$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa File: 323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa (raw, json) Hash identifier: 7Zt9Qo2CwU5k43ZU/bzxQ7yO/llsHySgXleKYAIqOl0= Subject key identifier: 47:73:35:7D:03:AC:AE:3A:D5:B6:27:8C:B6:B5:74:ED:57:76:31:D1 Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 060D7CAD393AFCC99D29335A3196A8515DC767EE Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa Signing time: Fri 18 Jul 2025 01:00:02 +0000 ROA not before: Fri 18 Jul 2025 00:55:02 +0000 ROA not after: Fri 17 Jul 2026 01:00:02 +0000 asID: 46025 IP address blocks: 2402:9800:4004::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 18:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0d:7c:ad:39:3a:fc:c9:9d:29:33:5a:31:96:a8:51:5d:c7:67:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Jul 18 00:55:02 2025 GMT Not After : Jul 17 01:00:02 2026 GMT Subject: CN=4773357D03ACAE3AD5B6278CB6B574ED577631D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cc:14:70:26:d0:2f:94:85:92:78:33:dd:ed: 34:81:fd:cf:04:0c:cb:f4:6c:a8:46:75:e6:e9:09: b6:2d:fd:c7:d3:5a:bb:28:c6:30:83:35:09:36:6c: 69:ba:d1:98:fe:5d:05:c8:c1:c4:31:64:27:20:eb: 3b:11:d4:20:31:bd:66:7c:a2:b0:24:f6:9c:5b:2d: c3:a7:11:04:ef:41:94:c2:be:88:e5:fc:f6:d3:d7: 43:69:bb:ec:89:6c:f3:43:55:cc:3f:ba:43:04:e0: 19:b0:ab:27:6b:21:d2:5c:c3:91:54:7b:21:19:e3: 98:60:94:8e:62:aa:73:e1:92:be:16:8a:15:ff:f8: f2:74:7b:c0:8c:37:fa:0f:e5:76:36:70:2b:c8:a1: 26:bd:f3:32:96:91:ae:7b:27:0c:61:ce:12:8b:24: cd:5d:20:a9:d6:53:dc:29:48:86:88:06:d3:12:b2: 8b:b2:7c:a3:73:bf:42:1b:dd:ba:15:46:b9:42:2a: 2a:02:eb:59:97:ee:cb:d1:80:2d:0d:e8:91:d3:69: 9c:ce:dd:4b:86:bd:3c:6b:48:87:3c:8f:aa:38:8a: 06:37:a2:14:f4:74:f0:c3:9a:aa:ba:44:86:f0:11: 24:c5:61:81:d6:d2:76:27:38:69:aa:82:ff:bd:56: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:35:7D:03:AC:AE:3A:D5:B6:27:8C:B6:B5:74:ED:57:76:31:D1 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030343a3a2f34382d3438203d3e203436303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9800:4004::/48 Signature Algorithm: sha256WithRSAEncryption 32:23:93:25:46:92:66:91:3f:2f:98:55:86:4c:9d:91:e9:11: 24:ef:ca:21:c4:d8:49:67:1e:6a:f6:bb:e9:d2:fa:a9:fc:a5: d4:a9:ec:91:e5:a2:5b:10:9c:56:d6:72:16:ac:a9:f9:42:65: 49:95:aa:74:c5:f7:e3:b1:41:38:36:e3:bf:89:69:ca:26:9b: cd:74:56:28:0a:bf:c4:41:e0:09:76:38:41:da:f4:6e:0c:73: 08:15:a3:7a:cb:5e:58:cc:9a:28:0f:25:b4:d0:b6:db:38:e8: 1f:18:ab:99:35:b9:a3:98:62:c9:5a:03:2b:7d:ba:f8:3a:9e: 97:14:36:41:90:0b:1a:26:82:54:91:38:8f:2c:0a:0a:2f:45: 89:d6:4c:5c:22:c0:e6:db:bb:c9:0e:90:04:b4:59:59:cd:12: 64:48:e2:8b:49:ba:33:d4:10:80:7a:30:30:78:ee:bf:5b:9b: 37:0d:31:97:87:a4:41:59:52:90:09:45:fe:85:f5:22:fb:f4: be:89:7d:c6:8b:74:a0:15:c4:68:52:57:4b:b5:15:32:57:1c: ed:ad:96:17:47:c5:5a:5d:bf:57:58:23:13:b9:c0:fe:08:31: 88:35:dc:65:3f:04:af:07:76:e2:65:6b:03:c1:e9:ee:ff:81: 0b:71:3d:6d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBg18rTk6/MmdKTNaMZaoUV3HZ+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yNTA3MTgwMDU1MDJaFw0yNjA3MTcwMTAwMDJaMDMxMTAvBgNV BAMTKDQ3NzMzNTdEMDNBQ0FFM0FENUI2Mjc4Q0I2QjU3NEVENTc3NjMxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDezBRwJtAvlIWSeDPd7TSB/c8E DMv0bKhGdebpCbYt/cfTWrsoxjCDNQk2bGm60Zj+XQXIwcQxZCcg6zsR1CAxvWZ8 orAk9pxbLcOnEQTvQZTCvojl/PbT10Npu+yJbPNDVcw/ukME4BmwqydrIdJcw5FU eyEZ45hglI5iqnPhkr4WihX/+PJ0e8CMN/oP5XY2cCvIoSa98zKWka57JwxhzhKL JM1dIKnWU9wpSIaIBtMSsouyfKNzv0Ib3boVRrlCKioC61mX7svRgC0N6JHTaZzO 3UuGvTxrSIc8j6o4igY3ohT0dPDDmqq6RIbwESTFYYHW0nYnOGmqgv+9VsylAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUR3M1fQOsrjrVtieMtrV07Vd2MdEwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMyMzQzMDMyM2EzOTM4MzAzMDNhMzQzMDMwMzQz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM2MzAzMjM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKY AEAEMA0GCSqGSIb3DQEBCwUAA4IBAQAyI5MlRpJmkT8vmFWGTJ2R6REk78ohxNhJ Zx5q9rvp0vqp/KXUqeyR5aJbEJxW1nIWrKn5QmVJlap0xffjsUE4NuO/iWnKJpvN dFYoCr/EQeAJdjhB2vRuDHMIFaN6y15YzJooDyW00LbbOOgfGKuZNbmjmGLJWgMr fbr4Op6XFDZBkAsaJoJUkTiPLAoKL0WJ1kxcIsDm27vJDpAEtFlZzRJkSOKLSboz 1BCAejAweO6/W5s3DTGXh6RBWVKQCUX+hfUi+/S+iX3Gi3SgFcRoUldLtRUyVxzt rZYXR8VaXb9XWCMTucD+CDGINdxlPwSvB3biZWsDwenu/4ELcT1t -----END CERTIFICATE-----Generated at Sat Jul 26 07:28:01 2025 by rpki-client