$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: OHsuASvmzBD1DPmsUBDtaXS67lDP+sik8wAvJIg6b6M= Subject key identifier: 5D:27:38:9E:79:92:20:F5:6E:88:9E:57:0D:E2:F3:13:69:80:F8:82 Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Certificate serial: 3B6BF831D8BDCCE16B58C69F3060EF5BE83A98AB Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa Signing time: Fri 04 Jul 2025 14:00:02 +0000 ROA not before: Fri 04 Jul 2025 13:55:02 +0000 ROA not after: Fri 03 Jul 2026 14:00:02 +0000 asID: 153087 IP address blocks: 2404:97c0:1388::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 13:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6b:f8:31:d8:bd:cc:e1:6b:58:c6:9f:30:60:ef:5b:e8:3a:98:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Validity Not Before: Jul 4 13:55:02 2025 GMT Not After : Jul 3 14:00:02 2026 GMT Subject: CN=5D27389E799220F56E889E570DE2F3136980F882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:a4:bf:4b:8a:ce:25:40:18:fa:74:3e:1f: e8:df:0d:36:54:00:4d:ec:e1:8f:dc:b9:9f:09:e6: 39:0d:ec:d2:7a:d4:6e:67:55:07:7a:01:cf:f6:a6: b3:3f:b9:bf:8f:9d:eb:5a:dd:3b:b6:86:0e:54:2d: fd:d9:0d:3d:85:ef:d5:3e:78:c9:95:be:c0:33:c3: 0e:73:82:9e:13:2c:bf:c8:e1:8f:23:cb:65:0d:3d: 7b:fd:c3:bd:e7:33:2e:57:4d:6d:43:5f:c3:81:1b: 8d:4a:04:ff:e4:84:fa:ae:8d:43:5d:87:bf:89:82: b6:8a:bf:fe:5f:86:f7:a8:76:74:38:59:74:87:75: 39:3d:bd:48:8a:23:80:64:9b:09:28:e1:f7:9c:89: 85:e9:f4:2b:8d:a5:49:04:b5:c6:ce:b7:6d:b5:68: 42:af:43:f6:5c:b1:07:d7:80:71:28:24:5c:ed:b5: 71:47:3d:4b:b1:84:c3:21:83:a6:b9:3c:30:cd:06: fc:f2:19:ee:a8:5f:85:99:b4:64:22:6c:87:1d:3c: b3:35:71:2c:fd:fd:fe:c2:6d:a4:98:4e:ae:01:d4: 26:2e:db:e0:34:b4:45:54:92:08:07:69:38:83:f1: 20:9e:29:9a:00:59:98:f7:07:98:bb:5d:36:9f:63: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:27:38:9E:79:92:20:F5:6E:88:9E:57:0D:E2:F3:13:69:80:F8:82 X509v3 Authority Key Identifier: keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a313338383a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:1388::/48 Signature Algorithm: sha256WithRSAEncryption 0d:6d:16:33:ba:cb:8b:f9:f6:4d:5b:26:88:d7:f6:af:a8:3d: f8:32:f1:16:2b:3f:f7:9d:4f:35:60:dc:40:07:1e:74:46:d5: 57:c7:52:a6:46:ec:fd:52:80:11:76:13:3d:81:e8:57:b5:e7: b3:7d:65:d6:82:e0:7a:63:4e:52:69:ec:2c:7e:7c:e0:19:72: 39:fa:aa:77:c3:d9:0b:a8:2b:e6:39:4b:ba:89:5b:f1:8e:f0: c7:cd:c9:51:ab:02:1b:bd:85:d8:67:ae:61:9d:62:7c:90:a9: d6:95:93:0b:df:62:4c:7d:34:d0:c9:fa:95:5c:ca:1d:5c:5a: 86:73:35:3e:2f:f6:ac:f2:0b:c1:48:fc:9e:e4:55:f6:4f:f1: b0:d9:92:3a:68:25:f3:35:f2:d1:df:54:6d:33:61:28:8e:f7: d3:da:8b:bb:2a:2d:ac:2d:cb:fe:c5:ed:42:37:48:d1:46:54: 85:09:80:cd:b1:5f:7e:b8:8c:e9:f1:07:1c:0b:31:8b:0b:1a: f8:93:64:c5:a0:fd:f9:75:5e:a0:76:e1:1c:8b:28:92:41:a9: d5:8e:2c:05:9e:f3:13:b6:00:8d:e9:12:2a:83:25:e4:73:8e: 77:19:b5:f2:8c:56:9d:83:17:97:50:c9:77:61:6d:d8:3d:ba: e7:0d:be:11 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUO2v4Mdi9zOFrWMafMGDvW+g6mKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky NzI5REVFRTAeFw0yNTA3MDQxMzU1MDJaFw0yNjA3MDMxNDAwMDJaMDMxMTAvBgNV BAMTKDVEMjczODlFNzk5MjIwRjU2RTg4OUU1NzBERTJGMzEzNjk4MEY4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3aS/S4rOJUAY+nQ+H+jfDTZU AE3s4Y/cuZ8J5jkN7NJ61G5nVQd6Ac/2prM/ub+Pneta3Tu2hg5ULf3ZDT2F79U+ eMmVvsAzww5zgp4TLL/I4Y8jy2UNPXv9w73nMy5XTW1DX8OBG41KBP/khPqujUNd h7+JgraKv/5fhveodnQ4WXSHdTk9vUiKI4Bkmwko4feciYXp9CuNpUkEtcbOt221 aEKvQ/ZcsQfXgHEoJFzttXFHPUuxhMMhg6a5PDDNBvzyGe6oX4WZtGQibIcdPLM1 cSz9/f7CbaSYTq4B1CYu2+A0tEVUkggHaTiD8SCeKZoAWZj3B5i7XTafY+aXAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUXSc4nnmSIPVuiJ5XDeLzE2mA+IIwHwYDVR0j BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5 REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzMzM4Mzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAE4gwDQYJKoZIhvcNAQELBQADggEBAA1tFjO6y4v59k1bJojX9q+oPfgy8RYr P/edTzVg3EAHHnRG1VfHUqZG7P1SgBF2Ez2B6Fe157N9ZdaC4HpjTlJp7Cx+fOAZ cjn6qnfD2QuoK+Y5S7qJW/GO8MfNyVGrAhu9hdhnrmGdYnyQqdaVkwvfYkx9NNDJ +pVcyh1cWoZzNT4v9qzyC8FI/J7kVfZP8bDZkjpoJfM18tHfVG0zYSiO99Pai7sq Lawty/7F7UI3SNFGVIUJgM2xX364jOnxBxwLMYsLGviTZMWg/fl1XqB24RyLKJJB qdWOLAWe8xO2AI3pEiqDJeRzjncZtfKMVp2DF5dQyXdhbdg9uucNvhE= -----END CERTIFICATE-----Generated at Sun Jul 27 01:59:58 2025 by rpki-client