$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa File: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (raw, json) Hash identifier: oHAd0vkxRqWyozAmCufOZ+4unG6aZz/EmEBi8K1zkKg= Subject key identifier: E5:57:67:87:27:64:09:23:E9:41:2C:73:0C:F9:27:3C:17:93:4F:77 Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 551048EF256DE769837E32864D123DDC3B8793CB Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa Signing time: Sun 06 Jul 2025 10:00:01 +0000 ROA not before: Sun 06 Jul 2025 09:55:01 +0000 ROA not after: Sun 05 Jul 2026 10:00:01 +0000 asID: 137320 IP address blocks: 2402:8ac0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:10:48:ef:25:6d:e7:69:83:7e:32:86:4d:12:3d:dc:3b:87:93:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Jul 6 09:55:01 2025 GMT Not After : Jul 5 10:00:01 2026 GMT Subject: CN=E557678727640923E9412C730CF9273C17934F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:b9:4d:64:37:86:d0:89:1a:b3:50:fe:11: f7:30:7e:ff:24:79:fe:16:aa:21:12:ab:2d:1c:52: 3c:f8:fd:13:94:02:b2:97:19:ad:4e:31:42:ae:ca: a6:a7:cf:f1:03:a6:d5:72:c8:36:5b:ef:89:cf:2f: 90:4f:7f:e9:4c:05:af:52:c0:2f:a6:2e:40:3d:11: 1c:14:35:7b:de:2d:cc:fc:26:9f:7a:e0:8a:3f:64: 38:58:4b:16:02:a1:a7:ba:f5:07:68:bf:0c:f0:be: a7:13:f9:59:0f:61:fc:f2:4d:00:45:76:03:47:3b: 54:09:1a:f5:bf:8d:d1:ea:ad:2a:74:9d:da:8b:6c: ae:57:88:76:2e:ae:a3:4e:aa:04:ce:3a:a1:37:01: c6:b3:38:05:de:50:6e:b7:3d:37:a3:c2:70:8d:67: 6e:63:6d:49:38:54:c7:32:0c:60:0b:e7:24:5d:51: cd:0c:39:b7:6f:c7:05:2f:eb:9c:28:cb:0d:0d:50: b6:ff:e1:73:03:93:87:b5:8a:2a:0f:b3:76:fc:81: b4:29:20:f4:cf:ba:30:37:47:29:b2:2e:a1:26:f3: 83:dd:f1:21:27:a4:46:0a:5d:9b:26:70:bd:5d:20: c7:5b:aa:44:d6:83:33:85:03:b3:62:41:a8:39:f0: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:57:67:87:27:64:09:23:E9:41:2C:73:0C:F9:27:3C:17:93:4F:77 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/323430323a386163303a3a2f33322d3438203d3e20313337333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8ac0::/32 Signature Algorithm: sha256WithRSAEncryption 29:59:20:5d:f7:19:ca:c0:6d:f8:2d:60:9e:9e:be:41:09:5e: a6:a0:18:62:72:ff:59:e6:72:9e:9a:7a:f3:88:6c:80:25:5c: 47:18:b9:40:53:fa:be:95:83:41:75:a9:b3:62:95:25:9d:38: 5e:29:75:3a:66:01:f9:cc:d6:7e:ad:cb:15:cd:e2:cc:99:2f: 2d:a9:a5:95:d4:66:ee:bb:14:ad:37:60:7f:df:5f:84:ef:49: e6:70:c5:11:2c:df:f6:63:38:a9:27:80:cc:31:51:5c:77:b3: cb:2a:ee:97:9e:79:4d:16:9f:d2:4a:34:9e:e8:a9:67:36:28: 1a:97:4b:3e:4b:c9:59:6d:17:d6:53:4b:89:e7:04:9a:84:44: d6:a4:e0:87:ab:0d:2a:87:5d:a5:7f:8a:7f:a8:66:d8:7c:6e: 08:c6:3b:7c:6f:76:30:03:d5:d1:b5:c5:33:6d:a0:4e:c6:97: 78:0b:47:e6:61:ec:a1:29:bd:13:14:df:c8:0d:22:af:d9:2b: 4b:04:68:29:bb:92:df:b3:17:16:48:86:b4:6b:5d:f3:32:af: 2a:07:3a:c8:48:54:60:4e:f9:f9:bd:e8:6f:1f:86:9f:ff:5e: 7a:7a:d8:95:ec:e9:dc:7f:f9:21:d2:52:79:84:17:4c:4c:88: 1f:a6:f1:83 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUVRBI7yVt52mDfjKGTRI93DuHk8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNTA3MDYwOTU1MDFaFw0yNjA3MDUxMDAwMDFaMDMxMTAvBgNV BAMTKEU1NTc2Nzg3Mjc2NDA5MjNFOTQxMkM3MzBDRjkyNzNDMTc5MzRGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNrlNZDeG0Ikas1D+Efcwfv8k ef4WqiESqy0cUjz4/ROUArKXGa1OMUKuyqanz/EDptVyyDZb74nPL5BPf+lMBa9S wC+mLkA9ERwUNXveLcz8Jp964Io/ZDhYSxYCoae69QdovwzwvqcT+VkPYfzyTQBF dgNHO1QJGvW/jdHqrSp0ndqLbK5XiHYurqNOqgTOOqE3AcazOAXeUG63PTejwnCN Z25jbUk4VMcyDGAL5yRdUc0MObdvxwUv65woyw0NULb/4XMDk4e1iioPs3b8gbQp IPTPujA3RymyLqEm84Pd8SEnpEYKXZsmcL1dIMdbqkTWgzOFA7NiQag58KIhAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU5VdnhydkCSPpQSxzDPknPBeTT3cwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0MDg4M2YzLTQ1N2EtNGMxNC05 NTc3LTY3ZTE1MGEyYjEyYS8wLzMyMzQzMDMyM2EzODYxNjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCisAwDQYJKoZI hvcNAQELBQADggEBAClZIF33GcrAbfgtYJ6evkEJXqagGGJy/1nmcp6aevOIbIAl XEcYuUBT+r6Vg0F1qbNilSWdOF4pdTpmAfnM1n6tyxXN4syZLy2ppZXUZu67FK03 YH/fX4TvSeZwxREs3/ZjOKkngMwxUVx3s8sq7peeeU0Wn9JKNJ7oqWc2KBqXSz5L yVltF9ZTS4nnBJqERNak4IerDSqHXaV/in+oZth8bgjGO3xvdjAD1dG1xTNtoE7G l3gLR+Zh7KEpvRMU38gNIq/ZK0sEaCm7kt+zFxZIhrRrXfMyryoHOshIVGBO+fm9 6G8fhp//Xnp62JXs6dx/+SHSUnmEF0xMiB+m8YM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:45:35 2025 by rpki-client