$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: w4rnLSoK9Ogry5Be/7bEeNtK/st8upmlmof3uHLSQS4= Subject key identifier: 75:4B:51:7C:C6:1C:00:40:06:96:58:1C:D1:CF:23:09:E6:42:29:2C Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 6029BCFE1206762F2B1D0EAA48A425B1C3EA15E7 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 10 Apr 2025 05:00:00 +0000 ROA not before: Thu 10 Apr 2025 04:55:00 +0000 ROA not after: Thu 09 Apr 2026 05:00:00 +0000 asID: 137330 IP address blocks: 2402:aa40:13::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:29:bc:fe:12:06:76:2f:2b:1d:0e:aa:48:a4:25:b1:c3:ea:15:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 10 04:55:00 2025 GMT Not After : Apr 9 05:00:00 2026 GMT Subject: CN=754B517CC61C00400696581CD1CF2309E642292C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:de:dc:ac:15:9a:a6:be:8e:03:53:0c:bd: b0:f9:f9:e9:8e:e7:aa:13:37:14:37:39:92:bd:f4: e4:90:a1:6e:a5:6a:38:ca:19:7f:91:a0:64:59:b3: c5:be:1d:0e:9a:9c:83:e6:cc:d8:ee:b2:32:38:c2: b3:54:df:b6:32:91:5c:f3:74:da:e6:c6:bc:6d:02: 8a:1e:2b:1f:8c:7e:f2:c4:32:f1:57:29:0e:1b:ec: a7:4e:27:f6:48:68:17:90:29:27:8e:cb:55:ff:72: 87:bc:a5:2c:87:be:22:0a:56:1a:28:4f:4e:91:f3: 11:e1:9f:3e:ed:b6:7e:d9:ff:cc:a0:b1:d9:c8:27: 46:67:90:eb:d2:7e:3a:40:e3:ba:78:e7:c7:ea:b1: 87:73:6e:37:ff:7c:ed:72:72:72:f1:e9:87:a5:0e: fd:0e:80:45:cf:b6:05:dc:52:a6:f0:b1:e3:bb:66: ec:51:28:51:b9:27:64:68:6a:a3:24:1e:ae:79:d2: 3b:3f:31:23:c3:53:56:06:01:45:3b:7e:0c:e1:1b: 14:82:0e:68:3b:a1:d6:6b:de:d9:d6:53:7a:a8:cf: e2:ab:8e:87:0b:2f:47:bf:d6:8c:5d:32:ac:b9:f7: 6e:61:21:aa:2c:05:9e:12:db:bd:27:5e:e6:bf:71: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:51:7C:C6:1C:00:40:06:96:58:1C:D1:CF:23:09:E6:42:29:2C X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a31333a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:13::/48 Signature Algorithm: sha256WithRSAEncryption 8b:64:a8:2d:d0:a7:81:4a:f2:ba:fd:be:b7:23:09:71:ad:50: aa:ea:1a:31:7d:b6:20:b8:22:2b:1c:7d:c8:a3:bc:f9:e2:ee: c8:72:7c:3c:be:d9:86:65:4c:6b:8b:f5:c6:16:b9:9f:07:c7: 2c:64:91:d0:17:7b:74:fa:22:ad:0f:63:a7:e4:5c:ae:80:6d: 82:0e:5e:78:21:e1:cd:b3:ba:4a:17:20:4e:91:65:a0:a5:39: f4:18:ac:b6:62:cd:3b:60:5f:78:c8:9b:0b:54:0f:af:24:94: 22:b0:46:92:d2:ff:85:8e:fa:fe:f1:a8:f0:95:5d:89:7b:04: 96:8f:08:c4:79:4c:0b:3e:22:8e:b3:f6:45:a2:e8:dc:a5:a3: 66:4a:ea:fc:c0:41:58:85:4f:06:4c:40:61:ac:2f:30:f2:e8: 36:88:c1:f8:13:89:af:73:3c:e3:80:84:21:9e:ef:7c:4b:a8: 01:d3:f5:98:bd:51:49:7c:24:cc:9d:6d:b2:e1:8e:e3:95:d8: 3a:fc:ba:ec:43:ac:00:0a:45:7c:4d:83:70:1c:87:e3:94:d4: 52:85:09:d2:fe:0c:b4:89:8d:2c:01:b1:35:23:62:ce:05:90: 46:3b:b0:27:75:ab:8f:c9:e2:0c:96:94:69:3a:9e:9a:ef:56: e3:cf:12:ee -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUYCm8/hIGdi8rHQ6qSKQlscPqFecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MTAwNDU1MDBaFw0yNjA0MDkwNTAwMDBaMDMxMTAvBgNV BAMTKDc1NEI1MTdDQzYxQzAwNDAwNjk2NTgxQ0QxQ0YyMzA5RTY0MjI5MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjud7crBWapr6OA1MMvbD5+emO 56oTNxQ3OZK99OSQoW6lajjKGX+RoGRZs8W+HQ6anIPmzNjusjI4wrNU37YykVzz dNrmxrxtAooeKx+MfvLEMvFXKQ4b7KdOJ/ZIaBeQKSeOy1X/coe8pSyHviIKVhoo T06R8xHhnz7ttn7Z/8ygsdnIJ0ZnkOvSfjpA47p458fqsYdzbjf/fO1ycnLx6Yel Dv0OgEXPtgXcUqbwseO7ZuxRKFG5J2RoaqMkHq550js/MSPDU1YGAUU7fgzhGxSC Dmg7odZr3tnWU3qoz+KrjocLL0e/1oxdMqy5925hIaosBZ4S270nXua/cVRvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUdUtRfMYcAEAGllgc0c8jCeZCKSwwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzEzMzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCqkAA EzANBgkqhkiG9w0BAQsFAAOCAQEAi2SoLdCngUryuv2+tyMJca1QquoaMX22ILgi Kxx9yKO8+eLuyHJ8PL7ZhmVMa4v1xha5nwfHLGSR0Bd7dPoirQ9jp+RcroBtgg5e eCHhzbO6ShcgTpFloKU59BistmLNO2BfeMibC1QPrySUIrBGktL/hY76/vGo8JVd iXsElo8IxHlMCz4ijrP2RaLo3KWjZkrq/MBBWIVPBkxAYawvMPLoNojB+BOJr3M8 44CEIZ7vfEuoAdP1mL1RSXwkzJ1tsuGO45XYOvy67EOsAApFfE2DcByH45TUUoUJ 0v4MtImNLAGxNSNizgWQRjuwJ3Wrj8niDJaUaTqemu9W488S7g== -----END CERTIFICATE-----Generated at Mon Nov 3 17:51:43 2025 by rpki-client