$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: Lk2DgYj+QODfg+053uFba0kcIHOb5Vr+/MafHCR41Bo= Subject key identifier: 77:E4:4D:D1:60:55:69:8F:C5:AD:29:D8:04:62:A6:2C:15:9E:68:B4 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 0849E43D4EBEEAF5782BA6E6597C33E5901BC4F6 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Tue 10 Dec 2024 05:58:16 +0000 ROA not before: Tue 10 Dec 2024 05:53:16 +0000 ROA not after: Tue 09 Dec 2025 05:58:16 +0000 asID: 153087 IP address blocks: 2404:97c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 20:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:49:e4:3d:4e:be:ea:f5:78:2b:a6:e6:59:7c:33:e5:90:1b:c4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Dec 10 05:53:16 2024 GMT Not After : Dec 9 05:58:16 2025 GMT Subject: CN=77E44DD16055698FC5AD29D80462A62C159E68B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:4d:72:df:3b:88:b6:e3:4e:66:fe:83:3f: a7:d3:d1:30:7e:8b:3d:bc:1a:26:11:17:13:d7:10: 6f:00:f8:01:d6:4f:10:1c:92:0e:27:fe:dc:12:a0: 4c:d2:81:9f:d7:c5:8b:dc:d6:50:ed:04:7b:85:58: fe:97:57:45:2c:ae:48:78:2d:9f:3f:a0:b0:d7:30: 7a:a1:21:e8:54:d6:dd:64:46:6c:b7:d4:78:56:89: a6:09:1f:34:2e:64:78:25:5e:3a:bd:f1:73:2f:6a: 3f:3f:7a:1c:ef:6a:21:11:48:37:1b:fa:1a:44:1f: f9:11:61:7c:b0:4f:81:15:eb:54:60:67:c0:5c:c6: 94:99:f8:17:30:e0:83:4e:12:aa:d3:a3:86:37:5b: 5e:ab:0e:62:a5:a9:c3:e8:d7:77:ae:80:ee:0c:64: be:d4:d9:22:da:91:a0:77:48:89:21:97:0a:bb:d2: 3a:21:c9:05:29:a6:1f:08:c7:a9:8c:6d:95:ef:dc: f7:a1:95:b0:d7:0e:33:e6:fd:c1:33:f6:ae:b2:a6: dd:09:50:7f:12:d8:19:2f:e3:e5:38:71:00:7c:be: 1b:8e:da:7b:eb:d8:29:13:7c:27:87:d1:b8:cb:e0: 41:e1:44:84:5c:fb:22:d3:1a:dd:8a:c6:c0:50:4b: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E4:4D:D1:60:55:69:8F:C5:AD:29:D8:04:62:A6:2C:15:9E:68:B4 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption b0:72:db:b7:dd:f7:f6:64:a9:bc:67:25:87:ff:ba:34:d2:f9: 8d:6b:08:98:ec:01:d4:f3:df:58:f2:5a:35:50:22:5e:96:8c: dc:8e:72:9b:c0:f8:10:a4:19:8a:51:c3:06:e4:b8:3b:e2:8c: 3d:09:5b:dd:63:ad:f0:27:a8:56:4e:54:48:6a:4a:e7:5c:f6: d0:df:ab:34:45:d9:5b:88:41:4c:89:d7:8b:46:3a:5b:d2:07: 8e:ba:04:5b:76:35:c3:a5:6b:8b:44:d7:94:23:43:ca:98:41: 6b:f6:74:94:99:96:3b:f5:0f:90:01:be:6a:5e:63:a3:d3:f7: 6b:2e:8d:0d:b7:0d:91:9c:6e:d4:70:fb:57:d0:84:26:91:e3: 1a:96:7d:2f:a8:f2:5f:5d:33:cf:cc:b8:30:70:9d:d1:f6:34: 0a:d0:d5:0d:d4:12:ca:27:cb:b3:c1:fe:64:71:ce:75:09:3a: f4:b8:d1:35:2f:4c:c8:7d:cf:e8:90:84:3b:5d:40:2b:6c:d3: 19:ed:44:6c:ad:8d:78:c8:96:b4:12:bf:04:c6:1b:21:88:21: 8e:fe:3d:20:fd:c2:49:61:0a:26:c7:a2:53:a7:b7:2a:16:42: a2:21:71:2f:d3:bc:49:8b:ff:3f:11:df:44:75:23:27:e2:7b: d6:a0:7e:63 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCEnkPU6+6vV4K6bmWXwz5ZAbxPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNDEyMTAwNTUzMTZaFw0yNTEyMDkwNTU4MTZaMDMxMTAvBgNV BAMTKDc3RTQ0REQxNjA1NTY5OEZDNUFEMjlEODA0NjJBNjJDMTU5RTY4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicU1y3zuItuNOZv6DP6fT0TB+ iz28GiYRFxPXEG8A+AHWTxAckg4n/twSoEzSgZ/XxYvc1lDtBHuFWP6XV0Usrkh4 LZ8/oLDXMHqhIehU1t1kRmy31HhWiaYJHzQuZHglXjq98XMvaj8/ehzvaiERSDcb +hpEH/kRYXywT4EV61RgZ8BcxpSZ+Bcw4INOEqrTo4Y3W16rDmKlqcPo13eugO4M ZL7U2SLakaB3SIkhlwq70johyQUpph8Ix6mMbZXv3PehlbDXDjPm/cEz9q6ypt0J UH8S2Bkv4+U4cQB8vhuO2nvr2CkTfCeH0bjL4EHhRIRc+yLTGt2KxsBQS0HBAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUd+RN0WBVaY/FrSnYBGKmLBWeaLQwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjYzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfA8DANBgkqhkiG9w0BAQsFAAOCAQEAsHLbt9339mSpvGclh/+6NNL5jWsImOwB 1PPfWPJaNVAiXpaM3I5ym8D4EKQZilHDBuS4O+KMPQlb3WOt8CeoVk5USGpK51z2 0N+rNEXZW4hBTInXi0Y6W9IHjroEW3Y1w6Vri0TXlCNDyphBa/Z0lJmWO/UPkAG+ al5jo9P3ay6NDbcNkZxu1HD7V9CEJpHjGpZ9L6jyX10zz8y4MHCd0fY0CtDVDdQS yifLs8H+ZHHOdQk69LjRNS9MyH3P6JCEO11AK2zTGe1EbK2NeMiWtBK/BMYbIYgh jv49IP3CSWEKJseiU6e3KhZCoiFxL9O8SYv/PxHfRHUjJ+J71qB+Yw== -----END CERTIFICATE-----Generated at Sun Apr 6 14:09:19 2025 by rpki-client