$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa File: 323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa (raw, json) Hash identifier: jLhZx5mtiEAtxHo0r3n7tiNwdx/V4EFJlvX7pV1BZjQ= Subject key identifier: DC:E1:E9:93:AE:37:42:25:FB:73:CF:7D:22:48:65:DC:DD:3E:27:9E Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Certificate serial: 7F770E45C3C650E1A5B99667545C7C11F0B2B2F7 Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa Signing time: Tue 22 Apr 2025 08:03:46 +0000 ROA not before: Tue 22 Apr 2025 07:58:46 +0000 ROA not after: Tue 21 Apr 2026 08:03:46 +0000 asID: 23671 IP address blocks: 2403:b200:237::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:77:0e:45:c3:c6:50:e1:a5:b9:96:67:54:5c:7c:11:f0:b2:b2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Validity Not Before: Apr 22 07:58:46 2025 GMT Not After : Apr 21 08:03:46 2026 GMT Subject: CN=DCE1E993AE374225FB73CF7D224865DCDD3E279E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:54:a8:a6:16:21:bd:b6:62:5e:bb:ca:30: 46:de:59:73:e1:4e:a0:ad:8e:64:11:e2:26:e8:6c: 81:ef:c7:3a:5c:75:b4:53:a4:7a:82:3a:55:25:0e: ef:e0:c0:0a:4e:56:5c:d5:1b:46:47:5c:e2:35:d6: b4:92:97:31:75:26:4c:4d:85:cc:2b:5c:a7:06:1b: 95:85:04:46:f7:5e:ca:6c:b0:f5:ba:35:36:50:32: 8b:83:56:46:65:0f:cc:53:2d:29:ca:ec:1e:f7:07: 8d:ea:9c:a8:40:b6:08:e7:f1:dd:23:ae:85:78:9b: ac:f6:09:9c:56:fa:a0:c7:5b:31:d0:d6:3d:fd:44: 38:ae:78:a9:38:43:ac:cb:55:4b:72:26:01:8b:56: e9:32:f9:50:61:a5:cd:23:e6:e3:e4:75:69:ef:9c: 6f:2d:57:2e:2f:60:73:69:4f:c8:b0:9d:14:e8:91: fe:7f:66:36:4e:40:38:61:d8:92:9d:57:47:eb:80: eb:d9:85:4f:df:f5:72:04:a8:aa:7f:6e:01:05:74: f9:60:8c:59:53:00:d4:36:90:f5:a0:8b:18:6f:d7: 3e:68:f8:08:c8:c4:42:b3:74:06:11:0f:ee:40:ce: 75:7e:f6:d0:f1:08:eb:d2:82:c1:18:06:48:35:25: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E1:E9:93:AE:37:42:25:FB:73:CF:7D:22:48:65:DC:DD:3E:27:9E X509v3 Authority Key Identifier: keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/323430333a623230303a3233373a3a2f34382d3438203d3e203233363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b200:237::/48 Signature Algorithm: sha256WithRSAEncryption 76:fe:21:e3:98:b0:c2:d4:56:03:51:e4:a0:34:a7:17:c1:c1: 92:24:51:90:e6:b4:04:44:d1:56:f8:f6:bc:73:8f:a4:79:e2: 54:c9:81:d5:60:b0:86:dc:08:58:fd:fc:8b:45:8a:0a:64:b3: 7a:c6:ad:b7:3a:ee:9e:db:e5:29:f0:73:3e:78:11:24:59:42: 80:84:36:c8:d7:f4:e0:07:80:01:d0:f2:ed:b5:4b:72:03:fa: df:c0:64:aa:32:9f:32:e4:18:a2:e8:6f:4e:8a:2f:2a:bb:7a: 65:60:60:1a:19:9c:fb:e6:25:87:2b:33:1f:8a:75:e0:42:ed: 10:13:01:62:0f:c5:a3:63:f2:3a:9a:14:79:a6:ba:b9:81:df: bb:10:5a:d1:d2:40:3a:9e:d0:7b:86:d0:56:b1:41:f3:2e:11: a1:1b:6c:ff:ba:d4:94:63:31:b8:2f:36:f7:72:c0:ad:88:81: 94:d9:86:d6:7d:c5:0b:b4:3b:b2:cc:0e:65:f7:da:73:c0:aa: f5:d2:29:06:45:cc:a3:b3:0c:ac:ba:4b:80:e7:9d:79:6b:f1: ea:85:82:bc:4f:58:af:c3:ef:ac:9f:37:11:64:cd:39:40:0a: 4d:08:7d:e9:16:bf:08:88:bf:71:8f:b6:13:e3:1d:4c:7c:d9: e3:bd:41:a6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUf3cORcPGUOGluZZnVFx8EfCysvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy MTg4ODY2RjAeFw0yNTA0MjIwNzU4NDZaFw0yNjA0MjEwODAzNDZaMDMxMTAvBgNV BAMTKERDRTFFOTkzQUUzNzQyMjVGQjczQ0Y3RDIyNDg2NURDREQzRTI3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8FSophYhvbZiXrvKMEbeWXPh TqCtjmQR4ibobIHvxzpcdbRTpHqCOlUlDu/gwApOVlzVG0ZHXOI11rSSlzF1JkxN hcwrXKcGG5WFBEb3XspssPW6NTZQMouDVkZlD8xTLSnK7B73B43qnKhAtgjn8d0j roV4m6z2CZxW+qDHWzHQ1j39RDiueKk4Q6zLVUtyJgGLVuky+VBhpc0j5uPkdWnv nG8tVy4vYHNpT8iwnRTokf5/ZjZOQDhh2JKdV0frgOvZhU/f9XIEqKp/bgEFdPlg jFlTANQ2kPWgixhv1z5o+AjIxEKzdAYRD+5AznV+9tDxCOvSgsEYBkg1JSMFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU3OHpk643QiX7c899Ikhl3N0+J54wHwYDVR0j BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4 ODY2Ri5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i YmRmLTc2NDU3MWZiYWNlNy8wLzMyMzQzMDMzM2E2MjMyMzAzMDNhMzIzMzM3M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMzM2MzczMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQDsgAC NzANBgkqhkiG9w0BAQsFAAOCAQEAdv4h45iwwtRWA1HkoDSnF8HBkiRRkOa0BETR Vvj2vHOPpHniVMmB1WCwhtwIWP38i0WKCmSzesattzruntvlKfBzPngRJFlCgIQ2 yNf04AeAAdDy7bVLcgP638BkqjKfMuQYouhvToovKrt6ZWBgGhmc++YlhyszH4p1 4ELtEBMBYg/Fo2PyOpoUeaa6uYHfuxBa0dJAOp7Qe4bQVrFB8y4RoRts/7rUlGMx uC8293LArYiBlNmG1n3FC7Q7sswOZffac8Cq9dIpBkXMo7MMrLpLgOedeWvx6oWC vE9Yr8PvrJ83EWTNOUAKTQh96Ra/CIi/cY+2E+MdTHzZ471Bpg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:37 2025 by rpki-client