$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: bH0QRBT1yTn/wCvKxau4plk6nMYBKS98USNjhSr5VTI= Subject key identifier: 94:10:62:E1:80:9A:88:C0:17:9C:F9:18:CB:88:D4:9F:79:1B:B4:76 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 16EB2D346DF861BE9B8AAEA01C047BC7A3795D48 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 10 Jul 2025 20:00:02 +0000 ROA not before: Thu 10 Jul 2025 19:55:02 +0000 ROA not after: Thu 09 Jul 2026 20:00:02 +0000 asID: 147137 IP address blocks: 2400:46a0:12::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:eb:2d:34:6d:f8:61:be:9b:8a:ae:a0:1c:04:7b:c7:a3:79:5d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 10 19:55:02 2025 GMT Not After : Jul 9 20:00:02 2026 GMT Subject: CN=941062E1809A88C0179CF918CB88D49F791BB476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:61:02:af:9a:b7:c2:45:f6:9b:ae:50:f2: 21:9f:91:e1:e3:f6:4f:18:9d:67:86:dd:a4:e2:e4: 29:60:68:4c:17:37:cc:30:90:0b:91:8b:0d:0e:51: ca:ae:38:88:f7:6b:20:e4:eb:04:28:f2:e8:82:0c: c9:44:c9:25:91:26:a9:67:2d:f8:1d:3d:c6:86:69: 0b:75:e2:77:66:47:08:1e:e9:67:bb:61:6d:3e:86: a0:ba:b5:38:9d:38:2a:d2:b5:1a:80:b7:0a:f1:24: 59:52:1e:0e:12:b0:f7:f7:5f:7d:3b:99:70:c0:b5: b2:eb:85:dd:38:11:0c:12:3e:05:2f:17:97:a8:70: 41:db:65:93:70:67:39:65:84:fb:aa:5e:24:a4:18: 1e:c5:a6:be:b3:b7:67:b1:2c:6b:1a:f9:a1:c4:a7: 0b:e2:d3:a2:eb:10:be:3b:13:bf:73:f1:cc:2e:a9: d3:16:a5:7a:ab:e5:ed:a2:2d:28:ef:c7:5a:18:46: d5:cb:2d:b9:d0:fc:45:86:df:5a:33:76:82:88:a5: e3:96:cc:e6:7e:24:65:c1:a7:e0:a7:56:e8:5a:f8: 2a:b5:74:64:ab:61:5d:ea:e0:56:2b:99:25:10:d7: 16:d1:7b:f8:58:9b:79:d7:d5:f8:5b:b9:ce:47:51: 6f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:10:62:E1:80:9A:88:C0:17:9C:F9:18:CB:88:D4:9F:79:1B:B4:76 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31323a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:12::/48 Signature Algorithm: sha256WithRSAEncryption 4e:26:a6:86:e8:e9:66:ab:20:fd:47:12:12:49:49:f7:f9:aa: 2f:dc:0a:dc:0a:58:28:b0:04:ef:8a:52:d4:84:ef:1f:cd:af: 4e:04:b8:85:c7:15:ea:7e:44:70:04:7a:e1:05:71:be:3a:7e: a9:88:8a:8b:a9:89:b7:d5:19:78:61:6b:dd:2b:a5:a6:4d:0e: 18:25:ba:68:bf:d1:32:e0:10:b9:81:9e:de:7c:91:36:72:79: 86:5a:cd:4e:34:27:95:c8:a8:2d:4c:6b:dc:58:0c:1d:56:23: 91:18:99:11:f0:5a:5d:98:82:c2:59:10:60:ff:a5:0b:ae:36: 08:be:ad:25:5f:6e:be:cd:eb:dc:e5:a3:00:7a:23:27:f2:53: 8c:64:53:59:4b:d0:b7:a4:4f:60:02:f1:d3:17:8d:11:44:a4: c4:73:42:67:cb:c2:19:ac:65:99:7f:40:ce:ba:6f:b9:14:7a: 91:03:f6:f8:1c:d1:9e:45:2f:7f:a6:88:fd:f6:5c:fb:41:3d: 27:2d:a1:b8:65:7c:3d:34:40:fc:f6:d1:b6:dc:e9:33:af:83: 54:0c:78:fc:6a:46:bf:4b:02:4a:02:3f:9c:f6:94:e0:ea:18: 37:8b:5e:49:c2:94:a7:95:a5:98:eb:af:25:5a:a4:76:49:cd: fb:40:52:f5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUFustNG34Yb6biq6gHAR7x6N5XUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTAxOTU1MDJaFw0yNjA3MDkyMDAwMDJaMDMxMTAvBgNV BAMTKDk0MTA2MkUxODA5QTg4QzAxNzlDRjkxOENCODhENDlGNzkxQkI0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPmECr5q3wkX2m65Q8iGfkeHj 9k8YnWeG3aTi5ClgaEwXN8wwkAuRiw0OUcquOIj3ayDk6wQo8uiCDMlEySWRJqln LfgdPcaGaQt14ndmRwge6We7YW0+hqC6tTidOCrStRqAtwrxJFlSHg4SsPf3X307 mXDAtbLrhd04EQwSPgUvF5eocEHbZZNwZzllhPuqXiSkGB7Fpr6zt2exLGsa+aHE pwvi06LrEL47E79z8cwuqdMWpXqr5e2iLSjvx1oYRtXLLbnQ/EWG31ozdoKIpeOW zOZ+JGXBp+CnVuha+Cq1dGSrYV3q4FYrmSUQ1xbRe/hYm3nX1fhbuc5HUW95AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUlBBi4YCaiMAXnPkYy4jUn3kbtHYwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA EjANBgkqhkiG9w0BAQsFAAOCAQEATiamhujpZqsg/UcSEklJ9/mqL9wK3ApYKLAE 74pS1ITvH82vTgS4hccV6n5EcAR64QVxvjp+qYiKi6mJt9UZeGFr3Sulpk0OGCW6 aL/RMuAQuYGe3nyRNnJ5hlrNTjQnlcioLUxr3FgMHVYjkRiZEfBaXZiCwlkQYP+l C642CL6tJV9uvs3r3OWjAHojJ/JTjGRTWUvQt6RPYALx0xeNEUSkxHNCZ8vCGaxl mX9AzrpvuRR6kQP2+BzRnkUvf6aI/fZc+0E9Jy2huGV8PTRA/PbRttzpM6+DVAx4 /GpGv0sCSgI/nPaU4OoYN4teScKUp5WlmOuvJVqkdknN+0BS9Q== -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:23 2025 by rpki-client