$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa File: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (raw, json) Hash identifier: oy0y83CTwZgxshL7I//54BVUyro1yeEXDZHxRWdB8m4= Subject key identifier: C6:5B:35:BA:DB:FF:9A:C3:A7:E6:31:6F:25:B2:63:B1:A0:B3:05:5B Certificate issuer: /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Certificate serial: 366105644D715C209009CE1DE6C640D9623B780F Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa Signing time: Mon 02 Jun 2025 02:03:23 +0000 ROA not before: Mon 02 Jun 2025 01:58:23 +0000 ROA not after: Mon 01 Jun 2026 02:03:23 +0000 asID: 136088 IP address blocks: 2400:d940:60::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:61:05:64:4d:71:5c:20:90:09:ce:1d:e6:c6:40:d9:62:3b:78:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F Validity Not Before: Jun 2 01:58:23 2025 GMT Not After : Jun 1 02:03:23 2026 GMT Subject: CN=C65B35BADBFF9AC3A7E6316F25B263B1A0B3055B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:47:0c:c7:5e:28:c4:ed:de:cc:c8:d7:6f: 21:96:bd:f4:55:73:3d:c4:44:26:1e:94:50:a4:86: 7d:8d:11:f2:07:f1:d7:3e:aa:12:73:5d:02:18:bd: d5:0e:f1:b6:92:48:80:f5:7b:6c:10:56:4c:25:61: 2f:74:eb:16:a2:1b:8c:72:42:e7:bd:1e:4f:56:90: db:72:a7:f0:80:f1:91:52:e8:16:06:f4:72:d1:5d: 57:33:3a:16:a5:e2:43:5c:33:b6:12:2f:2c:4b:f5: 5c:4a:c9:03:53:46:24:7b:71:01:df:17:18:b0:fc: dd:1f:6c:33:0b:66:de:51:c4:c0:85:13:c6:f3:aa: a5:90:b2:b2:c1:0e:51:a4:36:7a:b6:75:8a:2b:be: 73:18:5a:32:e5:4b:43:59:5d:11:05:45:e8:e5:5a: 48:8e:bf:95:26:13:6c:0f:e9:42:d0:2c:e3:3d:73: 82:ac:d5:b6:bf:c2:35:e1:a3:5f:6e:8d:2b:50:1a: cb:c6:11:31:6c:ac:e5:87:e1:1a:9c:15:b1:97:eb: a9:01:28:7c:6a:ec:0b:54:24:b3:ab:fa:00:29:82: bb:fe:a8:38:1a:8a:4e:ff:d1:82:56:ad:07:35:1d: e6:4c:e9:2e:d8:f9:be:68:4b:2c:5b:0a:5d:42:51: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5B:35:BA:DB:FF:9A:C3:A7:E6:31:6F:25:B2:63:B1:A0:B3:05:5B X509v3 Authority Key Identifier: keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d940:60::/48 Signature Algorithm: sha256WithRSAEncryption 2e:40:c0:57:93:75:6d:d9:26:00:3c:f5:02:49:f3:9b:5d:62: a1:f5:97:c6:78:1c:79:a9:2b:68:39:2f:b2:ba:37:23:01:98: c4:62:1f:10:e1:c2:fa:1f:0a:25:ce:a2:5a:dd:83:e4:e3:a6: a0:d1:cd:63:9f:37:54:d1:5d:a3:ff:15:7c:aa:e9:2c:32:de: da:d5:e9:a1:ca:65:35:cb:a6:37:2f:e3:a6:a2:b4:6a:c2:f7: ed:f9:76:26:e0:05:94:73:7d:53:c9:a0:33:d1:67:97:ed:25: ca:b6:6e:1a:71:ca:ea:73:f6:7e:d3:83:cd:b5:e6:21:ff:e4: 54:04:86:92:78:a8:fb:7b:68:ad:79:b1:dd:3f:67:d5:34:0a: d3:02:66:98:7b:46:1e:3a:fb:5b:d3:51:04:06:3d:db:69:9d: a1:82:c6:ed:2f:c8:c1:a0:13:06:b2:e8:da:0a:11:ba:81:a5: 5a:92:bb:46:e5:30:8a:2f:e1:3a:a6:94:54:f1:93:ec:48:2f: cf:f5:0a:da:d3:5c:b3:f5:83:ee:28:30:7b:62:84:14:a8:83: e9:9b:bb:e9:d3:c0:76:64:bd:2b:7f:95:31:af:c0:37:dc:70: 0c:e6:fe:50:58:79:2b:9d:7e:ce:96:e3:67:bf:27:da:80:01: 3d:85:f9:33 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNmEFZE1xXCCQCc4d5sZA2WI7eA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhE MEJFOTIzRjAeFw0yNTA2MDIwMTU4MjNaFw0yNjA2MDEwMjAzMjNaMDMxMTAvBgNV BAMTKEM2NUIzNUJBREJGRjlBQzNBN0U2MzE2RjI1QjI2M0IxQTBCMzA1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVEcMx14oxO3ezMjXbyGWvfRV cz3ERCYelFCkhn2NEfIH8dc+qhJzXQIYvdUO8baSSID1e2wQVkwlYS906xaiG4xy Que9Hk9WkNtyp/CA8ZFS6BYG9HLRXVczOhal4kNcM7YSLyxL9VxKyQNTRiR7cQHf Fxiw/N0fbDMLZt5RxMCFE8bzqqWQsrLBDlGkNnq2dYorvnMYWjLlS0NZXREFRejl WkiOv5UmE2wP6ULQLOM9c4Ks1ba/wjXho19ujStQGsvGETFsrOWH4RqcFbGX66kB KHxq7AtUJLOr+gApgrv+qDgaik7/0YJWrQc1HeZM6S7Y+b5oSyxbCl1CUVKtAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUxls1utv/msOn5jFvJbJjsaCzBVswHwYDVR0j BBgwFoAU0/th10akR2fUUY1un9H72NC+kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y0ZWMxYy05NTM1LTRjYmYtOWM3YS1mZDMyYzgzMGVkYmEvMC9EM0ZCNjFENzQ2 QTQ0NzY3RDQ1MThENkU5RkQxRkJEOEQwQkU5MjNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNGQjYxRDc0NkE0NDc2N0Q0NTE4RDZFOUZEMUZCRDhEMEJF OTIzRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjRlYzFjLTk1MzUtNGNiZi05 YzdhLWZkMzJjODMwZWRiYS8wLzMyMzQzMDMwM2E2NDM5MzQzMDNhMzYzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMwMzgzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA2UAA YDANBgkqhkiG9w0BAQsFAAOCAQEALkDAV5N1bdkmADz1Aknzm11iofWXxngceakr aDkvsro3IwGYxGIfEOHC+h8KJc6iWt2D5OOmoNHNY583VNFdo/8VfKrpLDLe2tXp ocplNcumNy/jpqK0asL37fl2JuAFlHN9U8mgM9Fnl+0lyrZuGnHK6nP2ftODzbXm If/kVASGknio+3torXmx3T9n1TQK0wJmmHtGHjr7W9NRBAY922mdoYLG7S/IwaAT BrLo2goRuoGlWpK7RuUwii/hOqaUVPGT7Egvz/UK2tNcs/WD7igwe2KEFKiD6Zu7 6dPAdmS9K3+VMa/AN9xwDOb+UFh5K51+zpbjZ78n2oABPYX5Mw== -----END CERTIFICATE-----Generated at Sun Jun 8 13:07:17 2025 by rpki-client