$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: ShZcfvOuL7hhFcin6d6C9YZIwo2zOBT3B5csjg2tV64= Subject key identifier: 83:35:8B:10:34:28:B9:A6:83:12:89:94:E9:C6:02:81:98:4A:23:B5 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 185769E82560F3B8AEFEBEB23B84D405A94DE98D Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 10 Jul 2025 20:00:03 +0000 ROA not before: Thu 10 Jul 2025 19:55:03 +0000 ROA not after: Thu 09 Jul 2026 20:00:03 +0000 asID: 147137 IP address blocks: 2400:46a0:11::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:57:69:e8:25:60:f3:b8:ae:fe:be:b2:3b:84:d4:05:a9:4d:e9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 10 19:55:03 2025 GMT Not After : Jul 9 20:00:03 2026 GMT Subject: CN=83358B103428B9A683128994E9C60281984A23B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:ab:6f:01:f4:aa:93:f2:ba:d5:88:cf:44: 17:48:93:7a:18:b8:7b:b4:b9:e0:81:3e:8b:4b:41: 8d:94:76:b8:c5:9a:d2:16:1c:6b:aa:dd:a6:44:5c: 82:3a:83:dc:97:dc:6c:9d:d2:cf:4d:bb:14:09:c7: f4:4d:d6:64:56:30:c4:93:e7:8e:04:44:fd:90:a3: 83:6c:f4:f9:8e:38:97:42:fc:53:19:dd:c0:31:f2: 03:e0:33:34:91:ec:f1:3a:1d:33:be:2c:04:b5:cd: 9c:a0:59:f2:df:19:e2:b3:9d:c2:55:f2:c9:72:07: aa:d1:ea:9c:0d:5b:b5:cb:48:d1:58:15:d5:72:fa: 04:6c:03:d8:3d:93:b7:a7:60:e9:ee:22:94:94:d9: 91:aa:5b:0f:46:5d:20:04:81:e5:0e:4d:18:64:bf: 9b:98:d8:8f:5a:3b:10:ff:76:dd:63:24:db:f4:06: c4:cd:cc:3a:e6:7f:6a:c4:99:a4:ac:29:81:b3:a9: a6:ac:6e:d2:43:48:a1:0f:6b:3c:01:21:50:b6:de: 28:ef:85:bc:d7:33:ee:4a:a4:a9:da:31:82:26:48: fe:51:89:f4:59:32:b3:7e:92:50:2e:ea:34:70:0e: e1:e3:c9:e9:31:65:26:66:9c:da:c0:94:e0:fc:5d: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:35:8B:10:34:28:B9:A6:83:12:89:94:E9:C6:02:81:98:4A:23:B5 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31313a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:11::/48 Signature Algorithm: sha256WithRSAEncryption 9a:47:2c:e7:63:b3:c8:7f:b6:da:3b:d9:f4:22:da:98:e8:8e: ae:dd:cd:2e:e2:03:c7:ca:eb:24:ff:ec:b5:d3:12:af:be:d4: 71:e4:56:d5:94:c4:39:d8:15:f4:c5:55:4c:1a:23:ee:75:98: 01:27:a3:8b:dd:8c:af:eb:89:f9:ca:b6:95:1c:c9:4d:d9:0c: 3a:15:a7:c7:59:18:30:5d:47:63:6f:c3:88:43:19:11:19:ff: 18:b3:5a:c6:ff:9a:1a:57:8c:f4:8d:1c:70:1e:32:1f:c1:1a: 6e:33:3b:8b:91:b7:6e:f9:71:a5:43:53:d7:1f:c0:91:d9:1e: db:92:1c:1e:1f:3f:a2:e1:d8:ba:f0:0b:99:d2:dc:e8:6f:18: 35:a5:ea:2a:d0:62:f8:dc:9e:06:a0:2b:4c:8a:4e:85:f5:68: 2a:26:3b:38:b7:b8:b0:d6:b2:d0:12:01:80:22:a8:91:6f:a7: 09:54:17:cb:f2:49:13:c7:2c:2d:d2:65:08:e3:f3:c1:57:71: b7:5d:07:93:ef:c4:f8:83:4c:4c:6a:b5:ce:59:d5:c6:e7:4d: 9f:db:09:90:74:7a:76:b0:37:24:48:5b:92:04:19:7a:52:ce: d0:ae:81:69:0c:e6:74:f9:ed:40:b8:b4:a8:93:af:06:e1:d7: eb:a0:a4:ec -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGFdp6CVg87iu/r6yO4TUBalN6Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTAxOTU1MDNaFw0yNjA3MDkyMDAwMDNaMDMxMTAvBgNV BAMTKDgzMzU4QjEwMzQyOEI5QTY4MzEyODk5NEU5QzYwMjgxOTg0QTIzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCKtvAfSqk/K61YjPRBdIk3oY uHu0ueCBPotLQY2UdrjFmtIWHGuq3aZEXII6g9yX3Gyd0s9NuxQJx/RN1mRWMMST 544ERP2Qo4Ns9PmOOJdC/FMZ3cAx8gPgMzSR7PE6HTO+LAS1zZygWfLfGeKzncJV 8slyB6rR6pwNW7XLSNFYFdVy+gRsA9g9k7enYOnuIpSU2ZGqWw9GXSAEgeUOTRhk v5uY2I9aOxD/dt1jJNv0BsTNzDrmf2rEmaSsKYGzqaasbtJDSKEPazwBIVC23ijv hbzXM+5KpKnaMYImSP5RifRZMrN+klAu6jRwDuHjyekxZSZmnNrAlOD8XdorAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUgzWLEDQouaaDEomU6cYCgZhKI7UwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA ETANBgkqhkiG9w0BAQsFAAOCAQEAmkcs52OzyH+22jvZ9CLamOiOrt3NLuIDx8rr JP/stdMSr77UceRW1ZTEOdgV9MVVTBoj7nWYASeji92Mr+uJ+cq2lRzJTdkMOhWn x1kYMF1HY2/DiEMZERn/GLNaxv+aGleM9I0ccB4yH8EabjM7i5G3bvlxpUNT1x/A kdke25IcHh8/ouHYuvALmdLc6G8YNaXqKtBi+NyeBqArTIpOhfVoKiY7OLe4sNay 0BIBgCKokW+nCVQXy/JJE8csLdJlCOPzwVdxt10Hk+/E+INMTGq1zlnVxudNn9sJ kHR6drA3JEhbkgQZelLO0K6BaQzmdPntQLi0qJOvBuHX66Ck7A== -----END CERTIFICATE-----Generated at Wed Nov 5 13:15:53 2025 by rpki-client