$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa File: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (raw, json) Hash identifier: E8NUcaKWe3ABHFVxNWSSIkp1m8C7YtMxKMRA2hg1NmI= Subject key identifier: 4F:5D:1D:D4:E5:3F:4E:07:58:2B:97:78:5C:3D:D3:13:A4:A5:55:DF Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 2535335DD7019EEBB516C1C8B0AC71E893BF16CA Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa Signing time: Wed 13 Aug 2025 05:00:01 +0000 ROA not before: Wed 13 Aug 2025 04:55:01 +0000 ROA not after: Wed 12 Aug 2026 05:00:01 +0000 asID: 141939 IP address blocks: 2001:df1:1bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:35:33:5d:d7:01:9e:eb:b5:16:c1:c8:b0:ac:71:e8:93:bf:16:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Aug 13 04:55:01 2025 GMT Not After : Aug 12 05:00:01 2026 GMT Subject: CN=4F5D1DD4E53F4E07582B97785C3DD313A4A555DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:0b:d6:e2:02:75:53:d7:17:17:2c:e0:a9: bd:f3:90:ce:4c:d8:d7:9d:51:fc:45:00:02:54:bd: f3:97:0a:57:a5:9b:4a:26:df:6d:e2:22:bf:90:b7: 0e:fd:26:63:93:cf:8a:2b:50:2f:ee:56:a6:28:66: 1c:58:e5:ba:91:71:a9:20:b5:ae:cc:de:bd:cc:b4: a0:cb:fa:3f:a4:47:d6:bb:2d:df:ff:ce:bf:7b:34: c5:7b:08:5c:c4:46:7b:eb:0c:e3:54:b2:c6:30:cc: 97:7e:e5:4d:50:13:1d:9a:ab:e1:f6:c7:22:66:52: 49:33:e7:92:1e:5c:bb:69:82:e6:4d:bc:93:e8:b9: ac:dd:be:81:84:9d:0b:8c:33:03:c3:bc:3f:70:29: a4:39:e4:3b:82:10:fd:ff:78:9b:f0:40:03:8d:e5: f0:2d:48:36:a3:8c:83:2c:2c:a2:38:97:b4:fb:e0: fd:33:96:96:b0:11:14:40:35:3f:c5:2e:76:10:48: 37:83:42:19:5a:c2:5b:72:97:22:92:64:66:24:f5: 54:3e:23:f8:8c:f8:72:ab:72:f2:b2:4e:c0:8a:d0: c3:3a:8b:1b:4a:14:f8:dc:fc:92:77:e2:5a:e5:fc: a0:27:71:68:ee:e5:7b:e8:a7:d0:8c:42:dc:55:5c: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5D:1D:D4:E5:3F:4E:07:58:2B:97:78:5C:3D:D3:13:A4:A5:55:DF X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:1bc0::/48 Signature Algorithm: sha256WithRSAEncryption 6c:19:8d:c5:3c:97:12:06:2b:a2:30:32:d9:1e:f0:22:15:bb: 12:01:c6:5e:c1:fd:ed:1e:c4:45:68:83:1d:11:3c:31:f8:9b: af:61:b8:c2:7a:c5:ec:bb:dc:68:96:1b:24:f5:57:a5:9d:98: dc:e0:74:3f:31:1a:1e:02:e5:c1:07:7a:11:f5:2c:48:9c:59: 48:0d:64:7e:b8:70:63:27:dc:35:7a:6d:f5:af:a5:44:e6:cc: 46:15:02:68:03:fe:5e:80:13:89:b0:1d:ac:b8:2d:e2:77:a2: 6c:45:de:96:72:6a:8e:8d:36:9a:44:e4:98:f0:3d:10:4d:1b: 3e:a1:b0:86:3a:42:23:47:a6:aa:3f:52:d2:60:00:c9:3e:9f: 66:0b:e9:2a:df:db:1a:7c:71:19:1f:04:c0:6c:94:59:eb:4f: 4b:4b:44:31:0c:64:05:dd:b1:a0:70:ab:79:82:95:27:31:43: ad:f8:29:20:44:69:ad:f5:0e:f6:30:aa:4e:a5:79:70:49:5b: e8:b3:23:b2:f3:f8:17:01:3b:9c:ce:fd:1c:62:cf:92:c8:f4: 5e:9b:65:c6:12:a4:46:c9:a4:29:af:8d:59:b3:2e:bb:aa:33: cd:6e:07:33:2c:84:59:6b:a5:23:04:5f:62:3a:6e:af:78:46: 64:61:e0:a9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJTUzXdcBnuu1FsHIsKxx6JO/FsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTA4MTMwNDU1MDFaFw0yNjA4MTIwNTAwMDFaMDMxMTAvBgNV BAMTKDRGNUQxREQ0RTUzRjRFMDc1ODJCOTc3ODVDM0REMzEzQTRBNTU1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LAvW4gJ1U9cXFyzgqb3zkM5M 2NedUfxFAAJUvfOXClelm0om323iIr+Qtw79JmOTz4orUC/uVqYoZhxY5bqRcakg ta7M3r3MtKDL+j+kR9a7Ld//zr97NMV7CFzERnvrDONUssYwzJd+5U1QEx2aq+H2 xyJmUkkz55IeXLtpguZNvJPouazdvoGEnQuMMwPDvD9wKaQ55DuCEP3/eJvwQAON 5fAtSDajjIMsLKI4l7T74P0zlpawERRANT/FLnYQSDeDQhlawltylyKSZGYk9VQ+ I/iM+HKrcvKyTsCK0MM6ixtKFPjc/JJ34lrl/KAncWju5Xvop9CMQtxVXFUHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUT10d1OU/TgdYK5d4XD3TE6SlVd8wHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiYTQ4ZTRlLWZjOTUtNGFjZi1i ZWFjLWQ5M2EwZjY5NDQyMS8wLzMyMzAzMDMxM2E2NDY2MzEzYTMxNjI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzkzMzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8RvAMA0GCSqGSIb3DQEBCwUAA4IBAQBsGY3FPJcSBiuiMDLZHvAiFbsSAcZewf3t HsRFaIMdETwx+JuvYbjCesXsu9xolhsk9VelnZjc4HQ/MRoeAuXBB3oR9SxInFlI DWR+uHBjJ9w1em31r6VE5sxGFQJoA/5egBOJsB2suC3id6JsRd6WcmqOjTaaROSY 8D0QTRs+obCGOkIjR6aqP1LSYADJPp9mC+kq39safHEZHwTAbJRZ609LS0QxDGQF 3bGgcKt5gpUnMUOt+CkgRGmt9Q72MKpOpXlwSVvosyOy8/gXATuczv0cYs+SyPRe m2XGEqRGyaQpr41Zsy67qjPNbgczLIRZa6UjBF9iOm6veEZkYeCp -----END CERTIFICATE-----Generated at Sat Aug 23 18:35:34 2025 by rpki-client