk OOrwf4W9sVtgGZGrPLVq9trS2ostY3p6ah1tUL+6vpT+5eM9ueFrVNtjdBcobU29 Abv4LqSUMq8WouqR2E8/aw0QXfvurrCP/lwkm/hy0Rp498TcWbpSjfvtOtM5rxuI MUAbbCnTvBoM+56Ay9j6ZiJcn0N4gLBThiWeFr7debjevu84JeMGWn/08DztDSBH w9bL6twRU3xR+w8VWvmW7F6bBKlhE/h5KpVw0n6Xjc8xqHadId6eUipMtFL89OMd K1pfGjfIyJ2iRczHvHOwOuvyOTs/BgMfc0JoX6in8GITjVCzE7AA -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:43 2025 by rpki-client