$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: z2k28a+6ZI3VAF075Ex5TSmy7XYBAGjTmBdcFap9YJg= Subject key identifier: 27:EF:D8:A5:53:CB:58:DF:66:43:EC:FA:49:93:EF:B6:60:90:B9:68 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 1786BAB4F8FA3CDC34E70380E90213B2A527C2B0 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa Signing time: Fri 11 Jul 2025 09:02:22 +0000 ROA not before: Fri 11 Jul 2025 08:57:22 +0000 ROA not after: Fri 10 Jul 2026 09:02:22 +0000 asID: 147137 IP address blocks: 2400:46a0:26::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:86:ba:b4:f8:fa:3c:dc:34:e7:03:80:e9:02:13:b2:a5:27:c2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 11 08:57:22 2025 GMT Not After : Jul 10 09:02:22 2026 GMT Subject: CN=27EFD8A553CB58DF6643ECFA4993EFB66090B968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:0c:2f:e5:30:c8:b9:1d:0d:ed:8c:1c:83: ea:fd:4a:c2:a1:99:34:07:71:8c:f2:99:bc:bc:ff: 2a:e3:e4:d4:38:55:35:b1:dd:1f:ed:53:6e:b1:40: 93:fa:f9:6f:ec:a6:b5:65:49:48:79:c8:63:66:4a: e8:7e:f9:7b:c3:91:a6:77:c2:b1:13:26:35:ba:eb: 7c:ad:d2:b4:6d:95:56:7a:94:36:23:ba:17:3c:f3: 0d:85:e0:27:4a:3e:38:ce:e0:7b:b7:71:a5:8b:48: b4:e6:eb:e0:75:62:f4:58:44:20:df:57:cf:c9:42: 91:ea:5f:3f:df:70:b3:ed:3b:34:89:4b:66:77:be: 61:a3:10:c1:69:8e:90:31:92:9c:e2:ca:d4:af:05: 72:a8:00:87:ee:17:7c:7a:c5:75:f3:af:c4:22:b1: ce:8f:67:86:31:bf:be:c7:a9:61:71:7e:d8:44:fc: e2:87:8d:94:96:bb:66:af:68:40:7e:ca:d2:ca:13: 16:13:19:d6:68:48:ec:9d:9c:ab:dd:70:59:3f:1a: a9:22:bf:21:22:98:b8:33:a1:a3:01:91:fe:39:ec: 77:a5:c6:41:51:50:8a:de:a2:22:44:5b:d7:0b:63: 53:c8:84:d0:c9:ab:db:41:6d:0e:9e:ec:c2:70:68: be:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EF:D8:A5:53:CB:58:DF:66:43:EC:FA:49:93:EF:B6:60:90:B9:68 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32363a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:26::/48 Signature Algorithm: sha256WithRSAEncryption 7f:82:4f:44:4a:08:d5:ea:f0:49:4a:9c:f3:e0:80:a2:10:d9: 1d:dc:24:5b:7e:ab:7d:f3:1b:cf:04:2b:80:24:b0:20:90:e4: 2c:4b:61:fb:ad:58:50:66:31:73:a9:24:d0:b6:4c:d9:cc:a4: a1:4d:c7:de:0b:b6:34:4f:97:56:69:a0:10:d7:92:89:ea:34: 4e:cf:13:7e:3f:ac:c9:52:61:a4:8a:66:f2:d0:44:a3:7b:88: a3:b6:69:3c:0b:6d:ef:0b:09:b0:c3:88:ba:ce:c4:fb:b6:71: 49:2c:5a:ce:bb:ab:8c:05:99:6c:38:13:2c:7c:b0:20:4b:15: 71:50:74:22:61:eb:0e:8b:5a:b9:99:60:5b:06:71:a7:84:25: db:ee:95:48:1b:13:a3:b3:ec:0c:a2:43:d5:21:9c:3f:ab:d8: 7f:49:78:8b:a1:7e:db:44:c1:41:9c:e6:66:7a:55:0d:99:ae: a8:1f:26:9a:8a:dd:98:b6:e0:05:a1:3b:51:fd:60:be:39:7e: c8:6a:49:14:1e:9d:73:bd:72:0d:9f:78:1c:03:5e:ee:5d:31: dc:6b:a9:b2:f4:d2:08:53:6f:a2:80:a5:94:69:2c:d3:d9:26: 71:99:93:c9:da:98:c7:54:10:e1:bb:4c:e8:20:c9:cd:c4:6c: e6:27:65:2f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUF4a6tPj6PNw05wOA6QITsqUnwrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTEwODU3MjJaFw0yNjA3MTAwOTAyMjJaMDMxMTAvBgNV BAMTKDI3RUZEOEE1NTNDQjU4REY2NjQzRUNGQTQ5OTNFRkI2NjA5MEI5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg6Qwv5TDIuR0N7Ywcg+r9SsKh mTQHcYzymby8/yrj5NQ4VTWx3R/tU26xQJP6+W/sprVlSUh5yGNmSuh++XvDkaZ3 wrETJjW663yt0rRtlVZ6lDYjuhc88w2F4CdKPjjO4Hu3caWLSLTm6+B1YvRYRCDf V8/JQpHqXz/fcLPtOzSJS2Z3vmGjEMFpjpAxkpziytSvBXKoAIfuF3x6xXXzr8Qi sc6PZ4Yxv77HqWFxfthE/OKHjZSWu2avaEB+ytLKExYTGdZoSOydnKvdcFk/Gqki vyEimLgzoaMBkf457HelxkFRUIreoiJEW9cLY1PIhNDJq9tBbQ6e7MJwaL4FAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUJ+/YpVPLWN9mQ+z6SZPvtmCQuWgwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA JjANBgkqhkiG9w0BAQsFAAOCAQEAf4JPREoI1erwSUqc8+CAohDZHdwkW36rffMb zwQrgCSwIJDkLEth+61YUGYxc6kk0LZM2cykoU3H3gu2NE+XVmmgENeSieo0Ts8T fj+syVJhpIpm8tBEo3uIo7ZpPAtt7wsJsMOIus7E+7ZxSSxazrurjAWZbDgTLHyw IEsVcVB0ImHrDotauZlgWwZxp4Ql2+6VSBsTo7PsDKJD1SGcP6vYf0l4i6F+20TB QZzmZnpVDZmuqB8mmordmLbgBaE7Uf1gvjl+yGpJFB6dc71yDZ94HANe7l0x3Gup svTSCFNvooCllGks09kmcZmTydqYx1QQ4btM6CDJzcRs5idlLw== -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:03 2025 by rpki-client