$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa File: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (raw, json) Hash identifier: 2s6ODMSjUVaffAG6UbhZ8oJIX5hnW9ppp33Tq9tR3wY= Subject key identifier: A1:9C:50:A2:E6:7D:B8:42:31:61:3C:63:57:74:F9:F2:20:71:40:E6 Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Certificate serial: 5340175B7FA4EB8657AD5F2DC84C8A350D18FEAF Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa Signing time: Mon 22 Sep 2025 06:33:53 +0000 ROA not before: Mon 22 Sep 2025 06:28:53 +0000 ROA not after: Mon 21 Sep 2026 06:33:53 +0000 asID: 132647 IP address blocks: 2402:ee80:c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:40:17:5b:7f:a4:eb:86:57:ad:5f:2d:c8:4c:8a:35:0d:18:fe:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Validity Not Before: Sep 22 06:28:53 2025 GMT Not After : Sep 21 06:33:53 2026 GMT Subject: CN=A19C50A2E67DB84231613C635774F9F2207140E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:2b:75:dc:e7:a6:b9:7b:15:5a:70:a6:5d: 82:4e:31:09:f0:85:ed:c3:63:40:a7:b4:35:eb:84: 49:77:fc:30:46:fc:86:fb:69:13:6e:26:58:09:3f: 38:47:73:dc:37:cd:49:9f:4b:17:d4:21:23:78:e3: 23:84:ba:f6:48:69:cb:a2:8e:51:3f:8f:bf:1f:da: df:90:ff:02:15:ea:85:98:9c:95:29:b7:bc:00:0f: 05:68:f4:2d:be:be:de:0d:30:33:5b:70:1e:fb:01: 4a:06:3a:6c:4f:4d:95:90:88:b2:e2:20:f1:a3:b2: 1c:42:0f:40:01:06:38:32:78:ad:3a:b7:96:08:1e: 5e:db:02:14:db:4a:4f:7c:ea:c6:f3:8b:9b:5b:e0: d6:f7:91:25:27:75:bf:e1:90:1d:5a:ae:f7:08:06: 28:21:80:55:de:84:fe:68:93:bb:a5:b9:49:e6:1e: cf:34:56:19:2a:77:62:ed:f0:07:29:99:90:64:76: 73:73:44:95:35:71:41:e8:b3:23:53:1f:60:7d:04: 2d:02:11:e7:d4:7c:d0:48:f3:4f:15:18:b9:31:ed: ba:74:07:45:0b:10:c4:87:73:93:11:e7:83:8f:3d: 7f:54:31:4e:a9:2b:20:76:be:6c:e6:19:f2:d6:da: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:50:A2:E6:7D:B8:42:31:61:3C:63:57:74:F9:F2:20:71:40:E6 X509v3 Authority Key Identifier: keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:ee80:c::/48 Signature Algorithm: sha256WithRSAEncryption 72:c7:bc:da:99:b9:14:5d:f9:50:d2:03:c4:8d:f7:1a:ef:1f: 57:81:dd:10:63:d7:09:ba:8c:21:c0:01:b6:b9:ca:35:5d:c8: ed:41:84:ea:14:82:b3:ff:c4:9e:1b:47:e2:79:65:fb:8a:f6: 4a:56:ac:02:73:3c:3f:c3:30:60:5b:c3:39:0e:a7:8d:d8:e2: 40:3b:6b:01:16:d8:60:53:6e:27:3a:0a:df:ac:57:a6:57:7a: 39:de:fb:2c:a4:17:4c:8e:5a:51:51:38:88:e7:d4:07:e1:b6: a7:56:1c:79:58:81:57:e9:08:03:f4:90:84:a5:12:0e:a8:9c: d7:6a:73:b4:75:88:4c:6d:71:a9:ee:80:f7:69:ae:26:6a:18: aa:17:57:57:2f:24:20:1a:85:da:48:b7:fe:ad:8a:08:b8:12: 1f:17:3d:e2:26:48:48:3e:de:d6:3f:c2:4d:66:ea:c5:14:32: 9d:f3:24:ac:83:eb:84:fc:d5:6c:df:2d:72:f8:3b:c5:a1:0e: e5:1a:a0:ca:85:24:b5:b6:4b:a6:90:82:77:68:b2:07:3b:65: 14:75:dc:6a:4c:1b:c9:6b:27:93:6f:cb:39:22:e3:cb:bf:4c: 6e:bc:f2:ef:4f:11:28:e6:d3:bc:b3:79:03:42:36:c7:f1:c2: 85:22:22:44 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUU0AXW3+k64ZXrV8tyEyKNQ0Y/q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE RjdEQzFENjAeFw0yNTA5MjIwNjI4NTNaFw0yNjA5MjEwNjMzNTNaMDMxMTAvBgNV BAMTKEExOUM1MEEyRTY3REI4NDIzMTYxM0M2MzU3NzRGOUYyMjA3MTQwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZyt13OemuXsVWnCmXYJOMQnw he3DY0CntDXrhEl3/DBG/Ib7aRNuJlgJPzhHc9w3zUmfSxfUISN44yOEuvZIacui jlE/j78f2t+Q/wIV6oWYnJUpt7wADwVo9C2+vt4NMDNbcB77AUoGOmxPTZWQiLLi IPGjshxCD0ABBjgyeK06t5YIHl7bAhTbSk986sbzi5tb4Nb3kSUndb/hkB1arvcI BighgFXehP5ok7uluUnmHs80Vhkqd2Lt8AcpmZBkdnNzRJU1cUHosyNTH2B9BC0C EefUfNBI808VGLkx7bp0B0ULEMSHc5MR54OPPX9UMU6pKyB2vmzmGfLW2jZLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUoZxQouZ9uEIxYTxjV3T58iBxQOYwHwYDVR0j BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3 MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE QzFENi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzMyMzQzMDMyM2E2NTY1MzgzMDNhNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzIzNjM0Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAu6AAAww DQYJKoZIhvcNAQELBQADggEBAHLHvNqZuRRd+VDSA8SN9xrvH1eB3RBj1wm6jCHA Aba5yjVdyO1BhOoUgrP/xJ4bR+J5ZfuK9kpWrAJzPD/DMGBbwzkOp43Y4kA7awEW 2GBTbic6Ct+sV6ZXejne+yykF0yOWlFROIjn1AfhtqdWHHlYgVfpCAP0kISlEg6o nNdqc7R1iExtcanugPdpriZqGKoXV1cvJCAahdpIt/6tigi4Eh8XPeImSEg+3tY/ wk1m6sUUMp3zJKyD64T81WzfLXL4O8WhDuUaoMqFJLW2S6aQgndosgc7ZRR13GpM G8lrJ5Nvyzki48u/TG688u9PESjm07yzeQNCNsfxwoUiIkQ= -----END CERTIFICATE-----Generated at Sun Oct 19 19:51:22 2025 by rpki-client