$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: OPgctcDdxT8SYsP0oUqZFX65ifax+hBFU+ZED4ybb5M= Subject key identifier: 91:BE:35:47:FB:BD:E7:0A:5C:28:A1:BE:5B:16:CE:CA:60:60:FE:6E Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 49D41B120FFA2832BF498121DA27526837508581 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 02 Jun 2025 02:03:21 +0000 ROA not before: Mon 02 Jun 2025 01:58:21 +0000 ROA not after: Mon 01 Jun 2026 02:03:21 +0000 asID: 136088 IP address blocks: 2400:d940:40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d4:1b:12:0f:fa:28:32:bf:49:81:21:da:27:52:68:37:50:85:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jun 2 01:58:21 2025 GMT Not After : Jun 1 02:03:21 2026 GMT Subject: CN=91BE3547FBBDE70A5C28A1BE5B16CECA6060FE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:55:65:18:06:17:54:fe:39:0d:ec:01:80: 4f:c5:f2:a2:52:e7:b3:19:48:85:f6:f7:0d:bb:70: 2b:84:91:72:12:38:a8:5f:d7:40:10:4f:5c:53:7f: 40:69:1e:44:e3:db:e5:ef:b7:27:4b:4e:90:b7:ac: c0:1a:f6:b2:94:98:13:47:dc:0f:19:ca:4a:7c:85: 5a:45:de:df:c6:aa:94:60:a2:9c:1a:f5:25:48:a1: 25:98:50:fb:5c:09:ad:0b:a3:12:66:5d:8b:7b:6c: 54:e5:1a:ce:08:65:99:35:a0:f6:c3:70:eb:08:f0: 42:78:c5:88:36:9d:f9:2b:64:d6:7b:98:e8:cf:9d: 09:10:58:e9:12:19:5e:50:94:1e:12:4e:56:09:05: 99:66:51:b2:9c:91:90:a9:a1:6f:bb:45:86:df:d4: d0:a3:d1:00:84:c9:a1:8c:24:2f:73:0c:84:11:75: 82:a1:56:ce:e1:70:7d:14:c0:5c:ea:9c:4d:f6:e4: 9f:9a:a5:f1:33:96:f2:35:8b:de:de:92:74:15:ab: 92:6f:e5:f6:c8:02:94:8c:ae:19:e1:c4:d0:cc:cf: 2f:a6:3c:81:f3:80:a1:25:be:85:df:f3:27:39:3e: 88:df:88:76:6f:7d:4e:d9:a0:45:2d:96:e5:75:6a: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BE:35:47:FB:BD:E7:0A:5C:28:A1:BE:5B:16:CE:CA:60:60:FE:6E X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:40::/48 Signature Algorithm: sha256WithRSAEncryption 7c:09:77:c9:58:d3:8e:02:9b:85:86:96:39:1c:b4:88:07:be: 69:13:33:36:41:b6:3e:43:64:d1:e3:54:b3:c9:e1:00:5b:a9: ac:2c:ea:5a:dd:e9:d7:7b:ec:85:cb:69:dd:ab:f8:2b:00:67: 31:5d:61:de:6d:b1:cc:1b:d1:82:69:7c:f9:4f:25:a6:2d:63: d3:29:53:ca:75:5e:66:89:f8:09:58:08:1a:52:7c:bb:95:63: ce:5e:fa:8f:fa:1d:05:68:56:3e:a7:62:11:b5:e5:f0:ea:a1: 42:3f:ce:8a:d3:a5:05:e7:f3:6f:71:34:dc:ab:47:18:c2:8a: 59:f0:12:22:2c:1c:d5:9a:43:5d:3a:1b:ac:59:f4:ef:7e:4a: fe:c5:f6:20:df:d0:17:a2:96:bb:be:1f:f4:df:ae:04:17:7f: e0:26:96:05:60:be:5b:2f:c8:4a:74:f8:dc:53:58:a3:99:0f: da:38:49:1f:1e:4e:d5:ee:96:76:d9:76:77:e1:63:de:9a:39: 8b:4f:a0:61:56:e7:3b:c3:92:e9:e0:af:62:e2:04:f9:bc:02: d4:91:07:12:0e:3d:53:7b:ed:a6:20:fb:b5:ae:d2:db:7c:6b: 20:e3:20:db:76:86:d1:c1:09:e3:c9:9b:84:37:9a:b9:d7:95: 60:31:40:b6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSdQbEg/6KDK/SYEh2idSaDdQhYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNTA2MDIwMTU4MjFaFw0yNjA2MDEwMjAzMjFaMDMxMTAvBgNV BAMTKDkxQkUzNTQ3RkJCREU3MEE1QzI4QTFCRTVCMTZDRUNBNjA2MEZFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuElVlGAYXVP45DewBgE/F8qJS 57MZSIX29w27cCuEkXISOKhf10AQT1xTf0BpHkTj2+XvtydLTpC3rMAa9rKUmBNH 3A8Zykp8hVpF3t/GqpRgopwa9SVIoSWYUPtcCa0LoxJmXYt7bFTlGs4IZZk1oPbD cOsI8EJ4xYg2nfkrZNZ7mOjPnQkQWOkSGV5QlB4STlYJBZlmUbKckZCpoW+7RYbf 1NCj0QCEyaGMJC9zDIQRdYKhVs7hcH0UwFzqnE325J+apfEzlvI1i97eknQVq5Jv 5fbIApSMrhnhxNDMzy+mPIHzgKElvoXf8yc5PojfiHZvfU7ZoEUtluV1ahzHAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkb41R/u95wpcKKG+WxbOymBg/m4wHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzQzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMwMzgzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA2UAA QDANBgkqhkiG9w0BAQsFAAOCAQEAfAl3yVjTjgKbhYaWORy0iAe+aRMzNkG2PkNk 0eNUs8nhAFuprCzqWt3p13vshctp3av4KwBnMV1h3m2xzBvRgml8+U8lpi1j0ylT ynVeZon4CVgIGlJ8u5Vjzl76j/odBWhWPqdiEbXl8OqhQj/OitOlBefzb3E03KtH GMKKWfASIiwc1ZpDXTobrFn0735K/sX2IN/QF6KWu74f9N+uBBd/4CaWBWC+Wy/I SnT43FNYo5kP2jhJHx5O1e6Wdtl2d+Fj3po5i0+gYVbnO8OS6eCvYuIE+bwC1JEH Eg49U3vtpiD7ta7S23xrIOMg23aG0cEJ48mbhDeaudeVYDFAtg== -----END CERTIFICATE-----Generated at Sun Jun 8 06:30:27 2025 by rpki-client