$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa File: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (raw, json) Hash identifier: s7BQD7yLxj5kSwHPL3ObyjKROEx8KemxAu+k28dACKE= Subject key identifier: 9C:F7:5B:CE:D3:5F:E9:A6:FB:D2:B0:90:CB:94:CD:00:B9:8E:25:7A Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 7679588D55DEE22E1C2ADF889DCD3D564EA8E6B2 Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa Signing time: Mon 14 Jul 2025 10:02:26 +0000 ROA not before: Mon 14 Jul 2025 09:57:26 +0000 ROA not after: Mon 13 Jul 2026 10:02:26 +0000 asID: 138598 IP address blocks: 2404:5d40:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 14:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:79:58:8d:55:de:e2:2e:1c:2a:df:88:9d:cd:3d:56:4e:a8:e6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Jul 14 09:57:26 2025 GMT Not After : Jul 13 10:02:26 2026 GMT Subject: CN=9CF75BCED35FE9A6FBD2B090CB94CD00B98E257A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:75:12:d6:fd:85:26:3a:20:38:b7:9c:59:df: 49:7f:20:e7:5d:51:5b:e9:37:b2:dd:a7:26:0d:b6: 40:32:bf:5a:b4:dd:ed:f9:17:9d:3a:36:31:80:46: 9c:35:ed:7d:ec:61:97:24:a6:5e:c9:5b:c2:03:04: df:69:de:a2:23:72:da:20:d8:c4:7a:09:ca:f4:ad: 0c:9f:80:d2:d3:73:e9:af:e6:cb:86:a2:57:e8:95: 3d:1d:53:23:9c:7b:02:9b:60:a7:f0:ed:02:b7:d1: 97:19:c1:df:b0:ae:6c:54:f1:b3:0e:c9:1a:41:e8: a3:45:fb:37:81:6e:37:25:4b:8b:67:b4:c4:62:7b: 33:c1:65:d0:9b:20:e4:e9:06:e4:e1:c6:e5:db:b4: f8:aa:24:2f:c4:49:b2:3b:b7:88:7e:d7:3c:dc:17: e3:1c:c8:14:d5:07:b1:91:56:32:97:b0:9a:b9:41: c5:66:1d:fa:30:98:e0:10:91:3e:0f:ec:e5:3f:f8: 16:5e:09:a5:d5:fe:13:ef:24:6f:da:4b:fc:09:95: 3c:92:92:c3:5f:4b:72:41:be:56:c8:1d:5e:59:21: 23:9a:c2:e6:07:9b:41:cd:5b:d9:18:00:fc:49:eb: 6f:60:04:8e:6d:43:e5:67:3f:38:9c:82:e8:4d:e6: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F7:5B:CE:D3:5F:E9:A6:FB:D2:B0:90:CB:94:CD:00:B9:8E:25:7A X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:5d40:9::/48 Signature Algorithm: sha256WithRSAEncryption 99:1a:10:74:25:8d:e1:2f:2e:94:8f:d7:2c:a5:9c:d7:ea:a4: 00:54:cb:55:72:6a:2c:4c:13:16:c0:41:fe:2b:c0:7a:64:58: e8:d0:8c:40:47:d2:07:1e:ef:b8:44:10:31:17:bc:27:91:68: c2:41:b3:e0:ad:fb:35:ce:aa:ed:a8:90:cc:c8:be:23:d7:c8: 59:c5:b7:e7:0f:f6:c7:97:a6:d2:33:17:7d:03:f3:b4:38:3e: 51:98:65:01:c2:62:f0:b9:46:42:54:28:b6:ff:09:3f:1b:1e: a8:5c:9d:b4:f9:b3:b7:8f:77:e4:90:32:3e:18:69:ef:7e:42: 48:68:96:b3:6f:f5:d2:93:1f:18:6d:f7:02:3a:73:e4:04:2b: fd:83:14:64:46:de:97:35:a7:49:77:ae:e7:9f:6e:9a:ae:ea: 76:dc:1d:83:b2:de:2e:2d:a1:fe:b7:6e:1f:f6:04:ca:c0:a2: f6:d7:25:08:5f:d7:6a:c5:41:66:66:f6:8f:be:e7:39:34:b6: 81:51:c9:74:4a:33:fd:5c:0e:59:1f:64:67:66:5f:eb:a9:9b: 6e:3d:a3:97:b5:bd:7f:48:a2:56:b7:97:5a:6c:f6:2f:50:fd: ec:a3:98:e9:e5:b9:4e:2d:a1:bc:36:60:3c:84:2b:d9:32:77: 00:16:ad:e3 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUdnlYjVXe4i4cKt+Inc09Vk6o5rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNTA3MTQwOTU3MjZaFw0yNjA3MTMxMDAyMjZaMDMxMTAvBgNV BAMTKDlDRjc1QkNFRDM1RkU5QTZGQkQyQjA5MENCOTRDRDAwQjk4RTI1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfdRLW/YUmOiA4t5xZ30l/IOdd UVvpN7LdpyYNtkAyv1q03e35F506NjGARpw17X3sYZckpl7JW8IDBN9p3qIjctog 2MR6Ccr0rQyfgNLTc+mv5suGolfolT0dUyOcewKbYKfw7QK30ZcZwd+wrmxU8bMO yRpB6KNF+zeBbjclS4tntMRiezPBZdCbIOTpBuThxuXbtPiqJC/ESbI7t4h+1zzc F+McyBTVB7GRVjKXsJq5QcVmHfowmOAQkT4P7OU/+BZeCaXV/hPvJG/aS/wJlTyS ksNfS3JBvlbIHV5ZISOawuYHm0HNW9kYAPxJ629gBI5tQ+VnPzicguhN5ldBAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUnPdbztNf6ab70rCQy5TNALmOJXowHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05 Y2VhLWMxNmU5OGE4YjVlMC8wLzMyMzQzMDM0M2EzNTY0MzQzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzNTM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBF1AAAkw DQYJKoZIhvcNAQELBQADggEBAJkaEHQljeEvLpSP1yylnNfqpABUy1VyaixMExbA Qf4rwHpkWOjQjEBH0gce77hEEDEXvCeRaMJBs+Ct+zXOqu2okMzIviPXyFnFt+cP 9seXptIzF30D87Q4PlGYZQHCYvC5RkJUKLb/CT8bHqhcnbT5s7ePd+SQMj4Yae9+ QkholrNv9dKTHxht9wI6c+QEK/2DFGRG3pc1p0l3ruefbpqu6nbcHYOy3i4tof63 bh/2BMrAovbXJQhf12rFQWZm9o++5zk0toFRyXRKM/1cDlkfZGdmX+upm249o5e1 vX9Iola3l1ps9i9Q/eyjmOnluU4tobw2YDyEK9kydwAWreM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:41 2025 by rpki-client