$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/323430313a396230303a3a2f33322d3438203d3e203338313438.roa File: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (raw, json) Hash identifier: KdtiKUAOdh5Pdj0OkOpsBFHlVClUvcCXmF1ngZraMiI= Subject key identifier: E5:10:79:D3:C4:FE:AE:6E:F5:6F:13:C1:CE:43:BE:46:9C:A9:2F:24 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 3A5D4C4C59F7EEAA4F30026D1DB61C0AE0A9EAB6 Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/323430313a396230303a3a2f33322d3438203d3e203338313438.roa Signing time: Wed 17 Sep 2025 05:00:00 +0000 ROA not before: Wed 17 Sep 2025 04:55:00 +0000 ROA not after: Wed 16 Sep 2026 05:00:00 +0000 asID: 38148 IP address blocks: 2401:9b00::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5d:4c:4c:59:f7:ee:aa:4f:30:02:6d:1d:b6:1c:0a:e0:a9:ea:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: Sep 17 04:55:00 2025 GMT Not After : Sep 16 05:00:00 2026 GMT Subject: CN=E51079D3C4FEAE6EF56F13C1CE43BE469CA92F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:ac:19:5d:58:3b:76:7a:3c:56:99:4c:5c: 22:8a:98:c5:27:ef:5d:e9:48:48:c0:c5:6c:74:c3: 94:8f:8a:37:f7:32:fd:2c:ee:11:3e:05:d4:3a:1e: 64:6f:1b:43:b1:eb:3e:0b:c7:f5:02:a8:63:73:6d: 14:78:dd:e7:a9:06:3f:07:30:93:3b:51:26:e7:9b: ec:12:29:63:53:fe:dc:08:fa:b1:ce:ef:4d:e9:cd: 92:36:9f:f9:c8:ad:0a:50:22:ad:4d:8d:c8:72:31: 39:43:8c:49:8e:72:26:c0:0e:64:36:56:55:ff:e4: 1e:cf:0a:61:91:cc:41:82:88:8c:9a:56:e5:92:60: 90:41:fa:13:22:ba:35:83:3f:d0:f0:8a:49:68:c9: f2:eb:9c:11:96:a1:4a:64:64:92:1d:a9:b0:43:24: c6:9c:6b:74:13:81:a0:7c:66:b2:65:d4:79:3d:11: dd:c7:aa:a0:e3:05:be:8a:14:f0:3c:eb:03:19:19: e6:b2:4b:88:88:85:02:71:29:18:2a:c7:e4:e8:21: 77:a0:7b:03:12:e9:58:d0:29:9c:02:31:4f:c6:98: 3f:3e:56:b4:18:77:62:b5:14:d9:14:bd:26:9d:1a: 7c:5a:4e:3c:9b:91:90:eb:47:7b:2d:9c:29:32:83: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:10:79:D3:C4:FE:AE:6E:F5:6F:13:C1:CE:43:BE:46:9C:A9:2F:24 X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/323430313a396230303a3a2f33322d3438203d3e203338313438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:9b00::/32 Signature Algorithm: sha256WithRSAEncryption 72:7f:eb:db:7f:5b:6f:9f:7d:83:3e:d3:f7:6a:7b:79:12:d4: c6:e6:3c:ed:d3:93:39:01:ec:86:2d:53:ab:21:9c:c9:22:16: 57:e6:08:80:07:bf:76:7a:09:b6:c7:37:6d:47:36:50:7f:27: 2c:2f:0e:49:5b:f3:cd:64:38:49:a0:ee:4c:74:3a:1a:90:31: cf:4f:6b:3b:3b:4c:5b:72:35:79:2a:7d:27:05:7d:72:7b:fa: 2e:11:97:9e:3f:33:5d:00:0f:7e:12:08:f4:da:a4:79:cf:af: e7:d1:3a:83:8b:a1:f1:00:dd:d0:06:5f:1b:26:83:59:3a:8e: 51:21:e9:a2:58:8c:af:8c:e6:de:a8:a7:30:d6:a9:f7:d8:11: a1:d3:4f:76:4c:d4:3d:ca:aa:f5:85:0b:3a:ef:5e:2e:fb:07: 08:21:cd:f4:f3:a1:64:ba:89:56:dd:92:52:52:10:24:a9:b4: 07:d9:e4:5e:1c:b5:b8:99:98:8f:80:82:8b:2c:cd:86:9e:42: c7:7e:dc:08:ff:04:71:7d:9d:fc:d9:9f:d2:24:4f:9f:81:82: 3c:8b:3c:f0:64:b2:97:89:52:21:02:8b:c3:63:7d:8a:07:1d: 9a:81:7d:9d:67:2b:64:26:77:0f:49:ae:ed:94:11:81:16:b1: c2:88:41:a7 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUOl1MTFn37qpPMAJtHbYcCuCp6rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNTA5MTcwNDU1MDBaFw0yNjA5MTYwNTAwMDBaMDMxMTAvBgNV BAMTKEU1MTA3OUQzQzRGRUFFNkVGNTZGMTNDMUNFNDNCRTQ2OUNBOTJGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC786wZXVg7dno8VplMXCKKmMUn 713pSEjAxWx0w5SPijf3Mv0s7hE+BdQ6HmRvG0Ox6z4Lx/UCqGNzbRR43eepBj8H MJM7USbnm+wSKWNT/twI+rHO703pzZI2n/nIrQpQIq1NjchyMTlDjEmOcibADmQ2 VlX/5B7PCmGRzEGCiIyaVuWSYJBB+hMiujWDP9DwikloyfLrnBGWoUpkZJIdqbBD JMaca3QTgaB8ZrJl1Hk9Ed3HqqDjBb6KFPA86wMZGeayS4iIhQJxKRgqx+ToIXeg ewMS6VjQKZwCMU/GmD8+VrQYd2K1FNkUvSadGnxaTjybkZDrR3stnCkyg8Z/AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU5RB508T+rm71bxPBzkO+RpypLyQwHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1OTJjMjc0LTExZGItNDEyNy1i YWJiLWFlYWU5OTI4NGIwMC8wLzMyMzQzMDMxM2EzOTYyMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMzMzgzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAZsAMA0GCSqGSIb3 DQEBCwUAA4IBAQByf+vbf1tvn32DPtP3ant5EtTG5jzt05M5AeyGLVOrIZzJIhZX 5giAB792egm2xzdtRzZQfycsLw5JW/PNZDhJoO5MdDoakDHPT2s7O0xbcjV5Kn0n BX1ye/ouEZeePzNdAA9+Egj02qR5z6/n0TqDi6HxAN3QBl8bJoNZOo5RIemiWIyv jObeqKcw1qn32BGh0092TNQ9yqr1hQs6714u+wcIIc3086FkuolW3ZJSUhAkqbQH 2eReHLW4mZiPgIKLLM2GnkLHftwI/wRxfZ382Z/SJE+fgYI8izzwZLKXiVIhAovD Y32KBx2agX2dZytkJncPSa7tlBGBFrHCiEGn -----END CERTIFICATE-----Generated at Mon Oct 20 21:21:09 2025 by rpki-client