$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa File: 323430363a613330303a3a2f33322d3332203d3e203435373036.roa (raw, json) Hash identifier: mSVrT9nxgdbO5zEJl0JNWqbaa5yXAY0zHugt4tIrWAI= Subject key identifier: 5E:5E:55:88:18:F4:86:26:0D:38:11:49:A5:4F:A4:97:5F:6D:06:E9 Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Certificate serial: 7753532752D7278F769926C1D26FC12F292903A2 Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa Signing time: Mon 02 Jun 2025 01:03:18 +0000 ROA not before: Mon 02 Jun 2025 00:58:18 +0000 ROA not after: Mon 01 Jun 2026 01:03:18 +0000 asID: 45706 IP address blocks: 2406:a300::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 06:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:53:53:27:52:d7:27:8f:76:99:26:c1:d2:6f:c1:2f:29:29:03:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Validity Not Before: Jun 2 00:58:18 2025 GMT Not After : Jun 1 01:03:18 2026 GMT Subject: CN=5E5E558818F486260D381149A54FA4975F6D06E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ba:40:56:82:82:f7:a0:27:f0:ec:0a:4a:fa: 32:06:02:20:b2:1a:c4:d1:f9:ff:03:13:7d:e2:44: 01:61:65:4c:c3:6c:66:ae:17:c9:a3:c9:95:f8:98: 61:1c:79:c6:5b:52:3d:a9:d4:38:67:4c:fd:4c:ef: b8:69:7d:2d:6e:f1:25:a2:7c:43:b0:89:38:45:74: d2:ec:4b:90:fa:99:4a:e5:be:cd:9b:56:25:99:7e: e7:b1:ee:78:b7:60:fc:fe:ae:b1:4a:91:57:56:78: 36:bb:19:20:60:3a:cf:bf:5d:d2:02:5a:27:ea:20: e2:07:94:25:44:a1:07:19:40:8a:60:c8:be:a2:99: 1b:80:51:27:4f:09:36:a4:cc:11:49:a3:45:14:56: 32:cc:3f:d8:0b:40:43:a5:a2:25:6c:d5:1b:7c:04: c6:d4:18:94:8c:07:77:55:23:6a:ef:22:3c:56:52: 55:ad:ed:fa:ad:2a:68:95:de:9e:92:b7:50:1f:e9: a0:a3:e0:a1:41:c7:07:7a:65:ab:96:4f:44:2b:7b: 13:cc:83:aa:28:e7:b1:c3:2a:e0:de:0b:ba:c7:c7: 25:b3:ab:27:81:63:02:be:d2:ff:5a:43:a8:1b:7b: 59:1e:2b:e0:20:80:d9:0e:28:73:a4:04:91:ab:41: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5E:55:88:18:F4:86:26:0D:38:11:49:A5:4F:A4:97:5F:6D:06:E9 X509v3 Authority Key Identifier: keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/323430363a613330303a3a2f33322d3332203d3e203435373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:a300::/32 Signature Algorithm: sha256WithRSAEncryption 4a:70:ee:b0:5c:d9:d3:67:2f:1d:49:2f:e9:b7:70:5d:c7:9d: ea:bb:07:5f:83:49:e1:e9:be:95:2e:b5:0e:98:e3:a9:5b:9f: 74:e7:2b:8e:71:d3:bb:28:a7:1d:2f:d9:5a:20:12:64:0e:ca: a9:35:bf:82:63:fe:ec:54:fb:4e:f0:8b:6e:db:20:4d:ae:d4: f4:a4:e0:19:38:c0:9a:02:3b:4e:b1:cf:db:e4:bc:62:f7:7e: ad:38:58:86:16:fa:f6:2d:a8:f7:a1:69:10:86:22:79:17:4c: 0e:30:1f:17:78:52:ab:7b:de:ce:3e:5a:35:b0:6f:61:58:a1: 68:1b:e2:19:c3:1b:20:87:c7:10:da:7e:c4:39:82:a9:b9:4d: ab:47:bf:f9:af:78:1a:58:54:93:cd:05:9b:a7:4b:0a:2c:e3: d9:cd:09:46:25:55:66:7c:f6:30:d9:86:e1:77:b0:00:7b:07: fe:d9:4a:35:b2:a2:60:2b:8d:5e:bb:41:88:ca:9c:2a:bd:a1: 5f:ae:8d:d0:79:85:ed:41:3a:8b:7e:03:f8:51:c9:03:07:c8: a0:1c:6b:7d:0a:c3:e4:94:5e:7b:17:4a:56:b5:04:8c:78:a1: 1c:c8:95:01:20:1a:a5:35:6d:96:77:e4:d9:50:cd:cd:26:0d: ca:c9:4c:bd -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUd1NTJ1LXJ492mSbB0m/BLykpA6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1 MDU3QUNFNTAeFw0yNTA2MDIwMDU4MThaFw0yNjA2MDEwMTAzMThaMDMxMTAvBgNV BAMTKDVFNUU1NTg4MThGNDg2MjYwRDM4MTE0OUE1NEZBNDk3NUY2RDA2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxukBWgoL3oCfw7ApK+jIGAiCy GsTR+f8DE33iRAFhZUzDbGauF8mjyZX4mGEcecZbUj2p1DhnTP1M77hpfS1u8SWi fEOwiThFdNLsS5D6mUrlvs2bViWZfuex7ni3YPz+rrFKkVdWeDa7GSBgOs+/XdIC WifqIOIHlCVEoQcZQIpgyL6imRuAUSdPCTakzBFJo0UUVjLMP9gLQEOloiVs1Rt8 BMbUGJSMB3dVI2rvIjxWUlWt7fqtKmiV3p6St1Af6aCj4KFBxwd6ZauWT0QrexPM g6oo57HDKuDeC7rHxyWzqyeBYwK+0v9aQ6gbe1keK+AggNkOKHOkBJGrQeW7AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUXl5ViBj0hiYNOBFJpU+kl19tBukwHwYDVR0j BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2 RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3 QUNFNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3Y2Q2OGY0LTY5YTUtNDc1Zi1h ZWU0LTNlZjRiOGQzMDJkZC8wLzMyMzQzMDM2M2E2MTMzMzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM0MzUzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBqMAMA0GCSqGSIb3 DQEBCwUAA4IBAQBKcO6wXNnTZy8dSS/pt3Bdx53quwdfg0nh6b6VLrUOmOOpW590 5yuOcdO7KKcdL9laIBJkDsqpNb+CY/7sVPtO8Itu2yBNrtT0pOAZOMCaAjtOsc/b 5Lxi936tOFiGFvr2Laj3oWkQhiJ5F0wOMB8XeFKre97OPlo1sG9hWKFoG+IZwxsg h8cQ2n7EOYKpuU2rR7/5r3gaWFSTzQWbp0sKLOPZzQlGJVVmfPYw2Ybhd7AAewf+ 2Uo1sqJgK41eu0GIypwqvaFfro3QeYXtQTqLfgP4UckDB8igHGt9CsPklF57F0pW tQSMeKEcyJUBIBqlNW2Wd+TZUM3NJg3KyUy9 -----END CERTIFICATE-----Generated at Sat Jun 7 13:55:55 2025 by rpki-client