$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa File: 323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa (raw, json) Hash identifier: OgrUIPRU4hlKsLPwGuGpe/ivo5VWBIS7QYpm7Sxho2I= Subject key identifier: BF:12:DA:53:F3:00:2E:12:A1:B0:76:6B:FF:A5:00:CB:96:BD:91:F2 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 0FAB4EBDB3E61F56F09E63E53CDDF4835241E17C Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa Signing time: Thu 10 Jul 2025 20:00:04 +0000 ROA not before: Thu 10 Jul 2025 19:55:04 +0000 ROA not after: Thu 09 Jul 2026 20:00:04 +0000 asID: 147137 IP address blocks: 2400:46a0:16::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ab:4e:bd:b3:e6:1f:56:f0:9e:63:e5:3c:dd:f4:83:52:41:e1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jul 10 19:55:04 2025 GMT Not After : Jul 9 20:00:04 2026 GMT Subject: CN=BF12DA53F3002E12A1B0766BFFA500CB96BD91F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:41:22:e4:55:84:4e:dc:b1:33:67:06:c2: f8:96:47:f8:15:e2:94:60:e0:b8:68:26:28:6d:ba: 75:41:05:cc:78:58:a2:31:66:28:08:78:b8:b2:47: a8:ca:c0:ac:51:da:d9:dc:09:e6:52:3a:e2:44:e8: 05:18:8c:f7:5f:54:87:1d:b0:f5:77:98:e3:c4:ab: c9:7d:57:2f:13:4c:e9:ea:33:a3:f7:fd:ff:94:aa: ab:f7:df:d9:23:9c:41:a4:5c:74:e0:95:a5:75:b0: 1b:32:63:0d:09:c1:31:59:36:ae:de:a1:71:ec:af: fe:b1:65:37:8c:c1:de:a4:90:9e:b5:27:a2:a4:ca: da:04:64:5d:f3:3c:62:d2:a4:4f:a1:47:18:27:fb: 43:23:55:32:27:51:94:04:38:a5:46:19:f4:d7:10: e2:60:2a:91:bd:c9:42:c7:34:0c:05:ab:28:87:f9: 44:b2:06:be:e7:f9:46:dd:e5:80:fd:53:35:0e:be: e6:a4:aa:13:44:fe:40:e7:0e:eb:7b:02:e1:af:ac: 46:7e:ad:27:bb:de:23:4d:aa:db:9a:b0:34:68:02: fa:7a:aa:58:93:b2:0c:9d:29:85:0a:0f:09:be:3d: 66:26:79:06:c0:21:5e:d9:2e:fc:7e:40:ea:30:af: 0a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:12:DA:53:F3:00:2E:12:A1:B0:76:6B:FF:A5:00:CB:96:BD:91:F2 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a31363a3a2f34382d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0:16::/48 Signature Algorithm: sha256WithRSAEncryption 1f:c5:b2:da:d9:40:c4:cf:dc:f9:27:51:b3:af:b4:d7:a6:8f: 76:a9:3d:43:60:a5:81:b9:b5:e5:44:2e:aa:cb:36:89:23:6d: 7b:ae:a8:5a:e1:28:87:46:8a:28:c9:37:3b:a6:5a:ae:e6:79: 71:24:47:6a:9f:58:dc:00:62:e2:49:28:93:50:b9:f0:df:28: 67:f1:36:ff:08:d2:45:3d:99:58:59:36:21:33:a8:76:d6:84: e4:2b:1c:67:6c:55:08:e0:9b:3c:2d:5d:12:d3:f7:42:b7:8e: 6c:51:f1:18:bd:e3:82:ad:58:1e:b0:54:8b:29:0b:1a:0d:89: e1:3c:fe:93:19:8b:ad:30:66:ea:4b:3f:c8:c2:fd:eb:b2:88: 30:3f:d4:18:dc:bc:7a:64:9c:6c:3f:d5:a3:31:c3:ff:ab:06: 55:93:d6:33:e4:0c:e1:f7:a2:1a:31:29:ea:24:2c:b0:16:e9: f6:20:f4:8b:c1:93:53:c4:3c:61:af:24:b4:84:93:73:5d:c8: 82:4e:ed:86:93:30:ec:22:0d:eb:e7:3a:4b:b6:19:4d:58:c9: 02:43:7c:aa:87:a9:ce:5e:4f:61:a1:b1:ca:5c:60:5c:a5:38: e0:1b:c2:33:90:d5:c0:de:7e:ab:fc:94:d0:9f:1f:dc:f6:67: ac:e0:d9:41 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUD6tOvbPmH1bwnmPlPN30g1JB4XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNTA3MTAxOTU1MDRaFw0yNjA3MDkyMDAwMDRaMDMxMTAvBgNV BAMTKEJGMTJEQTUzRjMwMDJFMTJBMUIwNzY2QkZGQTUwMENCOTZCRDkxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj2EEi5FWETtyxM2cGwviWR/gV 4pRg4LhoJihtunVBBcx4WKIxZigIeLiyR6jKwKxR2tncCeZSOuJE6AUYjPdfVIcd sPV3mOPEq8l9Vy8TTOnqM6P3/f+Uqqv339kjnEGkXHTglaV1sBsyYw0JwTFZNq7e oXHsr/6xZTeMwd6kkJ61J6KkytoEZF3zPGLSpE+hRxgn+0MjVTInUZQEOKVGGfTX EOJgKpG9yULHNAwFqyiH+USyBr7n+Ubd5YD9UzUOvuakqhNE/kDnDut7AuGvrEZ+ rSe73iNNqtuasDRoAvp6qliTsgydKYUKDwm+PWYmeQbAIV7ZLvx+QOowrwo5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUvxLaU/MALhKhsHZr/6UAy5a9kfIwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhMzEzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQARqAA FjANBgkqhkiG9w0BAQsFAAOCAQEAH8Wy2tlAxM/c+SdRs6+016aPdqk9Q2Clgbm1 5UQuqss2iSNte66oWuEoh0aKKMk3O6ZaruZ5cSRHap9Y3ABi4kkok1C58N8oZ/E2 /wjSRT2ZWFk2ITOodtaE5CscZ2xVCOCbPC1dEtP3QreObFHxGL3jgq1YHrBUiykL Gg2J4Tz+kxmLrTBm6ks/yML967KIMD/UGNy8emScbD/VozHD/6sGVZPWM+QM4fei GjEp6iQssBbp9iD0i8GTU8Q8Ya8ktISTc13Igk7thpMw7CIN6+c6S7YZTVjJAkN8 qoepzl5PYaGxylxgXKU44BvCM5DVwN5+q/yU0J8f3PZnrODZQQ== -----END CERTIFICATE-----Generated at Wed Nov 5 14:55:17 2025 by rpki-client