$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f33322d3332203d3e20313432333339.roa File: 323430373a613563303a3a2f33322d3332203d3e20313432333339.roa (raw, json) Hash identifier: 7KHGCRWZOjkL1VAY0QoUCT7SgQgusxdAgE4yokAO21g= Subject key identifier: 51:47:21:93:3A:B1:59:09:74:27:78:E6:D0:87:48:8E:D2:17:F6:69 Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45 Certificate serial: 2C52530121F375113A48D987E462E28AD7ACF035 Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f33322d3332203d3e20313432333339.roa Signing time: Fri 25 Jul 2025 18:00:00 +0000 ROA not before: Fri 25 Jul 2025 17:55:00 +0000 ROA not after: Fri 24 Jul 2026 18:00:00 +0000 asID: 142339 IP address blocks: 2407:a5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:52:53:01:21:f3:75:11:3a:48:d9:87:e4:62:e2:8a:d7:ac:f0:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45 Validity Not Before: Jul 25 17:55:00 2025 GMT Not After : Jul 24 18:00:00 2026 GMT Subject: CN=514721933AB15909742778E6D087488ED217F669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:87:3d:aa:1e:a8:b8:be:8c:2b:4a:99:1c: 1a:78:c9:59:d7:ee:0a:81:02:ad:f7:55:f8:e8:62: fb:bb:f6:54:7d:64:6d:18:c2:b3:a6:65:30:70:eb: 37:7b:3e:8b:01:f7:74:d6:5f:d9:36:4f:42:5b:8f: 45:cb:0d:c9:f6:95:21:a8:d6:11:b6:0d:f0:28:31: f1:c3:24:41:76:92:88:c9:c1:c8:ca:d5:52:b2:aa: 92:86:2b:17:af:c8:8a:40:be:bf:45:d3:de:37:88: 89:56:1c:e7:41:57:87:84:c7:f8:8d:e4:57:2d:40: 78:b1:6f:e5:76:a5:26:a6:82:96:6f:24:4f:af:01: 79:1d:8e:a3:f3:da:f9:4b:29:86:26:e2:47:2f:f2: e1:27:bd:13:e3:7f:58:4b:9f:4b:ea:7e:29:ec:90: 48:ac:57:97:96:40:49:5c:99:74:17:55:54:6c:fd: e5:e5:54:32:ef:e9:8c:c9:b3:15:c8:57:0b:39:f7: 2d:9f:e8:fc:19:28:54:97:97:4a:4f:73:fc:54:34: 7d:e4:f0:44:99:bc:8c:34:2f:60:a5:ff:80:77:4c: 91:4d:8d:4c:7e:c6:12:24:71:d9:c5:dc:8e:3e:90: 0c:e4:7c:b4:d1:8c:38:d0:b5:52:00:41:ee:09:b3: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:47:21:93:3A:B1:59:09:74:27:78:E6:D0:87:48:8E:D2:17:F6:69 X509v3 Authority Key Identifier: keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/323430373a613563303a3a2f33322d3332203d3e20313432333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:a5c0::/32 Signature Algorithm: sha256WithRSAEncryption 98:6d:88:1a:44:d5:06:20:56:5c:68:40:c1:fe:1f:9e:f4:29: c0:bb:81:e4:ae:16:c3:44:78:06:b5:47:ec:55:bf:a5:cd:4c: 46:b3:ef:25:20:e2:1a:cf:7d:8d:de:84:1c:2e:10:51:3a:1e: 04:1f:83:c5:72:2c:a4:f4:8a:80:58:7d:e3:e6:50:41:ca:ce: 78:c6:d2:14:a8:6f:3c:6b:66:f0:2f:49:c9:3b:47:3e:42:b0: 06:96:45:e6:56:20:a9:77:d9:48:9f:19:83:01:7e:d4:18:71: 8c:87:59:a4:bd:92:56:e2:24:7f:77:45:f1:40:e7:0a:2b:f1: e3:03:1d:a6:1b:9b:d5:12:0e:c9:1c:41:3d:d3:77:b4:ce:99: c7:d9:5b:89:48:29:98:93:22:27:fa:38:8d:cb:0a:59:31:51: 5a:66:e7:be:83:d2:89:13:ae:f3:1d:d4:53:43:0d:8b:52:82: 24:3a:35:d1:30:de:46:0a:25:95:3f:ca:ed:5c:ed:55:14:c6: 53:b2:f3:28:ee:29:98:1a:6e:56:d5:04:08:0e:f5:fc:ea:37: e7:01:87:de:5a:bc:93:ea:d2:d3:d9:83:08:45:16:c7:e1:26: 84:ff:cd:63:66:8f:60:55:e4:97:09:43:89:43:8d:26:04:f3: 96:85:20:3e -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIULFJTASHzdRE6SNmH5GLiites8DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkw ODMwNUU0NTAeFw0yNTA3MjUxNzU1MDBaFw0yNjA3MjQxODAwMDBaMDMxMTAvBgNV BAMTKDUxNDcyMTkzM0FCMTU5MDk3NDI3NzhFNkQwODc0ODhFRDIxN0Y2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SYc9qh6ouL6MK0qZHBp4yVnX 7gqBAq33VfjoYvu79lR9ZG0YwrOmZTBw6zd7PosB93TWX9k2T0Jbj0XLDcn2lSGo 1hG2DfAoMfHDJEF2kojJwcjK1VKyqpKGKxevyIpAvr9F0943iIlWHOdBV4eEx/iN 5FctQHixb+V2pSamgpZvJE+vAXkdjqPz2vlLKYYm4kcv8uEnvRPjf1hLn0vqfins kEisV5eWQElcmXQXVVRs/eXlVDLv6YzJsxXIVws59y2f6PwZKFSXl0pPc/xUNH3k 8ESZvIw0L2Cl/4B3TJFNjUx+xhIkcdnF3I4+kAzkfLTRjDjQtVIAQe4JsxFzAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUUUchkzqxWQl0J3jm0IdIjtIX9mkwHwYDVR0j BBgwFoAUwk/YXR9JM4N3PSU+uzi+2QgwXkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTkyMDIxZS0zOTA0LTQxMTUtYWY1ZS0zZWRiNzEzYmFhMTQvMC9DMjRGRDg1RDFG NDkzMzgzNzczRDI1M0VCQjM4QkVEOTA4MzA1RTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI0RkQ4NUQxRjQ5MzM4Mzc3M0QyNTNFQkIzOEJFRDkwODMw NUU0NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExOTIwMjFlLTM5MDQtNDExNS1h ZjVlLTNlZGI3MTNiYWExNC8wLzMyMzQzMDM3M2E2MTM1NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMjMzMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHpcAwDQYJKoZI hvcNAQELBQADggEBAJhtiBpE1QYgVlxoQMH+H570KcC7geSuFsNEeAa1R+xVv6XN TEaz7yUg4hrPfY3ehBwuEFE6HgQfg8VyLKT0ioBYfePmUEHKznjG0hSobzxrZvAv Sck7Rz5CsAaWReZWIKl32UifGYMBftQYcYyHWaS9klbiJH93RfFA5wor8eMDHaYb m9USDskcQT3Td7TOmcfZW4lIKZiTIif6OI3LClkxUVpm576D0okTrvMd1FNDDYtS giQ6NdEw3kYKJZU/yu1c7VUUxlOy8yjuKZgablbVBAgO9fzqN+cBh95avJPq0tPZ gwhFFsfhJoT/zWNmj2BV5JcJQ4lDjSYE85aFID4= -----END CERTIFICATE-----Generated at Sat Aug 9 05:40:03 2025 by rpki-client