$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: 7AJdrVciogRsyJh9VJN1ZAYGcSdPhk7iG4Y4zS8Ipws= Subject key identifier: 4B:2A:47:F3:7A:3B:A6:72:26:BC:E0:22:DD:F7:AA:43:F0:F3:E2:B3 Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Certificate serial: 1CF71B5813EEE7085C8FF5DEB05E6F928CC4ABB1 Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa Signing time: Fri 04 Jul 2025 13:00:02 +0000 ROA not before: Fri 04 Jul 2025 12:55:02 +0000 ROA not after: Fri 03 Jul 2026 13:00:02 +0000 asID: 153087 IP address blocks: 2404:97c0:13::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 13:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f7:1b:58:13:ee:e7:08:5c:8f:f5:de:b0:5e:6f:92:8c:c4:ab:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Validity Not Before: Jul 4 12:55:02 2025 GMT Not After : Jul 3 13:00:02 2026 GMT Subject: CN=4B2A47F37A3BA67226BCE022DDF7AA43F0F3E2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ae:d4:cd:52:36:4c:48:4e:eb:4e:ca:33:05: 59:61:33:29:49:1c:60:35:2f:4f:c3:97:69:4f:8c: 28:d6:a9:b0:12:ca:6f:84:65:92:71:42:f1:3a:00: 20:fe:13:3b:82:2f:fd:80:be:9e:82:42:09:da:ef: 71:e4:0e:f1:68:7c:57:8d:bd:6a:f1:a9:e8:5a:f8: 11:3d:85:ee:62:9e:49:af:bf:c0:24:ae:50:a0:df: 52:36:83:0e:2a:18:ff:a1:ab:03:b6:b7:b9:7d:2f: 84:ec:d5:ec:d8:3d:72:d7:ba:41:c9:d6:b9:1f:0b: 6a:fc:4c:4b:d9:16:5e:a0:0d:cc:3f:4b:d5:46:0a: ad:f9:93:20:59:fb:d8:75:5e:b4:9d:b6:f4:23:1e: 06:fc:92:db:51:d9:45:85:c2:7e:ff:22:92:0e:1d: de:2d:47:e0:bd:c1:d1:87:4f:80:ff:71:43:a7:5e: f6:5e:52:44:86:d3:42:55:cb:d5:46:ad:d5:34:80: 02:69:d4:58:e4:79:80:0e:ac:6c:16:cb:a5:47:a1: 99:78:fb:5f:af:39:47:b2:4c:05:b1:6c:05:02:d6: 94:a3:ae:0a:e5:0e:5c:07:ee:83:1f:44:05:25:19: a1:f0:0d:62:27:f2:52:3e:d0:38:3d:b2:ee:32:16: b1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2A:47:F3:7A:3B:A6:72:26:BC:E0:22:DD:F7:AA:43:F0:F3:E2:B3 X509v3 Authority Key Identifier: keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a31333a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:13::/48 Signature Algorithm: sha256WithRSAEncryption 6a:26:20:e7:8c:25:97:50:d6:cb:e1:a5:77:ca:ab:2e:58:e2: ee:ab:02:e0:54:04:3a:29:07:12:17:62:7d:4a:a3:4e:f9:ae: 8e:c2:dd:0a:d4:10:1d:6d:0e:46:05:9b:93:24:fc:81:2e:c6: ec:82:02:d5:f9:db:80:71:f7:96:10:38:64:7a:a2:ac:ba:f6: 40:ff:ee:ec:85:2b:f7:81:8a:de:d2:69:09:28:61:57:37:53: 36:e6:e5:62:85:35:24:49:3f:a6:c3:71:f8:ff:25:5d:a2:a6: bc:5e:0e:90:ae:44:43:18:7c:34:11:49:c2:42:5d:71:72:8b: c2:ef:96:1f:f4:b6:81:61:09:f8:50:b3:8b:32:5f:b3:3f:02: be:34:9a:62:2b:e1:08:ff:cd:a5:30:2d:1d:7d:31:af:a6:13: fd:cd:61:1e:3d:3d:32:cc:f1:3c:f6:10:00:db:34:7c:d2:09: 02:02:aa:da:dc:4e:33:71:69:4b:8a:63:22:24:66:18:91:74: c8:28:8d:c2:51:eb:26:7c:52:ec:ee:f7:5b:d3:90:95:7a:cf: a3:42:7a:45:b2:04:90:d7:60:b7:8a:06:7a:0f:cc:3e:01:d0: b8:e6:73:b1:a1:b3:b0:7a:1c:65:89:c3:06:1d:0d:f0:2e:9d: bf:8d:10:42 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUHPcbWBPu5whcj/XesF5vkozEq7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky NzI5REVFRTAeFw0yNTA3MDQxMjU1MDJaFw0yNjA3MDMxMzAwMDJaMDMxMTAvBgNV BAMTKDRCMkE0N0YzN0EzQkE2NzIyNkJDRTAyMkRERjdBQTQzRjBGM0UyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrtTNUjZMSE7rTsozBVlhMylJ HGA1L0/Dl2lPjCjWqbASym+EZZJxQvE6ACD+EzuCL/2Avp6CQgna73HkDvFofFeN vWrxqeha+BE9he5inkmvv8AkrlCg31I2gw4qGP+hqwO2t7l9L4Ts1ezYPXLXukHJ 1rkfC2r8TEvZFl6gDcw/S9VGCq35kyBZ+9h1XrSdtvQjHgb8kttR2UWFwn7/IpIO Hd4tR+C9wdGHT4D/cUOnXvZeUkSG00JVy9VGrdU0gAJp1FjkeYAOrGwWy6VHoZl4 +1+vOUeyTAWxbAUC1pSjrgrlDlwH7oMfRAUlGaHwDWIn8lI+0Dg9su4yFrE7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUSypH83o7pnImvOAi3feqQ/Dz4rMwHwYDVR0j BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5 REVFRS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEl8AA EzANBgkqhkiG9w0BAQsFAAOCAQEAaiYg54wll1DWy+Gld8qrLlji7qsC4FQEOikH EhdifUqjTvmujsLdCtQQHW0ORgWbkyT8gS7G7IIC1fnbgHH3lhA4ZHqirLr2QP/u 7IUr94GK3tJpCShhVzdTNublYoU1JEk/psNx+P8lXaKmvF4OkK5EQxh8NBFJwkJd cXKLwu+WH/S2gWEJ+FCzizJfsz8CvjSaYivhCP/NpTAtHX0xr6YT/c1hHj09Mszx PPYQANs0fNIJAgKq2txOM3FpS4pjIiRmGJF0yCiNwlHrJnxS7O73W9OQlXrPo0J6 RbIEkNdgt4oGeg/MPgHQuOZzsaGzsHocZYnDBh0N8C6dv40QQg== -----END CERTIFICATE-----Generated at Sun Jul 27 02:07:47 2025 by rpki-client