$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa File: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (raw, json) Hash identifier: k78QygJvZC5uoGv2K0v+mQ5YwQ0X8MznZdn5hmtLPD8= Subject key identifier: E3:5A:59:A4:CD:A7:C7:9A:86:41:0F:02:C2:2E:3E:28:14:4A:49:DA Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Certificate serial: 444F155EA5EE6CD228908FB390EA2B4C9E6761A0 Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa Signing time: Thu 10 Jul 2025 04:02:23 +0000 ROA not before: Thu 10 Jul 2025 03:57:23 +0000 ROA not after: Thu 09 Jul 2026 04:02:23 +0000 asID: 133827 IP address blocks: 2404:a640:113::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 14:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4f:15:5e:a5:ee:6c:d2:28:90:8f:b3:90:ea:2b:4c:9e:67:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Validity Not Before: Jul 10 03:57:23 2025 GMT Not After : Jul 9 04:02:23 2026 GMT Subject: CN=E35A59A4CDA7C79A86410F02C22E3E28144A49DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:cc:ca:1c:c2:a3:a5:28:b6:50:40:55:dd: ba:ae:e3:8a:a2:5f:f2:1c:c6:a0:43:85:a9:5e:ba: 19:aa:df:f0:2c:28:f7:42:a6:01:46:c8:7c:66:eb: 6b:2b:d5:01:7a:79:d6:a5:38:ee:18:28:c1:68:33: 96:e0:91:30:ec:0f:54:73:9f:d9:9a:5e:15:d6:eb: 9a:b8:b9:25:77:c0:db:a6:33:bf:0b:05:6a:3b:6f: 0a:99:52:df:77:6e:9e:80:dc:3d:e9:a1:9b:f5:bb: 18:57:a2:09:ef:ed:c2:86:f1:c5:a0:47:cc:34:4c: b8:4c:f0:ad:84:7b:44:c7:62:b7:38:a5:33:2d:e4: c4:5a:64:30:fb:1e:0e:0d:13:36:83:b0:c7:34:f5: b3:91:e3:21:a5:62:c7:fe:60:98:2c:8a:9d:78:71: 19:bd:c3:da:0d:0e:91:3c:d0:77:f6:89:5d:fe:98: 4e:61:95:1b:25:ca:c1:c3:66:bc:f7:79:73:46:1f: ba:c4:c9:30:07:99:35:90:c6:2f:63:ff:10:6b:38: 31:57:a3:88:b5:c1:44:6e:19:6c:4c:a2:33:c6:76: 49:96:1f:e3:27:a5:78:66:d1:c7:98:fc:5c:f2:fb: f3:68:41:57:d0:e7:1e:02:5e:89:6e:74:72:43:08: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5A:59:A4:CD:A7:C7:9A:86:41:0F:02:C2:2E:3E:28:14:4A:49:DA X509v3 Authority Key Identifier: keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a640:113::/48 Signature Algorithm: sha256WithRSAEncryption 4c:d0:f9:ae:6d:cd:46:fb:2e:ff:9a:76:22:46:e8:d7:35:6d: d4:99:df:e8:e5:67:c2:b6:a4:22:ca:03:cd:69:81:a0:54:b0: 45:4e:50:68:27:0b:b7:8c:62:a8:bf:f9:79:2b:8a:78:f0:5b: 3e:6c:ea:22:43:d7:0f:7d:a0:55:f3:5b:4e:e2:d1:4a:e7:41: c9:f4:da:72:d3:5e:42:01:61:b5:3b:e4:57:66:8a:84:7a:3d: e0:75:3b:a5:89:4c:d1:61:5f:61:a5:57:4d:29:b1:b7:60:13: 36:99:5b:16:16:3b:be:3a:d4:97:c2:70:02:b0:9f:f1:54:51: b0:f5:fe:96:46:c1:19:cc:ed:f6:e7:16:63:f1:45:fe:64:2d: e8:29:32:9d:9c:1c:bf:5b:32:a1:b8:09:0b:bb:6f:2b:4d:54: e1:79:10:81:e1:16:12:87:0a:ef:e3:6b:af:d2:59:cf:4a:9a: 38:1f:5c:37:de:67:52:ad:bb:0f:7f:91:fa:1b:1c:f2:9d:fb: 69:f4:cb:45:4f:2b:3c:04:a0:67:ce:45:3e:4d:8b:b5:45:a1: ca:0f:2c:46:d6:40:76:a1:aa:7a:be:5f:5e:b6:5a:58:02:45: ec:95:11:94:01:98:04:35:5f:6e:60:f4:93:95:c5:58:6f:13: 2f:8a:1c:07 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIURE8VXqXubNIokI+zkOorTJ5nYaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1 NjlGODM2RjAeFw0yNTA3MTAwMzU3MjNaFw0yNjA3MDkwNDAyMjNaMDMxMTAvBgNV BAMTKEUzNUE1OUE0Q0RBN0M3OUE4NjQxMEYwMkMyMkUzRTI4MTQ0QTQ5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTMzKHMKjpSi2UEBV3bqu44qi X/IcxqBDhaleuhmq3/AsKPdCpgFGyHxm62sr1QF6edalOO4YKMFoM5bgkTDsD1Rz n9maXhXW65q4uSV3wNumM78LBWo7bwqZUt93bp6A3D3poZv1uxhXognv7cKG8cWg R8w0TLhM8K2Ee0THYrc4pTMt5MRaZDD7Hg4NEzaDsMc09bOR4yGlYsf+YJgsip14 cRm9w9oNDpE80Hf2iV3+mE5hlRslysHDZrz3eXNGH7rEyTAHmTWQxi9j/xBrODFX o4i1wURuGWxMojPGdkmWH+MnpXhm0ceY/Fzy+/NoQVfQ5x4CXoludHJDCN/XAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU41pZpM2nx5qGQQ8Cwi4+KBRKSdowHwYDVR0j BBgwFoAUDOannVPYKfKlViNnbo0qmlafg28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTk5MDEyNS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC8wQ0U2QTc5RDUz RDgyOUYyQTU1NjIzNjc2RThEMkE5QTU2OUY4MzZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1NjlG ODM2Ri5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h Yzg2LTFjM2JjMzE1YmFkNi8wLzMyMzQzMDM0M2E2MTM2MzQzMDNhMzEzMTMzM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMzMzgzMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJASm QAETMA0GCSqGSIb3DQEBCwUAA4IBAQBM0Pmubc1G+y7/mnYiRujXNW3Umd/o5WfC tqQiygPNaYGgVLBFTlBoJwu3jGKov/l5K4p48Fs+bOoiQ9cPfaBV81tO4tFK50HJ 9Npy015CAWG1O+RXZoqEej3gdTuliUzRYV9hpVdNKbG3YBM2mVsWFju+OtSXwnAC sJ/xVFGw9f6WRsEZzO325xZj8UX+ZC3oKTKdnBy/WzKhuAkLu28rTVTheRCB4RYS hwrv42uv0lnPSpo4H1w33mdSrbsPf5H6Gxzynftp9MtFTys8BKBnzkU+TYu1RaHK DyxG1kB2oap6vl9etlpYAkXslRGUAZgENV9uYPSTlcVYbxMvihwH -----END CERTIFICATE-----Generated at Sat Aug 9 14:20:00 2025 by rpki-client