$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa File: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (raw, json) Hash identifier: DRnLhFvj0XZm0VXEZ42TGDJPOpd0ZTUBf7MwJZ8bqOE= Subject key identifier: 6E:C6:4D:AD:5D:3A:D8:F2:FB:DD:E9:C9:84:92:C9:E1:FC:4E:D0:F0 Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Certificate serial: 68F6D04E4B68510AE402466D3BFE23CEA0CFBA12 Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa Signing time: Thu 10 Jul 2025 04:02:22 +0000 ROA not before: Thu 10 Jul 2025 03:57:22 +0000 ROA not after: Thu 09 Jul 2026 04:02:22 +0000 asID: 133827 IP address blocks: 2404:a640:139::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f6:d0:4e:4b:68:51:0a:e4:02:46:6d:3b:fe:23:ce:a0:cf:ba:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Validity Not Before: Jul 10 03:57:22 2025 GMT Not After : Jul 9 04:02:22 2026 GMT Subject: CN=6EC64DAD5D3AD8F2FBDDE9C98492C9E1FC4ED0F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:81:3a:54:de:5f:f5:0b:4f:b7:d9:0c:6e: 4f:1b:83:87:60:a6:5a:0a:1f:87:a5:df:01:36:d5: 19:04:6b:58:76:d8:0e:ad:42:33:70:b5:cd:d7:90: 55:2b:d4:d9:1e:68:46:e3:db:8c:d2:88:63:e0:fc: a7:13:5c:be:89:90:b4:b6:3e:7a:c8:b5:fa:17:ce: 3d:7a:3b:29:79:dc:94:a2:9d:c0:88:23:b6:16:4a: 54:ad:f8:2d:39:d3:5b:97:59:41:51:35:52:4a:84: 55:1e:85:25:2b:3d:aa:31:56:fe:0d:cc:b5:3f:8d: 3d:0b:85:82:a5:a1:d0:4c:1f:fe:73:e3:10:ee:92: 41:07:d9:fb:10:0d:9a:ad:80:1d:ae:47:d2:e3:27: 4c:f4:87:ab:ca:cb:36:81:91:12:e9:17:e0:6a:e6: 43:31:ea:a5:a2:67:dc:9c:74:e3:5e:18:22:75:0a: 43:d8:28:a1:fd:8f:1c:3f:55:27:ff:eb:eb:ce:43: 8e:37:50:ca:0d:d3:58:cc:2c:d1:13:25:96:6f:db: ed:f9:9e:bb:1b:0d:db:5c:ef:5d:7b:29:3b:41:0d: 44:8a:ca:17:44:df:7d:f6:06:06:d3:99:a0:78:11: ba:0b:8f:eb:1a:db:0e:61:ff:59:be:26:d1:6b:19: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C6:4D:AD:5D:3A:D8:F2:FB:DD:E9:C9:84:92:C9:E1:FC:4E:D0:F0 X509v3 Authority Key Identifier: keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a640:139::/48 Signature Algorithm: sha256WithRSAEncryption 2f:1a:10:17:80:5b:65:0c:1b:5d:00:e1:e7:23:8a:aa:1f:ef: 39:41:92:ae:6c:7f:4c:6e:23:30:14:fa:91:5c:f0:0e:09:ff: 30:4e:15:13:55:d4:ba:0c:d1:84:0b:0c:72:f0:71:fe:a2:5a: d0:fc:57:16:dc:33:d1:15:ed:74:c3:db:c9:16:0c:05:7a:bc: 20:58:e2:62:36:d2:79:28:09:25:d7:b5:62:79:c0:d0:4b:94: 3a:69:14:69:99:a4:27:27:9b:ce:77:67:fc:0e:13:50:8a:13: f9:cc:fb:4b:aa:66:31:9a:1b:b6:79:01:6f:7e:48:3e:81:79: 19:1c:80:ce:c8:8c:bc:6f:90:83:1a:f1:11:2e:58:f8:3b:b8: 9e:bf:b2:24:5b:9c:d3:7a:61:85:0c:4c:d7:d7:e8:69:2c:79: 3b:d2:be:ae:04:d6:22:2f:18:9c:58:88:e5:b7:5d:09:b5:66: 48:60:75:bd:91:41:25:86:c2:15:ab:39:f8:cc:a5:0a:de:cd: db:49:6c:a9:c1:44:e4:c9:44:06:b7:10:e9:20:a3:0a:65:da: 37:8c:25:fe:39:08:41:b4:59:61:1c:e2:8e:42:5d:8b:ab:83: 0d:9e:b2:50:e1:f7:ad:25:02:17:70:6f:5c:b2:f5:5f:7b:9b: ad:77:89:ea -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaPbQTktoUQrkAkZtO/4jzqDPuhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1 NjlGODM2RjAeFw0yNTA3MTAwMzU3MjJaFw0yNjA3MDkwNDAyMjJaMDMxMTAvBgNV BAMTKDZFQzY0REFENUQzQUQ4RjJGQkRERTlDOTg0OTJDOUUxRkM0RUQwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9J4E6VN5f9QtPt9kMbk8bg4dg ploKH4el3wE21RkEa1h22A6tQjNwtc3XkFUr1NkeaEbj24zSiGPg/KcTXL6JkLS2 PnrItfoXzj16Oyl53JSincCII7YWSlSt+C0501uXWUFRNVJKhFUehSUrPaoxVv4N zLU/jT0LhYKlodBMH/5z4xDukkEH2fsQDZqtgB2uR9LjJ0z0h6vKyzaBkRLpF+Bq 5kMx6qWiZ9ycdONeGCJ1CkPYKKH9jxw/VSf/6+vOQ443UMoN01jMLNETJZZv2+35 nrsbDdtc7117KTtBDUSKyhdE3332BgbTmaB4EboLj+sa2w5h/1m+JtFrGW6hAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbsZNrV062PL73enJhJLJ4fxO0PAwHwYDVR0j BBgwFoAUDOannVPYKfKlViNnbo0qmlafg28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTk5MDEyNS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC8wQ0U2QTc5RDUz RDgyOUYyQTU1NjIzNjc2RThEMkE5QTU2OUY4MzZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1NjlG ODM2Ri5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h Yzg2LTFjM2JjMzE1YmFkNi8wLzMyMzQzMDM0M2E2MTM2MzQzMDNhMzEzMzM5M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMzMzgzMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJASm QAE5MA0GCSqGSIb3DQEBCwUAA4IBAQAvGhAXgFtlDBtdAOHnI4qqH+85QZKubH9M biMwFPqRXPAOCf8wThUTVdS6DNGECwxy8HH+olrQ/FcW3DPRFe10w9vJFgwFerwg WOJiNtJ5KAkl17ViecDQS5Q6aRRpmaQnJ5vOd2f8DhNQihP5zPtLqmYxmhu2eQFv fkg+gXkZHIDOyIy8b5CDGvERLlj4O7iev7IkW5zTemGFDEzX1+hpLHk70r6uBNYi LxicWIjlt10JtWZIYHW9kUElhsIVqzn4zKUK3s3bSWypwUTkyUQGtxDpIKMKZdo3 jCX+OQhBtFlhHOKOQl2Lq4MNnrJQ4fetJQIXcG9csvVfe5utd4nq -----END CERTIFICATE-----Generated at Thu Jul 24 04:57:29 2025 by rpki-client