$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa File: 323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa (raw, json) Hash identifier: in6zkVgSo1zvq2LTLhVOqlCHjB8xLXn2xL9+G3wkap0= Subject key identifier: 2A:C6:63:89:D8:A2:9D:FB:07:86:68:B8:F5:17:C2:A1:84:BD:54:CC Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Certificate serial: 57B64FDA11FD18076D7A9F7BBBE43CD073AD558C Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa Signing time: Mon 02 Jun 2025 02:03:51 +0000 ROA not before: Mon 02 Jun 2025 01:58:51 +0000 ROA not after: Mon 01 Jun 2026 02:03:51 +0000 asID: 38500 IP address blocks: 2403:2700:4003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b6:4f:da:11:fd:18:07:6d:7a:9f:7b:bb:e4:3c:d0:73:ad:55:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Validity Not Before: Jun 2 01:58:51 2025 GMT Not After : Jun 1 02:03:51 2026 GMT Subject: CN=2AC66389D8A29DFB078668B8F517C2A184BD54CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:83:54:2c:99:12:3f:ba:39:6c:b7:1b:ee: b4:6a:36:a8:12:9a:51:8a:89:f1:50:b9:1d:d3:c3: 0d:a0:f7:d6:53:6d:a4:74:5b:42:e9:e0:1e:6b:ca: 38:bf:e3:a6:45:46:1a:e7:cc:7e:83:b4:f0:93:68: b6:c7:aa:00:c9:9c:78:84:9c:56:70:9d:67:bb:9e: dd:a3:61:63:65:2e:29:46:04:16:a2:3e:88:30:fc: e8:2a:54:70:c3:0b:4b:53:0b:df:8b:da:5b:78:35: cc:6e:fe:c8:08:90:da:77:fa:97:35:ad:35:e2:09: 2c:79:7d:b7:77:42:48:be:2a:5c:b7:d9:c2:68:65: 8c:b4:11:c3:29:1c:46:d3:f8:0f:a3:41:e5:3d:83: a7:cc:53:0a:a0:85:a0:69:ad:cb:b7:68:54:5d:95: f4:92:4a:d0:78:6d:67:42:6b:0a:5b:44:3e:41:b5: 89:f1:9b:e4:b7:d3:30:04:35:df:5f:2d:62:e0:03: 71:e1:95:90:25:80:a2:48:0c:9a:c5:87:2b:45:8d: b2:4a:1f:73:3e:f4:89:63:f9:f8:8a:e7:62:8c:c1: 74:2d:5d:17:8a:dc:10:5d:82:af:9a:e8:cf:fa:21: 26:5c:42:26:ce:21:02:66:32:72:36:8c:79:70:a3: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:63:89:D8:A2:9D:FB:07:86:68:B8:F5:17:C2:A1:84:BD:54:CC X509v3 Authority Key Identifier: keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2700:4003::/48 Signature Algorithm: sha256WithRSAEncryption 0f:da:72:6f:17:99:d7:f8:4f:db:eb:d2:26:fc:95:7f:36:fd: 6e:9c:4b:38:c9:c0:01:14:95:3d:91:d3:4b:37:8b:50:1c:b5: 81:a5:9a:13:ca:b4:55:18:c0:7a:0b:ec:ac:4d:d5:e0:38:6d: 25:e9:53:fb:67:6b:ae:71:50:a0:0e:3e:b0:13:d4:59:f5:ce: d6:e5:1a:35:38:c7:35:2e:b9:40:54:e8:ff:fe:8e:82:7a:0f: 37:68:c8:9e:8d:87:7c:9a:4f:b3:56:51:b7:ee:f2:f8:34:30: 72:81:a7:c6:7d:1e:c3:62:3a:e7:02:d3:c4:e0:f8:c7:75:a4: 54:05:7f:b1:c9:3d:c3:67:66:90:6d:21:71:34:c1:98:84:d3: 99:2b:4c:4b:34:03:96:93:95:41:53:b6:39:e5:05:0a:b1:92: e8:a5:47:e0:eb:dd:27:db:14:18:70:7d:6f:3d:27:21:cc:a1: 2f:fa:ba:24:85:05:9a:be:8e:2e:16:0e:86:07:c1:ef:4b:b5: 07:5e:79:72:0d:e1:36:d1:a2:8d:3a:ef:7f:c1:5e:9c:27:55: b5:90:0f:bd:68:04:1f:62:be:69:79:04:11:45:fd:6d:9d:66: 68:27:91:3a:73:2e:5a:5f:99:f0:fe:9b:19:70:2c:1e:fa:9a: 9e:5a:5e:79 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUV7ZP2hH9GAdtep97u+Q80HOtVYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD RTFEQjFEMDAeFw0yNTA2MDIwMTU4NTFaFw0yNjA2MDEwMjAzNTFaMDMxMTAvBgNV BAMTKDJBQzY2Mzg5RDhBMjlERkIwNzg2NjhCOEY1MTdDMkExODRCRDU0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPgoNULJkSP7o5bLcb7rRqNqgS mlGKifFQuR3Tww2g99ZTbaR0W0Lp4B5ryji/46ZFRhrnzH6DtPCTaLbHqgDJnHiE nFZwnWe7nt2jYWNlLilGBBaiPogw/OgqVHDDC0tTC9+L2lt4Ncxu/sgIkNp3+pc1 rTXiCSx5fbd3Qki+Kly32cJoZYy0EcMpHEbT+A+jQeU9g6fMUwqghaBprcu3aFRd lfSSStB4bWdCawpbRD5BtYnxm+S30zAENd9fLWLgA3HhlZAlgKJIDJrFhytFjbJK H3M+9Ilj+fiK52KMwXQtXReK3BBdgq+a6M/6ISZcQibOIQJmMnI2jHlwo16FAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUKsZjidiinfsHhmi49RfCoYS9VMwwHwYDVR0j BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE QjFEMC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMyMzQzMDMzM2EzMjM3MzAzMDNhMzQzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAMn AEADMA0GCSqGSIb3DQEBCwUAA4IBAQAP2nJvF5nX+E/b69Im/JV/Nv1unEs4ycAB FJU9kdNLN4tQHLWBpZoTyrRVGMB6C+ysTdXgOG0l6VP7Z2uucVCgDj6wE9RZ9c7W 5Ro1OMc1LrlAVOj//o6Ceg83aMiejYd8mk+zVlG37vL4NDBygafGfR7DYjrnAtPE 4PjHdaRUBX+xyT3DZ2aQbSFxNMGYhNOZK0xLNAOWk5VBU7Y55QUKsZLopUfg690n 2xQYcH1vPSchzKEv+rokhQWavo4uFg6GB8HvS7UHXnlyDeE20aKNOu9/wV6cJ1W1 kA+9aAQfYr5peQQRRf1tnWZoJ5E6cy5aX5nw/psZcCwe+pqeWl55 -----END CERTIFICATE-----Generated at Sat Jun 7 14:07:34 2025 by rpki-client