$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa File: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (raw, json) Hash identifier: bVu2SaAa9IWvlQ6o6+veKHD0ZA7xlveBNCWEZ2Ja1Z4= Subject key identifier: 02:BA:2A:1C:B3:3C:25:D8:A4:52:B7:32:F9:AD:31:DB:CF:D1:EA:62 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 3BCE64280C4671D147692739635007107B85DBF5 Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa Signing time: Mon 02 Jun 2025 02:03:32 +0000 ROA not before: Mon 02 Jun 2025 01:58:32 +0000 ROA not after: Mon 01 Jun 2026 02:03:32 +0000 asID: 58376 IP address blocks: 2403:e600::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ce:64:28:0c:46:71:d1:47:69:27:39:63:50:07:10:7b:85:db:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Jun 2 01:58:32 2025 GMT Not After : Jun 1 02:03:32 2026 GMT Subject: CN=02BA2A1CB33C25D8A452B732F9AD31DBCFD1EA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a6:a3:7f:48:c7:c2:0a:4d:77:11:48:22:b0: 2f:6d:22:11:9b:7d:1d:59:c3:39:cd:63:54:79:74: 94:e6:60:2f:1e:88:34:d2:da:9b:92:91:29:3c:53: f5:44:51:6b:78:20:c9:26:01:48:9d:9c:2d:52:82: b2:21:8c:9f:01:8e:e7:7a:e2:b7:ab:ad:bc:16:32: a7:1c:4e:07:5c:ca:b5:a6:ae:4a:d7:1d:ad:43:82: 63:19:61:cf:0b:a5:46:48:ea:16:e8:b0:c0:8a:9a: 99:48:f2:7c:19:50:5a:e4:60:3e:28:e3:d1:e4:8d: 53:41:db:fd:d1:ff:e6:c4:27:b0:c0:fe:4a:a3:39: 7a:13:29:6b:bb:27:55:fa:ae:c8:b6:ce:1a:e2:78: 71:cc:3b:4a:ad:91:31:f4:c8:c3:4e:39:77:c0:3f: ad:da:85:c9:7d:06:da:07:05:b2:b1:1d:5e:d5:35: 32:50:db:15:39:bf:a9:75:db:d5:8b:a6:f4:b9:f6: c4:ca:d0:54:3f:93:6b:bc:61:bb:60:29:d1:4b:6e: 00:30:86:1b:d1:72:6c:01:b0:dd:20:47:82:f5:27: 88:2d:35:fe:19:94:56:c1:98:61:9a:b1:83:c7:41: f1:b9:49:0d:66:c8:7a:37:f6:83:08:20:19:41:5c: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BA:2A:1C:B3:3C:25:D8:A4:52:B7:32:F9:AD:31:DB:CF:D1:EA:62 X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/323430333a653630303a3a2f33322d3332203d3e203538333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:e600::/32 Signature Algorithm: sha256WithRSAEncryption 05:29:1d:e5:a2:6c:9d:7e:be:56:20:fc:47:c9:5d:79:37:4f: 75:28:e9:61:fd:02:b7:a9:e4:4a:88:2d:f7:66:18:36:d0:3f: 05:15:b9:0c:b2:c4:24:8d:c4:c9:7f:2d:59:7d:65:05:a0:f4: 52:98:a0:b0:4f:09:0a:66:9e:10:c0:64:87:0b:1d:fc:99:59: 63:0a:5a:d2:de:fc:99:8e:0e:a7:20:3c:74:34:d2:17:2a:91: 6f:f9:41:c4:54:a0:3b:60:d5:e6:dd:c1:73:ad:27:79:75:8f: f0:95:fa:8e:dc:cf:c2:79:70:ab:1b:d6:30:f5:b5:f4:53:87: 9d:51:8d:e2:8a:e4:5b:1f:4f:4c:02:56:b3:7c:bc:07:b1:1c: ae:0e:fb:de:63:17:95:72:1a:8e:6a:96:8c:04:66:c2:85:77: f4:3b:0c:cd:71:34:3e:27:41:24:81:4a:87:e2:6f:43:bb:b0: 74:b1:34:02:5c:dd:13:8d:3f:f7:4a:77:9f:de:ec:3f:5d:32: f9:ca:a9:41:de:a4:c8:02:4f:89:db:4b:36:99:f4:93:05:46: 4f:de:6b:2e:79:3f:d1:d6:21:e2:85:38:cb:ea:7c:eb:1c:07: f5:c2:15:e4:b5:f5:66:68:f9:a6:75:45:8e:36:bf:6b:e5:cd: b0:5e:7b:fd -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUO85kKAxGcdFHaSc5Y1AHEHuF2/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNTA2MDIwMTU4MzJaFw0yNjA2MDEwMjAzMzJaMDMxMTAvBgNV BAMTKDAyQkEyQTFDQjMzQzI1RDhBNDUyQjczMkY5QUQzMURCQ0ZEMUVBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpqN/SMfCCk13EUgisC9tIhGb fR1ZwznNY1R5dJTmYC8eiDTS2puSkSk8U/VEUWt4IMkmAUidnC1SgrIhjJ8Bjud6 4rerrbwWMqccTgdcyrWmrkrXHa1DgmMZYc8LpUZI6hbosMCKmplI8nwZUFrkYD4o 49HkjVNB2/3R/+bEJ7DA/kqjOXoTKWu7J1X6rsi2zhrieHHMO0qtkTH0yMNOOXfA P63ahcl9BtoHBbKxHV7VNTJQ2xU5v6l129WLpvS59sTK0FQ/k2u8YbtgKdFLbgAw hhvRcmwBsN0gR4L1J4gtNf4ZlFbBmGGasYPHQfG5SQ1myHo39oMIIBlBXJS9AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUAroqHLM8JdikUrcy+a0x28/R6mIwHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMwLTk1ZGMtNGI3Mi1h ZTFiLWFkMWU5OGIwZTE3OS8wLzMyMzQzMDMzM2E2NTM2MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzgzMzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA+YAMA0GCSqGSIb3 DQEBCwUAA4IBAQAFKR3lomydfr5WIPxHyV15N091KOlh/QK3qeRKiC33Zhg20D8F FbkMssQkjcTJfy1ZfWUFoPRSmKCwTwkKZp4QwGSHCx38mVljClrS3vyZjg6nIDx0 NNIXKpFv+UHEVKA7YNXm3cFzrSd5dY/wlfqO3M/CeXCrG9Yw9bX0U4edUY3iiuRb H09MAlazfLwHsRyuDvveYxeVchqOapaMBGbChXf0OwzNcTQ+J0EkgUqH4m9Du7B0 sTQCXN0TjT/3Snef3uw/XTL5yqlB3qTIAk+J20s2mfSTBUZP3msueT/R1iHihTjL 6nzrHAf1whXktfVmaPmmdUWONr9r5c2wXnv9 -----END CERTIFICATE-----Generated at Sat Jun 7 12:01:47 2025 by rpki-client