$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/323430363a623930303a3a2f33322d3332203d3e203436303233.roa File: 323430363a623930303a3a2f33322d3332203d3e203436303233.roa (raw, json) Hash identifier: PMX8ZqgbpqURDR8GMUH8zTHwxoexOVMu35PWtXHySJY= Subject key identifier: E9:5E:77:38:49:AD:64:20:71:5E:8F:3E:4F:23:25:67:7B:B6:03:53 Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Certificate serial: 41C65FE847C49D731CDD17B28195D5AC25F33E90 Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/323430363a623930303a3a2f33322d3332203d3e203436303233.roa Signing time: Mon 14 Jul 2025 16:00:03 +0000 ROA not before: Mon 14 Jul 2025 15:55:03 +0000 ROA not after: Mon 13 Jul 2026 16:00:03 +0000 asID: 46023 IP address blocks: 2406:b900::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c6:5f:e8:47:c4:9d:73:1c:dd:17:b2:81:95:d5:ac:25:f3:3e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Validity Not Before: Jul 14 15:55:03 2025 GMT Not After : Jul 13 16:00:03 2026 GMT Subject: CN=E95E773849AD6420715E8F3E4F2325677BB60353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:43:c8:33:8d:46:79:2d:ff:14:de:47:ac: 59:c6:33:e9:16:7a:38:fb:3b:e6:2d:51:73:0c:a5: ca:71:1e:46:5f:d5:d9:80:41:f5:a8:6a:3b:08:b8: 29:83:a2:95:7d:1f:d2:8f:08:f4:a5:a4:1a:1a:ff: 65:5e:52:17:31:df:b0:fe:ec:63:d8:f1:ee:6a:8b: bb:b5:0c:37:15:ef:19:ef:b7:a5:c5:2a:fd:c9:37: 59:f7:c7:c1:cc:ed:6c:ca:33:c7:66:23:61:e8:b2: f3:b7:33:50:c7:de:b5:76:9a:f3:7a:4e:83:ed:99: 51:96:a8:34:cc:6e:01:46:4a:35:93:91:8a:36:f2: b5:be:b3:b3:82:6a:4c:5f:60:af:da:43:9a:f9:48: 61:66:31:71:a7:97:50:62:b0:82:bd:e7:8a:3e:b9: a0:34:fc:30:ec:45:ba:8a:e9:5a:c8:eb:97:52:8c: 64:9b:ed:05:a9:9d:73:cc:53:d7:8c:80:b2:71:38: 35:1a:98:bb:aa:b8:84:4d:6f:cc:70:6d:c6:4e:08: 05:3b:79:57:9a:69:a4:4a:59:db:a7:0a:7f:b5:f6: 71:47:55:51:c2:5c:ca:ed:9a:76:16:f1:1c:0b:7e: ac:8b:7e:eb:aa:3b:83:85:e2:8c:f7:54:13:bd:a0: ee:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5E:77:38:49:AD:64:20:71:5E:8F:3E:4F:23:25:67:7B:B6:03:53 X509v3 Authority Key Identifier: keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/323430363a623930303a3a2f33322d3332203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:b900::/32 Signature Algorithm: sha256WithRSAEncryption 06:d2:ca:6f:de:50:0c:94:07:85:9a:c3:71:29:f6:99:92:c1: d3:c1:01:e2:b2:e1:76:15:25:2b:ae:e5:fd:75:2f:b6:52:ee: 8f:38:66:0e:c1:5a:88:23:a3:6b:da:c5:37:31:9c:43:cb:ea: 26:16:9e:f1:94:a8:e8:b2:f0:85:18:68:3c:a4:6a:39:cf:35: bc:07:7d:aa:f3:d5:9c:da:e9:7b:94:78:22:d8:af:ff:96:ca: 0a:a2:f2:84:8a:66:34:01:42:f5:b7:95:c7:2c:bd:4b:35:e0: af:a1:49:77:e0:13:7b:86:57:6e:63:79:73:0c:55:47:a1:66: 16:e2:1e:1f:d5:ec:78:54:8b:66:a1:68:d9:c8:5c:3a:8e:06: b9:68:56:35:1a:30:56:21:e0:1f:ed:61:98:4b:49:3b:e1:63: eb:bc:6a:63:cc:0c:09:b9:62:24:a7:6a:96:a6:48:6d:67:ae: 12:af:33:c0:1c:57:e3:6a:ab:dd:05:83:3d:3b:b6:dc:75:9c: 45:57:4d:7c:69:b3:0d:26:8b:0a:14:61:b3:2f:cd:5b:71:a8: 65:e5:5d:82:05:38:5f:a6:0f:53:ae:b8:a0:e9:c1:6d:b9:ff: 36:85:8e:6c:2f:31:3d:ba:56:5e:1b:10:28:e9:3a:bd:68:71: 8b:2b:77:14 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUQcZf6EfEnXMc3ReygZXVrCXzPpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3 NjRBNDY5NTAeFw0yNTA3MTQxNTU1MDNaFw0yNjA3MTMxNjAwMDNaMDMxMTAvBgNV BAMTKEU5NUU3NzM4NDlBRDY0MjA3MTVFOEYzRTRGMjMyNTY3N0JCNjAzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAg0PIM41GeS3/FN5HrFnGM+kW ejj7O+YtUXMMpcpxHkZf1dmAQfWoajsIuCmDopV9H9KPCPSlpBoa/2VeUhcx37D+ 7GPY8e5qi7u1DDcV7xnvt6XFKv3JN1n3x8HM7WzKM8dmI2HosvO3M1DH3rV2mvN6 ToPtmVGWqDTMbgFGSjWTkYo28rW+s7OCakxfYK/aQ5r5SGFmMXGnl1BisIK954o+ uaA0/DDsRbqK6VrI65dSjGSb7QWpnXPMU9eMgLJxODUamLuquIRNb8xwbcZOCAU7 eVeaaaRKWdunCn+19nFHVVHCXMrtmnYW8RwLfqyLfuuqO4OF4oz3VBO9oO6hAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU6V53OEmtZCBxXo8+TyMlZ3u2A1MwHwYDVR0j BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB NDY5NS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIwLWUxN2EtNDIxYi05 NjU1LTAzMjQ1YTAxYWVmOC8wLzMyMzQzMDM2M2E2MjM5MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBrkAMA0GCSqGSIb3 DQEBCwUAA4IBAQAG0spv3lAMlAeFmsNxKfaZksHTwQHisuF2FSUrruX9dS+2Uu6P OGYOwVqII6Nr2sU3MZxDy+omFp7xlKjosvCFGGg8pGo5zzW8B32q89Wc2ul7lHgi 2K//lsoKovKEimY0AUL1t5XHLL1LNeCvoUl34BN7hlduY3lzDFVHoWYW4h4f1ex4 VItmoWjZyFw6jga5aFY1GjBWIeAf7WGYS0k74WPrvGpjzAwJuWIkp2qWpkhtZ64S rzPAHFfjaqvdBYM9O7bcdZxFV018abMNJosKFGGzL81bcahl5V2CBThfpg9Trrig 6cFtuf82hY5sLzE9ulZeGxAo6Tq9aHGLK3cU -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:10 2025 by rpki-client