$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa File: 323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa (raw, json) Hash identifier: lN6IUo8XcirGXXI7zultPSLQfKt0KthPpzYWW5DChjw= Subject key identifier: A9:D8:C5:4F:BC:DD:06:34:91:95:3C:32:EA:07:DF:66:33:47:46:0A Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 406BD6DF0AFFE40E3265BA86F97D2408B414D63C Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa Signing time: Thu 07 Aug 2025 01:17:36 +0000 ROA not before: Thu 07 Aug 2025 01:12:36 +0000 ROA not after: Thu 06 Aug 2026 01:17:36 +0000 asID: 139417 IP address blocks: 2404:cac0:11d5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 15:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6b:d6:df:0a:ff:e4:0e:32:65:ba:86:f9:7d:24:08:b4:14:d6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Aug 7 01:12:36 2025 GMT Not After : Aug 6 01:17:36 2026 GMT Subject: CN=A9D8C54FBCDD063491953C32EA07DF663347460A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b5:3d:a6:15:97:6c:0f:98:75:3e:3d:65:ee: aa:19:8b:df:7a:24:aa:40:3f:29:86:37:27:04:61: 7a:50:49:7b:77:db:15:18:ba:b8:79:46:d0:a3:c7: 68:c8:4b:99:8d:1c:65:fd:04:27:14:ba:e3:00:ef: 8c:6b:48:0a:6f:00:f4:a0:4b:0b:1a:c2:eb:0b:34: 46:e8:88:0d:f4:e6:11:60:3b:f5:11:42:6b:4a:e7: 07:bc:34:3e:08:09:2c:94:8f:15:fb:e8:76:1a:c8: cc:8c:d6:41:cb:62:c4:be:74:8c:a0:3c:20:b0:e4: 7c:3f:21:f1:18:b2:89:30:f7:7f:18:ca:f8:2d:2b: 6d:9f:bf:cf:68:1a:90:79:49:63:d3:6f:57:bc:d3: 77:6c:51:20:f2:29:3e:8e:b4:ac:a1:8c:3a:d5:83: cd:ef:30:c8:5a:30:b6:d8:cc:9c:92:e0:06:7b:7d: 7f:c3:19:de:1c:96:03:5f:19:43:91:0a:81:40:0d: 85:63:0b:33:65:44:54:a7:fa:86:9e:e2:d8:c2:10: 34:7e:5e:8c:21:ea:57:6a:6c:39:7d:41:93:ba:0f: 22:11:63:cf:d2:85:30:cf:1f:4c:5d:ce:08:24:1e: 42:b8:bf:31:84:06:8d:50:24:b7:25:3c:d9:82:93: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D8:C5:4F:BC:DD:06:34:91:95:3C:32:EA:07:DF:66:33:47:46:0A X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313164353a3a2f34382d3438203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cac0:11d5::/48 Signature Algorithm: sha256WithRSAEncryption 77:61:30:c7:a7:3a:46:0c:d7:5a:57:09:a0:70:f8:7b:75:17: a7:86:be:50:56:9e:d8:8b:d3:b2:54:47:b5:16:65:b1:ac:47: 31:70:33:43:7a:d5:fa:d7:d5:00:ca:e1:38:13:b2:2b:09:7f: 7d:88:13:9f:da:6f:d7:38:ad:b4:0a:ad:99:31:5c:eb:ba:9b: 16:85:ec:bd:1a:e5:d6:35:86:81:59:56:92:ae:86:0b:09:99: 1b:bf:8f:a1:ec:e2:7f:3d:b1:e7:08:53:ac:23:4e:52:5c:7d: b6:be:30:f0:ea:fb:b2:df:42:be:41:fb:d3:a4:cd:2d:4c:48: da:40:a3:0b:64:71:b7:a8:48:41:00:9c:ca:82:be:21:d5:25: 29:42:c2:34:16:e5:b0:ce:88:ce:97:ef:46:1f:82:79:7d:4b: 65:9a:80:7b:c3:92:c1:59:9f:7b:3a:1b:70:65:e8:97:70:8c: ed:04:81:0c:31:03:c2:45:df:0d:f8:6f:7d:8e:ea:00:d7:f5: 3e:37:38:b2:79:3d:85:e1:fd:44:87:e1:5f:41:01:7d:7e:2a: af:10:23:d3:0b:3e:89:4f:6c:c8:85:3f:3e:3b:91:15:31:e7: a6:ff:4b:17:af:bd:52:52:28:6b:cf:41:44:65:ac:30:d1:fe: 53:4c:67:6d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQGvW3wr/5A4yZbqG+X0kCLQU1jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNTA4MDcwMTEyMzZaFw0yNjA4MDYwMTE3MzZaMDMxMTAvBgNV BAMTKEE5RDhDNTRGQkNERDA2MzQ5MTk1M0MzMkVBMDdERjY2MzM0NzQ2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDztT2mFZdsD5h1Pj1l7qoZi996 JKpAPymGNycEYXpQSXt32xUYurh5RtCjx2jIS5mNHGX9BCcUuuMA74xrSApvAPSg SwsawusLNEboiA305hFgO/URQmtK5we8ND4ICSyUjxX76HYayMyM1kHLYsS+dIyg PCCw5Hw/IfEYsokw938YyvgtK22fv89oGpB5SWPTb1e803dsUSDyKT6OtKyhjDrV g83vMMhaMLbYzJyS4AZ7fX/DGd4clgNfGUORCoFADYVjCzNlRFSn+oae4tjCEDR+ Xowh6ldqbDl9QZO6DyIRY8/ShTDPH0xdzggkHkK4vzGEBo1QJLclPNmCkwE7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUqdjFT7zdBjSRlTwy6gffZjNHRgowHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhMzEzMTY0MzUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzNDMxMzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BMrAEdUwDQYJKoZIhvcNAQELBQADggEBAHdhMMenOkYM11pXCaBw+Ht1F6eGvlBW ntiL07JUR7UWZbGsRzFwM0N61frX1QDK4TgTsisJf32IE5/ab9c4rbQKrZkxXOu6 mxaF7L0a5dY1hoFZVpKuhgsJmRu/j6Hs4n89secIU6wjTlJcfba+MPDq+7LfQr5B +9OkzS1MSNpAowtkcbeoSEEAnMqCviHVJSlCwjQW5bDOiM6X70Yfgnl9S2WagHvD ksFZn3s6G3Bl6JdwjO0EgQwxA8JF3w34b32O6gDX9T43OLJ5PYXh/USH4V9BAX1+ Kq8QI9MLPolPbMiFPz47kRUx56b/SxevvVJSKGvPQURlrDDR/lNMZ20= -----END CERTIFICATE-----Generated at Tue Aug 12 05:31:41 2025 by rpki-client