$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa File: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (raw, json) Hash identifier: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw= Subject key identifier: 01:32:4F:C4:EF:BF:B8:D2:87:B3:AE:B1:24:68:2F:B4:37:FF:10:0D Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 047274FB7704F45668DACE0E5CAB324D24729077 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa Signing time: Sun 13 Jul 2025 12:42:58 +0000 ROA not before: Sun 13 Jul 2025 12:37:58 +0000 ROA not after: Sun 12 Jul 2026 12:42:58 +0000 asID: 59282 IP address blocks: 2400:d680:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:72:74:fb:77:04:f4:56:68:da:ce:0e:5c:ab:32:4d:24:72:90:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Jul 13 12:37:58 2025 GMT Not After : Jul 12 12:42:58 2026 GMT Subject: CN=01324FC4EFBFB8D287B3AEB124682FB437FF100D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:36:f3:8f:89:69:24:57:39:40:36:29:d1: 7c:4d:de:6f:0c:78:39:07:e1:b9:97:10:c1:73:98: d9:70:fa:1f:6f:65:5e:50:e2:75:11:cd:0f:ec:00: 66:e5:6c:99:60:08:73:dd:7a:c5:57:f8:7f:a1:b1: 88:b4:b1:7f:17:56:af:3d:96:23:0e:48:01:c9:d3: e6:96:5d:3d:0c:15:ce:40:de:f2:4c:b5:ec:c9:50: f8:4a:52:ad:1b:e8:2e:0c:64:8c:1d:16:57:1d:ad: eb:fd:f5:9c:38:ec:92:cb:68:33:e8:0d:7b:cb:f3: 7f:66:83:11:19:2b:f9:36:d1:99:72:bd:04:36:7e: 7e:10:28:bc:94:de:f2:bc:ea:d5:74:2e:2e:de:fb: 62:33:29:9c:f6:c1:19:ec:80:99:d2:c6:3d:a2:b8: 88:75:55:a0:83:82:d7:bb:e4:16:7f:cd:d4:46:f3: 0b:a5:22:98:2e:87:a4:84:a0:74:a9:d3:88:df:17: f6:ce:84:b5:72:b5:1f:80:ac:76:37:4c:1f:90:fb: 32:7e:bb:b7:94:97:75:2c:3f:35:3f:c9:cf:2a:b5: df:dd:c8:aa:8d:79:40:be:0d:b0:16:95:da:d3:7a: ff:70:f7:a4:8d:9b:73:63:13:3e:c8:3f:20:08:0b: 46:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:32:4F:C4:EF:BF:B8:D2:87:B3:AE:B1:24:68:2F:B4:37:FF:10:0D X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d680:6::/48 Signature Algorithm: sha256WithRSAEncryption cd:48:48:ad:21:55:ae:c8:f0:74:bf:ff:78:43:2f:87:f8:92: 4e:6a:c3:1b:ee:ca:72:4c:6e:aa:d9:8b:7c:b2:c8:2c:34:45: 3b:2c:3b:98:28:4d:96:8f:36:cd:9e:5d:f3:be:3a:71:e8:48: 84:1d:36:76:23:0d:62:91:ce:07:1e:1d:9e:7a:cb:6c:7e:0f: db:22:15:20:c9:6b:f3:72:96:a1:37:fe:e6:48:e5:ce:97:63: a0:89:e6:c1:6d:cd:55:bc:3f:38:ba:45:16:3c:01:46:eb:4d: c7:4f:0b:cd:8a:fc:42:0a:0e:f8:93:1b:f8:1c:2e:4b:48:0a: c4:b8:f7:90:99:dd:e3:a8:1a:d9:3d:25:5c:e8:b0:e7:90:bd: e3:e9:07:52:62:ae:46:fa:29:73:b6:f5:4a:0d:b6:f2:88:a5: 19:d4:98:62:04:1a:92:23:6a:eb:2e:50:f3:30:3f:c5:2d:c5: 45:02:04:54:ca:c7:9c:11:73:e6:aa:1d:f9:b5:2b:02:3b:f7: 45:86:88:4a:5a:46:7b:02:c2:e2:55:a4:e6:a9:ec:08:27:5b: ee:19:58:d4:40:df:45:79:0e:d1:59:fd:fc:52:30:46:79:01: de:05:9b:d4:80:b7:03:5e:b7:42:e5:2a:b4:62:17:ff:ad:63: 69:51:76:c6 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUBHJ0+3cE9FZo2s4OXKsyTSRykHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA3MTMxMjM3NThaFw0yNjA3MTIxMjQyNThaMDMxMTAvBgNV BAMTKDAxMzI0RkM0RUZCRkI4RDI4N0IzQUVCMTI0NjgyRkI0MzdGRjEwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcTbzj4lpJFc5QDYp0XxN3m8M eDkH4bmXEMFzmNlw+h9vZV5Q4nURzQ/sAGblbJlgCHPdesVX+H+hsYi0sX8XVq89 liMOSAHJ0+aWXT0MFc5A3vJMtezJUPhKUq0b6C4MZIwdFlcdrev99Zw47JLLaDPo DXvL839mgxEZK/k20ZlyvQQ2fn4QKLyU3vK86tV0Li7e+2IzKZz2wRnsgJnSxj2i uIh1VaCDgte75BZ/zdRG8wulIpguh6SEoHSp04jfF/bOhLVytR+ArHY3TB+Q+zJ+ u7eUl3UsPzU/yc8qtd/dyKqNeUC+DbAWldrTev9w96SNm3NjEz7IPyAIC0azAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUATJPxO+/uNKHs66xJGgvtDf/EA0wHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04 MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADWgAAGMA0G CSqGSIb3DQEBCwUAA4IBAQDNSEitIVWuyPB0v/94Qy+H+JJOasMb7spyTG6q2Yt8 ssgsNEU7LDuYKE2WjzbNnl3zvjpx6EiEHTZ2Iw1ikc4HHh2eestsfg/bIhUgyWvz cpahN/7mSOXOl2OgiebBbc1VvD84ukUWPAFG603HTwvNivxCCg74kxv4HC5LSArE uPeQmd3jqBrZPSVc6LDnkL3j6QdSYq5G+ilztvVKDbbyiKUZ1JhiBBqSI2rrLlDz MD/FLcVFAgRUysecEXPmqh35tSsCO/dFhohKWkZ7AsLiVaTmqewIJ1vuGVjUQN9F eQ7RWf38UjBGeQHeBZvUgLcDXrdC5Sq0Yhf/rWNpUXbG -----END CERTIFICATE-----Generated at Mon Oct 27 17:18:47 2025 by rpki-client