$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: kEXHj9pv5MWefZu6lpGXP15sPBFvi6JY6eKJO5xEqB4= Subject key identifier: 4A:D7:75:A9:04:FB:C2:02:A8:B6:4A:23:0B:DD:B2:7A:8A:55:27:88 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 763D287B00B969EC4F895DD6B6E310713B935CE7 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa Signing time: Fri 11 Jul 2025 09:02:22 +0000 ROA not before: Fri 11 Jul 2025 08:57:22 +0000 ROA not after: Fri 10 Jul 2026 09:02:22 +0000 asID: 147137 IP address blocks: 2400:46a0:30::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3d:28:7b:00:b9:69:ec:4f:89:5d:d6:b6:e3:10:71:3b:93:5c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 11 08:57:22 2025 GMT Not After : Jul 10 09:02:22 2026 GMT Subject: CN=4AD775A904FBC202A8B64A230BDDB27A8A552788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:ab:1f:ba:ea:8a:5c:29:b9:c3:28:4d:03: 2d:6c:00:b0:12:fa:ed:5b:66:b1:2c:b7:f6:b0:cf: 5f:37:1d:bc:39:52:e3:2a:91:2e:a3:5c:cc:8a:20: 3b:b2:59:3a:b1:c4:11:78:29:9d:17:08:69:9e:8a: 1a:e6:bd:29:be:ce:42:26:56:8f:69:83:07:c6:03: e3:77:36:a4:77:ec:b7:36:96:9d:4f:6a:ef:8a:8a: fa:b4:69:41:6e:0e:dc:65:0d:fe:be:04:83:c1:30: 14:c1:59:d9:2c:d3:85:75:cd:73:6e:62:77:5c:07: 89:9e:fb:5e:b2:37:34:43:ad:9c:be:bd:ae:6e:3e: 8e:a9:f4:e7:6f:37:ad:0c:f7:97:59:3f:af:8b:c2: 7e:59:df:64:f2:81:9b:c2:ab:b9:28:93:19:62:35: 7a:b9:f0:2d:54:9b:fe:23:2e:45:c3:c1:ee:2e:d4: 0c:f2:5a:d3:b1:06:f0:bd:bc:d9:71:2c:bd:57:27: dd:89:8c:33:83:38:74:c7:12:8b:e5:f0:1e:2f:90: f8:ba:2f:ef:0b:c4:3c:62:fa:ff:fb:af:a3:f5:88: 0d:0d:20:2a:88:6d:53:89:7f:1b:40:00:41:5a:f8: d1:40:c8:b2:bf:c0:94:ba:f2:d4:b4:5a:68:f1:3a: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D7:75:A9:04:FB:C2:02:A8:B6:4A:23:0B:DD:B2:7A:8A:55:27:88 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33303a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:30::/48 Signature Algorithm: sha256WithRSAEncryption 9a:71:16:86:b6:ac:29:a6:73:1b:ad:2e:94:97:a4:23:33:ff: 32:33:89:3a:fa:0d:f5:7b:e3:3d:88:3c:69:30:13:ae:b7:68: 9c:f1:47:ab:49:44:30:51:b0:44:8c:63:c9:98:c2:65:64:5a: 74:5e:2b:f4:a7:a4:8f:e3:4e:db:5a:bd:d9:c6:1c:cc:3f:61: 99:c3:92:59:6e:3b:d7:9f:a1:72:e6:89:d9:f3:0c:4d:ab:f9: 4d:1c:f2:2f:b8:3a:9c:ff:45:5d:0d:0a:02:24:b1:76:e2:50: 00:3e:cb:09:ff:fb:d0:44:79:93:4a:11:e7:28:11:a1:b0:f7: 8d:a1:24:ee:54:fa:ef:fe:21:ed:45:a5:1f:c8:04:1a:7a:9a: 90:f1:6b:27:3e:13:e1:f0:da:6d:2f:1b:81:09:da:54:d4:27: e3:2c:82:b7:31:75:0d:45:3c:75:18:2d:44:04:d5:58:cb:f7: ee:6d:2c:a0:6f:18:c2:80:ba:18:be:8b:e2:1c:07:c8:78:f7: 4d:3e:05:16:5a:39:d7:49:c0:08:9d:41:3a:dc:e2:22:74:00: 62:66:f7:8a:2d:ea:70:ff:e3:17:0b:bb:1d:3e:31:2e:07:d7: 1d:e7:30:8a:69:ad:9f:0a:b3:0b:d2:3b:fe:d3:bf:42:fe:30: 0f:2c:c7:5a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUdj0oewC5aexPiV3WtuMQcTuTXOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTEwODU3MjJaFw0yNjA3MTAwOTAyMjJaMDMxMTAvBgNV BAMTKDRBRDc3NUE5MDRGQkMyMDJBOEI2NEEyMzBCRERCMjdBOEE1NTI3ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHc6sfuuqKXCm5wyhNAy1sALAS +u1bZrEst/awz183Hbw5UuMqkS6jXMyKIDuyWTqxxBF4KZ0XCGmeihrmvSm+zkIm Vo9pgwfGA+N3NqR37Lc2lp1Pau+Kivq0aUFuDtxlDf6+BIPBMBTBWdks04V1zXNu YndcB4me+16yNzRDrZy+va5uPo6p9OdvN60M95dZP6+Lwn5Z32TygZvCq7kokxli NXq58C1Um/4jLkXDwe4u1AzyWtOxBvC9vNlxLL1XJ92JjDODOHTHEovl8B4vkPi6 L+8LxDxi+v/7r6P1iA0NICqIbVOJfxtAAEFa+NFAyLK/wJS68tS0WmjxOvfBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUStd1qQT7wgKotkojC92yeopVJ4gwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzMzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA MDANBgkqhkiG9w0BAQsFAAOCAQEAmnEWhrasKaZzG60ulJekIzP/MjOJOvoN9Xvj PYg8aTATrrdonPFHq0lEMFGwRIxjyZjCZWRadF4r9Kekj+NO21q92cYczD9hmcOS WW4715+hcuaJ2fMMTav5TRzyL7g6nP9FXQ0KAiSxduJQAD7LCf/70ER5k0oR5ygR obD3jaEk7lT67/4h7UWlH8gEGnqakPFrJz4T4fDabS8bgQnaVNQn4yyCtzF1DUU8 dRgtRATVWMv37m0soG8YwoC6GL6L4hwHyHj3TT4FFlo510nACJ1BOtziInQAYmb3 ii3qcP/jFwu7HT4xLgfXHecwimmtnwqzC9I7/tO/Qv4wDyzHWg== -----END CERTIFICATE-----Generated at Wed Jul 23 12:14:42 2025 by rpki-client