$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a3a2f33322d3438203d3e20313339393736.roa File: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (raw, json) Hash identifier: 1oSAlGyCAQ5BsCDikGrzZ8Xay1TMu0rXb0E3UWwkSO0= Subject key identifier: 2E:6B:92:B2:C5:64:34:22:28:9F:86:6D:8A:6D:04:5E:78:B0:B0:BA Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 15FF0CE86636F205DA75B7E0DE5F762F51CADE68 Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a3a2f33322d3438203d3e20313339393736.roa Signing time: Fri 04 Jul 2025 07:02:50 +0000 ROA not before: Fri 04 Jul 2025 06:57:50 +0000 ROA not after: Fri 03 Jul 2026 07:02:50 +0000 asID: 139976 IP address blocks: 2405:c5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ff:0c:e8:66:36:f2:05:da:75:b7:e0:de:5f:76:2f:51:ca:de:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Jul 4 06:57:50 2025 GMT Not After : Jul 3 07:02:50 2026 GMT Subject: CN=2E6B92B2C5643422289F866D8A6D045E78B0B0BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:fd:27:a3:cb:54:a4:02:07:52:9d:cf:f1: ab:8e:d4:51:ed:8c:9a:95:e1:15:9b:c1:a3:bb:ae: f2:ea:31:16:16:cc:85:73:2a:36:8d:23:8a:d9:03: cb:7c:63:dd:04:11:70:b9:93:d6:92:d2:75:12:d3: 8a:18:e9:51:c7:7a:80:c3:97:7e:61:ce:4b:19:d3: 3a:8a:d4:59:46:8e:4a:56:9c:6e:1f:a3:c9:51:b0: f5:bd:c6:77:12:19:2e:1d:30:b0:2a:12:48:66:91: 56:21:a1:79:d5:c6:9e:68:b2:b7:b2:11:5c:d4:7c: be:50:e9:d1:17:b8:21:72:19:41:3d:c5:bf:ce:7b: e5:24:59:54:cf:a6:95:29:f8:6c:d9:b9:9c:9a:91: 87:ce:27:1c:61:01:d4:e6:fd:3d:50:d8:ac:bc:4c: cd:7b:95:45:23:8a:c4:c2:c6:7a:da:36:51:97:1a: 1b:a5:0c:0b:71:29:e7:77:60:f6:d8:1b:93:85:a3: 4b:b6:c0:ab:03:70:fc:01:01:00:23:3a:cc:0e:d7: 29:3e:a6:dc:50:79:ad:53:9d:57:76:97:6f:ff:28: c4:11:2e:c9:af:11:05:89:ff:28:ff:c2:85:6b:92: 96:f6:6b:26:4e:d7:90:a7:4f:32:98:a5:ea:47:ab: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6B:92:B2:C5:64:34:22:28:9F:86:6D:8A:6D:04:5E:78:B0:B0:BA X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/323430353a633563303a3a2f33322d3438203d3e20313339393736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:fd:89:6c:76:57:75:37:bb:62:30:5c:55:cc:12:fa:8a:e0: 5a:61:a2:4c:d9:8a:97:4d:7c:93:c6:8f:eb:f0:f2:f6:7c:34: af:11:64:1e:b7:5b:ec:71:83:bf:7b:00:b1:34:67:d7:eb:26: cf:05:8c:7f:6a:bb:b9:94:e3:70:ba:d8:26:b1:9d:15:f3:f1: 0f:19:8d:af:99:58:6b:25:7e:d9:6c:cc:45:cf:56:48:8e:0d: 0c:b5:a4:09:b9:fc:86:e6:8b:47:13:2f:04:67:14:6a:34:a3: 37:e1:78:cd:e2:f5:df:05:2b:bc:ba:3e:ee:4e:31:2e:02:6c: 6c:07:0b:62:29:bf:50:a4:ab:1a:3a:6e:d8:39:42:9e:de:55: c2:4a:6b:ca:81:64:53:8e:c2:e8:83:fa:f5:da:57:de:8c:d0: 0b:00:d6:78:80:71:9f:ec:e1:de:b0:39:53:27:c3:58:39:05: 2b:6f:1d:97:ca:35:ae:4f:6a:41:7c:58:05:d1:4d:25:ff:64: d5:bb:ac:82:6a:69:c2:86:23:fb:ea:b0:41:00:0c:bf:94:c1: 0f:81:14:12:fe:b4:50:6d:fe:a8:b3:7b:43:ca:b7:03:b1:4d: 1f:0f:85:eb:e1:e3:ed:61:0b:d9:d0:20:ee:0a:f3:7c:8f:8e: 78:28:87:26 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUFf8M6GY28gXadbfg3l92L1HK3mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNTA3MDQwNjU3NTBaFw0yNjA3MDMwNzAyNTBaMDMxMTAvBgNV BAMTKDJFNkI5MkIyQzU2NDM0MjIyODlGODY2RDhBNkQwNDVFNzhCMEIwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfv0no8tUpAIHUp3P8auO1FHt jJqV4RWbwaO7rvLqMRYWzIVzKjaNI4rZA8t8Y90EEXC5k9aS0nUS04oY6VHHeoDD l35hzksZ0zqK1FlGjkpWnG4fo8lRsPW9xncSGS4dMLAqEkhmkVYhoXnVxp5osrey EVzUfL5Q6dEXuCFyGUE9xb/Oe+UkWVTPppUp+GzZuZyakYfOJxxhAdTm/T1Q2Ky8 TM17lUUjisTCxnraNlGXGhulDAtxKed3YPbYG5OFo0u2wKsDcPwBAQAjOswO1yk+ ptxQea1TnVd2l2//KMQRLsmvEQWJ/yj/woVrkpb2ayZO15CnTzKYpepHqwKDAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQULmuSssVkNCIon4Ztim0EXniwsLowHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwZTQ3NTBlLTQzOTMtNDNlYy05 YWI1LWQyNDdiYmMwN2Q4Ni8wLzMyMzQzMDM1M2E2MzM1NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFxcAwDQYJKoZI hvcNAQELBQADggEBACr9iWx2V3U3u2IwXFXMEvqK4FphokzZipdNfJPGj+vw8vZ8 NK8RZB63W+xxg797ALE0Z9frJs8FjH9qu7mU43C62CaxnRXz8Q8Zja+ZWGslftls zEXPVkiODQy1pAm5/Ibmi0cTLwRnFGo0ozfheM3i9d8FK7y6Pu5OMS4CbGwHC2Ip v1Ckqxo6btg5Qp7eVcJKa8qBZFOOwuiD+vXaV96M0AsA1niAcZ/s4d6wOVMnw1g5 BStvHZfKNa5PakF8WAXRTSX/ZNW7rIJqacKGI/vqsEEADL+UwQ+BFBL+tFBt/qiz e0PKtwOxTR8Phevh4+1hC9nQIO4K83yPjngohyY= -----END CERTIFICATE-----Generated at Wed Jul 23 12:03:38 2025 by rpki-client