$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa File: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (raw, json) Hash identifier: D6yeTZeAuFxEtqmSKbk3UU6vmrij1x8nL+p5b0eR7L4= Subject key identifier: 88:8F:3D:55:B7:82:F6:EB:43:2E:5D:DD:CB:55:76:5E:FC:77:3B:A9 Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 7F8A1A594BC147D5E55E48B5E9E26A1CBBD912F7 Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa Signing time: Mon 02 Jun 2025 02:02:35 +0000 ROA not before: Mon 02 Jun 2025 01:57:35 +0000 ROA not after: Mon 01 Jun 2026 02:02:35 +0000 asID: 38781 IP address blocks: 2001:df3:e600::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8a:1a:59:4b:c1:47:d5:e5:5e:48:b5:e9:e2:6a:1c:bb:d9:12:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: Jun 2 01:57:35 2025 GMT Not After : Jun 1 02:02:35 2026 GMT Subject: CN=888F3D55B782F6EB432E5DDDCB55765EFC773BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:34:d7:66:24:c4:a6:fd:75:b8:d7:45:73:c3: e7:e8:fe:87:3e:93:e1:34:0e:a7:71:80:1d:1a:c5: f3:9d:e4:c8:15:ac:28:3e:e0:89:5a:c2:58:59:92: 06:29:67:b6:16:e9:90:e5:d1:e7:e7:48:86:f1:62: 73:f0:ff:68:dc:24:a1:26:53:ce:14:63:51:61:e9: 34:0a:13:6e:0d:99:7c:1d:f4:56:e0:87:fc:76:42: b2:9f:2c:c4:37:f4:79:44:7a:18:63:6a:38:bd:0e: dd:0b:cb:e3:dc:5b:7e:bc:65:5d:30:b8:a9:1c:f1: 06:e3:f7:97:9c:4b:b5:19:84:19:48:c3:d6:b1:ec: a3:7b:07:48:5c:d4:a8:37:69:d3:8e:b2:d5:b0:87: 25:75:6a:3a:2a:ae:7a:c2:af:a3:87:47:22:74:00: c4:4c:db:92:c3:1c:67:c5:f1:8a:c8:af:9f:a9:47: 53:59:f5:b7:b0:7c:eb:57:fd:f9:14:11:85:21:b3: cb:58:6f:fc:8e:af:2f:c9:ca:45:03:e8:1e:0c:3f: c5:cb:5c:03:42:05:8c:79:e2:25:b2:9d:66:b1:1c: de:2b:29:67:3e:92:86:43:86:a5:3f:19:64:15:d9: 4c:d0:6a:8f:e4:7d:ed:6e:6f:ba:eb:c7:f8:97:a8: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8F:3D:55:B7:82:F6:EB:43:2E:5D:DD:CB:55:76:5E:FC:77:3B:A9 X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:e600::/48 Signature Algorithm: sha256WithRSAEncryption 0e:51:44:a3:7e:34:42:2a:26:74:fd:29:d5:d5:9b:e3:13:0f: dd:22:4b:de:be:e8:a6:da:25:81:f5:d3:e8:a1:9c:1e:ab:0f: 1d:dd:41:e8:18:b5:49:55:26:56:80:33:0b:8c:ee:e1:58:2f: 97:f2:5c:d8:9a:f7:d5:f1:53:c7:e7:75:de:52:cd:b7:00:5b: b7:41:2f:be:11:dc:ae:9a:cf:14:e5:fb:0d:82:2d:77:f0:7f: 7c:61:fa:f2:93:c8:2b:30:dd:34:c3:d7:15:5f:70:0e:00:8f: ea:f7:ce:31:48:05:1a:15:22:d7:f8:d6:3f:49:90:11:a6:15: a7:a3:62:2f:bd:71:76:ca:a5:c6:27:a7:16:4e:55:10:6f:13: e9:ee:71:ce:a7:7b:75:0b:0b:54:7f:ba:79:af:4f:b1:e9:d6: 35:45:fd:17:88:f8:2a:f3:9c:5a:45:93:11:47:29:4a:5c:bd: df:69:93:5e:8e:c8:9a:46:b7:ed:04:52:50:98:29:32:26:c5: 79:a8:a0:91:7e:f0:af:bd:64:65:3c:d9:d6:42:f8:26:50:ef: dd:eb:50:aa:20:d2:36:c8:de:56:e9:7a:3b:af:11:3c:6a:03: 9f:2a:41:27:f7:30:db:fa:f1:63:29:6c:26:eb:8e:1d:82:42: ae:dd:d8:0b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUf4oaWUvBR9XlXki16eJqHLvZEvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNTA2MDIwMTU3MzVaFw0yNjA2MDEwMjAyMzVaMDMxMTAvBgNV BAMTKDg4OEYzRDU1Qjc4MkY2RUI0MzJFNURERENCNTU3NjVFRkM3NzNCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxNNdmJMSm/XW410Vzw+fo/oc+ k+E0DqdxgB0axfOd5MgVrCg+4IlawlhZkgYpZ7YW6ZDl0efnSIbxYnPw/2jcJKEm U84UY1Fh6TQKE24NmXwd9Fbgh/x2QrKfLMQ39HlEehhjaji9Dt0Ly+PcW368ZV0w uKkc8Qbj95ecS7UZhBlIw9ax7KN7B0hc1Kg3adOOstWwhyV1ajoqrnrCr6OHRyJ0 AMRM25LDHGfF8YrIr5+pR1NZ9bewfOtX/fkUEYUhs8tYb/yOry/JykUD6B4MP8XL XANCBYx54iWynWaxHN4rKWc+koZDhqU/GWQV2UzQao/kfe1ub7rrx/iXqBqPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUiI89VbeC9utDLl3dy1V2Xvx3O6kwHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OTM2ODZiLTMzODQtNDQxMi04 ZTdjLWU5ZDFiODUyYWExZS8wLzMyMzAzMDMxM2E2NDY2MzMzYTY1MzYzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM3MzgzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfPm ADANBgkqhkiG9w0BAQsFAAOCAQEADlFEo340QiomdP0p1dWb4xMP3SJL3r7optol gfXT6KGcHqsPHd1B6Bi1SVUmVoAzC4zu4Vgvl/Jc2Jr31fFTx+d13lLNtwBbt0Ev vhHcrprPFOX7DYItd/B/fGH68pPIKzDdNMPXFV9wDgCP6vfOMUgFGhUi1/jWP0mQ EaYVp6NiL71xdsqlxienFk5VEG8T6e5xzqd7dQsLVH+6ea9PsenWNUX9F4j4KvOc WkWTEUcpSly932mTXo7Imka37QRSUJgpMibFeaigkX7wr71kZTzZ1kL4JlDv3etQ qiDSNsjeVul6O68RPGoDnypBJ/cw2/rxYylsJuuOHYJCrt3YCw== -----END CERTIFICATE-----Generated at Sat Jun 7 12:27:26 2025 by rpki-client