$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa File: 323430353a363734303a3a2f33322d3332203d3e20313339343139.roa (raw, json) Hash identifier: WMxSedPwXIySzWCOaLHGaL4tbNCWdjdUSEo0MBMmwMQ= Subject key identifier: 06:B7:D8:BA:C4:9E:4A:23:0D:8A:26:70:A0:00:AA:A2:4C:F1:22:6B Certificate issuer: /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Certificate serial: 16BCC93D7969B659EC563B420D968001A9AD932B Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa Signing time: Fri 16 May 2025 14:00:00 +0000 ROA not before: Fri 16 May 2025 13:55:00 +0000 ROA not after: Fri 15 May 2026 14:00:00 +0000 asID: 139419 IP address blocks: 2405:6740::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:bc:c9:3d:79:69:b6:59:ec:56:3b:42:0d:96:80:01:a9:ad:93:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E Validity Not Before: May 16 13:55:00 2025 GMT Not After : May 15 14:00:00 2026 GMT Subject: CN=06B7D8BAC49E4A230D8A2670A000AAA24CF1226B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e4:53:d8:cf:7b:b9:2e:21:c7:10:1f:5a:1b: dd:46:68:36:f8:33:ec:24:a7:6b:2f:af:0f:f8:ec: bb:7c:55:73:ea:99:43:20:bd:71:46:3a:03:44:1d: a2:a8:a3:ec:d3:8f:bf:0a:92:01:60:ab:12:02:1e: cc:68:32:78:14:dd:7c:87:21:23:87:33:7a:44:92: 82:17:53:90:46:4c:e7:57:56:c2:d6:5c:2a:b6:6e: 57:08:48:81:78:05:94:f3:90:0d:99:4d:bc:53:39: 33:03:db:13:5d:18:3e:b8:d3:2a:54:04:8f:07:c0: 11:34:7b:2e:80:f4:80:5c:a2:8d:dc:7a:94:e6:50: 14:b9:1c:1e:39:ed:d7:53:a8:a0:3a:4e:88:21:55: 21:5e:1d:68:0e:29:ff:18:66:1e:6e:dd:0a:3b:30: 1f:ea:2a:07:08:c3:13:4b:92:0a:f4:38:03:8d:b0: c2:4f:d9:27:be:d8:76:b3:03:99:c0:4e:41:55:01: 30:56:dd:fa:b9:27:95:76:bb:66:ff:72:4b:e2:01: 0f:a0:dc:5c:6f:2b:b5:b5:46:cd:fd:87:62:df:f3: f5:ea:f8:23:e9:b1:ee:2d:aa:01:c3:1d:58:e4:ec: 93:f4:f3:d1:99:c7:e9:5c:23:81:16:af:36:29:f9: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B7:D8:BA:C4:9E:4A:23:0D:8A:26:70:A0:00:AA:A2:4C:F1:22:6B X509v3 Authority Key Identifier: keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/323430353a363734303a3a2f33322d3332203d3e20313339343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6740::/32 Signature Algorithm: sha256WithRSAEncryption 35:de:a3:45:4c:56:a2:30:91:95:a4:a9:40:b4:3b:33:7a:a0: 1d:50:f7:80:f8:3a:7a:fc:d1:53:d8:ee:e2:61:d6:4d:7f:16: ab:14:42:99:62:57:4f:0c:d9:f8:46:96:9b:9f:b7:42:9d:9c: 9c:42:40:0a:e1:6c:44:e0:66:ed:52:9a:60:93:d1:c8:4c:29: ee:18:8b:c4:88:c4:e9:38:a4:ce:e6:eb:18:a0:f9:13:cf:38: 40:55:34:50:e0:c9:af:6c:86:75:58:2c:0b:ff:b8:3f:f7:de: d0:2e:08:44:e8:b3:07:cb:1f:e0:a9:06:38:16:90:1e:9b:ef: fc:d6:24:86:b5:f9:f5:47:8f:b0:ec:a5:57:39:ba:5e:ab:5e: 3a:71:3f:4f:35:d2:c9:dd:0e:f0:8f:3a:6d:9c:37:09:fe:65: 7e:10:10:8a:74:6c:83:0a:7f:7c:1c:f2:4c:9a:bd:97:74:03: 31:79:4b:f0:c7:3f:37:81:f0:32:f5:2f:3c:e4:fe:77:9b:50: 2c:6d:85:66:9b:8d:64:47:9b:4f:97:73:b5:7b:13:82:ac:51: 63:55:7a:a1:d8:a1:e6:44:ec:df:46:fd:f0:67:89:c5:b4:01: 82:88:28:f8:a5:69:69:6d:f6:0f:90:c4:56:4f:e1:2b:a7:7e: 28:7a:5c:df -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUFrzJPXlptlnsVjtCDZaAAamtkyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FF OUNBQTc0RTAeFw0yNTA1MTYxMzU1MDBaFw0yNjA1MTUxNDAwMDBaMDMxMTAvBgNV BAMTKDA2QjdEOEJBQzQ5RTRBMjMwRDhBMjY3MEEwMDBBQUEyNENGMTIyNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5FPYz3u5LiHHEB9aG91GaDb4 M+wkp2svrw/47Lt8VXPqmUMgvXFGOgNEHaKoo+zTj78KkgFgqxICHsxoMngU3XyH ISOHM3pEkoIXU5BGTOdXVsLWXCq2blcISIF4BZTzkA2ZTbxTOTMD2xNdGD640ypU BI8HwBE0ey6A9IBcoo3cepTmUBS5HB457ddTqKA6ToghVSFeHWgOKf8YZh5u3Qo7 MB/qKgcIwxNLkgr0OAONsMJP2Se+2HazA5nATkFVATBW3fq5J5V2u2b/ckviAQ+g 3FxvK7W1Rs39h2Lf8/Xq+CPpse4tqgHDHVjk7JP089GZx+lcI4EWrzYp+X/zAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUBrfYusSeSiMNiiZwoACqokzxImswHwYDVR0j BBgwFoAUSMp3Gc586QVw4aG29EOUeunKp04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzEzZmMxNy01N2YxLTQ2NzEtOGExNi1mODU4ZGRkN2RhNDMvMC80OENBNzcxOUNF N0NFOTA1NzBFMUExQjZGNDQzOTQ3QUU5Q0FBNzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDhDQTc3MTlDRTdDRTkwNTcwRTFBMUI2RjQ0Mzk0N0FFOUNB QTc0RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTNmYzE3LTU3ZjEtNDY3MS04 YTE2LWY4NThkZGQ3ZGE0My8wLzMyMzQzMDM1M2EzNjM3MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzOTM0MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFZ0AwDQYJKoZI hvcNAQELBQADggEBADXeo0VMVqIwkZWkqUC0OzN6oB1Q94D4Onr80VPY7uJh1k1/ FqsUQpliV08M2fhGlpuft0KdnJxCQArhbETgZu1SmmCT0chMKe4Yi8SIxOk4pM7m 6xig+RPPOEBVNFDgya9shnVYLAv/uD/33tAuCEToswfLH+CpBjgWkB6b7/zWJIa1 +fVHj7DspVc5ul6rXjpxP0810sndDvCPOm2cNwn+ZX4QEIp0bIMKf3wc8kyavZd0 AzF5S/DHPzeB8DL1Lzzk/nebUCxthWabjWRHm0+Xc7V7E4KsUWNVeqHYoeZE7N9G /fBnicW0AYKIKPilaWlt9g+QxFZP4Sunfih6XN8= -----END CERTIFICATE-----Generated at Sun Jun 8 22:33:10 2025 by rpki-client