$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa File: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (raw, json) Hash identifier: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE= Subject key identifier: 4D:FD:53:AD:2C:A7:09:CD:55:8B:AB:D0:74:B7:55:F9:26:50:4B:83 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 5F82529DB8AF4EAAE0C3298E449162D3080496FC Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa Signing time: Sun 31 Aug 2025 10:34:35 +0000 ROA not before: Sun 31 Aug 2025 10:29:35 +0000 ROA not after: Sun 30 Aug 2026 10:34:35 +0000 asID: 23949 IP address blocks: 2401:e480::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:82:52:9d:b8:af:4e:aa:e0:c3:29:8e:44:91:62:d3:08:04:96:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Aug 31 10:29:35 2025 GMT Not After : Aug 30 10:34:35 2026 GMT Subject: CN=4DFD53AD2CA709CD558BABD074B755F926504B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:ed:ec:5d:31:82:fb:c1:6c:b9:f0:1b:c4: 4e:fc:d9:ec:d9:a9:17:53:5c:33:ff:a8:41:e2:99: 98:c9:7f:aa:21:4f:70:68:f1:f8:f6:30:e3:2f:bc: f8:d5:62:ac:42:e1:6c:f6:3b:ef:3c:c0:51:a1:1d: c5:f4:71:dd:36:6c:86:65:27:52:cf:5c:92:9c:aa: 5f:62:4e:2b:f4:5f:24:91:37:0d:04:71:a8:24:73: bd:48:e3:eb:14:b2:fc:aa:ec:38:9e:af:89:e3:39: 3b:16:ad:91:8f:c3:51:34:9d:ec:31:b2:38:ca:c0: 7e:4f:cc:b8:4a:2b:ed:7b:6a:9c:c0:cc:e9:7f:91: 30:d4:cc:33:80:ad:df:94:64:a6:02:bb:43:7a:93: 23:84:9e:f0:83:78:19:69:6a:9a:d8:76:aa:fd:3d: 98:79:da:54:ee:3e:3f:78:1f:b8:c1:24:18:04:e8: 7e:17:cc:a5:86:50:49:f4:41:02:0d:09:be:a1:c5: 76:fb:08:a5:0d:a4:65:22:2f:b4:1d:42:76:73:90: aa:42:b7:92:55:4e:b0:2b:40:73:20:42:28:4c:85: eb:74:8a:5d:09:ae:66:90:9a:11:83:6e:8b:35:7c: 5e:6e:75:46:63:a8:5b:e9:4f:ba:f9:b6:46:d8:5d: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FD:53:AD:2C:A7:09:CD:55:8B:AB:D0:74:B7:55:F9:26:50:4B:83 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:e480::/32 Signature Algorithm: sha256WithRSAEncryption 24:48:ee:b5:1b:3b:86:e7:df:05:39:0c:cc:ad:00:32:55:31: cb:86:8a:20:f2:cc:45:b4:84:37:b4:b0:d9:a9:60:2a:04:2a: ee:a7:87:ea:f6:d5:1e:7d:03:6c:a4:7e:7e:44:54:42:1e:c5: b7:07:47:7d:61:40:5d:d8:f3:a2:6d:ae:94:54:82:aa:7e:2b: 1f:f6:7e:6b:55:23:8e:33:7f:8e:96:ab:f9:9f:d0:3d:9b:cc: 2a:da:33:ba:03:74:a8:f9:93:26:cc:e3:58:e1:13:7c:91:82: 16:02:42:67:bb:34:30:9f:45:74:42:3f:e5:0e:a7:b1:b4:77: b5:fc:70:18:80:f2:64:9e:de:11:97:66:e3:89:7c:aa:88:1a: 99:d1:99:ca:03:8f:9e:0d:86:09:5e:d4:e8:55:2c:03:52:5c: e5:1e:76:40:c9:41:1a:d9:e7:5c:b4:09:5f:de:e7:c0:8d:e4: cc:b4:de:4b:13:99:41:3b:af:cb:33:8f:21:a2:18:7c:47:4e: 9e:8a:d5:db:17:9e:5f:25:fd:73:31:5b:7d:e3:76:6c:69:ed: d7:3d:cb:02:0c:b1:38:a2:62:8a:26:39:33:ef:dd:de:25:f2: 70:a4:2a:35:93:0c:4d:47:40:05:17:ee:7e:8b:c1:5a:eb:56: 74:3e:17:b7 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUX4JSnbivTqrgwymORJFi0wgElvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTA4MzExMDI5MzVaFw0yNjA4MzAxMDM0MzVaMDMxMTAvBgNV BAMTKDRERkQ1M0FEMkNBNzA5Q0Q1NThCQUJEMDc0Qjc1NUY5MjY1MDRCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Yu3sXTGC+8FsufAbxE782ezZ qRdTXDP/qEHimZjJf6ohT3Bo8fj2MOMvvPjVYqxC4Wz2O+88wFGhHcX0cd02bIZl J1LPXJKcql9iTiv0XySRNw0Ecagkc71I4+sUsvyq7Dier4njOTsWrZGPw1E0newx sjjKwH5PzLhKK+17apzAzOl/kTDUzDOArd+UZKYCu0N6kyOEnvCDeBlpaprYdqr9 PZh52lTuPj94H7jBJBgE6H4XzKWGUEn0QQINCb6hxXb7CKUNpGUiL7QdQnZzkKpC t5JVTrArQHMgQihMhet0il0JrmaQmhGDbos1fF5udUZjqFvpT7r5tkbYXUF/AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUTf1TrSynCc1Vi6vQdLdV+SZQS4MwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiNjk4MjJjLTJlMjItNDhiZS04 YmEyLTYzNGY1ODJjMmVjYi8wLzMyMzQzMDMxM2E2NTM0MzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzMzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAeSAMA0GCSqGSIb3 DQEBCwUAA4IBAQAkSO61GzuG598FOQzMrQAyVTHLhoog8sxFtIQ3tLDZqWAqBCru p4fq9tUefQNspH5+RFRCHsW3B0d9YUBd2POiba6UVIKqfisf9n5rVSOOM3+Olqv5 n9A9m8wq2jO6A3So+ZMmzONY4RN8kYIWAkJnuzQwn0V0Qj/lDqextHe1/HAYgPJk nt4Rl2bjiXyqiBqZ0ZnKA4+eDYYJXtToVSwDUlzlHnZAyUEa2edctAlf3ufAjeTM tN5LE5lBO6/LM48hohh8R06eitXbF55fJf1zMVt943Zsae3XPcsCDLE4omKKJjkz 793eJfJwpCo1kwxNR0AFF+5+i8Fa61Z0Phe3 -----END CERTIFICATE-----Generated at Sun Sep 7 15:43:06 2025 by rpki-client