$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa File: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (raw, json) Hash identifier: vG82X1ya4RP+iLybP3Nf3VH9eiCkt21NvKQm4mVZqlY= Subject key identifier: E9:98:3E:AF:4D:5E:1D:7C:BB:E3:B1:16:FA:E3:82:2A:9D:DE:86:F1 Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Certificate serial: 4D5AE3D2A8DA6D731F41EF653581B0F2E25718E5 Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa Signing time: Mon 22 Sep 2025 06:33:35 +0000 ROA not before: Mon 22 Sep 2025 06:28:35 +0000 ROA not after: Mon 21 Sep 2026 06:33:35 +0000 asID: 132647 IP address blocks: 2402:ee80:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5a:e3:d2:a8:da:6d:73:1f:41:ef:65:35:81:b0:f2:e2:57:18:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Validity Not Before: Sep 22 06:28:35 2025 GMT Not After : Sep 21 06:33:35 2026 GMT Subject: CN=E9983EAF4D5E1D7CBBE3B116FAE3822A9DDE86F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:bc:ca:49:7e:7c:9a:26:6b:e2:3a:40:55: bc:95:ee:58:36:1d:d5:be:3f:66:dc:35:1c:6d:ef: 9d:de:a9:56:69:d3:26:14:74:2d:9b:7e:e0:58:16: b3:2a:01:92:51:52:36:6d:7b:60:c9:9c:32:2f:19: f4:42:15:c5:d5:01:d3:85:00:9a:2d:02:e4:1c:1e: a7:c7:46:5a:24:7a:34:4d:83:17:eb:ed:be:fe:ba: 9c:d6:02:95:9e:15:12:c6:2b:b3:9c:10:0c:79:17: ee:32:38:a0:16:c4:8c:4d:b3:44:08:bc:c1:1e:d9: 79:49:ec:78:cd:2d:66:ee:b3:bf:cb:15:39:30:a2: e8:43:10:42:98:13:62:04:24:74:d8:05:1d:7e:77: 60:43:38:f8:9e:2c:f2:bb:ae:5d:a8:cb:6b:da:0c: e1:8d:db:d9:e0:28:12:df:de:57:30:56:36:e7:e6: ec:89:a4:f0:79:ba:91:21:66:76:1b:3a:53:e1:21: d2:78:60:c3:d9:3d:0d:07:2b:32:cf:95:03:1c:90: 73:cc:30:b2:85:d8:b2:25:d1:18:e2:b1:91:bb:ab: 7a:14:8b:df:c7:80:31:02:fa:3b:8c:f5:79:c0:1b: ff:dc:05:2b:3d:64:ab:3a:ec:1d:7e:0d:49:52:5a: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:98:3E:AF:4D:5E:1D:7C:BB:E3:B1:16:FA:E3:82:2A:9D:DE:86:F1 X509v3 Authority Key Identifier: keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:ee80:b::/48 Signature Algorithm: sha256WithRSAEncryption 0c:bb:98:1e:a7:23:21:1c:3d:4a:65:10:5b:ef:2b:24:3b:54: 3c:b5:07:da:b2:cb:04:1f:82:bc:6f:42:30:47:50:e4:fb:5e: e6:a2:80:15:37:63:1c:b8:54:c8:de:72:a5:10:47:d6:20:38: 0c:fc:71:03:68:13:e1:dc:5a:12:00:7d:68:a7:a6:d9:d4:f1: e8:ee:c2:81:6c:05:2b:23:79:c1:98:bb:af:4b:bd:68:9d:a0: 39:38:ab:0d:dd:ad:11:16:4b:c9:1a:d9:6c:24:af:90:79:38: 3a:61:64:8a:4b:41:ce:5d:d6:70:4e:21:f6:f4:10:ec:e6:02: b5:aa:d2:12:e6:c7:17:95:74:70:83:95:65:65:2d:4e:e6:40: 06:11:bd:74:71:77:d6:eb:7f:bf:39:7a:44:7a:a0:45:51:4a: 6b:80:b7:b2:71:49:49:ff:a3:1b:db:13:d3:13:eb:ee:43:41: 3b:3d:49:25:e1:d8:2a:b2:f5:70:84:f0:d7:45:1a:69:da:50: eb:38:ae:97:de:65:dc:1c:e2:70:31:dc:a4:89:2c:c3:c4:a4: 10:e5:9f:31:9a:6e:9d:90:d3:6b:95:93:c0:df:4a:24:e2:68: 8a:3c:f6:ec:88:80:36:88:98:af:df:b7:26:ee:6e:09:35:d9: 36:ee:e4:82 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTVrj0qjabXMfQe9lNYGw8uJXGOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE RjdEQzFENjAeFw0yNTA5MjIwNjI4MzVaFw0yNjA5MjEwNjMzMzVaMDMxMTAvBgNV BAMTKEU5OTgzRUFGNEQ1RTFEN0NCQkUzQjExNkZBRTM4MjJBOURERTg2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBLzKSX58miZr4jpAVbyV7lg2 HdW+P2bcNRxt753eqVZp0yYUdC2bfuBYFrMqAZJRUjZte2DJnDIvGfRCFcXVAdOF AJotAuQcHqfHRlokejRNgxfr7b7+upzWApWeFRLGK7OcEAx5F+4yOKAWxIxNs0QI vMEe2XlJ7HjNLWbus7/LFTkwouhDEEKYE2IEJHTYBR1+d2BDOPieLPK7rl2oy2va DOGN29ngKBLf3lcwVjbn5uyJpPB5upEhZnYbOlPhIdJ4YMPZPQ0HKzLPlQMckHPM MLKF2LIl0RjisZG7q3oUi9/HgDEC+juM9XnAG//cBSs9ZKs67B1+DUlSWrK3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU6Zg+r01eHXy747EW+uOCKp3ehvEwHwYDVR0j BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3 MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE QzFENi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzMyMzQzMDMyM2E2NTY1MzgzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzIzNjM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAu6AAAsw DQYJKoZIhvcNAQELBQADggEBAAy7mB6nIyEcPUplEFvvKyQ7VDy1B9qyywQfgrxv QjBHUOT7XuaigBU3Yxy4VMjecqUQR9YgOAz8cQNoE+HcWhIAfWinptnU8ejuwoFs BSsjecGYu69LvWidoDk4qw3drREWS8ka2Wwkr5B5ODphZIpLQc5d1nBOIfb0EOzm ArWq0hLmxxeVdHCDlWVlLU7mQAYRvXRxd9brf785ekR6oEVRSmuAt7JxSUn/oxvb E9MT6+5DQTs9SSXh2Cqy9XCE8NdFGmnaUOs4rpfeZdwc4nAx3KSJLMPEpBDlnzGa bp2Q02uVk8DfSiTiaIo89uyIgDaImK/ftybubgk12Tbu5II= -----END CERTIFICATE-----Generated at Sun Oct 19 19:51:22 2025 by rpki-client