$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: Tfax70osRa+squxlZvOIKvXWhimgGcgYtiz1uMyhE3E= Subject key identifier: 8E:2C:A3:30:7A:93:F6:B5:C5:57:2D:9A:E9:BD:DD:70:D0:87:C6:F9 Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 4038B1A191A044BAE41AF4CD09A97DE4B7DEA653 Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 02 Jun 2025 02:03:23 +0000 ROA not before: Mon 02 Jun 2025 01:58:23 +0000 ROA not after: Mon 01 Jun 2026 02:03:23 +0000 asID: 136088 IP address blocks: 2400:d940:500::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:38:b1:a1:91:a0:44:ba:e4:1a:f4:cd:09:a9:7d:e4:b7:de:a6:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jun 2 01:58:23 2025 GMT Not After : Jun 1 02:03:23 2026 GMT Subject: CN=8E2CA3307A93F6B5C5572D9AE9BDDD70D087C6F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:f1:81:c3:ef:33:ed:01:df:4b:51:c1:5f: d1:74:e7:00:43:70:d8:0c:1a:62:b6:4a:c2:18:ed: ba:c7:e3:49:d8:92:17:a3:91:fe:d4:48:b1:94:4c: 86:0c:3a:65:57:81:b6:51:14:eb:97:3d:be:1d:64: e4:2d:cf:d3:4f:60:5a:5a:eb:15:eb:14:83:42:ee: 7c:bc:41:58:9d:c4:f4:fe:77:55:c8:fa:3f:be:f3: 0a:8e:e1:28:52:1e:70:b4:1d:ca:18:c4:cf:5b:18: c2:85:8c:85:74:2c:15:93:31:38:6b:a2:18:47:c1: 12:cc:04:e7:4f:77:18:3f:05:5e:de:f5:5a:42:ff: 4b:d3:8e:f5:46:35:f8:16:b5:6d:77:26:67:97:66: ac:1c:43:37:eb:8a:4a:5a:1c:5a:8d:84:0b:4c:a9: b8:a8:ed:bb:75:45:d1:da:7c:ec:a6:0b:56:ea:18: 5f:e5:fb:1f:b5:00:40:c2:40:b3:07:89:bd:fa:3a: 6f:64:7f:f0:52:61:5a:4c:41:82:e7:97:36:40:9a: 06:5b:b2:cd:be:f8:88:c1:3a:31:0e:52:05:0e:61: db:17:7e:21:08:da:11:ac:10:fb:dc:bf:8a:2b:57: 92:12:32:10:5d:3d:e5:09:c0:64:7e:0b:19:ed:7c: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2C:A3:30:7A:93:F6:B5:C5:57:2D:9A:E9:BD:DD:70:D0:87:C6:F9 X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:500::/48 Signature Algorithm: sha256WithRSAEncryption 24:ca:ca:6a:55:33:88:36:2c:16:df:7b:ba:dd:53:5c:57:c5: 85:3c:33:2d:36:c3:e6:47:d0:23:c6:b9:79:ff:4d:87:65:77: f4:b3:32:55:9f:b7:f2:1f:ac:f5:05:92:9a:28:24:3a:6d:9d: 80:f0:57:f7:9a:01:18:ae:39:ea:c7:6e:87:2d:18:07:20:dd: cf:af:e5:49:6b:cd:83:b8:7e:9e:5e:43:31:d9:83:db:88:54: 17:6d:5e:f7:31:62:b5:72:5d:78:39:5b:8a:11:a3:90:da:4f: eb:f2:00:65:6f:8b:32:98:0c:89:b4:a7:0d:c2:ef:45:2f:67: f2:91:aa:84:cb:b1:37:9d:0d:78:76:30:ac:35:a3:d6:48:f1: 0b:a7:ff:1b:01:52:b0:5a:c3:10:35:3a:e8:0c:17:98:2c:1d: 95:29:e6:ee:a8:d4:71:63:09:7e:a6:ba:df:b7:52:5e:18:26: 2d:64:b1:d4:ca:b5:29:eb:22:f7:ea:7d:1d:64:77:14:f6:17: c9:5f:9c:b7:1a:87:fb:ad:85:40:f2:fb:04:9a:4b:2f:ae:4b: f6:88:5e:dc:33:d6:8e:c4:c5:e3:cc:3b:68:4f:6c:ff:92:a1: 97:42:2d:a6:94:6f:a4:8b:8e:db:46:9d:3e:69:e5:e6:34:6b: 2f:cb:90:1b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQDixoZGgRLrkGvTNCal95LfeplMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNTA2MDIwMTU4MjNaFw0yNjA2MDEwMjAzMjNaMDMxMTAvBgNV BAMTKDhFMkNBMzMwN0E5M0Y2QjVDNTU3MkQ5QUU5QkRERDcwRDA4N0M2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+PGBw+8z7QHfS1HBX9F05wBD cNgMGmK2SsIY7brH40nYkhejkf7USLGUTIYMOmVXgbZRFOuXPb4dZOQtz9NPYFpa 6xXrFINC7ny8QVidxPT+d1XI+j++8wqO4ShSHnC0HcoYxM9bGMKFjIV0LBWTMThr ohhHwRLMBOdPdxg/BV7e9VpC/0vTjvVGNfgWtW13JmeXZqwcQzfrikpaHFqNhAtM qbio7bt1RdHafOymC1bqGF/l+x+1AEDCQLMHib36Om9kf/BSYVpMQYLnlzZAmgZb ss2++IjBOjEOUgUOYdsXfiEI2hGsEPvcv4orV5ISMhBdPeUJwGR+CxntfDhvAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUjiyjMHqT9rXFVy2a6b3dcNCHxvkwHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzAzODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADZ QAUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkyspqVTOINiwW33u63VNcV8WFPDMtNsPm R9Ajxrl5/02HZXf0szJVn7fyH6z1BZKaKCQ6bZ2A8Ff3mgEYrjnqx26HLRgHIN3P r+VJa82DuH6eXkMx2YPbiFQXbV73MWK1cl14OVuKEaOQ2k/r8gBlb4symAyJtKcN wu9FL2fykaqEy7E3nQ14djCsNaPWSPELp/8bAVKwWsMQNTroDBeYLB2VKebuqNRx Ywl+prrft1JeGCYtZLHUyrUp6yL36n0dZHcU9hfJX5y3Gof7rYVA8vsEmksvrkv2 iF7cM9aOxMXjzDtoT2z/kqGXQi2mlG+ki47bRp0+aeXmNGsvy5Ab -----END CERTIFICATE-----Generated at Sun Jun 8 07:40:27 2025 by rpki-client