$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa File: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (raw, json) Hash identifier: ksLRob3f5SU2gNY1LxPipDlSLyvRGBxMHRiqu2c9VRY= Subject key identifier: 18:E9:24:FE:6C:5F:DB:E1:38:D1:0D:8D:E4:35:76:1B:96:CA:25:25 Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 3BCEF49AE05C0E7E94623CFE3DA8C523B376935C Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa Signing time: Sun 06 Apr 2025 15:17:54 +0000 ROA not before: Sun 06 Apr 2025 15:12:54 +0000 ROA not after: Sun 05 Apr 2026 15:17:54 +0000 asID: 45725 IP address blocks: 2402:780:100::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ce:f4:9a:e0:5c:0e:7e:94:62:3c:fe:3d:a8:c5:23:b3:76:93:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Apr 6 15:12:54 2025 GMT Not After : Apr 5 15:17:54 2026 GMT Subject: CN=18E924FE6C5FDBE138D10D8DE435761B96CA2525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:11:43:b9:e6:bc:99:c9:52:cc:4b:9e:b6: f2:7c:cd:3c:c4:f0:91:37:df:70:45:83:fb:e3:a3: 67:24:7b:a2:a3:17:d7:fd:a0:e3:39:72:a7:f6:54: 11:a9:51:af:94:df:7f:95:13:76:80:b1:79:4b:80: 61:2b:ca:3f:36:99:df:27:8f:21:eb:20:05:a7:52: d7:3b:08:7d:96:7c:3e:07:43:d3:ba:8d:32:84:1b: b7:7f:a9:64:8b:a4:17:ea:e7:9e:e4:d3:ec:72:14: 09:b7:bd:87:0c:14:c4:3b:b6:b9:f1:a5:d9:2f:a3: ba:16:e4:7a:b7:2d:23:22:6e:a4:f3:1c:88:27:49: 79:06:86:ea:40:40:52:0a:51:25:65:30:31:87:07: 8e:c7:f3:d5:a8:f4:58:97:dc:b9:e7:4d:21:11:58: a1:c2:9e:dc:91:7e:78:0c:45:d8:45:d3:48:0b:69: 64:78:50:b7:60:db:a4:ae:28:e3:2f:46:e3:0d:0a: 4b:6e:08:d3:21:b0:0a:77:27:47:27:11:c0:ab:05: c0:50:c5:50:0b:90:2f:d0:8c:32:30:45:02:a5:e9: 1e:6d:6d:b9:03:ef:90:96:16:b8:10:de:e2:5d:c1: f2:dc:5e:0e:47:65:bf:e1:a0:f1:d7:02:6e:cd:2a: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:24:FE:6C:5F:DB:E1:38:D1:0D:8D:E4:35:76:1B:96:CA:25:25 X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:780:100::/40 Signature Algorithm: sha256WithRSAEncryption 62:c1:91:06:58:0f:c3:e2:f8:aa:c6:1f:07:5a:3d:b7:c5:4f: 96:a3:14:b7:a9:c7:f8:26:61:9a:1b:04:f8:aa:88:84:3b:2a: 12:10:33:fe:48:1f:7c:07:5e:dc:f8:d0:c9:3b:50:d9:1d:83: 80:e0:76:76:2e:08:fd:2b:79:aa:de:c2:54:b4:c8:8a:3f:4d: 48:cc:b9:80:5f:66:cc:cb:88:94:f2:a1:d5:da:50:f4:af:0b: da:b3:e1:9b:e2:85:8a:0c:15:ab:f7:fc:bc:40:a3:6e:c8:16: be:14:20:3f:be:a7:ac:fb:2c:0d:cf:d3:de:44:a2:a0:3f:3f: 67:e4:4c:ca:81:2e:88:b6:57:9c:b5:f3:0e:60:59:1d:71:30: c5:ee:4e:1f:32:93:08:fd:27:7c:09:6d:64:a8:8a:42:d3:b7: 02:43:60:4e:35:b7:9b:5c:c1:70:e7:3a:f7:1e:c9:b5:d7:47: 13:1c:3c:1e:bb:18:d4:d7:57:de:68:fa:9b:6a:b6:38:5f:ac: 47:24:ee:e0:85:fb:ea:c1:b9:2f:52:33:76:5d:0d:3b:b6:4d: 69:4b:8d:3b:b6:f5:4d:67:df:aa:7b:b7:d9:65:e8:e3:14:43: c4:48:1a:75:ab:e8:fb:3d:3a:69:0f:8c:7e:75:83:e6:5c:cd: ee:88:69:02 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUO870muBcDn6UYjz+PajFI7N2k1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNTA0MDYxNTEyNTRaFw0yNjA0MDUxNTE3NTRaMDMxMTAvBgNV BAMTKDE4RTkyNEZFNkM1RkRCRTEzOEQxMEQ4REU0MzU3NjFCOTZDQTI1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41RFDuea8mclSzEuetvJ8zTzE 8JE333BFg/vjo2cke6KjF9f9oOM5cqf2VBGpUa+U33+VE3aAsXlLgGEryj82md8n jyHrIAWnUtc7CH2WfD4HQ9O6jTKEG7d/qWSLpBfq557k0+xyFAm3vYcMFMQ7trnx pdkvo7oW5Hq3LSMibqTzHIgnSXkGhupAQFIKUSVlMDGHB47H89Wo9FiX3LnnTSER WKHCntyRfngMRdhF00gLaWR4ULdg26SuKOMvRuMNCktuCNMhsAp3J0cnEcCrBcBQ xVALkC/QjDIwRQKl6R5tbbkD75CWFrgQ3uJdwfLcXg5HZb/hoPHXAm7NKpPrAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUGOkk/mxf2+E40Q2N5DV2G5bKJSUwHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h NzJiLWVjMjczZjQzYmJjMi8wLzMyMzQzMDMyM2EzNzM4MzAzYTMxMzAzMDNhM2Ey ZjM0MzAyZDM0MzAyMDNkM2UyMDM0MzUzNzMyMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAkAgeAATAN BgkqhkiG9w0BAQsFAAOCAQEAYsGRBlgPw+L4qsYfB1o9t8VPlqMUt6nH+CZhmhsE +KqIhDsqEhAz/kgffAde3PjQyTtQ2R2DgOB2di4I/St5qt7CVLTIij9NSMy5gF9m zMuIlPKh1dpQ9K8L2rPhm+KFigwVq/f8vECjbsgWvhQgP76nrPssDc/T3kSioD8/ Z+RMyoEuiLZXnLXzDmBZHXEwxe5OHzKTCP0nfAltZKiKQtO3AkNgTjW3m1zBcOc6 9x7JtddHExw8HrsY1NdX3mj6m2q2OF+sRyTu4IX76sG5L1Izdl0NO7ZNaUuNO7b1 TWffqnu32WXo4xRDxEgadavo+z06aQ+MfnWD5lzN7ohpAg== -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:53 2025 by rpki-client