$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/323430333a313838303a3a2f33322d3332203d3e203436303535.roa File: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (raw, json) Hash identifier: 5E43YVmj6Z7OGECRV0xvOsTql9Kqf+2yG0vKEkPwlDE= Subject key identifier: 9E:E8:0E:B6:0F:B2:24:45:64:FC:AB:D2:F2:1A:14:6C:65:C2:8A:4F Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 07B80388E29C83F0DF5B02136BBB913528F9B3EE Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/323430333a313838303a3a2f33322d3332203d3e203436303535.roa Signing time: Wed 11 Jun 2025 09:01:43 +0000 ROA not before: Wed 11 Jun 2025 08:56:43 +0000 ROA not after: Wed 10 Jun 2026 09:01:43 +0000 asID: 46055 IP address blocks: 2403:1880::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 07:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b8:03:88:e2:9c:83:f0:df:5b:02:13:6b:bb:91:35:28:f9:b3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Jun 11 08:56:43 2025 GMT Not After : Jun 10 09:01:43 2026 GMT Subject: CN=9EE80EB60FB2244564FCABD2F21A146C65C28A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:a2:82:92:6d:36:6d:aa:b3:87:49:2f:32: ba:0a:19:aa:1f:70:e7:7c:96:88:49:03:39:eb:2d: 21:3c:8c:56:ad:ff:08:17:3c:97:91:d9:39:85:54: 4f:40:e3:c6:ce:7e:79:6e:cc:44:3d:30:0f:9b:bf: a8:4d:70:09:d2:67:b7:4a:61:a6:3d:2a:06:52:5a: 27:96:75:0d:fe:58:9d:20:cd:ce:f1:ba:10:4f:02: e3:a2:8f:0a:5d:d0:05:81:7b:46:10:ab:83:0b:36: c6:48:8e:bb:34:d4:a3:68:14:cd:8f:39:e3:de:01: b0:d3:82:6f:a4:10:a2:df:8a:43:9f:0d:ac:0a:88: c4:35:fa:db:d7:88:89:b0:ef:2e:c3:f5:b7:2e:d3: 65:72:77:c9:ed:b7:17:38:d1:f3:ff:0d:87:14:dc: 19:f9:d8:04:0b:a2:df:e1:f9:7f:e3:ea:a9:65:de: 4c:3a:f5:8b:d9:64:6c:55:68:a3:cf:dd:88:ae:9d: a4:3d:58:9a:dc:13:68:5a:00:18:a1:c9:97:42:71: 0a:0b:1f:f2:2b:46:ed:26:44:4d:64:6c:ed:f1:53: f0:be:02:22:2b:02:ca:c2:7e:c2:a3:95:c4:8b:f6: 12:c6:a1:89:76:cf:a6:48:11:2b:f6:b6:38:dd:57: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E8:0E:B6:0F:B2:24:45:64:FC:AB:D2:F2:1A:14:6C:65:C2:8A:4F X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/323430333a313838303a3a2f33322d3332203d3e203436303535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:1880::/32 Signature Algorithm: sha256WithRSAEncryption b0:dc:e9:4f:e0:54:9c:e5:90:14:7d:43:e2:81:0e:23:c4:6e: 6f:5b:cb:c6:fc:74:74:2a:e7:6a:2a:3b:cc:c7:66:db:8f:71: 1e:4e:fa:0c:79:b3:d7:a2:89:d1:8f:78:2a:dd:94:e2:5d:a7: 1d:f9:57:44:4e:73:00:cd:61:74:60:ac:c9:d1:90:a9:24:76: a3:a9:f1:20:8e:86:6f:93:f0:f9:50:37:36:14:dc:fa:f0:b5: 91:8a:21:f6:38:81:63:cf:66:15:9f:e0:16:1a:ca:39:c6:cf: 42:0e:31:57:6d:af:90:5b:cb:93:4e:e5:00:3b:e0:97:e0:d7: ef:40:de:22:af:c1:b8:93:ee:3d:c7:8f:c4:66:6f:22:58:a6: f2:0d:73:48:c4:f9:1a:a6:f8:7d:91:66:ce:75:bb:06:27:59: cf:5e:28:6a:e9:49:69:f8:cf:a5:88:d5:80:06:dc:6b:39:28: 0c:64:64:75:f3:69:75:16:88:dd:e4:d8:dc:cc:06:4b:aa:d3: 1e:b1:b8:03:53:b2:1b:25:2d:8c:13:8f:99:81:ca:08:77:2d: 25:ed:d2:18:ce:97:4b:af:21:d4:8b:15:10:1e:ea:83:81:07: 6e:a8:92:e3:19:c4:93:2e:e1:5a:d1:30:6d:81:3d:48:58:0b: a5:e4:2e:1c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUB7gDiOKcg/DfWwITa7uRNSj5s+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTA2MTEwODU2NDNaFw0yNjA2MTAwOTAxNDNaMDMxMTAvBgNV BAMTKDlFRTgwRUI2MEZCMjI0NDU2NEZDQUJEMkYyMUExNDZDNjVDMjhBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/O6KCkm02baqzh0kvMroKGaof cOd8lohJAznrLSE8jFat/wgXPJeR2TmFVE9A48bOfnluzEQ9MA+bv6hNcAnSZ7dK YaY9KgZSWieWdQ3+WJ0gzc7xuhBPAuOijwpd0AWBe0YQq4MLNsZIjrs01KNoFM2P OePeAbDTgm+kEKLfikOfDawKiMQ1+tvXiImw7y7D9bcu02Vyd8nttxc40fP/DYcU 3Bn52AQLot/h+X/j6qll3kw69YvZZGxVaKPP3YiunaQ9WJrcE2haABihyZdCcQoL H/IrRu0mRE1kbO3xU/C+AiIrAsrCfsKjlcSL9hLGoYl2z6ZIESv2tjjdV+oLAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUnugOtg+yJEVk/KvS8hoUbGXCik8wHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0LThjMmQtNGViMS1i NGNkLTM1YjQ5MjE2ZTA3My8wLzMyMzQzMDMzM2EzMTM4MzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM0MzYzMDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAxiAMA0GCSqGSIb3 DQEBCwUAA4IBAQCw3OlP4FSc5ZAUfUPigQ4jxG5vW8vG/HR0KudqKjvMx2bbj3Ee TvoMebPXoonRj3gq3ZTiXacd+VdETnMAzWF0YKzJ0ZCpJHajqfEgjoZvk/D5UDc2 FNz68LWRiiH2OIFjz2YVn+AWGso5xs9CDjFXba+QW8uTTuUAO+CX4NfvQN4ir8G4 k+49x4/EZm8iWKbyDXNIxPkapvh9kWbOdbsGJ1nPXihq6Ulp+M+liNWABtxrOSgM ZGR182l1Fojd5NjczAZLqtMesbgDU7IbJS2ME4+ZgcoIdy0l7dIYzpdLryHUixUQ HuqDgQduqJLjGcSTLuFa0TBtgT1IWAul5C4c -----END CERTIFICATE-----Generated at Thu Jul 3 06:28:33 2025 by rpki-client