$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: Cwh07TkFHSVxFptsS9+W0W6emaGKqX4GCK/GVTdPowA= Subject key identifier: B7:DB:D1:10:03:15:C7:9F:D4:29:1C:00:AA:4B:43:D2:27:A4:DD:16 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 0F7CE22F1DFAC0DE46C5F9DDA7DFA8E1C2B1EFA1 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 10 Jul 2025 20:00:05 +0000 ROA not before: Thu 10 Jul 2025 19:55:05 +0000 ROA not after: Thu 09 Jul 2026 20:00:05 +0000 asID: 147137 IP address blocks: 2400:46a0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:7c:e2:2f:1d:fa:c0:de:46:c5:f9:dd:a7:df:a8:e1:c2:b1:ef:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 10 19:55:05 2025 GMT Not After : Jul 9 20:00:05 2026 GMT Subject: CN=B7DBD1100315C79FD4291C00AA4B43D227A4DD16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:44:81:49:a7:cb:e0:25:30:7a:5c:90:59: c1:25:ca:ab:67:0b:35:5c:a7:b2:66:56:b1:ed:0b: db:29:ab:06:b2:db:07:f5:74:13:9e:5c:a3:f0:8a: 43:4a:9d:fc:e8:07:b9:a2:59:98:ee:b6:85:40:ac: e1:18:8a:df:7b:55:5d:22:68:f6:53:96:b0:6a:c6: 64:8b:34:3c:4c:7e:ad:d7:df:50:ed:47:ca:d3:bf: 06:50:d0:ea:85:7f:98:3e:ff:53:3d:6d:d3:9c:d2: 29:18:e7:87:24:ce:3f:99:7a:38:f8:ce:c9:7a:61: 65:7b:12:3b:f1:9e:70:cb:38:55:a8:51:c3:77:54: 88:24:e6:8c:57:4c:c6:86:0f:e3:7c:ff:ed:6f:b6: f9:72:b6:0b:59:38:22:78:80:bd:a3:46:89:fe:3e: c6:87:99:6d:1b:8a:f0:d4:b2:16:63:db:bc:89:ed: 1e:c5:ae:c9:06:82:f4:ff:36:2e:b5:d2:9e:46:e4: f2:93:d5:25:39:a4:ce:32:86:58:94:4d:c6:82:21: fa:87:92:88:21:c6:44:c1:55:74:be:19:a6:67:4a: 57:d0:24:72:f1:c0:04:44:49:81:58:b4:4c:59:33: d2:b0:bf:0d:bc:15:d9:76:4d:28:0a:45:c6:12:92: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:D1:10:03:15:C7:9F:D4:29:1C:00:AA:4B:43:D2:27:A4:DD:16 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a373a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:7::/48 Signature Algorithm: sha256WithRSAEncryption 47:84:21:62:58:3b:cc:f0:db:54:5b:4a:8b:48:f7:5f:ac:58: 26:f8:17:78:2d:b1:0e:9a:33:63:03:51:91:86:8f:ec:d0:c5: 39:b5:cd:73:20:d0:f6:fe:49:9a:c0:ef:b1:dd:e9:d8:dd:a2: 1e:fb:7f:8d:2c:1e:c8:2a:a5:d5:8c:7f:9c:53:c4:2d:b4:9c: a8:65:6f:f5:3c:44:8f:4c:da:75:c4:8c:ee:10:03:6b:2a:74: 43:6f:bf:7b:02:cd:9b:c3:b2:f8:80:27:d4:a5:6f:26:be:b3: 9c:51:1d:2c:85:26:ad:67:89:d3:50:86:50:38:d1:3c:79:91: c8:cb:de:29:ca:18:f1:ad:87:42:d1:11:9c:3b:3b:db:f8:ca: ef:53:48:6e:91:66:26:84:da:b6:cf:92:45:c7:08:60:2e:6c: 2d:4f:11:52:a9:19:44:1e:55:fd:13:51:f3:f0:6c:7d:63:db: 51:73:20:a3:1a:cd:ac:93:c2:41:3d:d8:82:87:b0:70:f4:b4: 1c:f0:ad:35:21:a1:d1:73:b5:1e:ae:6a:7f:5b:23:cc:a2:fd: d2:2a:59:04:ab:e5:63:c5:1b:25:67:c0:be:23:fe:53:e9:a3: e6:e1:15:0d:29:8c:3a:74:fe:25:c2:0d:1d:4b:6f:28:b0:53: c0:65:d5:16 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUD3ziLx36wN5Gxfndp9+o4cKx76EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTAxOTU1MDVaFw0yNjA3MDkyMDAwMDVaMDMxMTAvBgNV BAMTKEI3REJEMTEwMDMxNUM3OUZENDI5MUMwMEFBNEI0M0QyMjdBNEREMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHESBSafL4CUwelyQWcElyqtn CzVcp7JmVrHtC9spqway2wf1dBOeXKPwikNKnfzoB7miWZjutoVArOEYit97VV0i aPZTlrBqxmSLNDxMfq3X31DtR8rTvwZQ0OqFf5g+/1M9bdOc0ikY54ckzj+Zejj4 zsl6YWV7EjvxnnDLOFWoUcN3VIgk5oxXTMaGD+N8/+1vtvlytgtZOCJ4gL2jRon+ PsaHmW0bivDUshZj27yJ7R7FrskGgvT/Ni610p5G5PKT1SU5pM4yhliUTcaCIfqH koghxkTBVXS+GaZnSlfQJHLxwARESYFYtExZM9Kwvw28Fdl2TSgKRcYSkqEPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUt9vREAMVx5/UKRwAqktD0iek3RYwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAEagAAcw DQYJKoZIhvcNAQELBQADggEBAEeEIWJYO8zw21RbSotI91+sWCb4F3gtsQ6aM2MD UZGGj+zQxTm1zXMg0Pb+SZrA77Hd6djdoh77f40sHsgqpdWMf5xTxC20nKhlb/U8 RI9M2nXEjO4QA2sqdENvv3sCzZvDsviAJ9Slbya+s5xRHSyFJq1nidNQhlA40Tx5 kcjL3inKGPGth0LREZw7O9v4yu9TSG6RZiaE2rbPkkXHCGAubC1PEVKpGUQeVf0T UfPwbH1j21FzIKMazayTwkE92IKHsHD0tBzwrTUhodFztR6uan9bI8yi/dIqWQSr 5WPFGyVnwL4j/lPpo+bhFQ0pjDp0/iXCDR1LbyiwU8Bl1RY= -----END CERTIFICATE-----Generated at Thu Jul 24 04:55:53 2025 by rpki-client