$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa File: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (raw, json) Hash identifier: RRjpYe+sCryGtP2L5KYhg6i9BBg+veNKIMjpWUEXvlQ= Subject key identifier: AF:0B:8D:A5:A1:82:B3:AC:97:35:6D:46:67:82:3B:A7:D9:A4:F3:07 Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Certificate serial: 13A7FC0014D979715808A28B5C11B84CA82B5829 Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa Signing time: Thu 02 Oct 2025 03:00:00 +0000 ROA not before: Thu 02 Oct 2025 02:55:00 +0000 ROA not after: Thu 01 Oct 2026 03:00:00 +0000 asID: 136085 IP address blocks: 2001:df0:7500::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a7:fc:00:14:d9:79:71:58:08:a2:8b:5c:11:b8:4c:a8:2b:58:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Validity Not Before: Oct 2 02:55:00 2025 GMT Not After : Oct 1 03:00:00 2026 GMT Subject: CN=AF0B8DA5A182B3AC97356D4667823BA7D9A4F307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:11:1f:c2:4e:96:34:b8:75:fd:9e:4e:e0: fe:c4:4f:6f:f0:fd:10:fc:0e:a2:07:cf:5a:ad:a1: d1:24:ff:80:81:15:05:f9:4b:3a:d7:9e:1e:33:19: 92:c6:da:16:e9:52:d8:36:d5:66:18:72:70:c4:6b: 98:2f:fe:81:d7:26:b7:30:fb:39:d7:a5:09:56:28: 1e:a6:dc:25:f6:4b:87:b7:a1:cc:89:3a:b2:42:27: c7:d4:2e:56:47:80:6b:ba:b5:34:50:dd:22:db:29: e9:79:f2:e6:86:6b:f4:5d:3d:16:b5:5e:39:77:42: 89:4e:55:4a:cf:03:92:9d:1f:ad:d1:77:df:36:78: 77:8c:ae:22:d7:ce:29:53:b0:6f:18:29:b2:5c:49: 19:ab:22:e6:b6:2a:8b:f1:96:01:4e:bb:77:c4:09: 74:61:81:a5:ee:f4:11:b8:25:b4:9a:95:a4:45:27: 4b:3d:04:15:eb:ab:5e:af:12:c2:5b:b0:5f:d9:7a: a0:77:20:30:6d:49:0f:69:11:83:ca:90:33:12:55: 3c:42:1f:fd:27:c3:2f:3e:83:57:80:94:2b:d6:7f: db:d0:ca:39:10:2f:7f:5d:8a:5a:1c:a7:80:01:e9: 69:09:74:0f:fe:4a:96:30:27:34:b2:66:a5:fd:26: c1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0B:8D:A5:A1:82:B3:AC:97:35:6D:46:67:82:3B:A7:D9:A4:F3:07 X509v3 Authority Key Identifier: keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:7500::/48 Signature Algorithm: sha256WithRSAEncryption 9e:27:66:2c:e7:63:35:71:d7:a8:4c:09:d0:eb:75:ab:04:a6: 8b:23:32:b2:18:ad:52:31:2a:f5:e0:0c:5b:84:16:86:03:5a: 41:75:76:d4:bd:64:ad:11:a0:61:a0:17:4e:19:64:75:49:95: 20:33:8b:cc:f3:34:d6:ad:14:7d:68:b2:a9:84:d4:90:82:b1: 8e:fd:5f:a1:19:fd:b6:60:9f:1a:74:ad:c6:40:55:e6:33:65: c3:40:a6:2b:a6:15:93:8d:b9:37:1c:19:90:2d:98:5b:27:18: 86:a6:29:b7:4c:7f:3b:66:5d:3c:16:e6:6b:81:e3:16:84:8d: d7:bd:a7:78:db:fb:c8:33:90:f0:a6:d6:0c:72:38:4f:81:32: a5:41:48:64:0f:a0:4a:8c:8f:ce:43:36:51:30:51:e5:37:ec: 70:cb:88:09:3d:19:5e:39:3b:66:5a:7f:95:a7:b5:b5:38:7b: d5:dd:d1:c5:85:d8:d3:e5:18:a8:55:74:c5:ce:0b:dd:ae:e8: 30:ce:c7:4c:42:f5:fc:eb:03:f2:7d:3e:61:0b:f8:b2:02:0f: 21:1e:77:18:b0:63:f1:59:eb:c5:b3:9d:07:d4:23:8f:4f:5d: 13:59:4a:04:f0:1c:f8:25:d8:0c:1c:21:96:79:88:27:20:7b: a8:ec:b9:80 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUE6f8ABTZeXFYCKKLXBG4TKgrWCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE QzM0RUE2QTAeFw0yNTEwMDIwMjU1MDBaFw0yNjEwMDEwMzAwMDBaMDMxMTAvBgNV BAMTKEFGMEI4REE1QTE4MkIzQUM5NzM1NkQ0NjY3ODIzQkE3RDlBNEYzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILhEfwk6WNLh1/Z5O4P7ET2/w /RD8DqIHz1qtodEk/4CBFQX5SzrXnh4zGZLG2hbpUtg21WYYcnDEa5gv/oHXJrcw +znXpQlWKB6m3CX2S4e3ocyJOrJCJ8fULlZHgGu6tTRQ3SLbKel58uaGa/RdPRa1 Xjl3QolOVUrPA5KdH63Rd982eHeMriLXzilTsG8YKbJcSRmrIua2KovxlgFOu3fE CXRhgaXu9BG4JbSalaRFJ0s9BBXrq16vEsJbsF/ZeqB3IDBtSQ9pEYPKkDMSVTxC H/0nwy8+g1eAlCvWf9vQyjkQL39dilocp4AB6WkJdA/+SpYwJzSyZqX9JsEZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrwuNpaGCs6yXNW1GZ4I7p9mk8wcwHwYDVR0j BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2 MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0 RUE2QS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjMjc4NzQ3LTZhYzctNGY4Ny05 YjJiLTIxMzU5Mjk0ZjAzNC8wLzMyMzAzMDMxM2E2NDY2MzAzYTM3MzUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8HUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeJ2Ys52M1cdeoTAnQ63WrBKaLIzKyGK1S MSr14AxbhBaGA1pBdXbUvWStEaBhoBdOGWR1SZUgM4vM8zTWrRR9aLKphNSQgrGO /V+hGf22YJ8adK3GQFXmM2XDQKYrphWTjbk3HBmQLZhbJxiGpim3TH87Zl08FuZr geMWhI3Xvad42/vIM5DwptYMcjhPgTKlQUhkD6BKjI/OQzZRMFHlN+xwy4gJPRle OTtmWn+Vp7W1OHvV3dHFhdjT5RioVXTFzgvdrugwzsdMQvX86wPyfT5hC/iyAg8h HncYsGPxWevFs50H1COPT10TWUoE8Bz4JdgMHCGWeYgnIHuo7LmA -----END CERTIFICATE-----Generated at Tue Oct 21 00:25:51 2025 by rpki-client