$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa File: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (raw, json) Hash identifier: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc= Subject key identifier: A9:47:E8:BC:2F:6E:3E:ED:73:2E:90:58:54:E5:B2:C7:18:29:F0:1B Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 4C1E92A9F90EC9780EB9D8F24987FBDBD53F5679 Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa Signing time: Mon 02 Jun 2025 01:02:54 +0000 ROA not before: Mon 02 Jun 2025 00:57:54 +0000 ROA not after: Mon 01 Jun 2026 01:02:54 +0000 asID: 138113 IP address blocks: 2404:1040::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1e:92:a9:f9:0e:c9:78:0e:b9:d8:f2:49:87:fb:db:d5:3f:56:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Jun 2 00:57:54 2025 GMT Not After : Jun 1 01:02:54 2026 GMT Subject: CN=A947E8BC2F6E3EED732E905854E5B2C71829F01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:4d:30:a1:86:81:55:69:11:ce:58:75:91: 17:5b:eb:2c:b8:2e:92:4e:8b:37:5a:26:bf:c0:24: ed:d6:df:c5:4e:39:af:88:06:f5:46:b9:b1:4b:da: 9a:26:71:b6:f4:86:0c:9d:9d:6c:82:38:b5:ed:1d: cd:b3:6a:df:45:42:71:f1:ea:81:59:e5:ec:5a:bd: c7:8d:13:e4:3f:85:a4:b1:1b:a7:98:51:77:77:0a: 03:1b:fe:d3:d7:d7:ae:c5:21:87:0e:dd:06:07:12: 70:dd:e9:07:7c:31:7a:05:37:75:14:65:30:57:9f: 2a:e1:41:37:cd:a7:fb:8d:21:57:af:88:02:6f:76: ca:ca:20:40:e3:21:16:34:1a:9b:a6:0f:49:8f:31: 27:91:da:86:a8:e3:9e:c8:ac:0e:6c:ee:d4:59:b7: 5f:eb:99:c9:7d:b6:a1:24:2f:3f:10:e0:2f:58:11: dc:2c:cb:d6:57:67:1a:8d:86:fa:f1:84:6b:86:7e: 7d:77:d3:13:c8:10:a8:be:da:92:bf:21:1d:99:24: 80:d2:4d:3e:5d:2b:a4:ac:23:02:5a:02:25:99:cf: 6c:d0:c2:c5:60:2a:20:1e:18:1f:30:f5:ee:3d:b7: e2:97:99:99:e1:fa:01:0e:d2:e3:06:a1:95:c7:a4: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:47:E8:BC:2F:6E:3E:ED:73:2E:90:58:54:E5:B2:C7:18:29:F0:1B X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/323430343a313034303a3a2f33322d3332203d3e20313338313133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:1040::/32 Signature Algorithm: sha256WithRSAEncryption 91:a2:48:f7:ea:e6:fa:71:af:f8:1a:62:49:6c:da:82:42:29: 4a:dc:17:0f:8b:a1:5b:b8:b0:ac:43:8a:c4:b6:79:96:3f:a1: d3:33:e5:3a:62:64:c3:9d:aa:b6:37:f9:05:65:eb:72:79:f2: 21:2f:c3:e1:82:9e:b3:3f:eb:1a:6c:47:59:5a:2c:10:ff:1a: 17:4c:bb:92:52:50:28:00:8c:11:60:73:23:8b:13:81:be:65: b2:a2:c7:53:f0:1e:eb:a1:ea:90:62:3e:c0:83:2b:51:eb:73: 43:35:f1:c6:74:60:9c:ad:c4:61:c5:66:a6:38:52:44:55:de: 02:ff:fd:6b:b2:b2:25:91:91:43:62:e6:df:e8:72:1e:49:ed: 17:d8:cb:9d:b6:c7:ff:37:e5:7f:b5:d5:50:e3:9b:d8:80:56: bc:e0:05:69:c6:0a:39:a7:00:a6:49:09:60:6d:98:77:b1:ff: 7b:be:56:8b:e8:a6:0d:52:10:75:08:81:3d:f7:3c:d6:9b:cc: 07:0a:fd:9f:cb:1a:61:5e:9c:e2:84:ec:5c:6c:f9:18:31:a1: 12:65:25:3b:30:7c:10:b1:a5:25:be:db:93:b3:c3:b0:3a:a5: cf:12:c3:b4:6e:d9:89:7b:ea:94:1b:fd:0a:ee:98:16:ce:c8: 40:f1:43:38 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUTB6SqfkOyXgOudjySYf729U/VnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTA2MDIwMDU3NTRaFw0yNjA2MDEwMTAyNTRaMDMxMTAvBgNV BAMTKEE5NDdFOEJDMkY2RTNFRUQ3MzJFOTA1ODU0RTVCMkM3MTgyOUYwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/E0woYaBVWkRzlh1kRdb6yy4 LpJOizdaJr/AJO3W38VOOa+IBvVGubFL2pomcbb0hgydnWyCOLXtHc2zat9FQnHx 6oFZ5exavceNE+Q/haSxG6eYUXd3CgMb/tPX167FIYcO3QYHEnDd6Qd8MXoFN3UU ZTBXnyrhQTfNp/uNIVeviAJvdsrKIEDjIRY0GpumD0mPMSeR2oao457IrA5s7tRZ t1/rmcl9tqEkLz8Q4C9YEdwsy9ZXZxqNhvrxhGuGfn130xPIEKi+2pK/IR2ZJIDS TT5dK6SsIwJaAiWZz2zQwsVgKiAeGB8w9e49t+KXmZnh+gEO0uMGoZXHpAXJAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUqUfovC9uPu1zLpBYVOWyxxgp8BswHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhMmU1YjY5LWFkYmQtNGUyZC04 NDdkLTM3NDgxNTU4MWQ4Ni8wLzMyMzQzMDM0M2EzMTMwMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzODMxMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEEEAwDQYJKoZI hvcNAQELBQADggEBAJGiSPfq5vpxr/gaYkls2oJCKUrcFw+LoVu4sKxDisS2eZY/ odMz5TpiZMOdqrY3+QVl63J58iEvw+GCnrM/6xpsR1laLBD/GhdMu5JSUCgAjBFg cyOLE4G+ZbKix1PwHuuh6pBiPsCDK1Hrc0M18cZ0YJytxGHFZqY4UkRV3gL//Wuy siWRkUNi5t/och5J7RfYy522x/835X+11VDjm9iAVrzgBWnGCjmnAKZJCWBtmHex /3u+Vovopg1SEHUIgT33PNabzAcK/Z/LGmFenOKE7Fxs+RgxoRJlJTswfBCxpSW+ 25Ozw7A6pc8Sw7Ru2Yl76pQb/QrumBbOyEDxQzg= -----END CERTIFICATE-----Generated at Sun Jun 8 07:26:00 2025 by rpki-client