$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: omGcwmDsT8BYpBScz5Bq8p8wjIAMhQE4SKahvN0WhGg= Subject key identifier: 99:8E:FF:2E:81:F5:CB:10:36:D3:37:67:F3:91:D5:78:FD:B1:0D:0F Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 7C378429DBE60AAECD5CF968E5E63F15836353E3 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa Signing time: Fri 11 Jul 2025 09:02:23 +0000 ROA not before: Fri 11 Jul 2025 08:57:23 +0000 ROA not after: Fri 10 Jul 2026 09:02:23 +0000 asID: 147137 IP address blocks: 2400:46a0:27::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 11:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:37:84:29:db:e6:0a:ae:cd:5c:f9:68:e5:e6:3f:15:83:63:53:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 11 08:57:23 2025 GMT Not After : Jul 10 09:02:23 2026 GMT Subject: CN=998EFF2E81F5CB1036D33767F391D578FDB10D0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:c7:aa:0f:c5:df:71:dc:6f:46:94:10:0f: 91:09:0a:34:35:5a:6f:7f:fe:34:88:1a:e8:ef:50: 6f:df:87:20:13:c2:3d:d3:85:e3:d1:31:86:be:b4: 62:5c:00:40:9c:eb:e1:92:36:bf:c5:f0:c9:e0:2c: 85:3d:f5:d1:1a:7d:f2:2e:1d:c2:1f:0f:56:cc:17: 1d:a6:bf:1a:9d:ca:cf:6e:2c:da:10:1f:4e:c4:bf: e0:8d:e6:7e:9b:86:4c:07:5f:8c:ac:56:f8:b4:92: 4f:4c:b0:29:2d:df:42:12:c6:1d:a4:a0:f3:2e:72: bd:72:1b:ad:f7:3a:ae:2b:de:66:32:23:08:f2:44: b0:12:de:f4:cb:be:67:2b:c0:9c:9b:e7:5f:db:bf: 50:5e:b2:2b:37:33:b2:41:7e:ce:61:b5:83:3a:25: 52:6b:a0:ee:17:30:50:a7:94:71:15:0a:2b:80:98: bc:02:ce:28:b0:78:7c:6f:d4:ec:83:e0:db:2d:6f: be:62:44:16:c1:50:64:12:a9:f2:dc:b0:52:e3:8e: a6:1a:92:23:f4:c4:a8:52:f9:d4:b2:27:23:56:b6: 73:de:db:a3:06:9c:f2:71:bd:c2:ce:3e:ec:11:a2: b6:4c:d6:b5:10:d3:c9:d9:0e:d5:60:0c:d5:39:c3: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:FF:2E:81:F5:CB:10:36:D3:37:67:F3:91:D5:78:FD:B1:0D:0F X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a32373a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:27::/48 Signature Algorithm: sha256WithRSAEncryption 04:e6:81:a2:31:43:66:03:60:fb:46:5a:7f:89:a8:c8:81:c0: 81:65:77:f5:8d:d6:d7:a0:4c:51:f7:be:d5:48:6e:97:09:ec: 87:cb:43:01:fd:ef:0e:ec:2e:6e:ef:e2:43:d4:be:78:e2:86: 5a:22:27:82:27:f5:00:97:dc:77:cf:7d:b9:09:53:cb:50:94: 3a:11:54:bc:7c:6e:44:24:fe:f0:d0:2c:1a:f1:76:02:3d:fa: 4f:8a:3d:0c:7b:20:44:d6:6d:50:cd:56:77:8a:48:a4:d5:6a: ac:e6:bd:7c:b9:0b:21:7f:79:85:1f:cd:80:a3:33:24:3d:6e: 3b:79:91:88:a4:cb:48:f0:b3:b2:16:03:17:3d:80:bc:de:fe: 87:94:bd:bc:46:39:f5:98:80:80:7e:b7:46:0c:65:e2:76:48: a3:c0:16:4e:4b:ea:f9:43:65:74:ef:27:27:26:ae:f8:f8:66: ed:74:bd:95:16:1b:5e:8b:6b:13:4a:3f:80:a1:9f:1f:af:48: b0:63:e0:5a:e0:55:e3:92:84:2d:30:10:69:54:23:81:3c:02: fd:c5:4e:8e:7e:d6:e9:fe:df:b0:ac:c2:57:ac:60:6c:b4:25: 87:09:69:c2:6e:7e:2e:86:fd:fc:8a:32:24:67:ec:2f:64:4f: 48:99:1c:24 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUfDeEKdvmCq7NXPlo5eY/FYNjU+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTEwODU3MjNaFw0yNjA3MTAwOTAyMjNaMDMxMTAvBgNV BAMTKDk5OEVGRjJFODFGNUNCMTAzNkQzMzc2N0YzOTFENTc4RkRCMTBEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3MeqD8XfcdxvRpQQD5EJCjQ1 Wm9//jSIGujvUG/fhyATwj3ThePRMYa+tGJcAECc6+GSNr/F8MngLIU99dEaffIu HcIfD1bMFx2mvxqdys9uLNoQH07Ev+CN5n6bhkwHX4ysVvi0kk9MsCkt30ISxh2k oPMucr1yG633Oq4r3mYyIwjyRLAS3vTLvmcrwJyb51/bv1Besis3M7JBfs5htYM6 JVJroO4XMFCnlHEVCiuAmLwCziiweHxv1OyD4Nstb75iRBbBUGQSqfLcsFLjjqYa kiP0xKhS+dSyJyNWtnPe26MGnPJxvcLOPuwRorZM1rUQ08nZDtVgDNU5w5vbAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUmY7/LoH1yxA20zdn85HVeP2xDQ8wHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzIzNzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA JzANBgkqhkiG9w0BAQsFAAOCAQEABOaBojFDZgNg+0Zaf4moyIHAgWV39Y3W16BM Ufe+1Uhulwnsh8tDAf3vDuwubu/iQ9S+eOKGWiIngif1AJfcd899uQlTy1CUOhFU vHxuRCT+8NAsGvF2Aj36T4o9DHsgRNZtUM1Wd4pIpNVqrOa9fLkLIX95hR/NgKMz JD1uO3mRiKTLSPCzshYDFz2AvN7+h5S9vEY59ZiAgH63Rgxl4nZIo8AWTkvq+UNl dO8nJyau+Phm7XS9lRYbXotrE0o/gKGfH69IsGPgWuBV45KELTAQaVQjgTwC/cVO jn7W6f7fsKzCV6xgbLQlhwlpwm5+Lob9/IoyJGfsL2RPSJkcJA== -----END CERTIFICATE-----Generated at Fri Jul 25 04:40:26 2025 by rpki-client