$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/323430323a353538303a3a2f33322d3438203d3e20313333383137.roa File: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (raw, json) Hash identifier: dttoTx4BQRFnMAvnuJnvYcnCQ5YOgtytig0qE7CIy64= Subject key identifier: D1:13:BD:17:42:A9:B9:01:9A:78:CA:64:82:B3:BE:C4:2B:B0:69:B9 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 315AA6D86A5DEB37E3214C2B7C7922B0C0C7CFA8 Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/323430323a353538303a3a2f33322d3438203d3e20313333383137.roa Signing time: Mon 02 Jun 2025 01:02:46 +0000 ROA not before: Mon 02 Jun 2025 00:57:46 +0000 ROA not after: Mon 01 Jun 2026 01:02:46 +0000 asID: 133817 IP address blocks: 2402:5580::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5a:a6:d8:6a:5d:eb:37:e3:21:4c:2b:7c:79:22:b0:c0:c7:cf:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: Jun 2 00:57:46 2025 GMT Not After : Jun 1 01:02:46 2026 GMT Subject: CN=D113BD1742A9B9019A78CA6482B3BEC42BB069B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:a2:a9:d5:e4:5b:cd:07:9a:e8:de:f2:f3: 43:af:55:d8:0e:d8:46:6f:b6:92:59:ee:9f:e9:9e: b4:df:49:15:95:34:01:33:94:2e:c7:c5:f4:9e:4e: 6a:fb:e9:e2:79:9f:aa:c1:52:62:b8:40:50:95:f1: 2a:6b:0d:e9:3d:a8:b2:a9:82:1b:16:53:6c:ce:9c: 92:a9:9c:a6:18:ac:3f:14:a7:3b:f2:9f:c2:4e:02: b3:f8:c8:4c:0c:cd:ce:b2:cb:fe:f5:d4:52:b8:43: ee:e6:52:96:c0:bd:49:cd:70:79:d5:8d:2c:21:fb: 14:d5:65:d9:f0:dd:4f:89:61:c1:ba:31:d2:ce:20: a8:69:c4:d3:5e:75:5d:80:0d:da:4d:05:ab:19:ed: 5f:ff:ee:06:d3:71:e4:ef:ee:b1:93:3f:cb:75:26: 44:63:37:ea:f4:34:69:5c:d7:cd:dd:59:34:aa:cf: aa:47:9f:c4:f6:e2:78:d5:bf:77:c3:7b:0d:d0:01: 13:51:df:84:4e:3d:e3:fa:58:be:4a:e9:c4:a6:f6: ce:2d:5c:b4:80:6b:9f:d4:51:03:a5:ac:f9:33:d4: bf:45:07:43:d8:89:2f:d0:15:77:bb:51:e0:35:af: 0e:da:a9:b0:0b:7a:ba:be:58:12:a0:aa:f8:4a:a2: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:13:BD:17:42:A9:B9:01:9A:78:CA:64:82:B3:BE:C4:2B:B0:69:B9 X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/323430323a353538303a3a2f33322d3438203d3e20313333383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5580::/32 Signature Algorithm: sha256WithRSAEncryption 77:e3:cd:90:00:80:6b:3e:e9:6d:fc:a1:12:f9:2c:ba:53:ea: 0e:fa:00:98:d6:56:01:03:24:53:9e:f9:ac:0e:19:38:db:5a: ed:90:4f:ea:fd:02:6e:e0:5f:2a:c6:d1:0f:f2:64:23:57:99: 40:ef:5b:67:63:57:7a:61:02:51:62:67:46:04:bd:86:f2:ee: 30:43:7e:e6:e1:87:49:bc:f2:18:74:82:59:eb:0d:2d:f8:75: 3d:d4:1b:94:a6:ef:59:ab:71:97:51:c4:b3:b9:42:5b:90:ad: ed:90:1e:e3:88:ba:53:e9:91:2f:b8:1a:45:d9:8e:da:cb:33: ae:11:e6:0f:2c:69:e6:1b:53:95:07:f0:66:21:3f:3f:dd:63: fa:c6:b2:95:f1:c1:33:f8:68:b4:fb:d4:18:02:91:86:78:ae: b3:17:22:64:ed:7e:2d:9c:e3:44:61:5f:7e:9d:f4:6d:28:ec: 4a:a2:d2:93:f5:b5:ae:85:5b:31:14:2b:61:29:be:10:fd:a1: da:b7:5d:bf:74:52:a5:98:83:35:57:1a:fa:21:26:30:e9:59: 3c:fa:fb:0d:2d:4a:17:d5:5a:ce:2b:0b:aa:0e:16:9c:c7:40: 8d:35:6c:2c:a0:a5:24:1f:d7:88:5e:ac:88:12:2e:0a:86:d9: 77:f9:ee:02 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUMVqm2Gpd6zfjIUwrfHkisMDHz6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNTA2MDIwMDU3NDZaFw0yNjA2MDEwMTAyNDZaMDMxMTAvBgNV BAMTKEQxMTNCRDE3NDJBOUI5MDE5QTc4Q0E2NDgyQjNCRUM0MkJCMDY5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qqKp1eRbzQea6N7y80OvVdgO 2EZvtpJZ7p/pnrTfSRWVNAEzlC7HxfSeTmr76eJ5n6rBUmK4QFCV8SprDek9qLKp ghsWU2zOnJKpnKYYrD8Upzvyn8JOArP4yEwMzc6yy/711FK4Q+7mUpbAvUnNcHnV jSwh+xTVZdnw3U+JYcG6MdLOIKhpxNNedV2ADdpNBasZ7V//7gbTceTv7rGTP8t1 JkRjN+r0NGlc183dWTSqz6pHn8T24njVv3fDew3QARNR34ROPeP6WL5K6cSm9s4t XLSAa5/UUQOlrPkz1L9FB0PYiS/QFXe7UeA1rw7aqbALerq+WBKgqvhKogDrAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU0RO9F0KpuQGaeMpkgrO+xCuwabkwHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2ZjdlZjM0LTQ5OTEtNGJiMS05 NmI0LWJlNDNmMWVjYWJiNC8wLzMyMzQzMDMyM2EzNTM1MzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzMzM4MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCVYAwDQYJKoZI hvcNAQELBQADggEBAHfjzZAAgGs+6W38oRL5LLpT6g76AJjWVgEDJFOe+awOGTjb Wu2QT+r9Am7gXyrG0Q/yZCNXmUDvW2djV3phAlFiZ0YEvYby7jBDfubhh0m88hh0 glnrDS34dT3UG5Sm71mrcZdRxLO5QluQre2QHuOIulPpkS+4GkXZjtrLM64R5g8s aeYbU5UH8GYhPz/dY/rGspXxwTP4aLT71BgCkYZ4rrMXImTtfi2c40RhX36d9G0o 7Eqi0pP1ta6FWzEUK2EpvhD9odq3Xb90UqWYgzVXGvohJjDpWTz6+w0tShfVWs4r C6oOFpzHQI01bCygpSQf14herIgSLgqG2Xf57gI= -----END CERTIFICATE-----Generated at Sun Jun 8 13:28:59 2025 by rpki-client