$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203233393438.roa File: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (raw, json) Hash identifier: G1GO2xkJddb3+Y/gyc1CuMPONDsxmL8d7VQhnKS/oUM= Subject key identifier: 82:C7:06:96:94:C1:34:4A:5F:5A:18:5B:8B:0B:06:9C:8A:08:C5:58 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 759C1AABF1A7132EF572154151C904936DFEC3D4 Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203233393438.roa Signing time: Wed 29 Oct 2025 12:02:09 +0000 ROA not before: Wed 29 Oct 2025 11:57:09 +0000 ROA not after: Wed 28 Oct 2026 12:02:09 +0000 asID: 23948 IP address blocks: 2401:8240::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9c:1a:ab:f1:a7:13:2e:f5:72:15:41:51:c9:04:93:6d:fe:c3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Oct 29 11:57:09 2025 GMT Not After : Oct 28 12:02:09 2026 GMT Subject: CN=82C7069694C1344A5F5A185B8B0B069C8A08C558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:0d:3f:fb:9f:fb:a2:af:cd:a8:6f:0b:07: 1b:de:5b:19:e2:0f:a6:45:e6:d3:6e:a3:31:25:ee: 3a:cc:d3:8f:8e:98:de:32:f8:5c:c1:1d:92:dc:d2: 0f:1a:54:02:33:24:6c:9a:1d:b7:2d:9b:8f:53:f5: 68:36:5e:8e:3c:cd:c7:b0:a7:15:4f:2b:f4:e4:e7: c4:f9:e9:3f:76:96:4b:93:db:b6:c6:dc:16:5f:05: a8:bd:49:13:4c:a4:7b:8e:3f:bf:f9:83:ce:04:86: 03:9c:c6:01:9c:46:dc:5d:9f:8e:ab:56:13:25:dd: dd:98:00:94:91:ac:df:8b:b9:db:3f:4f:e9:16:59: a1:24:e7:1a:71:e7:24:07:30:a3:6e:12:1d:5f:9a: 21:99:0a:9b:1a:ee:fa:90:e4:97:e4:85:48:f2:c7: 5a:0e:43:f8:a5:ed:f5:22:e6:52:6e:d7:7c:fa:99: ed:c4:bc:17:75:f5:b5:da:e2:56:02:cd:5d:84:ee: ea:63:5b:00:41:6a:e4:98:a5:b1:58:4e:21:9a:a4: 85:28:50:95:a7:e0:5d:e9:a2:19:94:88:e3:ed:eb: d0:c9:bf:4b:f8:df:5b:f1:06:69:ce:9d:af:d3:68: 94:7b:43:62:23:3b:d8:1d:05:2e:9b:b1:cb:6c:76: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C7:06:96:94:C1:34:4A:5F:5A:18:5B:8B:0B:06:9C:8A:08:C5:58 X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203233393438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8240::/32 Signature Algorithm: sha256WithRSAEncryption 97:a5:14:a5:2f:53:88:53:e8:b5:58:d0:3a:34:03:b8:18:17: a8:04:20:9f:fc:b8:15:4d:0a:88:4e:dc:25:e6:74:16:3c:9b: be:ec:af:d3:57:c8:8e:a3:1f:de:90:17:6f:1f:26:9e:66:73: 08:07:d6:ae:75:22:a3:cd:35:1e:4c:a7:34:a6:26:d8:f8:0b: fc:f1:64:53:22:61:90:4f:60:3c:42:04:91:45:36:bd:b8:d8: 5f:68:0f:93:96:69:72:25:25:40:3d:53:a6:5d:14:08:7b:59: ac:32:23:a9:c6:92:e4:0c:1d:e9:1c:e3:fe:f2:b5:e8:bc:bf: e7:ee:2d:08:67:1d:4f:4b:b7:b1:bc:d4:6e:b1:cf:75:d8:7b: 7b:19:ab:87:3c:a8:cf:1a:2e:30:a5:fc:ef:7f:f2:e5:2c:ac: c6:f5:ef:02:ad:d1:2c:66:af:13:3e:5a:d1:b0:95:1b:e7:22: 15:40:a7:a6:2b:c3:52:68:93:e1:40:9b:5f:ae:31:ed:ab:e7: 96:37:8f:ef:08:44:d7:7c:0f:35:e7:46:ec:d9:34:98:cf:ab: 2c:e6:8c:4a:5c:68:c0:a3:71:02:dd:76:39:f5:02:10:21:7a: 0b:ed:0e:9c:ed:ad:45:84:df:60:92:00:6b:d6:47:9b:3f:0b: cc:a8:2c:0f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUdZwaq/GnEy71chVBUckEk23+w9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTEwMjkxMTU3MDlaFw0yNjEwMjgxMjAyMDlaMDMxMTAvBgNV BAMTKDgyQzcwNjk2OTRDMTM0NEE1RjVBMTg1QjhCMEIwNjlDOEEwOEM1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9g0/+5/7oq/NqG8LBxveWxni D6ZF5tNuozEl7jrM04+OmN4y+FzBHZLc0g8aVAIzJGyaHbctm49T9Wg2Xo48zcew pxVPK/Tk58T56T92lkuT27bG3BZfBai9SRNMpHuOP7/5g84EhgOcxgGcRtxdn46r VhMl3d2YAJSRrN+Luds/T+kWWaEk5xpx5yQHMKNuEh1fmiGZCpsa7vqQ5JfkhUjy x1oOQ/il7fUi5lJu13z6me3EvBd19bXa4lYCzV2E7upjWwBBauSYpbFYTiGapIUo UJWn4F3pohmUiOPt69DJv0v431vxBmnOna/TaJR7Q2IjO9gdBS6bsctsdpJJAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUgscGlpTBNEpfWhhbiwsGnIoIxVgwHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0NTQ3MTA0LTkzOWUtNDBlMy04 ZmM4LTQyNTIyNjQyMDQ0Yi8wLzMyMzQzMDMxM2EzODMyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzMzOTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAYJAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXpRSlL1OIU+i1WNA6NAO4GBeoBCCf/LgVTQqITtwl5nQWPJu+ 7K/TV8iOox/ekBdvHyaeZnMIB9audSKjzTUeTKc0pibY+Av88WRTImGQT2A8QgSR RTa9uNhfaA+TlmlyJSVAPVOmXRQIe1msMiOpxpLkDB3pHOP+8rXovL/n7i0IZx1P S7exvNRusc912Ht7GauHPKjPGi4wpfzvf/LlLKzG9e8CrdEsZq8TPlrRsJUb5yIV QKemK8NSaJPhQJtfrjHtq+eWN4/vCETXfA8150bs2TSYz6ss5oxKXGjAo3EC3XY5 9QIQIXoL7Q6c7a1FhN9gkgBr1kebPwvMqCwP -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:53 2025 by rpki-client