$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: 6h5ukYFuCno4f7DUxvLhYVLFCjOWP5SiTwkMYTzIF/4= Subject key identifier: A8:A8:3C:44:AB:2F:F2:51:BF:4C:05:41:8F:00:CA:C0:82:FD:E5:A6 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 37237BEFA9319023041BDD1131928553239945CE Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa Signing time: Sun 13 Jul 2025 14:00:02 +0000 ROA not before: Sun 13 Jul 2025 13:55:02 +0000 ROA not after: Sun 12 Jul 2026 14:00:02 +0000 asID: 153087 IP address blocks: 2404:97c0:2222::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:23:7b:ef:a9:31:90:23:04:1b:dd:11:31:92:85:53:23:99:45:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Jul 13 13:55:02 2025 GMT Not After : Jul 12 14:00:02 2026 GMT Subject: CN=A8A83C44AB2FF251BF4C05418F00CAC082FDE5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:34:4d:74:61:b2:9f:28:f9:bd:4c:2c:8a:a8: 8a:10:68:60:91:4b:c8:8f:1c:82:a2:8d:d9:c6:59: 57:bc:95:93:1a:0b:71:f5:57:ed:99:b0:5c:ec:c3: 09:81:b3:87:9a:4f:f3:a8:23:51:cb:1b:80:54:aa: 10:1e:51:1e:b4:6b:d8:1d:5c:36:37:23:f1:77:74: 28:3e:52:67:12:26:a8:ea:5e:7b:eb:54:ff:b3:40: 09:da:45:3b:4d:3a:86:12:20:ce:c7:80:0b:99:51: da:c2:79:12:e6:45:3b:02:8f:5d:16:b0:ee:4d:52: f9:91:dc:c4:05:a6:0b:c6:b6:88:f6:f8:6d:2a:96: 0e:3c:35:3d:b0:32:d3:6d:97:4a:bd:b7:20:bd:18: 8e:9b:2c:cf:fd:04:be:b7:e5:bb:d2:43:81:20:da: 67:5d:d3:73:cd:92:14:db:b3:5d:9a:f2:9e:43:1c: 1f:14:1d:67:2d:3e:b2:85:57:e4:df:35:c8:01:9b: db:c6:9b:82:41:89:06:b0:4b:21:02:05:c6:61:cc: fb:b0:db:4e:9c:34:08:32:a4:ef:5f:72:8f:7f:ab: ea:57:ec:6f:f8:35:39:b7:71:06:82:1b:72:71:ed: d3:ad:a7:f8:63:51:63:9a:4c:9c:02:66:72:23:81: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A8:3C:44:AB:2F:F2:51:BF:4C:05:41:8F:00:CA:C0:82:FD:E5:A6 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323232323a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2222::/48 Signature Algorithm: sha256WithRSAEncryption 19:40:4f:bc:17:f4:a1:54:db:5f:e1:e1:e6:84:a1:70:c9:f4: de:e7:b7:eb:4b:20:d3:53:b6:6a:e3:44:84:83:95:4a:7c:e4: f7:76:d6:45:98:a5:46:17:ec:34:0a:e1:1f:ef:05:68:1e:fd: 98:de:14:d0:a7:76:14:67:c9:28:51:c3:92:66:00:56:2e:cc: ad:41:5d:20:a6:7b:a1:db:0f:cc:53:b9:61:61:66:43:38:76: b6:37:50:ce:f6:5b:cf:05:84:36:15:c6:7c:35:fd:f5:96:66: e6:5e:96:20:b1:9c:de:b7:e6:12:7e:60:94:59:7c:d0:2a:bf: 2c:9e:6a:4b:fd:a0:d4:81:e5:4d:df:aa:bc:97:7c:d3:7c:62: 9c:1e:92:93:96:32:88:9d:82:4b:ce:f9:fd:50:bf:31:ef:fb: 1f:ae:cf:ce:85:bf:29:f4:43:44:f2:02:5c:b7:10:3d:f3:0c: 56:85:2c:f4:33:07:3b:e1:8a:42:45:83:cc:03:3c:c1:cd:75: 51:80:19:46:1b:f9:e0:23:93:18:eb:60:c3:1e:21:91:1e:d0: bb:3c:e7:32:b4:8d:ec:1b:c8:b1:ad:26:29:0d:50:45:e7:a9: d5:29:51:14:82:2e:2b:da:08:70:f5:eb:c0:52:2d:ba:46:08: a5:89:0a:a0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUNyN776kxkCMEG90RMZKFUyOZRc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTA3MTMxMzU1MDJaFw0yNjA3MTIxNDAwMDJaMDMxMTAvBgNV BAMTKEE4QTgzQzQ0QUIyRkYyNTFCRjRDMDU0MThGMDBDQUMwODJGREU1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqNE10YbKfKPm9TCyKqIoQaGCR S8iPHIKijdnGWVe8lZMaC3H1V+2ZsFzswwmBs4eaT/OoI1HLG4BUqhAeUR60a9gd XDY3I/F3dCg+UmcSJqjqXnvrVP+zQAnaRTtNOoYSIM7HgAuZUdrCeRLmRTsCj10W sO5NUvmR3MQFpgvGtoj2+G0qlg48NT2wMtNtl0q9tyC9GI6bLM/9BL635bvSQ4Eg 2mdd03PNkhTbs12a8p5DHB8UHWctPrKFV+TfNcgBm9vGm4JBiQawSyECBcZhzPuw 206cNAgypO9fco9/q+pX7G/4NTm3cQaCG3Jx7dOtp/hjUWOaTJwCZnIjgd8zAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUqKg8RKsv8lG/TAVBjwDKwIL95aYwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMyMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BJfAIiIwDQYJKoZIhvcNAQELBQADggEBABlAT7wX9KFU21/h4eaEoXDJ9N7nt+tL INNTtmrjRISDlUp85Pd21kWYpUYX7DQK4R/vBWge/ZjeFNCndhRnyShRw5JmAFYu zK1BXSCme6HbD8xTuWFhZkM4drY3UM72W88FhDYVxnw1/fWWZuZeliCxnN635hJ+ YJRZfNAqvyyeakv9oNSB5U3fqryXfNN8YpwekpOWMoidgkvO+f1QvzHv+x+uz86F vyn0Q0TyAly3ED3zDFaFLPQzBzvhikJFg8wDPMHNdVGAGUYb+eAjkxjrYMMeIZEe 0Ls85zK0jewbyLGtJikNUEXnqdUpURSCLivaCHD168BSLbpGCKWJCqA= -----END CERTIFICATE-----Generated at Thu Nov 6 00:40:57 2025 by rpki-client