$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa File: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (raw, json) Hash identifier: 01o8IIdEBMNVP2rARnAtQNMxpIRvEPCoH/cFEbdvFjA= Subject key identifier: BC:AA:2E:BA:7B:E0:3D:AC:1D:DD:AA:16:A1:52:E1:F4:DA:B9:A2:02 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 03F15902944BABCACA1451467F1517058E20EB0C Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa Signing time: Sat 13 Sep 2025 05:00:00 +0000 ROA not before: Sat 13 Sep 2025 04:55:00 +0000 ROA not after: Sat 12 Sep 2026 05:00:00 +0000 asID: 58821 IP address blocks: 2406:7b40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f1:59:02:94:4b:ab:ca:ca:14:51:46:7f:15:17:05:8e:20:eb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Sep 13 04:55:00 2025 GMT Not After : Sep 12 05:00:00 2026 GMT Subject: CN=BCAA2EBA7BE03DAC1DDDAA16A152E1F4DAB9A202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f6:3f:28:10:c9:92:95:50:01:10:58:4c:d5: d0:df:ea:a1:0b:63:e5:3d:32:78:e5:05:f1:b2:76: 93:95:ac:49:03:95:20:83:f6:98:ae:03:c6:70:40: b6:b9:2f:9d:05:8a:c8:bd:7f:e8:8a:a4:60:78:27: 1e:82:a5:7b:ef:b1:a7:48:9e:7e:31:f6:33:64:83: fd:b8:1a:17:40:7e:ca:0d:98:08:22:02:1a:ca:6f: 2e:6a:6f:e8:85:9f:69:6c:b0:41:25:39:94:63:25: 46:61:71:0f:fd:11:9b:28:f5:14:52:3a:2e:65:62: 69:79:61:81:05:fe:c4:33:b8:04:6a:9a:45:ec:33: d3:08:f7:cd:15:2b:4b:fd:d7:d8:47:70:46:e9:53: b2:b3:1f:22:6f:a4:54:3d:90:c5:cd:61:ea:cb:54: 00:6c:47:c9:7d:6e:9d:ed:e8:83:fd:62:b0:9d:af: 15:70:43:e4:eb:dd:b1:cc:0d:5e:82:97:ce:66:7c: 4f:6e:eb:ce:39:6e:08:98:0b:0e:cf:41:7a:81:77: da:eb:17:64:fc:18:87:4e:9c:40:20:fe:b1:d4:a0: 89:36:d2:76:a5:e7:aa:d3:d5:9e:e9:a3:a8:35:66: d0:6a:fb:ae:ec:23:ac:55:83:1e:7d:ea:16:85:83: b1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AA:2E:BA:7B:E0:3D:AC:1D:DD:AA:16:A1:52:E1:F4:DA:B9:A2:02 X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/323430363a376234303a3a2f33322d3438203d3e203538383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 47:af:0d:b3:cc:de:bd:43:8c:4d:ec:36:c6:cf:90:06:68:ed: 72:5a:16:2f:3a:87:ca:27:c1:27:52:9a:75:ab:1f:9f:27:58: 12:05:06:0a:5b:16:3f:9c:11:b8:83:2a:dc:9a:18:19:e8:8b: 8a:bf:e9:1b:53:4a:84:44:c1:26:21:36:4b:47:64:70:b6:39: 87:ee:f1:9e:04:e2:d6:58:c7:5e:20:f7:bb:52:c7:a8:94:78: e4:de:7d:9a:13:38:85:96:1f:3c:d1:61:2a:28:c4:7e:eb:d1: 79:31:43:6f:a5:5f:ae:65:88:43:ab:04:69:0a:a9:b3:e5:a1: cd:e4:05:8a:52:6e:73:66:6a:61:16:74:57:e4:67:4e:a1:45: d9:d2:63:ad:00:6c:42:ac:1e:0e:b5:d3:87:cc:14:03:b2:54: 1e:89:8b:df:19:55:fb:d0:8e:2b:5d:e1:1e:4d:6e:83:1d:f1: d3:c0:cb:59:7f:8a:f3:65:e4:53:29:36:19:96:69:dc:15:3f: 8f:fa:28:94:66:45:8e:e5:db:e2:f1:9d:2d:06:db:ca:4f:e4: ec:ea:47:d4:d1:8b:df:84:de:48:38:71:07:bd:5c:ec:9a:44: 49:a5:b3:1d:d4:52:ad:e5:45:1a:82:41:d5:5f:dc:0c:03:e0: 58:87:94:d2 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUA/FZApRLq8rKFFFGfxUXBY4g6wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNTA5MTMwNDU1MDBaFw0yNjA5MTIwNTAwMDBaMDMxMTAvBgNV BAMTKEJDQUEyRUJBN0JFMDNEQUMxREREQUExNkExNTJFMUY0REFCOUEyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9j8oEMmSlVABEFhM1dDf6qEL Y+U9MnjlBfGydpOVrEkDlSCD9piuA8ZwQLa5L50Fisi9f+iKpGB4Jx6CpXvvsadI nn4x9jNkg/24GhdAfsoNmAgiAhrKby5qb+iFn2lssEElOZRjJUZhcQ/9EZso9RRS Oi5lYml5YYEF/sQzuARqmkXsM9MI980VK0v919hHcEbpU7KzHyJvpFQ9kMXNYerL VABsR8l9bp3t6IP9YrCdrxVwQ+Tr3bHMDV6Cl85mfE9u6845bgiYCw7PQXqBd9rr F2T8GIdOnEAg/rHUoIk20nal56rT1Z7po6g1ZtBq+67sI6xVgx596haFg7FNAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUvKouunvgPawd3aoWoVLh9Nq5ogIwHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlMWVhNTEzLWFjNmUtNGE1Zi1i M2ViLWQ1MzUyY2FmNDg2Yi8wLzMyMzQzMDM2M2EzNzYyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBntAMA0GCSqGSIb3 DQEBCwUAA4IBAQBHrw2zzN69Q4xN7DbGz5AGaO1yWhYvOofKJ8EnUpp1qx+fJ1gS BQYKWxY/nBG4gyrcmhgZ6IuKv+kbU0qERMEmITZLR2RwtjmH7vGeBOLWWMdeIPe7 UseolHjk3n2aEziFlh880WEqKMR+69F5MUNvpV+uZYhDqwRpCqmz5aHN5AWKUm5z ZmphFnRX5GdOoUXZ0mOtAGxCrB4OtdOHzBQDslQeiYvfGVX70I4rXeEeTW6DHfHT wMtZf4rzZeRTKTYZlmncFT+P+iiUZkWO5dvi8Z0tBtvKT+Ts6kfU0YvfhN5IOHEH vVzsmkRJpbMd1FKt5UUagkHVX9wMA+BYh5TS -----END CERTIFICATE-----Generated at Mon Oct 20 12:14:31 2025 by rpki-client