$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa File: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (raw, json) Hash identifier: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc= Subject key identifier: 41:5E:E7:95:CF:13:3F:D4:5B:5D:F6:77:4B:E1:2D:EB:6D:5A:73:28 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 4A3A44C859F276811234F65CBD7B0E94293095BD Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa Signing time: Mon 16 Jun 2025 05:00:00 +0000 ROA not before: Mon 16 Jun 2025 04:55:00 +0000 ROA not after: Mon 15 Jun 2026 05:00:00 +0000 asID: 64297 IP address blocks: 2407:9e80::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3a:44:c8:59:f2:76:81:12:34:f6:5c:bd:7b:0e:94:29:30:95:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Jun 16 04:55:00 2025 GMT Not After : Jun 15 05:00:00 2026 GMT Subject: CN=415EE795CF133FD45B5DF6774BE12DEB6D5A7328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:b3:36:1f:fe:f2:36:c4:dd:80:8e:5f:86: 3d:5c:0d:ac:da:33:4e:16:c4:94:79:2c:3a:09:66: bd:24:c0:9b:ab:e2:ac:cc:af:8c:8e:7c:aa:ee:99: 89:20:f2:29:7c:ea:a2:c6:eb:2c:49:81:06:05:c8: 7c:3b:80:94:35:cd:4c:73:41:d6:1a:15:07:7e:38: aa:cb:55:5c:de:64:b4:d1:a6:d0:73:ea:49:04:4e: 45:0b:7a:5d:a5:f8:2d:6a:27:03:fd:69:1d:2e:a7: 5d:fd:35:38:4d:cd:8e:f1:2b:15:9e:6a:23:1e:33: b1:0d:61:d3:84:f5:fb:f8:46:e2:29:f6:93:3b:7e: 1e:29:b0:32:08:47:aa:95:91:27:cf:9b:34:5b:14: db:e2:8c:2d:40:88:1f:25:d4:92:83:0f:0b:ae:87: 00:3b:23:9c:5f:d8:10:cc:55:53:4f:2d:a9:bf:55: 86:c6:3b:f8:1e:98:86:5f:b3:ee:87:2f:9a:38:c9: ee:f4:50:22:c3:d6:6c:70:5a:c4:d1:36:ff:14:25: 45:6f:d4:78:f4:4c:b3:24:9d:e1:37:36:e7:a1:aa: 03:a2:88:6e:bd:c5:3d:c4:f6:88:7e:05:d1:63:de: 84:5b:eb:67:00:3f:63:66:2a:18:a4:02:82:97:90: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5E:E7:95:CF:13:3F:D4:5B:5D:F6:77:4B:E1:2D:EB:6D:5A:73:28 X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/323430373a396538303a3a2f33322d3332203d3e203634323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 1d:d5:5a:cc:2b:e6:c5:47:7b:57:e1:46:c0:e0:b2:bb:41:3f: 7c:df:a7:31:1b:8b:76:6e:32:80:07:f3:3c:31:b0:b0:2c:5b: 25:75:f8:b9:f9:25:95:b0:64:d3:13:14:5a:9e:fd:54:e9:40: a2:61:16:9a:e4:e8:64:12:ad:d4:92:87:94:24:91:d3:e4:2f: 2b:5e:42:e9:f5:40:a3:3c:1c:2f:a5:b0:26:17:a7:93:1c:dc: 91:2c:4f:82:2c:d2:f0:9c:37:4d:85:45:b1:b7:9d:2d:e9:ce: 4d:fb:25:70:58:bb:7b:5a:a7:da:bb:f6:1d:60:a1:d3:a7:f7: 98:b6:ac:fe:fb:92:28:31:a1:11:c4:09:68:66:36:db:d0:6e: 59:83:00:ac:e8:86:9d:ca:bc:a6:0a:ed:22:00:bc:77:9d:2f: b0:73:1a:b9:6c:44:20:cf:72:bb:f0:d9:5e:2a:bd:7a:6c:46: d4:7c:99:1e:c0:96:02:95:8a:be:ba:27:45:26:41:9b:67:da: a9:91:96:45:22:02:ce:33:1a:55:4d:b4:67:fa:77:9c:a5:34: ee:be:d7:18:5f:f3:cb:fc:d8:e0:cd:06:97:51:fd:24:ef:19: 47:47:b5:ee:25:ed:7c:2f:9d:77:a1:10:1e:e9:67:13:d0:03: 08:4f:89:5f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUSjpEyFnydoESNPZcvXsOlCkwlb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA2MTYwNDU1MDBaFw0yNjA2MTUwNTAwMDBaMDMxMTAvBgNV BAMTKDQxNUVFNzk1Q0YxMzNGRDQ1QjVERjY3NzRCRTEyREVCNkQ1QTczMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQrM2H/7yNsTdgI5fhj1cDaza M04WxJR5LDoJZr0kwJur4qzMr4yOfKrumYkg8il86qLG6yxJgQYFyHw7gJQ1zUxz QdYaFQd+OKrLVVzeZLTRptBz6kkETkULel2l+C1qJwP9aR0up139NThNzY7xKxWe aiMeM7ENYdOE9fv4RuIp9pM7fh4psDIIR6qVkSfPmzRbFNvijC1AiB8l1JKDDwuu hwA7I5xf2BDMVVNPLam/VYbGO/gemIZfs+6HL5o4ye70UCLD1mxwWsTRNv8UJUVv 1Hj0TLMkneE3NuehqgOiiG69xT3E9oh+BdFj3oRb62cAP2NmKhikAoKXkFpfAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUQV7nlc8TP9RbXfZ3S+Et621acygwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ5ZGE3YjZhLTRlMWEtNDFmZi1i OGViLThjMzY0Y2QyNjRiMS8wLzMyMzQzMDM3M2EzOTY1MzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM2MzQzMjM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB56AMA0GCSqGSIb3 DQEBCwUAA4IBAQAd1VrMK+bFR3tX4UbA4LK7QT9836cxG4t2bjKAB/M8MbCwLFsl dfi5+SWVsGTTExRanv1U6UCiYRaa5OhkEq3UkoeUJJHT5C8rXkLp9UCjPBwvpbAm F6eTHNyRLE+CLNLwnDdNhUWxt50t6c5N+yVwWLt7Wqfau/YdYKHTp/eYtqz++5Io MaERxAloZjbb0G5ZgwCs6IadyrymCu0iALx3nS+wcxq5bEQgz3K78NleKr16bEbU fJkewJYClYq+uidFJkGbZ9qpkZZFIgLOMxpVTbRn+necpTTuvtcYX/PL/NjgzQaX Uf0k7xlHR7XuJe18L513oRAe6WcT0AMIT4lf -----END CERTIFICATE-----Generated at Mon Jun 30 03:29:31 2025 by rpki-client