$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/323430303a346563303a3a2f33322d3438203d3e203634333030.roa File: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (raw, json) Hash identifier: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks= Subject key identifier: E7:0F:44:C4:3A:39:8E:58:85:8E:B4:18:FA:41:60:BC:48:3F:28:E0 Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 04968C8F12479EE443BAE46E8A78567F40205AB2 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/323430303a346563303a3a2f33322d3438203d3e203634333030.roa Signing time: Mon 02 Jun 2025 01:02:39 +0000 ROA not before: Mon 02 Jun 2025 00:57:39 +0000 ROA not after: Mon 01 Jun 2026 01:02:39 +0000 asID: 64300 IP address blocks: 2400:4ec0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:96:8c:8f:12:47:9e:e4:43:ba:e4:6e:8a:78:56:7f:40:20:5a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Jun 2 00:57:39 2025 GMT Not After : Jun 1 01:02:39 2026 GMT Subject: CN=E70F44C43A398E58858EB418FA4160BC483F28E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:dc:8d:80:6c:11:ee:8c:7a:07:b2:0c:78: cd:6e:cf:47:de:eb:07:c2:46:d7:e7:7f:57:86:d5: a1:3a:a0:52:0f:a0:7c:8b:ba:5c:6f:ec:d4:b9:56: 22:62:35:f5:d4:cc:28:26:ed:ae:b2:2b:69:3a:36: 7f:bd:4d:b9:4f:40:7f:1c:a7:28:d7:20:27:eb:4f: 95:8e:29:8c:51:11:e6:6c:36:7d:5a:f5:08:c4:ac: 77:33:59:c4:93:56:b0:0e:a5:e3:d2:8d:ee:46:cb: 8a:df:db:dc:43:a2:ac:87:05:65:14:32:a9:8e:80: dc:a4:6f:ee:c7:0a:3a:76:16:94:c9:3f:19:79:8a: d7:6d:5d:4b:36:87:5b:20:d3:88:08:99:9d:8a:0c: d2:cf:e5:0f:29:88:bb:4f:25:c4:2f:a4:5e:d9:98: d6:24:80:70:e1:5d:42:48:91:52:f2:d8:c4:ec:74: b2:b8:c5:1f:1b:88:58:c4:07:9d:5b:bf:0c:f8:18: f8:6a:9b:61:93:a3:96:ae:21:bb:e7:13:fa:4c:1c: d7:8d:18:dc:1c:66:5c:ad:59:aa:97:69:74:a6:b2: e0:61:ed:5a:a4:e4:82:4d:f3:24:1b:fa:10:bf:87: 1b:16:53:71:df:f2:1e:1b:34:5d:e0:b0:f9:24:84: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:44:C4:3A:39:8E:58:85:8E:B4:18:FA:41:60:BC:48:3F:28:E0 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/323430303a346563303a3a2f33322d3438203d3e203634333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 66:31:ea:7a:4c:58:b0:7c:8b:7f:19:af:6a:75:b4:fb:8f:1c: 31:d4:5d:11:89:c9:7d:15:30:86:83:95:10:08:20:1d:8b:6f: b3:fd:69:6b:62:2c:57:cc:3e:8b:e4:bc:bd:c0:23:45:32:30: 8a:ea:c1:46:3d:60:ce:ac:fa:57:58:7f:97:bb:6d:cb:5b:7c: 15:f5:d0:63:82:24:57:e8:92:f7:5d:ed:16:b4:2c:99:b7:37: 3a:81:f4:a2:11:67:e6:b1:8c:17:54:c8:68:2b:27:42:34:b4: c7:54:ea:38:27:5c:5b:b1:69:d9:f9:07:a0:39:ce:e4:56:b5: b5:5d:ff:e2:f6:16:cc:e4:9a:5c:44:fd:4e:37:74:22:6a:0f: 0b:b3:a1:9f:d4:5a:c4:b5:40:e4:13:cc:98:ad:e3:05:0b:ba: dc:5e:5c:1d:8d:9c:73:48:31:69:34:5e:fc:03:52:9a:57:e6: b2:1c:7d:ee:df:a7:8f:d3:91:59:49:e2:29:1c:37:20:ec:3e: 94:b5:e4:9e:9b:46:61:20:fc:7b:26:2f:d4:5f:be:f9:3b:2b: 61:d7:73:1a:3a:50:86:a5:7b:6f:26:40:43:be:bc:f7:52:82: b8:1b:9b:e8:43:d0:a2:6e:da:33:95:a1:07:25:a7:e5:c4:1d: bb:2b:cd:5c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUBJaMjxJHnuRDuuRuinhWf0AgWrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTA2MDIwMDU3MzlaFw0yNjA2MDEwMTAyMzlaMDMxMTAvBgNV BAMTKEU3MEY0NEM0M0EzOThFNTg4NThFQjQxOEZBNDE2MEJDNDgzRjI4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66tyNgGwR7ox6B7IMeM1uz0fe 6wfCRtfnf1eG1aE6oFIPoHyLulxv7NS5ViJiNfXUzCgm7a6yK2k6Nn+9TblPQH8c pyjXICfrT5WOKYxREeZsNn1a9QjErHczWcSTVrAOpePSje5Gy4rf29xDoqyHBWUU MqmOgNykb+7HCjp2FpTJPxl5itdtXUs2h1sg04gImZ2KDNLP5Q8piLtPJcQvpF7Z mNYkgHDhXUJIkVLy2MTsdLK4xR8biFjEB51bvwz4GPhqm2GTo5auIbvnE/pMHNeN GNwcZlytWaqXaXSmsuBh7Vqk5IJN8yQb+hC/hxsWU3Hf8h4bNF3gsPkkhB9nAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU5w9ExDo5jliFjrQY+kFgvEg/KOAwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU4NmQzNjM3LTkyYjQtNGFjNy1h NzViLTk5Y2IwYjA1NjViMC8wLzMyMzQzMDMwM2EzNDY1NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAE7AMA0GCSqGSIb3 DQEBCwUAA4IBAQBmMep6TFiwfIt/Ga9qdbT7jxwx1F0Ricl9FTCGg5UQCCAdi2+z /WlrYixXzD6L5Ly9wCNFMjCK6sFGPWDOrPpXWH+Xu23LW3wV9dBjgiRX6JL3Xe0W tCyZtzc6gfSiEWfmsYwXVMhoKydCNLTHVOo4J1xbsWnZ+QegOc7kVrW1Xf/i9hbM 5JpcRP1ON3Qiag8Ls6Gf1FrEtUDkE8yYreMFC7rcXlwdjZxzSDFpNF78A1KaV+ay HH3u36eP05FZSeIpHDcg7D6UteSem0ZhIPx7Ji/UX775Oyth13MaOlCGpXtvJkBD vrz3UoK4G5voQ9CibtozlaEHJaflxB27K81c -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:56 2025 by rpki-client