$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: k3Oc7Qox61g/81QkNkpKWgvduR5WrhOGQt7cFtDOMd8= Subject key identifier: 45:D4:3B:CE:E0:61:8F:AF:E2:51:93:EB:16:D2:13:1E:41:83:7D:13 Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Certificate serial: 3BB87600A722FC808770E45D26E35C1F21ACD4A6 Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa Signing time: Fri 04 Jul 2025 13:00:03 +0000 ROA not before: Fri 04 Jul 2025 12:55:03 +0000 ROA not after: Fri 03 Jul 2026 13:00:03 +0000 asID: 153087 IP address blocks: 2404:97c0:2228::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 13:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b8:76:00:a7:22:fc:80:87:70:e4:5d:26:e3:5c:1f:21:ac:d4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Validity Not Before: Jul 4 12:55:03 2025 GMT Not After : Jul 3 13:00:03 2026 GMT Subject: CN=45D43BCEE0618FAFE25193EB16D2131E41837D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:a9:93:a3:c5:76:39:7c:6c:d5:d9:a5:e2: 36:e1:e5:fe:57:dc:55:61:a3:e3:cc:69:96:c9:23: e4:9e:ea:50:b8:f8:06:3b:83:2b:69:a8:16:ac:dd: dd:4c:9b:09:39:1d:94:6f:d7:aa:f9:02:bc:33:26: 6b:7c:ab:34:82:22:84:d1:36:3a:6a:94:63:34:3d: 2e:cd:38:f8:2a:33:f7:09:76:b8:ee:7a:e4:f6:a4: 4d:bb:0d:d7:17:62:d3:85:64:5b:82:c2:3a:80:35: 97:be:aa:0b:0e:27:8e:57:44:d1:3d:9c:f0:7d:54: 1b:27:88:5a:90:7c:aa:05:7f:28:9f:c4:87:88:94: 32:3e:43:75:0c:2d:ab:69:4b:16:c9:2e:49:02:8d: f5:af:7c:c8:16:11:ec:43:fb:05:34:88:be:8e:cb: 61:d1:44:1f:f4:45:57:60:3f:b6:7a:a0:b7:4d:bf: 25:6d:b7:70:c2:60:e8:44:75:36:4f:98:ae:e9:37: f1:9d:39:e7:ba:34:b8:78:1f:87:f8:40:73:47:94: a2:ea:3a:cf:5e:b2:cc:dd:3a:d6:a3:36:41:a1:8b: a1:e6:12:ee:74:80:09:86:c3:27:05:ad:3c:0a:f1: ed:04:53:09:cf:dc:9b:51:fa:bc:f2:55:f7:f2:60: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D4:3B:CE:E0:61:8F:AF:E2:51:93:EB:16:D2:13:1E:41:83:7D:13 X509v3 Authority Key Identifier: keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232383a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2228::/48 Signature Algorithm: sha256WithRSAEncryption c4:38:25:cd:5a:9d:50:b0:02:0e:30:2a:a9:ce:ee:80:a2:69: ec:ef:dd:e3:10:cc:58:63:ac:cf:81:7a:39:9f:de:93:51:c2: 7d:71:aa:af:91:9f:67:a4:44:5f:0b:b9:d5:d3:30:c5:1c:9b: e1:0f:46:93:45:e0:7b:37:5c:98:1e:a2:6e:3a:e1:17:b8:ea: a5:5e:41:4f:81:29:df:04:6c:7e:7c:92:b0:f1:1c:ca:36:1e: f4:9c:37:c7:08:a1:ff:8e:dc:30:d1:b9:28:7c:f0:b6:19:ab: 26:65:4d:18:e7:7e:77:3e:ff:b9:7f:63:07:5a:c1:c3:47:e8: 8c:0e:3d:2b:fb:9f:90:96:e4:88:88:b0:94:c8:3b:73:73:25: 1b:85:09:d5:0b:79:6f:7c:39:f9:a5:b6:2a:54:91:7c:e3:18: fa:51:13:c6:4a:6d:ed:fa:84:80:dd:75:9e:fb:09:7b:b1:f5: 76:60:22:4f:c2:4d:4f:7c:f5:7d:e9:42:67:a4:09:45:84:c3: 0d:33:0d:69:28:d2:61:ec:c7:0e:9d:dc:ad:2f:fc:f2:c6:42: 50:6b:ad:18:d8:fe:ad:e4:bf:21:aa:ee:a3:17:e7:74:6f:ad: e8:0f:d7:cd:2c:ad:7b:cf:e9:1d:d3:c6:42:08:9c:c8:6e:62: 5a:77:4a:01 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUO7h2AKci/ICHcORdJuNcHyGs1KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky NzI5REVFRTAeFw0yNTA3MDQxMjU1MDNaFw0yNjA3MDMxMzAwMDNaMDMxMTAvBgNV BAMTKDQ1RDQzQkNFRTA2MThGQUZFMjUxOTNFQjE2RDIxMzFFNDE4MzdEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SKmTo8V2OXxs1dml4jbh5f5X 3FVho+PMaZbJI+Se6lC4+AY7gytpqBas3d1Mmwk5HZRv16r5ArwzJmt8qzSCIoTR NjpqlGM0PS7NOPgqM/cJdrjueuT2pE27DdcXYtOFZFuCwjqANZe+qgsOJ45XRNE9 nPB9VBsniFqQfKoFfyifxIeIlDI+Q3UMLatpSxbJLkkCjfWvfMgWEexD+wU0iL6O y2HRRB/0RVdgP7Z6oLdNvyVtt3DCYOhEdTZPmK7pN/GdOee6NLh4H4f4QHNHlKLq Os9esszdOtajNkGhi6HmEu50gAmGwycFrTwK8e0EUwnP3JtR+rzyVffyYKTTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQURdQ7zuBhj6/iUZPrFtITHkGDfRMwHwYDVR0j BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5 REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04 MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMyMzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAIigwDQYJKoZIhvcNAQELBQADggEBAMQ4Jc1anVCwAg4wKqnO7oCiaezv3eMQ zFhjrM+Bejmf3pNRwn1xqq+Rn2ekRF8LudXTMMUcm+EPRpNF4Hs3XJgeom464Re4 6qVeQU+BKd8EbH58krDxHMo2HvScN8cIof+O3DDRuSh88LYZqyZlTRjnfnc+/7l/ YwdawcNH6IwOPSv7n5CW5IiIsJTIO3NzJRuFCdULeW98OfmltipUkXzjGPpRE8ZK be36hIDddZ77CXux9XZgIk/CTU989X3pQmekCUWEww0zDWko0mHsxw6d3K0v/PLG QlBrrRjY/q3kvyGq7qMX53RvregP180srXvP6R3TxkIInMhuYlp3SgE= -----END CERTIFICATE-----Generated at Sun Jul 27 02:00:50 2025 by rpki-client