$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa File: 323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa (raw, json) Hash identifier: CoVHqDze9/9Ad7yystdU0IkQDdi+UUE5paHmjRb7ddU= Subject key identifier: 65:C2:BD:33:E8:75:DF:04:74:A5:A5:30:81:24:13:46:1C:94:A1:35 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 057D6B8190DBCE966AB2C7E93C04D6376218DFC1 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa Signing time: Fri 11 Jul 2025 12:00:02 +0000 ROA not before: Fri 11 Jul 2025 11:55:02 +0000 ROA not after: Fri 10 Jul 2026 12:00:02 +0000 asID: 153087 IP address blocks: 2404:97c0:223::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7d:6b:81:90:db:ce:96:6a:b2:c7:e9:3c:04:d6:37:62:18:df:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Jul 11 11:55:02 2025 GMT Not After : Jul 10 12:00:02 2026 GMT Subject: CN=65C2BD33E875DF0474A5A530812413461C94A135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:aa:80:75:10:de:42:a8:85:54:e2:9e:c3: c5:4a:fd:16:5c:00:ad:a4:81:f3:cc:17:2a:1d:e8: 45:1b:4d:1a:b6:d5:4a:5a:87:96:c1:0d:c4:e2:27: 9b:85:11:41:5f:99:e6:03:bd:57:d6:66:35:8c:0e: b7:ec:5a:41:44:e0:4a:b1:6b:64:70:bb:82:cb:7d: 40:af:41:1f:f1:de:46:a0:d1:d1:e6:16:f3:df:d8: 13:36:b7:d4:02:c5:10:ee:1d:48:dd:33:cf:a3:2f: 07:a4:0b:f3:5c:d1:e9:eb:85:fe:5c:bf:86:8a:2d: a9:69:c3:a9:92:dc:20:61:ff:6c:f6:e1:fe:81:28: 4c:e6:27:c9:06:30:07:b5:a7:6d:ab:12:69:a9:74: ef:ae:25:07:82:02:73:42:a2:c8:0e:47:09:a6:d4: 1c:09:80:74:17:73:5b:14:7c:60:24:ae:da:93:27: bb:2e:b4:ed:49:dc:87:80:da:6b:f3:0a:db:d8:c2: 2f:73:fe:cd:d8:7f:09:77:c3:57:31:70:01:56:01: 70:1d:4a:54:f3:39:ed:0e:f0:7a:7d:a4:fd:3d:f9: e2:d6:8e:93:31:28:08:ea:b1:f4:3a:e2:3a:0a:9e: 2b:95:55:b5:4b:c0:ed:fd:34:27:b0:70:d0:3e:44: ca:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:BD:33:E8:75:DF:04:74:A5:A5:30:81:24:13:46:1C:94:A1:35 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3232333a3a2f34382d3438203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:223::/48 Signature Algorithm: sha256WithRSAEncryption c6:36:3f:a4:0b:3b:07:90:d0:d4:03:ff:a9:3c:87:3c:b3:15: 94:07:d7:eb:05:ee:f1:8b:bb:ee:6b:67:3c:4a:a9:1a:59:bb: 64:1b:77:af:df:e2:20:a8:bc:0a:27:af:0b:aa:75:c2:c2:42: 66:fa:0b:dd:38:d5:a6:b3:a6:05:7e:f9:49:38:74:72:39:de: 41:2c:2c:a6:c5:fa:0b:29:a3:9a:f1:21:2b:8f:f3:ac:e8:65: dd:c9:ce:26:70:36:57:d2:d8:d9:62:bc:03:e2:88:43:bd:8a: 0d:37:d5:9b:df:d1:bc:2a:2e:d9:e7:4e:c6:81:2c:09:7a:6e: 14:6a:88:3e:1d:f3:b3:cb:c0:e2:4c:39:69:ca:f7:cd:66:ae: 48:f9:25:57:eb:00:01:30:b7:e6:17:76:8d:0e:92:a8:e1:8d: 48:8a:8e:2e:ed:31:17:48:7d:42:93:19:a3:49:d3:67:bd:25: 7e:5b:ae:94:c2:01:d7:4e:ba:07:d5:e2:d5:a6:3a:d2:ae:c6: 74:bc:cf:f0:c7:a7:4b:4a:5a:23:28:d3:78:c1:d7:5a:ad:0f: 9d:a3:a4:16:94:36:06:88:e7:29:ae:56:06:8e:64:4e:84:ed: 6d:6d:62:56:d2:39:f9:36:d4:3a:bb:0f:ad:2f:68:2a:80:f3: 8b:a9:54:af -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBX1rgZDbzpZqssfpPATWN2IY38EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTA3MTExMTU1MDJaFw0yNjA3MTAxMjAwMDJaMDMxMTAvBgNV BAMTKDY1QzJCRDMzRTg3NURGMDQ3NEE1QTUzMDgxMjQxMzQ2MUM5NEExMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzb6qAdRDeQqiFVOKew8VK/RZc AK2kgfPMFyod6EUbTRq21Upah5bBDcTiJ5uFEUFfmeYDvVfWZjWMDrfsWkFE4Eqx a2Rwu4LLfUCvQR/x3kag0dHmFvPf2BM2t9QCxRDuHUjdM8+jLwekC/Nc0enrhf5c v4aKLalpw6mS3CBh/2z24f6BKEzmJ8kGMAe1p22rEmmpdO+uJQeCAnNCosgORwmm 1BwJgHQXc1sUfGAkrtqTJ7sutO1J3IeA2mvzCtvYwi9z/s3Yfwl3w1cxcAFWAXAd SlTzOe0O8Hp9pP09+eLWjpMxKAjqsfQ64joKniuVVbVLwO39NCewcNA+RMprAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZcK9M+h13wR0paUwgSQTRhyUoTUwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMzM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJASX wAIjMA0GCSqGSIb3DQEBCwUAA4IBAQDGNj+kCzsHkNDUA/+pPIc8sxWUB9frBe7x i7vua2c8SqkaWbtkG3ev3+IgqLwKJ68LqnXCwkJm+gvdONWms6YFfvlJOHRyOd5B LCymxfoLKaOa8SErj/Os6GXdyc4mcDZX0tjZYrwD4ohDvYoNN9Wb39G8Ki7Z507G gSwJem4Uaog+HfOzy8DiTDlpyvfNZq5I+SVX6wABMLfmF3aNDpKo4Y1Iio4u7TEX SH1CkxmjSdNnvSV+W66UwgHXTroH1eLVpjrSrsZ0vM/wx6dLSlojKNN4wddarQ+d o6QWlDYGiOcprlYGjmROhO1tbWJW0jn5NtQ6uw+tL2gqgPOLqVSv -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:42 2025 by rpki-client