$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: iK23Ih7KgC4OjnO9UHJglzhRasd3vRLpYeuOhNGE5hk= Subject key identifier: CC:4F:A7:E5:FD:76:70:84:CC:33:CF:42:94:52:73:74:4F:39:D2:47 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 17C49F0E83CDD58D08B42F6CF183E9AAFFEFABF9 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 10 Jul 2025 20:00:04 +0000 ROA not before: Thu 10 Jul 2025 19:55:04 +0000 ROA not after: Thu 09 Jul 2026 20:00:04 +0000 asID: 147137 IP address blocks: 2400:46a0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c4:9f:0e:83:cd:d5:8d:08:b4:2f:6c:f1:83:e9:aa:ff:ef:ab:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 10 19:55:04 2025 GMT Not After : Jul 9 20:00:04 2026 GMT Subject: CN=CC4FA7E5FD767084CC33CF42945273744F39D247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:05:e8:b4:53:08:09:62:9a:a6:06:b2:88:8f: 64:e6:54:f5:3d:84:4c:e5:0c:cc:e7:7a:ff:2f:f5: 1b:a1:3a:90:0c:03:31:e6:15:a0:50:34:d3:62:40: 8c:c5:a1:26:b2:65:60:58:51:cd:d9:f5:c0:39:8b: c0:11:a8:40:d3:82:4b:2c:71:fe:1c:3a:a8:ac:c0: 80:33:81:b0:65:a7:97:4a:85:b5:e5:d7:d9:aa:73: d1:13:25:82:a5:4a:ef:5d:f0:24:da:09:ff:05:49: f2:b8:5f:1e:50:0b:82:12:ae:8c:a9:10:7e:6c:c5: 5b:d6:4c:25:7a:e2:fa:11:da:e7:e0:9b:cb:8d:a8: bd:5f:e0:23:17:33:f9:07:e4:60:f7:e5:19:bd:8d: 87:e0:c2:dd:4d:46:3d:3d:b8:80:ea:32:4d:4b:ab: 33:50:e7:67:e7:d7:e4:ab:1e:9d:d0:de:f1:e9:4f: ea:c7:a1:d4:0b:53:34:6f:4a:d8:ec:e3:c2:5e:7b: 1f:b9:4e:c4:4a:f4:25:30:42:1b:05:4d:ff:04:dd: c5:28:63:af:6d:6c:9b:44:a6:7f:b1:f5:4e:6b:50: 9a:b1:c2:93:24:cd:4d:2e:70:7c:fb:f4:94:21:d1: 50:2b:78:96:01:24:8b:a1:29:21:a6:60:c8:ec:af: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4F:A7:E5:FD:76:70:84:CC:33:CF:42:94:52:73:74:4F:39:D2:47 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a343a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:4::/48 Signature Algorithm: sha256WithRSAEncryption 77:19:a5:80:0d:6c:9d:f6:ea:de:d6:7d:10:2f:e1:6d:cc:9c: fd:6f:a1:3f:9a:2b:0d:9b:68:31:41:84:90:59:48:07:e3:d1: bb:bc:f9:13:8e:0a:b4:1b:13:13:57:41:fb:15:31:19:f1:ca: 40:87:19:49:a6:b7:36:ad:3d:7b:69:aa:5d:28:11:e2:3c:10: 18:b3:f1:78:f1:72:90:ed:5e:ea:1e:59:a7:63:e9:b3:68:90: 85:bd:63:05:53:61:93:34:f5:46:21:87:fc:05:cd:cf:41:18: 97:b7:a7:82:04:b0:6f:f3:78:d2:58:9c:e1:7e:91:bc:4d:65: 2f:9f:a0:3c:b7:e1:6b:71:cc:4b:65:ba:69:79:83:26:1c:1e: 44:60:b6:1d:1d:77:66:ad:a4:6c:07:49:d7:58:61:87:41:ab: 29:8f:c6:7a:f6:eb:a0:73:15:51:ff:96:63:8a:eb:df:30:e1: 0f:38:fc:79:0c:52:d0:24:07:26:b8:15:8b:a2:ed:d5:d8:d5: e3:c5:a4:c2:1a:a9:fd:af:bd:57:30:00:38:ef:0d:dd:ba:bd: 3a:44:0d:36:e8:89:ab:ef:4e:eb:b8:52:51:9c:19:f3:a8:e0: ad:d8:6e:bd:d8:ec:06:83:e4:8d:0e:e8:3d:bb:ae:96:12:f1: 10:bd:74:27 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUF8SfDoPN1Y0ItC9s8YPpqv/vq/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTAxOTU1MDRaFw0yNjA3MDkyMDAwMDRaMDMxMTAvBgNV BAMTKENDNEZBN0U1RkQ3NjcwODRDQzMzQ0Y0Mjk0NTI3Mzc0NEYzOUQyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwBei0UwgJYpqmBrKIj2TmVPU9 hEzlDMznev8v9RuhOpAMAzHmFaBQNNNiQIzFoSayZWBYUc3Z9cA5i8ARqEDTgkss cf4cOqiswIAzgbBlp5dKhbXl19mqc9ETJYKlSu9d8CTaCf8FSfK4Xx5QC4ISroyp EH5sxVvWTCV64voR2ufgm8uNqL1f4CMXM/kH5GD35Rm9jYfgwt1NRj09uIDqMk1L qzNQ52fn1+SrHp3Q3vHpT+rHodQLUzRvStjs48Jeex+5TsRK9CUwQhsFTf8E3cUo Y69tbJtEpn+x9U5rUJqxwpMkzU0ucHz79JQh0VAreJYBJIuhKSGmYMjsrxP/AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUzE+n5f12cITMM89ClFJzdE850kcwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAEagAAQw DQYJKoZIhvcNAQELBQADggEBAHcZpYANbJ326t7WfRAv4W3MnP1voT+aKw2baDFB hJBZSAfj0bu8+ROOCrQbExNXQfsVMRnxykCHGUmmtzatPXtpql0oEeI8EBiz8Xjx cpDtXuoeWadj6bNokIW9YwVTYZM09UYhh/wFzc9BGJe3p4IEsG/zeNJYnOF+kbxN ZS+foDy34WtxzEtluml5gyYcHkRgth0dd2atpGwHSddYYYdBqymPxnr266BzFVH/ lmOK698w4Q84/HkMUtAkBya4FYui7dXY1ePFpMIaqf2vvVcwADjvDd26vTpEDTbo iavvTuu4UlGcGfOo4K3Ybr3Y7AaD5I0O6D27rpYS8RC9dCc= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:00 2025 by rpki-client