$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa File: 323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa (raw, json) Hash identifier: brBoAiHnPAXN7w+iiY5nOKnIJikx1cWKFRJLTv9yELs= Subject key identifier: AF:E3:AC:50:38:74:10:02:C6:D0:4C:4C:A2:86:46:E6:11:2E:7A:1A Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Certificate serial: 127D59C4C2710F18A0AC1A216A9BEBD7637524C2 Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa Signing time: Mon 02 Jun 2025 02:03:50 +0000 ROA not before: Mon 02 Jun 2025 01:58:50 +0000 ROA not after: Mon 01 Jun 2026 02:03:50 +0000 asID: 38500 IP address blocks: 2403:2700:4002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7d:59:c4:c2:71:0f:18:a0:ac:1a:21:6a:9b:eb:d7:63:75:24:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Validity Not Before: Jun 2 01:58:50 2025 GMT Not After : Jun 1 02:03:50 2026 GMT Subject: CN=AFE3AC5038741002C6D04C4CA28646E6112E7A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:31:f6:7b:f6:a4:b8:98:86:4c:88:31:c1: d1:c0:65:2c:e6:aa:56:59:85:f8:8a:8e:3f:0b:58: e3:ba:1e:6c:19:bd:de:fa:e1:6d:81:77:86:dc:c8: 32:1b:fb:4c:6a:53:b9:60:ae:a7:5b:d9:b4:b7:ac: 9d:d3:e2:61:a7:a8:9d:05:1b:e4:ec:76:c4:6d:b9: 08:51:66:51:46:69:04:ee:65:72:05:0f:95:da:8a: eb:a7:4e:b7:fc:3c:6f:c0:04:b4:7f:db:5a:12:8e: 2e:de:a1:a8:25:34:da:15:32:58:87:6a:e1:46:dc: 26:a4:71:44:6c:45:c3:72:27:2f:df:97:bb:e0:d2: e1:5d:c2:76:a9:0d:f1:bb:54:1b:7e:69:52:e5:29: b1:88:39:58:ea:4b:1e:4d:5b:3f:17:65:2f:e4:ee: ae:57:04:5d:a3:42:33:a2:f5:f3:ea:c4:c7:55:5a: ac:72:f1:a8:47:20:b0:e5:76:30:f4:eb:8b:f9:f2: fa:29:9b:eb:1e:32:36:a8:e3:62:68:60:14:b2:4e: e2:f6:25:18:10:c9:ef:29:64:13:4c:8c:6d:98:ce: 7f:08:b0:ed:da:06:4e:99:8f:59:56:22:e3:a8:4b: 5e:32:17:c2:cc:f6:73:0c:11:ac:8d:8b:3d:32:01: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E3:AC:50:38:74:10:02:C6:D0:4C:4C:A2:86:46:E6:11:2E:7A:1A X509v3 Authority Key Identifier: keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2700:4002::/48 Signature Algorithm: sha256WithRSAEncryption 7b:be:f1:be:7e:8a:5e:d6:87:fd:8f:8f:dc:53:e4:79:a1:ce: 8a:2e:49:77:d6:a2:f2:e9:a0:8f:6b:30:89:8e:7a:92:c3:5e: f7:23:c1:ef:48:41:cc:f6:6e:6f:2d:4d:75:64:4f:99:3c:32: 23:c2:78:79:12:bb:21:5c:02:7a:14:87:42:a1:60:17:95:cd: 56:92:28:9f:d0:55:5b:21:c6:bd:d5:b8:0a:3f:17:ec:25:71: e5:c0:83:14:fb:6c:a4:1d:d6:cc:a0:60:89:8d:bf:73:a9:af: d6:46:02:31:6d:d9:e8:f7:22:78:da:c0:a5:3b:a9:d6:60:3f: 23:6f:23:01:ed:17:67:ca:1a:15:50:0c:82:36:cf:dd:b5:22: 07:92:54:05:41:f2:e5:92:5a:f4:49:ca:99:cd:2c:c1:c7:13: 2a:93:59:9a:f9:5f:06:29:72:37:b1:be:ee:0b:32:ba:8e:4b: bb:39:6a:53:0c:b4:ef:d6:57:84:81:29:c2:c4:3a:11:9b:f0: 5d:3c:be:9c:33:24:6c:70:f3:78:89:49:5f:5b:60:b9:0a:74: bb:55:f2:c8:2e:a3:15:91:f3:54:c3:af:bb:4f:cf:2f:57:85: b6:dc:8f:00:e3:6b:55:4f:35:be:1a:16:b0:33:ef:2a:10:62: 62:44:b2:df -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEn1ZxMJxDxigrBohapvr12N1JMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD RTFEQjFEMDAeFw0yNTA2MDIwMTU4NTBaFw0yNjA2MDEwMjAzNTBaMDMxMTAvBgNV BAMTKEFGRTNBQzUwMzg3NDEwMDJDNkQwNEM0Q0EyODY0NkU2MTEyRTdBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyTH2e/akuJiGTIgxwdHAZSzm qlZZhfiKjj8LWOO6HmwZvd764W2Bd4bcyDIb+0xqU7lgrqdb2bS3rJ3T4mGnqJ0F G+TsdsRtuQhRZlFGaQTuZXIFD5XaiuunTrf8PG/ABLR/21oSji7eoaglNNoVMliH auFG3CakcURsRcNyJy/fl7vg0uFdwnapDfG7VBt+aVLlKbGIOVjqSx5NWz8XZS/k 7q5XBF2jQjOi9fPqxMdVWqxy8ahHILDldjD064v58vopm+seMjao42JoYBSyTuL2 JRgQye8pZBNMjG2Yzn8IsO3aBk6Zj1lWIuOoS14yF8LM9nMMEayNiz0yATgRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUr+OsUDh0EALG0ExMooZG5hEuehowHwYDVR0j BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE QjFEMC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMn AEACMA0GCSqGSIb3DQEBCwUAA4IBAQB7vvG+fope1of9j4/cU+R5oc6KLkl31qLy 6aCPazCJjnqSw173I8HvSEHM9m5vLU11ZE+ZPDIjwnh5ErshXAJ6FIdCoWAXlc1W kiif0FVbIca91bgKPxfsJXHlwIMU+2ykHdbMoGCJjb9zqa/WRgIxbdno9yJ42sCl O6nWYD8jbyMB7RdnyhoVUAyCNs/dtSIHklQFQfLlklr0ScqZzSzBxxMqk1ma+V8G KXI3sb7uCzK6jku7OWpTDLTv1leEgSnCxDoRm/BdPL6cMyRscPN4iUlfW2C5CnS7 VfLILqMVkfNUw6+7T88vV4W23I8A42tVTzW+GhawM+8qEGJiRLLf -----END CERTIFICATE-----Generated at Sat Jun 7 14:02:56 2025 by rpki-client