$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: l2XgTKrEaZzJg/s+9XNrUPqB/jS99nk9vRMWjSJi3Ck= Subject key identifier: 2D:A9:54:27:7B:9A:16:ED:6B:95:9C:5A:A0:7D:D1:F0:97:69:E3:E8 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 0F1B7530D2EAF319EA82B5B6A7D78D55779DF5C6 Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa Signing time: Tue 15 Jul 2025 02:00:02 +0000 ROA not before: Tue 15 Jul 2025 01:55:02 +0000 ROA not after: Tue 14 Jul 2026 02:00:02 +0000 asID: 136079 IP address blocks: 2405:2cc0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1b:75:30:d2:ea:f3:19:ea:82:b5:b6:a7:d7:8d:55:77:9d:f5:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Jul 15 01:55:02 2025 GMT Not After : Jul 14 02:00:02 2026 GMT Subject: CN=2DA954277B9A16ED6B959C5AA07DD1F09769E3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:36:56:d3:cf:66:0a:65:87:7b:ea:24:df: d4:1e:45:6d:9c:84:8c:85:7f:1d:ce:40:c6:4e:fa: cc:18:98:ec:c8:c1:45:b5:a1:31:32:fb:6e:6b:7e: de:32:b2:e9:4e:79:9c:10:c1:d9:d2:e2:84:7d:d9: 5c:8a:23:d2:56:55:9b:89:c6:ae:b8:c7:5c:e0:78: 74:14:79:22:52:5e:a8:b2:ee:46:05:ac:cf:4c:26: 89:f7:84:e5:37:65:4f:95:a0:6a:75:aa:73:e7:ed: fa:f7:01:45:f7:81:91:7c:1e:5a:0b:fe:78:7c:bf: 9a:5e:b9:46:aa:7e:ca:bd:f9:63:d7:c4:fd:04:8e: 5e:3e:21:4a:76:da:fc:7e:ac:19:af:be:98:9e:bf: c8:62:30:b2:2f:f3:b7:64:6e:35:35:a2:38:d9:13: 1b:9c:50:c2:3c:84:d0:24:9d:5f:c4:f0:2a:6d:7c: 61:50:09:68:dd:5a:92:d9:56:c7:3b:3d:e0:b9:c7: 94:19:33:26:ae:29:f8:ef:b9:f3:80:a4:e0:11:20: ac:6d:ac:67:65:c3:a6:6c:79:57:11:13:cb:6a:a3: 3d:a9:64:2b:dd:d9:45:16:a0:96:17:b3:15:bb:b7: 1c:aa:bd:df:a8:8b:5e:88:cb:d7:80:97:7b:e3:b9: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:54:27:7B:9A:16:ED:6B:95:9C:5A:A0:7D:D1:F0:97:69:E3:E8 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:b::/48 Signature Algorithm: sha256WithRSAEncryption 99:b8:48:a8:a9:62:b6:4e:ab:8a:84:c2:d1:05:5e:ae:ee:e0: 8f:14:56:32:f7:f0:2f:d4:88:a4:0b:07:34:7c:4c:ea:c2:db: 01:45:d3:b4:5f:f1:c5:58:24:0c:db:20:ae:e0:04:99:d9:de: a3:46:e8:d4:c7:05:cf:07:b5:ac:71:4f:d7:8a:1a:a9:a7:3b: 84:7f:32:16:ed:14:ac:9b:e5:ba:74:16:48:cd:ca:e1:65:13: fa:7f:a9:a7:b6:98:fb:59:76:95:98:5a:5c:26:f5:32:c4:3b: f0:61:53:26:a7:60:90:6d:57:e5:0b:6f:d7:53:8c:cc:b6:26: f9:96:15:03:5f:ee:c8:fd:65:8e:82:bd:4a:91:5f:06:35:b2: 43:ce:90:55:21:14:2f:c6:42:e0:a0:08:01:c3:f4:bf:02:d2: 4e:f2:f5:5c:2c:ac:d3:9e:f4:28:0b:63:dc:69:df:0d:a4:4f: 11:85:8b:99:90:2b:ae:bf:ce:9e:35:5e:72:9b:98:10:c2:29: d5:4e:52:85:b2:bf:23:c0:00:ea:35:77:18:65:e4:fa:03:65: c2:9d:a4:95:6c:e8:7c:f9:6c:d1:6a:1a:04:4c:6c:76:0e:0e: a1:7a:94:3d:b2:63:ed:78:6b:7a:c7:8b:46:14:05:1f:e7:35: 3e:c4:56:79 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUDxt1MNLq8xnqgrW2p9eNVXed9cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNTA3MTUwMTU1MDJaFw0yNjA3MTQwMjAwMDJaMDMxMTAvBgNV BAMTKDJEQTk1NDI3N0I5QTE2RUQ2Qjk1OUM1QUEwN0REMUYwOTc2OUUzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmzZW089mCmWHe+ok39QeRW2c hIyFfx3OQMZO+swYmOzIwUW1oTEy+25rft4ysulOeZwQwdnS4oR92VyKI9JWVZuJ xq64x1zgeHQUeSJSXqiy7kYFrM9MJon3hOU3ZU+VoGp1qnPn7fr3AUX3gZF8HloL /nh8v5peuUaqfsq9+WPXxP0Ejl4+IUp22vx+rBmvvpiev8hiMLIv87dkbjU1ojjZ ExucUMI8hNAknV/E8CptfGFQCWjdWpLZVsc7PeC5x5QZMyauKfjvufOApOARIKxt rGdlw6ZseVcRE8tqoz2pZCvd2UUWoJYXsxW7txyqvd+oi16Iy9eAl3vjufUBAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQULalUJ3uaFu1rlZxaoH3R8Jdp4+gwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBSzAAAsw DQYJKoZIhvcNAQELBQADggEBAJm4SKipYrZOq4qEwtEFXq7u4I8UVjL38C/UiKQL BzR8TOrC2wFF07Rf8cVYJAzbIK7gBJnZ3qNG6NTHBc8HtaxxT9eKGqmnO4R/Mhbt FKyb5bp0FkjNyuFlE/p/qae2mPtZdpWYWlwm9TLEO/BhUyanYJBtV+ULb9dTjMy2 JvmWFQNf7sj9ZY6CvUqRXwY1skPOkFUhFC/GQuCgCAHD9L8C0k7y9VwsrNOe9CgL Y9xp3w2kTxGFi5mQK66/zp41XnKbmBDCKdVOUoWyvyPAAOo1dxhl5PoDZcKdpJVs 6Hz5bNFqGgRMbHYODqF6lD2yY+14a3rHi0YUBR/nNT7EVnk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:44 2025 by rpki-client