$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa File: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (raw, json) Hash identifier: InIenu/YRdZ+r+sG5SCyx4cnFek5Q1mbpz29x6bWyk8= Subject key identifier: 56:BD:DA:8A:03:46:DA:2F:A5:61:D5:57:53:18:ED:35:6E:72:37:A5 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 7DDB919611D54ED81AD0BB500EC6D040E47A66BF Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa Signing time: Tue 15 Jul 2025 02:00:03 +0000 ROA not before: Tue 15 Jul 2025 01:55:03 +0000 ROA not after: Tue 14 Jul 2026 02:00:03 +0000 asID: 136079 IP address blocks: 2405:2cc0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:db:91:96:11:d5:4e:d8:1a:d0:bb:50:0e:c6:d0:40:e4:7a:66:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Jul 15 01:55:03 2025 GMT Not After : Jul 14 02:00:03 2026 GMT Subject: CN=56BDDA8A0346DA2FA561D5575318ED356E7237A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:a8:28:47:89:dd:ae:b0:dc:e0:91:73:f7: ec:ee:67:67:f4:fd:33:46:e5:4d:e0:ee:1b:c7:84: 80:98:51:96:28:c9:67:93:aa:a1:ce:56:e8:d9:be: c7:10:c2:5a:51:3c:70:cd:56:54:d3:c2:5e:b1:dd: 78:f2:f7:2c:51:28:af:7c:65:19:a5:58:24:f0:17: 67:6f:26:78:94:de:30:53:4c:f8:da:37:13:d9:ea: 90:02:64:8c:f7:f8:8a:1b:72:d5:9e:9a:bb:34:b8: d0:8b:05:e5:74:8e:3f:21:2d:46:0d:cf:fe:4c:a1: db:85:cc:a1:92:f2:d4:4c:75:e7:74:1d:4b:84:aa: df:eb:46:6d:b2:9f:38:ad:d3:50:8a:50:70:f1:0e: ac:35:71:a5:95:f2:95:95:52:95:27:ba:18:50:7e: a9:29:ee:93:c0:ff:48:81:a2:ab:c0:46:2a:55:92: 49:5e:bc:5e:ab:07:03:a8:1d:c7:7e:3f:49:7c:6d: 51:6f:35:03:7a:34:5f:37:82:e4:3d:f4:b7:1d:5a: cf:ce:17:06:cf:99:3e:da:0d:2f:fc:11:5b:de:94: 0b:d3:43:d0:a9:c5:20:58:5c:d7:bf:47:d4:34:8b: 38:a9:ae:99:a6:5e:55:78:25:19:3c:5a:18:dd:38: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BD:DA:8A:03:46:DA:2F:A5:61:D5:57:53:18:ED:35:6E:72:37:A5 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2cc0:9::/48 Signature Algorithm: sha256WithRSAEncryption 84:c1:55:da:93:7f:65:15:e5:6d:fb:48:ee:c1:19:99:39:9a: 22:ea:9f:8c:9a:58:cf:c1:91:04:db:bb:bf:6c:c9:cb:93:90: d7:30:e7:60:3b:24:52:a1:74:bd:2c:e2:57:39:7c:36:72:4f: 4e:fb:5b:e5:02:42:20:87:13:0d:c3:58:fe:1f:4f:8b:45:18: 89:55:9b:40:61:9f:29:f0:ed:f9:32:00:99:45:41:42:c5:44: 70:ca:94:8c:62:52:a6:cf:f0:58:5c:f1:14:9a:64:64:2d:3d: f8:8c:44:45:c4:e5:21:e0:88:b2:5f:26:bd:c0:8c:e2:d0:7b: 9d:5c:50:ec:72:e9:93:76:c8:94:23:39:fd:cb:5b:ce:54:2c: 5c:c2:9d:a8:e0:12:75:5b:40:46:4a:1d:1a:bf:a3:e4:66:b9: 92:46:db:b0:80:c3:24:e6:65:85:17:ab:9b:77:00:ad:7f:26: b8:b1:b6:41:c7:cb:40:cf:61:84:fe:0d:d8:eb:ba:9b:a5:47: 8d:ac:4b:4c:05:77:6c:63:70:f7:f9:e8:06:22:8f:c7:33:23: 54:2e:a5:48:b0:8b:08:69:d7:27:83:ba:57:fd:dc:55:d7:4a: c8:4d:cb:ad:a0:87:0e:dd:f4:4c:71:1a:52:81:01:ef:ab:69: 81:1d:0c:df -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUfduRlhHVTtga0LtQDsbQQOR6Zr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNTA3MTUwMTU1MDNaFw0yNjA3MTQwMjAwMDNaMDMxMTAvBgNV BAMTKDU2QkREQThBMDM0NkRBMkZBNTYxRDU1NzUzMThFRDM1NkU3MjM3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYKgoR4ndrrDc4JFz9+zuZ2f0 /TNG5U3g7hvHhICYUZYoyWeTqqHOVujZvscQwlpRPHDNVlTTwl6x3Xjy9yxRKK98 ZRmlWCTwF2dvJniU3jBTTPjaNxPZ6pACZIz3+IobctWemrs0uNCLBeV0jj8hLUYN z/5ModuFzKGS8tRMded0HUuEqt/rRm2ynzit01CKUHDxDqw1caWV8pWVUpUnuhhQ fqkp7pPA/0iBoqvARipVkklevF6rBwOoHcd+P0l8bVFvNQN6NF83guQ99LcdWs/O FwbPmT7aDS/8EVvelAvTQ9CpxSBYXNe/R9Q0iziprpmmXlV4JRk8WhjdOANfAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUVr3aigNG2i+lYdVXUxjtNW5yN6UwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMyMzQzMDM1M2EzMjYzNjMzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBSzAAAkw DQYJKoZIhvcNAQELBQADggEBAITBVdqTf2UV5W37SO7BGZk5miLqn4yaWM/BkQTb u79sycuTkNcw52A7JFKhdL0s4lc5fDZyT077W+UCQiCHEw3DWP4fT4tFGIlVm0Bh nynw7fkyAJlFQULFRHDKlIxiUqbP8Fhc8RSaZGQtPfiMREXE5SHgiLJfJr3AjOLQ e51cUOxy6ZN2yJQjOf3LW85ULFzCnajgEnVbQEZKHRq/o+RmuZJG27CAwyTmZYUX q5t3AK1/JrixtkHHy0DPYYT+DdjrupulR42sS0wFd2xjcPf56AYij8czI1QupUiw iwhp1yeDulf93FXXSshNy62ghw7d9ExxGlKBAe+raYEdDN8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:26:48 2025 by rpki-client