$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/323430363a3563303a3a2f33322d3438203d3e20313430333935.roa File: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (raw, json) Hash identifier: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY= Subject key identifier: DE:EC:69:EA:AB:9C:FB:01:D2:E8:FD:97:3B:9F:18:B5:E5:0F:78:6B Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 40DDEE0918D6979CFCD9A6CFFA9D94F1DEBA843C Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/323430363a3563303a3a2f33322d3438203d3e20313430333935.roa Signing time: Sat 02 Aug 2025 11:00:02 +0000 ROA not before: Sat 02 Aug 2025 10:55:02 +0000 ROA not after: Sat 01 Aug 2026 11:00:02 +0000 asID: 140395 IP address blocks: 2406:5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:dd:ee:09:18:d6:97:9c:fc:d9:a6:cf:fa:9d:94:f1:de:ba:84:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Aug 2 10:55:02 2025 GMT Not After : Aug 1 11:00:02 2026 GMT Subject: CN=DEEC69EAAB9CFB01D2E8FD973B9F18B5E50F786B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:66:71:00:af:04:c3:e0:f7:db:9c:1d:39: 5d:db:79:78:27:ed:b6:40:fd:02:bb:28:eb:f6:dd: 57:30:d1:56:09:a8:81:26:c9:e6:39:76:6c:d0:bc: 5d:66:8b:e0:d9:f2:0d:f9:11:d3:e9:69:f4:c9:7e: 35:6b:d0:9d:c6:4f:89:98:6c:84:9f:20:99:40:84: 77:8c:e2:66:e6:a4:12:8a:7a:0f:66:22:76:c2:64: 08:6c:75:2f:b5:87:7c:61:2a:d4:f3:f3:1e:45:ce: 6a:32:43:ea:e1:c0:90:41:93:dd:29:16:1e:cf:65: 15:3d:be:a8:9e:90:af:37:c5:e1:9c:04:ae:87:15: d1:66:67:68:c0:b7:41:05:92:20:cb:52:5f:ef:13: 34:a5:47:33:54:a4:8c:4d:eb:cb:75:01:a5:5d:f1: 28:cc:b7:4b:9b:47:49:cf:c5:f8:e9:c0:6d:3f:a7: f0:06:e6:d2:12:8c:70:dc:74:3e:95:02:d8:ac:4a: 9d:c6:69:e1:5c:6c:9f:bf:ae:ca:57:a3:30:02:22: 26:14:ed:53:cf:85:85:2d:2f:3f:eb:35:35:31:9e: a9:5c:a1:69:11:e1:e5:02:43:0a:c7:96:bd:a9:9c: 2d:b6:a1:0e:5e:c8:31:12:f0:ad:04:bb:a3:25:6b: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EC:69:EA:AB:9C:FB:01:D2:E8:FD:97:3B:9F:18:B5:E5:0F:78:6B X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/323430363a3563303a3a2f33322d3438203d3e20313430333935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c0::/32 Signature Algorithm: sha256WithRSAEncryption 97:96:49:6e:70:d2:31:54:d2:c2:af:c3:04:85:8a:a5:f3:bc: 9d:66:e2:af:b3:d4:3b:07:1a:27:d3:df:b6:c7:9e:2b:45:b5: 12:1f:68:00:1b:9b:39:26:8d:3c:11:e3:51:e4:ff:d2:fc:21: ce:32:af:8d:a8:d4:81:df:0e:e5:da:66:ab:05:cb:4e:da:f2: 28:f8:e4:7b:86:77:b2:26:58:6e:2a:33:56:60:ae:6e:07:6f: a7:33:5f:ec:fa:8e:b3:0d:9c:92:f1:bb:8c:b9:0d:f7:f4:52: a5:bd:c9:ce:d8:10:59:d5:67:0d:f0:d2:40:25:66:81:a9:69: 6d:44:a1:a8:be:30:e9:c1:aa:60:f5:c1:bc:cd:df:ac:74:b7: 9c:a9:83:92:d5:63:8a:88:c7:07:7f:66:e9:d4:e5:63:94:03: 5b:2f:03:22:23:2c:1f:8a:35:68:6c:2c:52:c7:52:24:f3:c5: eb:9d:b1:b0:78:66:15:84:a0:fb:76:e2:99:35:ca:e5:70:00: 84:f8:be:9b:a1:ed:80:d7:40:b0:84:61:2f:49:8b:ab:e5:d2: 8d:2e:37:92:27:88:ef:9f:f4:6c:86:55:90:0d:b1:b8:da:8f: 3a:e6:a9:4e:b6:35:0d:ec:7e:cd:f6:9e:2f:d2:2b:b5:4d:1c: ab:53:6a:60 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUQN3uCRjWl5z82abP+p2U8d66hDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTA4MDIxMDU1MDJaFw0yNjA4MDExMTAwMDJaMDMxMTAvBgNV BAMTKERFRUM2OUVBQUI5Q0ZCMDFEMkU4RkQ5NzNCOUYxOEI1RTUwRjc4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIGZxAK8Ew+D325wdOV3beXgn 7bZA/QK7KOv23Vcw0VYJqIEmyeY5dmzQvF1mi+DZ8g35EdPpafTJfjVr0J3GT4mY bISfIJlAhHeM4mbmpBKKeg9mInbCZAhsdS+1h3xhKtTz8x5FzmoyQ+rhwJBBk90p Fh7PZRU9vqiekK83xeGcBK6HFdFmZ2jAt0EFkiDLUl/vEzSlRzNUpIxN68t1AaVd 8SjMt0ubR0nPxfjpwG0/p/AG5tISjHDcdD6VAtisSp3GaeFcbJ+/rspXozACIiYU 7VPPhYUtLz/rNTUxnqlcoWkR4eUCQwrHlr2pnC22oQ5eyDES8K0Eu6Mla9WRAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU3uxp6quc+wHS6P2XO58YteUPeGswHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZDNkZDc5LTg2MzUtNDg1Ny04 YTNjLTk4NTk1NDUxNmY5ZS8wLzMyMzQzMDM2M2EzNTYzMzAzYTNhMmYzMzMyMmQz NDM4MjAzZDNlMjAzMTM0MzAzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBgXAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXlklucNIxVNLCr8MEhYql87ydZuKvs9Q7Bxon09+2x54rRbUS H2gAG5s5Jo08EeNR5P/S/CHOMq+NqNSB3w7l2marBctO2vIo+OR7hneyJlhuKjNW YK5uB2+nM1/s+o6zDZyS8buMuQ339FKlvcnO2BBZ1WcN8NJAJWaBqWltRKGovjDp wapg9cG8zd+sdLecqYOS1WOKiMcHf2bp1OVjlANbLwMiIywfijVobCxSx1Ik88Xr nbGweGYVhKD7duKZNcrlcACE+L6boe2A10CwhGEvSYur5dKNLjeSJ4jvn/RshlWQ DbG42o865qlOtjUN7H7N9p4v0iu1TRyrU2pg -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:51 2025 by rpki-client