$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: cxt1Yq/IKja1ffWBBrz4GZsuAGipucxRXhH3AmwoEWs= Subject key identifier: B5:DB:8C:30:5B:09:95:D7:0D:46:AB:0D:81:9D:AD:96:DD:33:0C:9F Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 4024746F5855F95487DF07E375BB3C013E4EFA0C Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 02 Jun 2025 02:03:23 +0000 ROA not before: Mon 02 Jun 2025 01:58:23 +0000 ROA not after: Mon 01 Jun 2026 02:03:23 +0000 asID: 136088 IP address blocks: 2400:d940:10::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:24:74:6f:58:55:f9:54:87:df:07:e3:75:bb:3c:01:3e:4e:fa:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jun 2 01:58:23 2025 GMT Not After : Jun 1 02:03:23 2026 GMT Subject: CN=B5DB8C305B0995D70D46AB0D819DAD96DD330C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:6d:cb:14:cb:79:af:83:1b:b7:ca:c5:7c: a2:5e:8e:8b:2c:fc:0c:ca:fb:c3:31:fb:77:40:58: 10:c4:2b:95:07:63:5d:b6:02:cf:1e:c2:b3:61:24: 10:48:28:d2:a4:7f:1b:0b:70:59:c8:1c:6f:c1:df: 0d:a7:a3:59:cf:e9:aa:7f:67:ee:f9:70:88:bb:bd: c9:b6:0b:02:f3:12:6d:3e:7f:2e:0f:a0:2e:c0:b3: 00:8c:be:14:bc:dd:04:95:82:af:26:30:52:40:74: 6a:e8:cc:10:45:47:00:d5:c9:a0:8b:df:cf:3c:dc: 1e:96:44:6a:d6:56:2a:4e:e8:58:da:2f:13:34:2e: e9:bc:d6:3b:9c:97:46:7c:4e:b6:e6:7a:da:70:a1: c9:19:a1:78:32:aa:d4:79:de:cf:f6:87:2a:b4:ff: 40:c0:10:5b:95:90:b0:6d:9b:d0:fa:86:52:2d:56: 17:bc:86:db:51:fc:e4:49:14:93:dc:b6:90:f1:00: fe:c3:41:7f:30:d3:66:ec:64:1f:b1:26:57:05:25: 9c:8c:1d:ed:df:50:f5:5f:7a:f7:bf:dc:59:74:2f: 08:02:ce:20:82:00:ff:44:c1:d2:18:74:b8:ed:30: 89:0f:32:26:82:d8:87:9c:9d:f4:7a:b6:d5:1c:49: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:8C:30:5B:09:95:D7:0D:46:AB:0D:81:9D:AD:96:DD:33:0C:9F X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:10::/48 Signature Algorithm: sha256WithRSAEncryption 3b:a9:6a:0f:01:84:82:05:55:5c:f7:f5:0d:4b:42:5a:e9:82: 11:97:9c:a8:9f:0a:07:19:9f:82:93:18:2d:2b:19:ab:47:41: 0a:cb:40:ef:6f:61:9d:7d:84:d5:cc:6b:4d:e6:4f:7d:3a:b9: 04:98:e3:6d:a9:7d:73:58:cc:5b:cf:34:c6:dc:82:66:f2:83: 3e:ef:fc:3b:d2:62:b8:b3:18:d0:aa:98:31:8e:c6:eb:2d:bd: 40:36:cc:01:df:94:2f:5c:5f:12:af:2c:ed:2e:d5:ce:1d:9f: 40:14:92:b2:66:12:d3:9f:03:55:42:e3:18:a4:fe:9e:00:a1: 9a:07:a6:a4:1f:68:9f:0b:d7:36:d3:91:b0:c0:5b:0a:66:70: 09:39:02:d6:94:dd:72:eb:de:80:c5:23:9d:ea:15:a5:ec:46: fe:e7:21:c1:a0:4f:6a:c0:14:ac:0f:b4:dd:3a:5f:b8:a8:f4: a6:0b:4c:48:5f:86:4c:90:90:b9:38:b0:1e:dd:14:ac:db:b2: 58:bd:16:a6:be:15:5f:25:55:77:c9:99:14:b7:8e:b5:24:d1: a1:2e:93:ca:eb:c3:5d:22:b7:f0:f4:33:fd:c9:66:44:44:aa: ff:9b:49:c5:82:2b:39:c9:e4:c4:09:cb:0b:c1:5f:0b:54:c5: 6d:5f:06:1b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUQCR0b1hV+VSH3wfjdbs8AT5O+gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNTA2MDIwMTU4MjNaFw0yNjA2MDEwMjAzMjNaMDMxMTAvBgNV BAMTKEI1REI4QzMwNUIwOTk1RDcwRDQ2QUIwRDgxOURBRDk2REQzMzBDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbG3LFMt5r4Mbt8rFfKJejoss /AzK+8Mx+3dAWBDEK5UHY122As8ewrNhJBBIKNKkfxsLcFnIHG/B3w2no1nP6ap/ Z+75cIi7vcm2CwLzEm0+fy4PoC7AswCMvhS83QSVgq8mMFJAdGrozBBFRwDVyaCL 38883B6WRGrWVipO6FjaLxM0Lum81jucl0Z8TrbmetpwockZoXgyqtR53s/2hyq0 /0DAEFuVkLBtm9D6hlItVhe8httR/ORJFJPctpDxAP7DQX8w02bsZB+xJlcFJZyM He3fUPVfeve/3Fl0LwgCziCCAP9EwdIYdLjtMIkPMiaC2IecnfR6ttUcSedxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUtduMMFsJldcNRqsNgZ2tlt0zDJ8wHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMwMzgzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA2UAA EDANBgkqhkiG9w0BAQsFAAOCAQEAO6lqDwGEggVVXPf1DUtCWumCEZecqJ8KBxmf gpMYLSsZq0dBCstA729hnX2E1cxrTeZPfTq5BJjjbal9c1jMW880xtyCZvKDPu/8 O9JiuLMY0KqYMY7G6y29QDbMAd+UL1xfEq8s7S7Vzh2fQBSSsmYS058DVULjGKT+ ngChmgempB9onwvXNtORsMBbCmZwCTkC1pTdcuvegMUjneoVpexG/uchwaBPasAU rA+03TpfuKj0pgtMSF+GTJCQuTiwHt0UrNuyWL0Wpr4VXyVVd8mZFLeOtSTRoS6T yuvDXSK38PQz/clmRESq/5tJxYIrOcnkxAnLC8FfC1TFbV8GGw== -----END CERTIFICATE-----Generated at Sun Jun 8 07:36:50 2025 by rpki-client