$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: r39b6mOH1IwysZ4h0sWe8of8Eqz81JxpSEnLBmKsOQg= Subject key identifier: F1:18:6F:F0:54:CA:5D:7C:D7:E0:09:8E:A8:2B:27:17:DF:31:CC:1B Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 05F16E57E30EE516325759E38D037F61B8145646 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 10 Jul 2025 20:00:03 +0000 ROA not before: Thu 10 Jul 2025 19:55:03 +0000 ROA not after: Thu 09 Jul 2026 20:00:03 +0000 asID: 147137 IP address blocks: 2400:46a0:18::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f1:6e:57:e3:0e:e5:16:32:57:59:e3:8d:03:7f:61:b8:14:56:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 10 19:55:03 2025 GMT Not After : Jul 9 20:00:03 2026 GMT Subject: CN=F1186FF054CA5D7CD7E0098EA82B2717DF31CC1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:6c:0f:ec:b5:93:0b:0d:d3:31:f1:cc:c1: 1f:06:bc:73:ef:c5:2f:52:f4:7a:b6:a7:61:04:3b: 05:37:aa:12:6e:8c:8c:9e:30:58:88:79:24:04:1e: 4b:71:4a:08:2a:f0:f0:01:9d:11:76:29:ba:f6:72: 37:70:81:e4:84:76:5b:8d:df:e0:a4:d5:6a:6d:8c: 93:f1:3f:6e:f2:0d:3f:12:21:29:c8:0f:29:b5:c9: d8:da:64:7b:b8:36:7a:26:88:64:12:0a:bf:e4:9d: 16:53:37:dc:be:68:19:d6:2c:c0:a3:cf:24:9f:f0: 0e:7e:ea:38:1a:30:3e:9a:14:d8:32:ef:84:7b:cb: 08:ef:22:e8:d4:1c:53:17:03:5e:fa:c3:ff:36:aa: 87:16:1f:0f:40:0d:a8:90:b1:e0:8f:ea:80:76:6f: dd:d0:de:d9:91:59:de:f4:2a:1c:b0:90:16:e5:d1: 4d:ca:a7:d3:63:2a:92:38:93:73:6a:6c:49:9a:eb: f2:59:bd:5e:58:3d:9e:46:9b:61:1f:60:70:bd:c0: f6:e5:0a:fc:f4:41:2c:73:54:e2:f7:20:a0:ec:31: ee:33:1e:93:af:6a:4c:35:fc:05:41:cd:d2:19:19: f0:33:27:3e:c9:f5:5e:04:e1:24:47:b2:af:05:52: 26:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:18:6F:F0:54:CA:5D:7C:D7:E0:09:8E:A8:2B:27:17:DF:31:CC:1B X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31383a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:18::/48 Signature Algorithm: sha256WithRSAEncryption 8b:fa:66:55:3b:ef:1d:2c:09:40:0e:d9:81:d0:e8:08:08:fb: 5f:33:34:7a:2c:d4:fa:b0:e9:7c:21:4e:d6:14:a4:10:2d:87: 42:d2:21:0c:ca:13:34:d1:3c:cf:3e:a9:68:ae:a0:4d:fc:fc: 76:4e:4c:11:42:bf:63:1b:14:18:57:f8:f1:fd:87:0e:d2:43: 07:79:8e:5c:77:42:76:85:c3:ab:ed:29:50:9c:66:cf:5a:80: 18:4e:d8:3e:df:48:f0:34:91:57:05:cc:75:ce:ee:49:47:50: ce:79:05:47:25:6d:3f:3e:27:4a:39:df:45:e6:f2:60:90:51: cd:2b:8c:00:c3:e9:73:28:c8:9d:af:54:f9:6a:5a:1a:d5:d1: 6c:5f:71:d9:e0:ef:1a:3e:13:7d:c0:01:de:22:5b:7b:2e:a1: dd:e7:49:52:71:85:5b:3d:03:94:b8:1d:b0:fb:f5:0d:f4:fa: 53:48:9b:cb:8e:a9:89:5a:5e:a2:31:b6:0d:16:7e:04:41:fd: 76:fe:ee:e0:bb:7b:d8:56:1c:38:f9:f5:21:55:4f:e7:03:f3: 50:ce:37:b4:61:4e:2b:cc:65:93:01:d0:76:d0:f8:b0:eb:ef: 89:e1:66:f7:69:d9:c7:f0:db:65:67:0d:8b:96:b4:45:c0:9f: 4c:de:f9:30 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBfFuV+MO5RYyV1njjQN/YbgUVkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTAxOTU1MDNaFw0yNjA3MDkyMDAwMDNaMDMxMTAvBgNV BAMTKEYxMTg2RkYwNTRDQTVEN0NEN0UwMDk4RUE4MkIyNzE3REYzMUNDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrX2wP7LWTCw3TMfHMwR8GvHPv xS9S9Hq2p2EEOwU3qhJujIyeMFiIeSQEHktxSggq8PABnRF2Kbr2cjdwgeSEdluN 3+Ck1WptjJPxP27yDT8SISnIDym1ydjaZHu4NnomiGQSCr/knRZTN9y+aBnWLMCj zySf8A5+6jgaMD6aFNgy74R7ywjvIujUHFMXA176w/82qocWHw9ADaiQseCP6oB2 b93Q3tmRWd70KhywkBbl0U3Kp9NjKpI4k3NqbEma6/JZvV5YPZ5Gm2EfYHC9wPbl Cvz0QSxzVOL3IKDsMe4zHpOvakw1/AVBzdIZGfAzJz7J9V4E4SRHsq8FUiZJAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU8Rhv8FTKXXzX4AmOqCsnF98xzBswHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA GDANBgkqhkiG9w0BAQsFAAOCAQEAi/pmVTvvHSwJQA7ZgdDoCAj7XzM0eizU+rDp fCFO1hSkEC2HQtIhDMoTNNE8zz6paK6gTfz8dk5MEUK/YxsUGFf48f2HDtJDB3mO XHdCdoXDq+0pUJxmz1qAGE7YPt9I8DSRVwXMdc7uSUdQznkFRyVtPz4nSjnfReby YJBRzSuMAMPpcyjIna9U+WpaGtXRbF9x2eDvGj4TfcAB3iJbey6h3edJUnGFWz0D lLgdsPv1DfT6U0iby46piVpeojG2DRZ+BEH9dv7u4Lt72FYcOPn1IVVP5wPzUM43 tGFOK8xlkwHQdtD4sOvvieFm92nZx/DbZWcNi5a0RcCfTN75MA== -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:13 2025 by rpki-client