$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: LHnVdcZ5/YfYWNz9EwzLlVaYYhGPyvyomANm7mqWzO0= Subject key identifier: 1C:ED:DE:8E:17:76:EA:EC:DD:D8:32:17:1B:39:B2:D6:58:73:84:74 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 6A287F8CBAC1813F7C1847E95CE86C61DEF89CFC Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa Signing time: Fri 11 Jul 2025 09:02:23 +0000 ROA not before: Fri 11 Jul 2025 08:57:23 +0000 ROA not after: Fri 10 Jul 2026 09:02:23 +0000 asID: 147137 IP address blocks: 2400:46a0:25::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:28:7f:8c:ba:c1:81:3f:7c:18:47:e9:5c:e8:6c:61:de:f8:9c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 11 08:57:23 2025 GMT Not After : Jul 10 09:02:23 2026 GMT Subject: CN=1CEDDE8E1776EAECDDD832171B39B2D658738474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:25:12:98:c4:0f:4f:d9:10:d7:66:f2:06:5d: 39:ba:d7:52:c3:fa:7f:ff:e0:b1:ff:f6:7c:88:82: 75:35:cf:c9:e6:ba:96:ac:3a:93:22:88:18:57:8a: 96:38:1f:6a:52:83:05:19:93:40:4b:da:56:67:05: 8a:52:9f:38:d3:fd:0e:f5:6a:f7:fe:8a:83:0a:30: a5:91:44:75:0a:37:7c:c9:f9:32:96:5f:be:87:09: 44:84:7a:f9:22:d7:b9:12:53:d1:2e:65:64:ae:ca: eb:4b:21:03:37:71:1d:30:ee:fd:42:a2:c0:ba:3d: 85:57:ab:4c:8f:bf:82:5f:41:42:24:1c:59:16:1a: 1a:58:0f:ae:da:75:4b:90:98:aa:f3:7a:49:0d:97: a6:fb:67:54:3d:04:4c:9b:1f:d2:27:d2:8d:ef:86: 67:83:2a:fa:e7:b9:2f:34:89:4a:7a:e7:7f:f6:13: 2a:2d:9e:33:a0:06:d2:6b:19:d4:8e:9b:57:f2:36: e9:5d:46:ff:0e:d4:50:9f:e3:6e:bc:0c:ba:75:1c: 6d:28:03:46:03:f1:11:43:e2:82:3e:ac:cd:f8:45: cd:4a:b7:99:33:9c:c5:2b:67:ec:64:9d:e2:ae:22: 5a:3b:62:35:fa:23:97:c6:76:aa:ba:c4:95:51:d0: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:ED:DE:8E:17:76:EA:EC:DD:D8:32:17:1B:39:B2:D6:58:73:84:74 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32353a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:25::/48 Signature Algorithm: sha256WithRSAEncryption 44:5d:a8:f3:51:ff:88:73:de:72:66:27:45:03:f2:ad:2f:44: 63:70:5f:09:f5:b6:f2:50:70:08:14:78:0c:26:b7:da:2b:fe: e8:27:a1:c7:78:e3:ad:c9:4d:24:ee:c8:90:67:6a:af:65:5c: e2:0b:f0:ef:a8:c7:2c:8b:eb:94:dd:0e:82:ed:75:7e:df:db: 80:b0:32:7e:59:35:7b:f0:7d:c0:fd:1a:3a:b0:1e:ef:0a:53: 31:26:28:ca:f5:30:1f:bd:d2:1b:5f:aa:ec:cf:a4:0b:fc:d4: e5:ad:92:ad:8c:15:b9:f9:ef:c5:8a:c4:8f:0d:d5:fe:df:84: 3d:74:a4:52:1a:5b:f9:4a:c6:3c:25:42:a1:44:51:ee:59:38: c3:ca:e4:b1:65:6a:4d:f9:be:1c:cd:a7:ca:78:23:ce:b0:64: bb:af:e7:99:09:59:99:ac:95:c7:ce:39:60:a5:2f:ce:cb:9d: eb:45:05:ea:cb:82:4e:fd:c4:e8:4d:5e:25:e4:17:88:81:09: 7a:d7:34:6b:2f:3d:52:62:e6:e1:63:cf:dd:42:ec:ef:d4:38: d4:b9:95:59:5f:8b:73:ce:d1:82:1b:32:2d:1e:75:76:61:37: d1:fa:55:b9:ef:f3:97:5f:1c:6a:f5:0b:71:91:f8:90:b3:6b: a0:2a:85:9c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUaih/jLrBgT98GEfpXOhsYd74nPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTEwODU3MjNaFw0yNjA3MTAwOTAyMjNaMDMxMTAvBgNV BAMTKDFDRURERThFMTc3NkVBRUNEREQ4MzIxNzFCMzlCMkQ2NTg3Mzg0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJRKYxA9P2RDXZvIGXTm611LD +n//4LH/9nyIgnU1z8nmupasOpMiiBhXipY4H2pSgwUZk0BL2lZnBYpSnzjT/Q71 avf+ioMKMKWRRHUKN3zJ+TKWX76HCUSEevki17kSU9EuZWSuyutLIQM3cR0w7v1C osC6PYVXq0yPv4JfQUIkHFkWGhpYD67adUuQmKrzekkNl6b7Z1Q9BEybH9In0o3v hmeDKvrnuS80iUp653/2EyotnjOgBtJrGdSOm1fyNuldRv8O1FCf4268DLp1HG0o A0YD8RFD4oI+rM34Rc1Kt5kznMUrZ+xkneKuIlo7YjX6I5fGdqq6xJVR0PAPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUHO3ejhd26uzd2DIXGzmy1lhzhHQwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA JTANBgkqhkiG9w0BAQsFAAOCAQEARF2o81H/iHPecmYnRQPyrS9EY3BfCfW28lBw CBR4DCa32iv+6Cehx3jjrclNJO7IkGdqr2Vc4gvw76jHLIvrlN0Ogu11ft/bgLAy flk1e/B9wP0aOrAe7wpTMSYoyvUwH73SG1+q7M+kC/zU5a2SrYwVufnvxYrEjw3V /t+EPXSkUhpb+UrGPCVCoURR7lk4w8rksWVqTfm+HM2nyngjzrBku6/nmQlZmayV x845YKUvzsud60UF6suCTv3E6E1eJeQXiIEJetc0ay89UmLm4WPP3ULs79Q41LmV WV+Lc87RghsyLR51dmE30fpVue/zl18cavULcZH4kLNroCqFnA== -----END CERTIFICATE-----Generated at Mon Jul 21 13:09:47 2025 by rpki-client