$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa File: 323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa (raw, json) Hash identifier: gTj40UYFnyOOZ5cWVXcwbvaKX8w3VLkJvdGszXDQ1b8= Subject key identifier: 8E:E3:54:57:0A:9C:78:CD:7C:56:81:F1:5F:68:D1:4F:6F:2E:4B:58 Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 1B4932FD09835380A529CE9239DD15AAC5C210E1 Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa Signing time: Fri 06 Dec 2024 13:27:03 +0000 ROA not before: Fri 06 Dec 2024 13:22:03 +0000 ROA not after: Fri 05 Dec 2025 13:27:03 +0000 asID: 137316 IP address blocks: 2402:7ac0:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:49:32:fd:09:83:53:80:a5:29:ce:92:39:dd:15:aa:c5:c2:10:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Dec 6 13:22:03 2024 GMT Not After : Dec 5 13:27:03 2025 GMT Subject: CN=8EE354570A9C78CD7C5681F15F68D14F6F2E4B58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f1:2f:60:18:cc:88:47:39:c3:9d:41:ea:ba: 3e:65:b2:f6:b1:79:89:de:86:d9:67:76:ab:91:66: 12:0a:42:6c:b7:50:5e:37:a1:e9:2b:b9:6d:ad:f5: 4f:a6:93:07:f0:ba:94:f1:16:08:b4:85:61:41:17: 43:2f:81:41:ff:f9:f9:b8:ab:44:65:b1:12:cc:59: ce:ec:21:76:b9:8f:a1:ee:c9:42:3b:ad:4a:4b:6e: d7:13:36:45:c5:82:45:01:80:a6:e1:e3:60:e7:10: 1f:4b:12:3d:c8:64:42:cd:d0:66:8e:97:d1:45:e3: 4a:d1:6f:37:d2:35:5f:93:25:2e:cf:5b:4b:c8:76: bf:d7:17:0b:35:ec:04:0d:e7:6f:42:41:b2:92:ab: 8f:76:e8:e8:6f:53:fb:d9:16:6c:56:c4:42:f1:5e: 99:b9:2f:a7:8f:7b:ad:be:be:67:f1:48:5a:c3:4f: 2c:70:68:d9:60:fc:8a:0f:0c:23:f7:88:4b:32:41: 6e:ff:c3:0f:9e:26:a2:fd:60:88:17:63:6a:63:60: b0:06:13:6c:c3:31:c8:2a:c5:5c:ef:9a:fd:95:26: c4:db:98:d5:1a:b1:43:18:62:90:a2:a1:d0:0f:28: 45:28:20:4b:27:4c:8f:68:38:7e:b7:a8:03:07:dc: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E3:54:57:0A:9C:78:CD:7C:56:81:F1:5F:68:D1:4F:6F:2E:4B:58 X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a643030303a3a2f33362d3336203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7ac0:d000::/36 Signature Algorithm: sha256WithRSAEncryption 73:73:a4:ed:60:5f:00:d2:48:bf:a8:e7:49:3b:9f:8a:b9:a0: 2d:ad:d0:09:bb:e8:01:22:fd:27:7d:d4:e1:a5:b8:ce:84:69: df:8e:27:62:27:80:47:00:35:37:c3:52:0a:1e:4b:3b:fc:4d: ac:00:87:cd:89:63:41:54:67:e6:a5:d7:f7:ee:2a:e0:1b:89: 47:a1:77:d0:5f:9e:a3:03:a3:f9:6f:46:15:96:c1:7d:87:f2: 7b:89:de:20:65:fe:fa:3c:93:98:4c:c1:76:8e:61:d3:18:4c: 2e:23:15:e2:51:76:8c:7e:81:47:11:bc:ed:b3:5d:df:d5:4b: 5c:97:9a:b0:a1:2f:21:af:c4:aa:59:fe:4a:f0:67:13:dd:63: 31:6a:80:fc:28:2b:30:eb:b9:69:ee:c5:0d:1f:b2:fa:66:b7: 8e:9a:02:24:c0:db:07:e0:95:b7:f5:03:71:e8:db:a0:ce:3a: 3a:09:af:d1:28:62:d6:41:0b:ac:6d:31:12:9a:6a:4c:35:de: 2c:8a:1b:88:60:9c:74:36:35:e2:9b:39:fe:e8:79:77:86:0f: 8d:02:76:eb:fc:22:0a:10:cd:0b:15:42:db:c4:72:a2:e9:de: 18:94:7b:20:1b:a5:01:52:94:59:60:15:28:d6:98:7b:1c:f2: b6:31:df:02 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUG0ky/QmDU4ClKc6SOd0VqsXCEOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yNDEyMDYxMzIyMDNaFw0yNTEyMDUxMzI3MDNaMDMxMTAvBgNV BAMTKDhFRTM1NDU3MEE5Qzc4Q0Q3QzU2ODFGMTVGNjhEMTRGNkYyRTRCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf8S9gGMyIRznDnUHquj5lsvax eYnehtlndquRZhIKQmy3UF43oekruW2t9U+mkwfwupTxFgi0hWFBF0MvgUH/+fm4 q0RlsRLMWc7sIXa5j6HuyUI7rUpLbtcTNkXFgkUBgKbh42DnEB9LEj3IZELN0GaO l9FF40rRbzfSNV+TJS7PW0vIdr/XFws17AQN529CQbKSq4926OhvU/vZFmxWxELx Xpm5L6ePe62+vmfxSFrDTyxwaNlg/IoPDCP3iEsyQW7/ww+eJqL9YIgXY2pjYLAG E2zDMcgqxVzvmv2VJsTbmNUasUMYYpCiodAPKEUoIEsnTI9oOH63qAMH3EwZAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUjuNUVwqceM18VoHxX2jRT28uS1gwHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhNjQzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk AnrA0DANBgkqhkiG9w0BAQsFAAOCAQEAc3Ok7WBfANJIv6jnSTufirmgLa3QCbvo ASL9J33U4aW4zoRp344nYieARwA1N8NSCh5LO/xNrACHzYljQVRn5qXX9+4q4BuJ R6F30F+eowOj+W9GFZbBfYfye4neIGX++jyTmEzBdo5h0xhMLiMV4lF2jH6BRxG8 7bNd39VLXJeasKEvIa/Eqln+SvBnE91jMWqA/CgrMOu5ae7FDR+y+ma3jpoCJMDb B+CVt/UDcejboM46Ogmv0Shi1kELrG0xEppqTDXeLIobiGCcdDY14ps5/uh5d4YP jQJ26/wiChDNCxVC28RyouneGJR7IBulAVKUWWAVKNaYexzytjHfAg== -----END CERTIFICATE-----Generated at Sun Apr 6 11:03:42 2025 by rpki-client