$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a3a2f34382d3438203d3e203338313530.roa File: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (raw, json) Hash identifier: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA= Subject key identifier: A9:0C:70:8A:33:23:74:4C:05:B8:37:CE:BC:9E:E9:C6:0A:B7:77:18 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 7329761B1E60272E89E8FFB7A71BDA4436D97522 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a3a2f34382d3438203d3e203338313530.roa Signing time: Mon 02 Jun 2025 02:02:30 +0000 ROA not before: Mon 02 Jun 2025 01:57:30 +0000 ROA not after: Mon 01 Jun 2026 02:02:30 +0000 asID: 38150 IP address blocks: 2402:f080::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:29:76:1b:1e:60:27:2e:89:e8:ff:b7:a7:1b:da:44:36:d9:75:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jun 2 01:57:30 2025 GMT Not After : Jun 1 02:02:30 2026 GMT Subject: CN=A90C708A3323744C05B837CEBC9EE9C60AB77718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:6d:f3:97:1d:3c:bc:da:dd:39:6d:de:68: 97:13:94:ed:77:b0:0c:41:ce:f7:d7:70:f1:b6:31: 1f:ab:57:68:cc:dc:47:d2:4a:aa:82:6b:46:4b:8b: 4f:51:6a:e1:4e:d8:a8:c6:4f:ee:c5:9e:7c:47:33: 73:78:ce:e5:4c:ea:bf:5d:1f:98:91:3a:fa:2b:32: 6e:d2:b3:7c:48:42:ef:c9:de:f5:0d:37:cf:73:bf: cb:cb:72:a2:34:37:35:47:a7:c0:0d:cc:09:53:cb: 93:3e:29:6f:59:2d:54:26:61:67:95:45:97:85:d1: 47:cf:41:ad:92:58:6d:83:2a:b2:1e:3b:34:dc:49: 81:fe:39:85:aa:76:9f:18:a8:95:cc:26:f1:68:67: 44:46:54:3c:a2:10:37:10:cf:25:3b:29:d8:6a:31: 7b:86:fb:77:f2:7f:da:b1:5d:e3:4a:e8:bf:96:02: 02:cd:82:c2:c8:7c:76:3a:6f:88:e8:86:5f:50:f9: 65:12:56:75:ec:86:7f:4c:d8:03:a8:74:1d:0c:1f: fb:42:c1:75:43:59:a6:55:8e:2a:16:bf:de:4d:72: 4f:7f:87:26:ad:9e:bf:0f:41:44:c2:3c:29:3c:78: 68:4b:9e:5b:ba:57:6c:11:78:3b:74:fd:5b:55:a2: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0C:70:8A:33:23:74:4C:05:B8:37:CE:BC:9E:E9:C6:0A:B7:77:18 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/323430323a663038303a3a2f34382d3438203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f080::/48 Signature Algorithm: sha256WithRSAEncryption 80:3b:6e:e6:cd:c6:3f:4b:09:dd:1b:d4:84:74:b4:c5:41:c3: 9f:36:55:11:c6:ca:cd:b9:da:52:68:ea:4d:e0:85:30:40:1b: a0:b0:a4:69:6f:22:d7:4a:bd:13:01:2a:fd:04:e8:31:b0:21: b4:ea:3e:30:ef:ba:4c:13:80:29:db:55:e0:68:ae:e2:2d:97: a8:b9:c2:c2:2a:f4:24:94:56:03:70:b7:e6:2b:cc:7b:51:87: 06:ea:76:05:40:b1:a2:ed:09:bd:d1:8a:37:c9:e6:1e:8f:e2: a9:85:cf:df:76:f0:49:b2:cd:40:6c:c4:b5:2f:33:cf:fd:0a: a7:a6:b5:d7:b8:23:56:60:a3:47:f0:ec:39:91:4b:e1:7c:65: 61:9a:60:15:7f:e5:b7:d5:51:88:62:e8:51:dd:db:53:be:6d: d9:4b:62:a6:05:0f:6e:d8:64:17:62:26:e4:73:3c:11:2c:2e: 83:b6:af:51:b3:1e:69:d6:73:4a:fe:7f:9f:6e:5c:3a:af:bd: 9d:33:25:23:42:7b:28:63:2c:3d:cb:87:06:50:c9:1f:5f:0b: 4a:60:df:d2:41:d0:67:84:1e:c8:59:b8:82:48:4d:f8:34:b7: 5a:a0:4b:ac:06:81:20:1d:f9:98:11:81:d8:c9:ac:1a:c6:9b: e3:1d:41:08 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUcyl2Gx5gJy6J6P+3pxvaRDbZdSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA2MDIwMTU3MzBaFw0yNjA2MDEwMjAyMzBaMDMxMTAvBgNV BAMTKEE5MEM3MDhBMzMyMzc0NEMwNUI4MzdDRUJDOUVFOUM2MEFCNzc3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuam3zlx08vNrdOW3eaJcTlO13 sAxBzvfXcPG2MR+rV2jM3EfSSqqCa0ZLi09RauFO2KjGT+7FnnxHM3N4zuVM6r9d H5iROvorMm7Ss3xIQu/J3vUNN89zv8vLcqI0NzVHp8ANzAlTy5M+KW9ZLVQmYWeV RZeF0UfPQa2SWG2DKrIeOzTcSYH+OYWqdp8YqJXMJvFoZ0RGVDyiEDcQzyU7Kdhq MXuG+3fyf9qxXeNK6L+WAgLNgsLIfHY6b4johl9Q+WUSVnXshn9M2AOodB0MH/tC wXVDWaZVjioWv95Nck9/hyatnr8PQUTCPCk8eGhLnlu6V2wReDt0/VtVov4FAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUqQxwijMjdEwFuDfOvJ7pxgq3dxgwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMyMzQzMDMyM2E2NjMwMzgzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMzMzgzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAvCAAAAwDQYJKoZI hvcNAQELBQADggEBAIA7bubNxj9LCd0b1IR0tMVBw582VRHGys252lJo6k3ghTBA G6CwpGlvItdKvRMBKv0E6DGwIbTqPjDvukwTgCnbVeBoruItl6i5wsIq9CSUVgNw t+YrzHtRhwbqdgVAsaLtCb3RijfJ5h6P4qmFz9928EmyzUBsxLUvM8/9Cqemtde4 I1Zgo0fw7DmRS+F8ZWGaYBV/5bfVUYhi6FHd21O+bdlLYqYFD27YZBdiJuRzPBEs LoO2r1GzHmnWc0r+f59uXDqvvZ0zJSNCeyhjLD3LhwZQyR9fC0pg39JB0GeEHshZ uIJITfg0t1qgS6wGgSAd+ZgRgdjJrBrGm+MdQQg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:37 2025 by rpki-client