$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa File: 323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa (raw, json) Hash identifier: EKnwZaCO0FiboAXYDXZkX0Ud1PX6Ia4ChLFx43NIkcM= Subject key identifier: 94:1F:4D:DA:80:15:95:57:4B:66:46:D3:35:9D:60:0B:91:2D:7F:46 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 3007A4CE081FEBD02A26ABEF45157E86DB5A2B0A Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa Signing time: Mon 02 Jun 2025 02:04:48 +0000 ROA not before: Mon 02 Jun 2025 01:59:48 +0000 ROA not after: Mon 01 Jun 2026 02:04:48 +0000 asID: 55685 IP address blocks: 2404:e100:4000::/47 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:07:a4:ce:08:1f:eb:d0:2a:26:ab:ef:45:15:7e:86:db:5a:2b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Jun 2 01:59:48 2025 GMT Not After : Jun 1 02:04:48 2026 GMT Subject: CN=941F4DDA801595574B6646D3359D600B912D7F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:8d:e8:de:59:8a:81:44:e4:09:50:a4:89: f4:51:d2:1e:bf:fb:26:fb:20:71:4c:5d:cf:5e:0d: 03:e6:5a:06:0a:fe:b0:ec:03:38:10:68:a2:ab:a2: ef:14:a9:39:11:ca:72:05:86:eb:f8:7e:1f:4f:8b: 9a:bf:ca:2e:00:99:03:06:19:c6:b9:0d:7b:c1:9c: 93:cf:ec:d2:a6:49:88:95:02:d5:00:87:99:9d:51: 40:87:ee:20:25:d4:34:71:89:47:b7:67:a6:2d:74: a5:3e:2f:cb:2b:60:a2:9f:1a:c4:37:1c:f0:47:0c: 73:51:7b:ec:5a:57:9d:07:ec:bc:df:cc:fc:06:11: 0c:b1:f2:db:55:60:49:e7:37:27:61:e5:dd:4d:cb: 89:da:72:f9:b4:3b:4c:21:72:a3:7f:ad:5a:1d:2a: eb:c2:ae:63:14:45:f0:04:cb:1b:3e:57:c7:0f:68: 81:c6:6f:67:d6:d4:cc:af:ea:0f:6a:61:58:97:e6: ce:5e:b8:56:ea:c4:d8:63:0a:39:6e:d6:ea:a7:a5: 25:3c:e1:26:f5:1f:ca:23:d9:6e:e1:2b:04:d6:f7: 5c:39:1f:2a:a8:cb:06:ab:11:f3:27:3a:5e:8d:ae: 35:58:3c:8f:3b:b1:18:e6:86:2d:34:ca:77:82:49: 58:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:4D:DA:80:15:95:57:4B:66:46:D3:35:9D:60:0B:91:2D:7F:46 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a343030303a3a2f34372d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:4000::/47 Signature Algorithm: sha256WithRSAEncryption 00:4c:99:11:8e:65:e3:a6:e5:c6:75:69:e3:21:14:17:1c:fd: 81:e4:98:fb:20:50:a0:1e:f1:0b:37:4d:00:13:4e:b6:c2:41: 59:53:40:ad:83:5e:f6:cb:e7:fe:63:7b:35:4b:34:26:ae:7c: 1c:74:d4:36:92:4d:34:fa:9d:60:74:0e:48:d7:3f:ff:f5:42: 5d:58:2f:fa:9a:42:2e:06:8f:3c:79:e3:29:79:9f:00:67:31: ab:06:29:91:eb:5e:f5:c8:89:ff:11:f0:dd:55:63:2c:1c:79: 6f:90:fd:b6:3f:0c:6e:f2:42:e6:ec:50:b8:57:74:85:1c:a9: 5c:82:1f:12:3f:1b:c1:30:06:27:66:dc:3a:cd:60:93:d3:16: a9:3a:2f:7d:01:4d:cf:9d:a1:e7:74:c6:e6:56:7b:b6:6e:82: 8b:d8:2b:79:99:32:6e:c4:1f:46:16:d0:26:a1:6d:11:5b:4e: 5a:b1:ea:80:2e:f2:6e:32:81:aa:6e:7a:6a:17:3e:88:30:a3: f7:b6:e0:b9:44:22:48:a4:ad:25:3b:3f:ea:8a:7e:9f:6b:ec: b9:d6:d0:1d:79:d9:2e:0c:2f:13:87:52:dd:c2:73:1a:a9:bb: 8a:ca:4b:ed:7a:22:7a:45:e9:08:ba:ee:8f:9c:56:20:ed:ec: ad:cb:29:b6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMAekzggf69AqJqvvRRV+httaKwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTA2MDIwMTU5NDhaFw0yNjA2MDEwMjA0NDhaMDMxMTAvBgNV BAMTKDk0MUY0RERBODAxNTk1NTc0QjY2NDZEMzM1OUQ2MDBCOTEyRDdGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7643o3lmKgUTkCVCkifRR0h6/ +yb7IHFMXc9eDQPmWgYK/rDsAzgQaKKrou8UqTkRynIFhuv4fh9Pi5q/yi4AmQMG Gca5DXvBnJPP7NKmSYiVAtUAh5mdUUCH7iAl1DRxiUe3Z6YtdKU+L8srYKKfGsQ3 HPBHDHNRe+xaV50H7LzfzPwGEQyx8ttVYEnnNydh5d1Ny4nacvm0O0whcqN/rVod KuvCrmMURfAEyxs+V8cPaIHGb2fW1Myv6g9qYViX5s5euFbqxNhjCjlu1uqnpSU8 4Sb1H8oj2W7hKwTW91w5HyqoywarEfMnOl6NrjVYPI87sRjmhi00yneCSVipAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlB9N2oAVlVdLZkbTNZ1gC5Etf0YwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzQzMDMwMzAz YTNhMmYzNDM3MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJATh AEAAMA0GCSqGSIb3DQEBCwUAA4IBAQAATJkRjmXjpuXGdWnjIRQXHP2B5Jj7IFCg HvELN00AE062wkFZU0Ctg172y+f+Y3s1SzQmrnwcdNQ2kk00+p1gdA5I1z//9UJd WC/6mkIuBo88eeMpeZ8AZzGrBimR6171yIn/EfDdVWMsHHlvkP22Pwxu8kLm7FC4 V3SFHKlcgh8SPxvBMAYnZtw6zWCT0xapOi99AU3PnaHndMbmVnu2boKL2Ct5mTJu xB9GFtAmoW0RW05aseqALvJuMoGqbnpqFz6IMKP3tuC5RCJIpK0lOz/qin6fa+y5 1tAdedkuDC8Th1LdwnMaqbuKykvteiJ6RekIuu6PnFYg7eytyym2 -----END CERTIFICATE-----Generated at Sun Jun 8 06:33:22 2025 by rpki-client