$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa File: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (raw, json) Hash identifier: vmMOC54VRYyQ6zaPWhSxLckPPT+mw9crTtfHlgZPBE8= Subject key identifier: 50:D7:C4:E4:82:62:C7:89:52:2A:3B:53:B2:39:B0:F7:54:C2:45:BC Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 04FA3851F738DB1CF7FA1F0244AE79CC21F5ECF4 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa Signing time: Thu 26 Jun 2025 19:00:00 +0000 ROA not before: Thu 26 Jun 2025 18:55:00 +0000 ROA not after: Thu 25 Jun 2026 19:00:00 +0000 asID: 24206 IP address blocks: 2402:ab00:a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fa:38:51:f7:38:db:1c:f7:fa:1f:02:44:ae:79:cc:21:f5:ec:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Jun 26 18:55:00 2025 GMT Not After : Jun 25 19:00:00 2026 GMT Subject: CN=50D7C4E48262C789522A3B53B239B0F754C245BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:8f:6d:71:ef:eb:c1:b9:6d:48:f8:90:74: 5e:e5:33:71:df:cf:c5:69:3f:d1:d1:ee:3f:26:bb: 01:9f:f3:ff:88:19:74:f1:59:3e:9b:ff:e5:7e:56: 8f:ef:0a:ad:ff:2b:99:98:cb:98:30:3f:10:60:95: 14:06:c7:84:0c:41:60:de:d1:df:7e:79:37:ec:d9: 8f:7d:3a:a6:83:39:5c:4a:ca:1d:58:49:94:86:45: c8:1f:79:8b:0d:78:bc:20:cd:75:63:a6:53:3b:85: ae:dc:e4:45:9d:68:bc:dd:2e:b5:7a:3f:d8:cd:13: 6c:99:c8:08:44:7a:41:79:be:c0:9a:d0:23:84:94: 33:7e:34:e8:bb:93:77:b2:7b:f0:48:b3:23:89:41: 9a:e2:98:a8:33:b1:c4:fd:1b:f7:d5:53:62:c4:99: d0:88:d1:63:80:07:12:82:da:e5:93:7b:9d:96:5a: d2:3c:ab:43:63:cd:ac:5a:62:e8:f6:29:ba:82:81: 65:fe:cf:fb:20:bc:34:6e:9d:06:09:34:dc:5b:57: 33:d5:cf:21:07:e9:05:77:ea:3d:46:b6:49:37:c9: 2d:f3:35:75:3f:76:95:c1:e0:b9:41:16:34:a7:71: 41:1f:ad:5d:1d:0b:79:07:85:18:15:9c:00:62:47: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D7:C4:E4:82:62:C7:89:52:2A:3B:53:B2:39:B0:F7:54:C2:45:BC X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:ab00:a::/48 Signature Algorithm: sha256WithRSAEncryption 35:5b:59:e2:de:41:b4:7b:55:d9:c7:1d:96:0f:74:21:27:70: da:8b:71:b8:38:60:27:69:79:6d:e6:df:64:f6:64:5f:5f:ef: c3:d0:72:01:6d:7b:d0:db:08:2c:98:90:7f:f9:bc:6b:93:76: 53:e1:fb:84:c4:aa:f6:a4:d0:d3:21:35:0f:ec:54:6e:73:2c: 5f:bc:05:7f:4b:45:6c:21:d5:36:6f:a7:52:ee:d3:86:22:bc: d9:c7:e9:f0:03:e8:d4:0c:67:8b:b9:6e:52:0f:5d:42:3c:fa: e6:a6:37:93:18:31:70:3a:5b:30:94:68:fb:b4:66:2f:69:0f: 97:b1:ff:1d:3a:6e:df:6f:0d:d9:2c:5e:46:41:b5:f8:4a:41: dd:2b:4a:79:a7:fe:d0:8c:85:b1:c2:e8:29:5b:1d:a9:9b:94: d5:b1:b7:6a:d9:a4:13:89:fb:19:52:32:67:96:9d:da:9b:70: 1d:bb:f1:2b:5e:87:72:b9:ad:c2:79:31:2e:bb:4e:f7:54:1f: 44:2e:47:5f:5d:09:ae:6d:b7:7f:03:9f:43:da:7f:8d:d5:da: 4a:cb:7b:9f:e1:59:d1:18:d4:4e:68:87:5b:7b:9c:ed:be:66: fe:50:46:b2:c5:f9:a1:79:06:50:7f:f1:fa:51:c2:0a:bc:9a: 5e:a9:70:9d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUBPo4Ufc42xz3+h8CRK55zCH17PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA2MjYxODU1MDBaFw0yNjA2MjUxOTAwMDBaMDMxMTAvBgNV BAMTKDUwRDdDNEU0ODI2MkM3ODk1MjJBM0I1M0IyMzlCMEY3NTRDMjQ1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mI9tce/rwbltSPiQdF7lM3Hf z8VpP9HR7j8muwGf8/+IGXTxWT6b/+V+Vo/vCq3/K5mYy5gwPxBglRQGx4QMQWDe 0d9+eTfs2Y99OqaDOVxKyh1YSZSGRcgfeYsNeLwgzXVjplM7ha7c5EWdaLzdLrV6 P9jNE2yZyAhEekF5vsCa0COElDN+NOi7k3eye/BIsyOJQZrimKgzscT9G/fVU2LE mdCI0WOABxKC2uWTe52WWtI8q0NjzaxaYuj2KbqCgWX+z/sgvDRunQYJNNxbVzPV zyEH6QV36j1Gtkk3yS3zNXU/dpXB4LlBFjSncUEfrV0dC3kHhRgVnABiRyDRAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUUNfE5IJix4lSKjtTsjmw91TCRbwwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzQzMDMyM2E2MTYyMzAzMDNhNjEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMjM0MzIzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKrAAAKMA0G CSqGSIb3DQEBCwUAA4IBAQA1W1ni3kG0e1XZxx2WD3QhJ3Dai3G4OGAnaXlt5t9k 9mRfX+/D0HIBbXvQ2wgsmJB/+bxrk3ZT4fuExKr2pNDTITUP7FRucyxfvAV/S0Vs IdU2b6dS7tOGIrzZx+nwA+jUDGeLuW5SD11CPPrmpjeTGDFwOlswlGj7tGYvaQ+X sf8dOm7fbw3ZLF5GQbX4SkHdK0p5p/7QjIWxwugpWx2pm5TVsbdq2aQTifsZUjJn lp3am3Adu/ErXodyua3CeTEuu073VB9ELkdfXQmubbd/A59D2n+N1dpKy3uf4VnR GNROaIdbe5ztvmb+UEayxfmheQZQf/H6UcIKvJpeqXCd -----END CERTIFICATE-----Generated at Tue Jul 1 23:27:22 2025 by rpki-client