$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: pifjJjTcE6PeDdv2QBGHsCyyOypnfnj2TzyiuJpYoi0= Subject key identifier: FA:B1:56:4E:9B:74:33:C6:DB:20:8C:A3:69:78:02:84:D8:64:CF:F5 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 35B36053281C07E8E64A0DEAE1E548638D600CC4 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa Signing time: Fri 11 Jul 2025 09:02:21 +0000 ROA not before: Fri 11 Jul 2025 08:57:21 +0000 ROA not after: Fri 10 Jul 2026 09:02:21 +0000 asID: 147137 IP address blocks: 2400:46a0:32::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b3:60:53:28:1c:07:e8:e6:4a:0d:ea:e1:e5:48:63:8d:60:0c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 11 08:57:21 2025 GMT Not After : Jul 10 09:02:21 2026 GMT Subject: CN=FAB1564E9B7433C6DB208CA369780284D864CFF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:41:25:6f:36:b2:f5:b9:de:80:e4:6d:fc: 4c:5d:2d:c8:62:13:6e:d6:5b:c1:09:af:0d:6e:1e: 66:44:0b:c2:21:cf:c8:0c:c6:7e:66:e6:48:7a:50: 08:ae:97:e8:e7:ad:ee:ed:9b:74:e8:92:83:71:66: 1b:07:ad:08:6c:52:77:6a:1e:a9:54:99:eb:f0:b6: 0c:77:dc:75:cf:58:f8:a6:3c:ea:07:bb:0b:ce:49: 8b:80:bd:06:ea:5b:95:95:54:6f:c8:e1:b8:88:5f: 3d:d2:60:c2:0c:4c:ba:a0:54:89:1d:82:74:d1:19: 3a:a0:b3:5e:f1:e7:bc:77:7a:c3:6a:e7:fa:98:a1: d7:88:53:f2:d8:57:59:67:ff:88:0c:21:0e:75:a0: 99:0c:24:f4:8c:df:ce:a2:88:6a:5c:e4:a5:9a:65: 89:f6:6f:eb:f8:22:ff:ac:d3:8c:db:12:5c:07:1f: a4:01:05:a7:47:82:ef:ca:fc:66:87:8d:2b:72:e3: 5b:27:5d:3e:7e:50:bd:40:e7:7b:84:d2:5f:27:ca: f6:1c:17:f1:bd:21:79:15:7c:ec:36:4a:3a:e4:95: ea:da:5b:72:da:8c:b2:f9:f9:fd:94:bc:23:c6:7e: b6:c1:16:8e:26:13:5e:ff:20:3c:bb:22:87:0a:4d: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:56:4E:9B:74:33:C6:DB:20:8C:A3:69:78:02:84:D8:64:CF:F5 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a33323a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:32::/48 Signature Algorithm: sha256WithRSAEncryption 61:51:99:c1:94:f2:17:f2:8a:04:91:0b:0d:5e:1b:50:88:cf: 1e:a6:e0:c9:11:02:52:29:fe:c7:67:b9:60:4c:d0:a6:86:30: 4f:9d:3b:ae:43:7b:5c:4e:49:88:04:5e:82:b9:76:98:aa:c7: f4:41:04:ab:6e:60:54:d8:4d:69:32:db:7d:7e:79:ce:9c:57: f8:ed:fb:f0:20:2f:29:fb:e2:4a:f3:4d:26:0f:83:79:ca:28: 7f:d2:92:0e:14:89:83:8e:41:8d:51:42:d8:a3:49:06:39:01: 38:2c:1e:82:86:c4:b5:6c:7c:68:25:38:5f:25:3f:71:1d:dc: 32:98:c3:c2:1b:93:b7:8d:51:78:fb:f6:51:14:43:ab:ea:7a: 9d:03:44:ba:e0:6a:36:dc:8d:6b:11:03:d1:3b:3e:7e:1f:80: 0b:ef:20:a9:7d:a1:79:fc:26:a3:7d:05:52:fe:20:47:0c:d2: d5:3a:df:a0:26:64:00:76:28:d0:32:d3:af:91:cf:03:09:a3: e9:85:35:67:e2:43:14:82:0a:e4:1e:26:b3:9f:b7:b9:89:85: 17:61:4b:8a:87:3f:20:a9:12:94:b2:a3:5f:ed:c0:81:ac:99: 93:d0:2e:0d:76:1d:91:7e:4c:40:b5:0a:d0:9a:87:2a:58:b1: 7c:b4:8e:55 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNbNgUygcB+jmSg3q4eVIY41gDMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTEwODU3MjFaFw0yNjA3MTAwOTAyMjFaMDMxMTAvBgNV BAMTKEZBQjE1NjRFOUI3NDMzQzZEQjIwOENBMzY5NzgwMjg0RDg2NENGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0okElbzay9bnegORt/ExdLchi E27WW8EJrw1uHmZEC8Ihz8gMxn5m5kh6UAiul+jnre7tm3TokoNxZhsHrQhsUndq HqlUmevwtgx33HXPWPimPOoHuwvOSYuAvQbqW5WVVG/I4biIXz3SYMIMTLqgVIkd gnTRGTqgs17x57x3esNq5/qYodeIU/LYV1ln/4gMIQ51oJkMJPSM386iiGpc5KWa ZYn2b+v4Iv+s04zbElwHH6QBBadHgu/K/GaHjSty41snXT5+UL1A53uE0l8nyvYc F/G9IXkVfOw2SjrkleraW3LajLL5+f2UvCPGfrbBFo4mE17/IDy7IocKTX8vAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU+rFWTpt0M8bbIIyjaXgChNhkz/UwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzMzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA MjANBgkqhkiG9w0BAQsFAAOCAQEAYVGZwZTyF/KKBJELDV4bUIjPHqbgyRECUin+ x2e5YEzQpoYwT507rkN7XE5JiARegrl2mKrH9EEEq25gVNhNaTLbfX55zpxX+O37 8CAvKfviSvNNJg+Decoof9KSDhSJg45BjVFC2KNJBjkBOCwegobEtWx8aCU4XyU/ cR3cMpjDwhuTt41RePv2URRDq+p6nQNEuuBqNtyNaxED0Ts+fh+AC+8gqX2hefwm o30FUv4gRwzS1TrfoCZkAHYo0DLTr5HPAwmj6YU1Z+JDFIIK5B4ms5+3uYmFF2FL ioc/IKkSlLKjX+3AgayZk9AuDXYdkX5MQLUK0JqHKlixfLSOVQ== -----END CERTIFICATE-----Generated at Wed Jul 23 12:15:33 2025 by rpki-client