$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa File: 323430313a323930303a3a2f33322d3332203d3e203233363739.roa (raw, json) Hash identifier: XDj/lGrTn/SL/Ae7NmtTjRlRsm+9mi4EiTFNHYJ7TAo= Subject key identifier: 23:8B:7B:E8:E0:D2:8F:1F:EC:23:DE:4B:2D:3D:BE:12:4E:7C:7E:41 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 788EF09B78023B92898ECD3473E1C4CFCB7585A3 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa Signing time: Wed 01 Jan 2025 04:00:38 +0000 ROA not before: Wed 01 Jan 2025 03:55:38 +0000 ROA not after: Wed 31 Dec 2025 04:00:38 +0000 asID: 23679 IP address blocks: 2401:2900::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 10:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8e:f0:9b:78:02:3b:92:89:8e:cd:34:73:e1:c4:cf:cb:75:85:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jan 1 03:55:38 2025 GMT Not After : Dec 31 04:00:38 2025 GMT Subject: CN=238B7BE8E0D28F1FEC23DE4B2D3DBE124E7C7E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:98:3c:db:3c:8d:c3:3c:d2:d6:0c:a9:f3: ce:53:cb:73:cb:eb:f1:e6:a3:61:20:7e:0a:5e:36: 20:2c:b7:75:88:f1:77:ce:5f:16:ed:ff:a1:14:de: 98:56:e7:68:7c:e2:de:3d:7f:ad:21:51:d4:ad:f0: 79:cf:a4:03:ea:89:08:7c:e5:fb:3d:6c:28:ac:03: 12:e6:21:d5:2c:e0:21:1a:a6:46:06:a3:ad:cd:10: 8d:b4:7b:9a:10:4b:9e:52:8c:36:47:fc:85:5c:39: 55:18:a0:53:d7:65:00:d4:e8:e9:3c:c8:b0:e8:46: 7b:f9:75:33:53:55:03:a1:1f:87:8e:f2:87:8a:2d: cd:50:35:f6:9b:6d:95:77:81:6a:51:f5:42:a5:8f: da:ea:51:fa:03:15:58:2c:bf:55:23:f5:6d:e5:2d: 1c:76:52:e5:2e:05:36:f6:a6:53:e0:77:e2:76:68: 87:96:f5:51:6b:1c:5d:d6:13:a5:85:82:1d:56:73: 9d:34:84:6c:66:4b:ed:f2:1e:9b:89:88:8e:9f:80: f2:a7:8c:64:30:3d:d9:51:5e:2d:a5:2f:aa:b5:b0: 0d:d2:7c:a2:41:40:99:b8:b4:4d:fa:49:b2:b9:44: 3f:2e:3a:23:3b:52:fc:aa:8f:0c:8d:6d:dd:a3:59: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8B:7B:E8:E0:D2:8F:1F:EC:23:DE:4B:2D:3D:BE:12:4E:7C:7E:41 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900::/32 Signature Algorithm: sha256WithRSAEncryption 75:e5:e9:c3:5f:a3:6e:8d:c0:06:78:34:a3:4b:f2:cd:c6:2f: 64:1f:b2:a8:2f:12:3c:d0:b1:6e:9b:d9:7d:76:50:71:37:6f: fc:d3:fa:5d:80:b8:a6:75:ea:b4:07:8a:15:52:94:63:42:4c: dc:a0:9d:9c:21:ce:eb:a9:10:a8:f2:96:22:21:fc:c6:72:73: c0:d2:40:3d:7e:73:17:12:77:a0:f2:29:2e:a2:fe:a7:7b:34: d5:e8:2a:c1:83:37:1a:af:7c:10:9b:5d:27:51:69:9d:99:0b: 11:db:2a:7e:74:aa:be:dd:02:27:6b:b2:04:f1:2c:43:8c:a5: 8c:e8:72:71:40:56:77:d2:40:ab:97:a1:d6:ea:23:e9:65:84: 93:8a:95:34:06:0c:a7:bd:fe:bd:08:cc:a7:12:f8:bd:e9:19: ec:c6:01:f2:70:24:f2:fc:74:35:82:c0:d2:0c:c8:6a:8d:e6: ef:ea:d9:15:e0:6a:59:f9:8e:89:b2:9d:c2:e8:3a:2d:3a:ad: 9b:1f:19:6d:7b:02:c7:49:10:d8:fb:32:74:17:0d:d1:13:34: 41:84:83:fb:8d:fe:8a:c2:9c:99:17:db:79:2c:1e:30:2e:d8: d5:57:98:80:d8:17:ef:90:c1:c3:63:d7:5e:d0:9e:29:65:f9: 56:d4:21:f7 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUeI7wm3gCO5KJjs00c+HEz8t1haMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTAxMDEwMzU1MzhaFw0yNTEyMzEwNDAwMzhaMDMxMTAvBgNV BAMTKDIzOEI3QkU4RTBEMjhGMUZFQzIzREU0QjJEM0RCRTEyNEU3QzdFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEapg82zyNwzzS1gyp885Ty3PL 6/Hmo2EgfgpeNiAst3WI8XfOXxbt/6EU3phW52h84t49f60hUdSt8HnPpAPqiQh8 5fs9bCisAxLmIdUs4CEapkYGo63NEI20e5oQS55SjDZH/IVcOVUYoFPXZQDU6Ok8 yLDoRnv5dTNTVQOhH4eO8oeKLc1QNfabbZV3gWpR9UKlj9rqUfoDFVgsv1Uj9W3l LRx2UuUuBTb2plPgd+J2aIeW9VFrHF3WE6WFgh1Wc500hGxmS+3yHpuJiI6fgPKn jGQwPdlRXi2lL6q1sA3SfKJBQJm4tE36SbK5RD8uOiM7UvyqjwyNbd2jWcQhAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUI4t76ODSjx/sI95LLT2+Ek58fkEwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMyMzMzNjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkASkAMA0GCSqGSIb3 DQEBCwUAA4IBAQB15enDX6NujcAGeDSjS/LNxi9kH7KoLxI80LFum9l9dlBxN2/8 0/pdgLimdeq0B4oVUpRjQkzcoJ2cIc7rqRCo8pYiIfzGcnPA0kA9fnMXEneg8iku ov6nezTV6CrBgzcar3wQm10nUWmdmQsR2yp+dKq+3QIna7IE8SxDjKWM6HJxQFZ3 0kCrl6HW6iPpZYSTipU0Bgynvf69CMynEvi96RnsxgHycCTy/HQ1gsDSDMhqjebv 6tkV4GpZ+Y6Jsp3C6DotOq2bHxltewLHSRDY+zJ0Fw3REzRBhIP7jf6KwpyZF9t5 LB4wLtjVV5iA2BfvkMHDY9de0J4pZflW1CH3 -----END CERTIFICATE-----Generated at Sun Apr 6 10:57:58 2025 by rpki-client