$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa File: 323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa (raw, json) Hash identifier: wQjNwIsUjXh8bpojYORa3AyC+GEAakMlxxX92xWzmRQ= Subject key identifier: 5A:BA:08:D6:28:24:6B:AD:E3:F6:0D:6A:EF:95:FA:B2:0A:84:05:34 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 3D3508C985FA8644BEDC2ECB25D51DF49CE7DC17 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa Signing time: Sun 03 Aug 2025 08:00:01 +0000 ROA not before: Sun 03 Aug 2025 07:55:01 +0000 ROA not after: Sun 02 Aug 2026 08:00:01 +0000 asID: 140423 IP address blocks: 2406:20c0:2000::/35 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 03:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:35:08:c9:85:fa:86:44:be:dc:2e:cb:25:d5:1d:f4:9c:e7:dc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Aug 3 07:55:01 2025 GMT Not After : Aug 2 08:00:01 2026 GMT Subject: CN=5ABA08D628246BADE3F60D6AEF95FAB20A840534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:96:3a:fd:c3:3f:73:88:0b:1f:a5:ea:92: 19:5e:b3:24:8d:44:9c:7a:5a:0c:5d:40:16:39:12: 84:e3:61:c1:99:2b:96:cf:97:6a:8f:25:04:cb:c5: cc:75:56:6e:02:69:e2:d2:c4:97:c6:b7:ff:d7:46: 66:8e:39:15:7b:07:da:bc:9e:d7:f1:3e:b9:e2:de: 15:31:53:cb:13:99:80:e1:08:c3:05:66:5f:8c:a9: 61:81:2f:6d:f0:72:d7:ca:28:46:2b:40:c6:1c:1a: f0:51:65:eb:c6:ba:20:d6:b4:3a:27:16:ef:4f:59: a9:a5:34:6e:ff:5e:7b:52:83:73:e9:c4:66:f3:28: d1:64:8e:b5:4f:c3:f0:ee:23:50:34:59:47:03:25: 95:b5:bc:c4:61:a9:f9:f2:22:d4:c5:93:3f:2d:d2: 72:8b:b9:26:2d:74:e3:a5:8b:90:2c:bf:d9:b7:3e: fb:06:e4:f0:84:77:e0:81:48:af:ac:c5:0e:9a:c2: 2d:7a:f5:7a:ac:fa:1d:e4:53:4a:a5:ec:4f:94:6f: 29:87:67:b5:e5:a1:0f:1a:fe:e1:25:29:bf:3a:7e: 23:7c:78:3b:6f:27:c6:05:87:64:4c:a2:4a:cc:f0: 55:ee:5a:1e:b4:27:62:54:60:11:94:c2:2d:a5:71: 4c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:08:D6:28:24:6B:AD:E3:F6:0D:6A:EF:95:FA:B2:0A:84:05:34 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33352d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:2000::/35 Signature Algorithm: sha256WithRSAEncryption 1b:23:67:a1:f1:5e:2f:f6:8c:6d:29:ce:50:ff:8e:9f:a3:d8: 2b:a1:fd:da:74:33:36:5d:fb:02:55:76:83:51:05:e0:99:7c: 71:d6:48:ce:bd:84:a2:37:ce:f9:83:be:07:09:23:cc:aa:cb: f1:91:a7:26:b6:b3:2c:13:4f:52:a6:bc:82:df:4b:c2:9f:da: fc:80:6a:42:fa:8f:9d:58:c6:5f:01:68:56:4a:ac:43:c5:79: 12:b2:e0:69:f6:71:8d:49:71:2a:55:ca:b6:c6:e5:24:d7:66: 06:f3:aa:9b:49:66:68:7b:dd:36:4b:2c:73:e5:b4:5f:d7:33: 15:b8:92:fa:d1:73:d5:39:e2:16:89:9f:6a:9f:54:de:fd:72: 63:c6:19:3d:d2:f0:32:db:ed:ee:03:6c:4e:de:36:9c:4d:35: da:d5:61:4f:4d:6e:63:fd:e4:bd:e8:21:a3:13:23:08:33:cf: 26:bd:81:4d:6d:88:2d:db:7d:bb:c4:ff:76:f3:ee:29:26:22: f2:32:72:49:e9:ec:1f:47:de:c9:02:16:6a:04:66:81:52:4d: 7b:bd:56:e8:34:d5:80:8d:46:1b:04:7d:57:9c:be:2b:22:29: 91:90:c8:eb:f5:47:da:7b:d3:9c:aa:a8:16:8c:e4:9b:ae:4f: 99:bd:ef:cd -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUPTUIyYX6hkS+3C7LJdUd9Jzn3BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTA4MDMwNzU1MDFaFw0yNjA4MDIwODAwMDFaMDMxMTAvBgNV BAMTKDVBQkEwOEQ2MjgyNDZCQURFM0Y2MEQ2QUVGOTVGQUIyMEE4NDA1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKv5Y6/cM/c4gLH6XqkhlesySN RJx6WgxdQBY5EoTjYcGZK5bPl2qPJQTLxcx1Vm4CaeLSxJfGt//XRmaOORV7B9q8 ntfxPrni3hUxU8sTmYDhCMMFZl+MqWGBL23wctfKKEYrQMYcGvBRZevGuiDWtDon Fu9PWamlNG7/XntSg3PpxGbzKNFkjrVPw/DuI1A0WUcDJZW1vMRhqfnyItTFkz8t 0nKLuSYtdOOli5Asv9m3PvsG5PCEd+CBSK+sxQ6awi169Xqs+h3kU0ql7E+UbymH Z7XloQ8a/uElKb86fiN8eDtvJ8YFh2RMokrM8FXuWh60J2JUYBGUwi2lcUwVAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUWroI1igka63j9g1q75X6sgqEBTQwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzIzMDMwMzAz YTNhMmYzMzM1MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk BiDAIDANBgkqhkiG9w0BAQsFAAOCAQEAGyNnofFeL/aMbSnOUP+On6PYK6H92nQz Nl37AlV2g1EF4Jl8cdZIzr2EojfO+YO+BwkjzKrL8ZGnJrazLBNPUqa8gt9Lwp/a /IBqQvqPnVjGXwFoVkqsQ8V5ErLgafZxjUlxKlXKtsblJNdmBvOqm0lmaHvdNkss c+W0X9czFbiS+tFz1TniFomfap9U3v1yY8YZPdLwMtvt7gNsTt42nE012tVhT01u Y/3kveghoxMjCDPPJr2BTW2ILdt9u8T/dvPuKSYi8jJySensH0feyQIWagRmgVJN e71W6DTVgI1GGwR9V5y+KyIpkZDI6/VH2nvTnKqoFozkm65Pmb3vzQ== -----END CERTIFICATE-----Generated at Sat Aug 9 20:40:44 2025 by rpki-client