$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: EvUm4cJBa4C1BImp9thQZ8BX3+SY4YqvKOUkSPQljL0= Subject key identifier: 89:1A:D4:3F:29:09:48:CD:1E:50:15:3E:C4:68:32:2B:BA:61:42:14 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 1226715C768BF6F528253AE9CDC833374055A2F3 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 10 Jul 2025 20:00:02 +0000 ROA not before: Thu 10 Jul 2025 19:55:02 +0000 ROA not after: Thu 09 Jul 2026 20:00:02 +0000 asID: 147137 IP address blocks: 2400:46a0:20::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:26:71:5c:76:8b:f6:f5:28:25:3a:e9:cd:c8:33:37:40:55:a2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 10 19:55:02 2025 GMT Not After : Jul 9 20:00:02 2026 GMT Subject: CN=891AD43F290948CD1E50153EC468322BBA614214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:c3:cf:b9:12:11:b7:7e:e0:8f:70:b5:1e: 6d:9e:71:3d:c3:a8:4c:6c:79:52:5d:cb:1c:99:f8: f0:67:66:21:c8:ea:85:63:b8:16:a9:b0:99:ac:10: e9:f0:e1:f2:b7:d8:82:90:fd:3e:e5:77:33:10:53: 26:c4:7f:96:6e:a8:fd:f4:7e:ac:9c:ef:4b:db:94: 17:51:0c:de:60:66:4a:06:33:49:a8:a2:7a:bb:ec: 82:db:e5:72:b9:a3:9d:96:9e:80:86:98:0d:3d:be: 28:41:19:ee:ae:62:43:af:3e:f1:ee:8b:ca:48:e4: 09:0d:c1:c0:e2:f1:3d:f3:c7:b4:f0:1d:76:be:09: 99:50:84:e7:f6:ce:db:25:90:ed:60:5b:36:90:85: 6a:10:62:cd:0f:9f:43:e3:2c:f4:d1:6c:1a:5e:a7: 76:3c:d2:16:41:9e:11:c0:8e:fb:2c:28:a8:47:47: b3:a0:a9:57:92:55:7c:e3:dc:3d:d5:7b:00:5e:ca: d6:68:ef:d3:0c:29:b9:79:d4:3d:e8:36:d1:f6:27: 51:df:0d:04:78:3a:15:05:95:dc:cc:66:82:4a:a8: 17:dc:0a:52:60:11:b5:d0:5c:ad:16:14:a1:c7:df: 7b:1d:91:e5:1e:60:96:d7:21:f0:85:ec:99:e6:5f: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1A:D4:3F:29:09:48:CD:1E:50:15:3E:C4:68:32:2B:BA:61:42:14 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32303a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:20::/48 Signature Algorithm: sha256WithRSAEncryption 67:07:45:81:50:25:9b:5f:8f:d6:c1:e3:a5:2e:37:6f:c4:24: fe:fd:3f:f1:bd:85:e6:c7:61:ef:3a:b2:c4:b5:22:ec:d0:91: 59:53:22:c9:67:a0:97:81:24:d4:26:03:ad:da:2e:12:a6:95: 04:da:e3:03:78:c9:20:fb:39:b8:f4:ac:5a:f5:6d:b4:fc:f7: 14:4c:9c:0e:d4:59:af:09:8d:23:fb:a3:5c:9e:2f:70:50:b9: c8:5f:3b:08:a0:54:dd:6f:2a:3f:9c:eb:82:9f:9e:0f:0c:18: 25:57:0d:86:65:3d:06:6c:94:1f:c3:33:25:24:9e:ab:f6:3a: d3:5f:a7:20:2d:85:a4:bc:d3:59:53:70:bf:3c:57:e1:aa:08: 71:a5:ea:34:9b:7c:12:0f:2c:51:ea:44:55:d0:02:d9:98:7a: 9e:a0:d3:62:cc:db:8f:e2:24:4c:c8:2c:7b:5e:52:a0:ce:9f: 11:90:b1:f4:c3:a4:08:63:21:fe:60:14:49:00:39:ab:6e:89: 3f:af:28:3c:cb:dc:db:fb:69:41:d6:17:53:0a:74:12:9d:4e: ab:b7:18:a4:b1:74:74:46:96:56:ff:b7:2d:2f:b8:ea:1a:ae: 66:f7:c4:0d:fd:32:cd:37:3f:9f:66:fe:53:72:e2:2d:31:da: 6e:6f:90:0c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUEiZxXHaL9vUoJTrpzcgzN0BVovMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTAxOTU1MDJaFw0yNjA3MDkyMDAwMDJaMDMxMTAvBgNV BAMTKDg5MUFENDNGMjkwOTQ4Q0QxRTUwMTUzRUM0NjgzMjJCQkE2MTQyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YcPPuRIRt37gj3C1Hm2ecT3D qExseVJdyxyZ+PBnZiHI6oVjuBapsJmsEOnw4fK32IKQ/T7ldzMQUybEf5ZuqP30 fqyc70vblBdRDN5gZkoGM0moonq77ILb5XK5o52WnoCGmA09vihBGe6uYkOvPvHu i8pI5AkNwcDi8T3zx7TwHXa+CZlQhOf2ztslkO1gWzaQhWoQYs0Pn0PjLPTRbBpe p3Y80hZBnhHAjvssKKhHR7OgqVeSVXzj3D3VewBeytZo79MMKbl51D3oNtH2J1Hf DQR4OhUFldzMZoJKqBfcClJgEbXQXK0WFKHH33sdkeUeYJbXIfCF7JnmX3jrAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUiRrUPykJSM0eUBU+xGgyK7phQhQwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA IDANBgkqhkiG9w0BAQsFAAOCAQEAZwdFgVAlm1+P1sHjpS43b8Qk/v0/8b2F5sdh 7zqyxLUi7NCRWVMiyWegl4Ek1CYDrdouEqaVBNrjA3jJIPs5uPSsWvVttPz3FEyc DtRZrwmNI/ujXJ4vcFC5yF87CKBU3W8qP5zrgp+eDwwYJVcNhmU9BmyUH8MzJSSe q/Y601+nIC2FpLzTWVNwvzxX4aoIcaXqNJt8Eg8sUepEVdAC2Zh6nqDTYszbj+Ik TMgse15SoM6fEZCx9MOkCGMh/mAUSQA5q26JP68oPMvc2/tpQdYXUwp0Ep1Oq7cY pLF0dEaWVv+3LS+46hquZvfEDf0yzTc/n2b+U3LiLTHabm+QDA== -----END CERTIFICATE-----Generated at Wed Jul 23 12:16:56 2025 by rpki-client