$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa File: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (raw, json) Hash identifier: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI= Subject key identifier: 5A:CE:26:10:FC:68:8B:54:1E:25:27:16:DF:A1:D1:19:C8:66:1D:93 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 247330014F010CB4B006CA0BD53CC59BF55B2C3D Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa Signing time: Mon 24 Mar 2025 06:00:06 +0000 ROA not before: Mon 24 Mar 2025 05:55:06 +0000 ROA not after: Mon 23 Mar 2026 06:00:06 +0000 asID: 18103 IP address blocks: 2401:1b00::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 10:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:73:30:01:4f:01:0c:b4:b0:06:ca:0b:d5:3c:c5:9b:f5:5b:2c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Mar 24 05:55:06 2025 GMT Not After : Mar 23 06:00:06 2026 GMT Subject: CN=5ACE2610FC688B541E252716DFA1D119C8661D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:7d:b3:16:a0:ed:e3:12:2b:4e:02:b1:d6: e5:4d:df:a5:99:70:a3:04:f0:8b:1b:e2:0b:d1:35: dc:95:b6:2b:8a:01:bb:a1:9b:7d:3c:07:68:af:83: bc:ee:dd:71:c8:b7:bb:68:da:6c:c1:d4:fe:eb:ff: 8f:82:8a:5a:55:62:2d:21:1c:7f:07:51:e0:3a:00: 16:ec:f6:37:0f:89:aa:c8:82:3b:c9:eb:b1:63:17: b7:14:9e:11:6c:2e:b9:d1:bb:19:45:16:4d:ea:76: f1:86:8f:2e:0c:78:ec:3d:4b:cf:97:53:de:e6:54: 9e:ee:d1:60:ec:0c:2b:c3:08:0f:91:e0:8c:3d:7d: e6:94:f3:f0:ec:28:42:3e:ab:f7:6f:e6:26:de:c2: 9a:ac:19:4c:5a:3c:fb:e8:d1:8f:75:3f:d3:f0:7d: f5:30:e6:a0:22:2f:19:24:2a:b0:28:8a:cc:55:36: 47:82:f2:7d:77:9d:a8:f6:06:3a:ff:02:2e:6c:0d: 5f:6d:0e:5c:ac:46:53:23:06:bd:57:fc:3d:b0:e7: d8:47:41:8a:62:98:3f:73:89:71:c8:3f:7a:11:34: 38:da:2f:cc:a8:94:ae:09:04:2b:19:c2:12:6d:e1: 7a:10:8a:90:cf:7c:b2:b5:8e:c4:f5:71:45:57:6d: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CE:26:10:FC:68:8B:54:1E:25:27:16:DF:A1:D1:19:C8:66:1D:93 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/323430313a316230303a3a2f33322d3438203d3e203138313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:1b00::/32 Signature Algorithm: sha256WithRSAEncryption 27:60:c8:a2:45:36:78:8b:9a:b3:45:24:8d:ac:9b:21:ef:c0: 43:2a:bb:2e:a8:36:2a:bd:c0:05:31:95:da:70:88:8d:0d:cf: 94:2f:1d:57:05:dd:ae:37:c1:ff:eb:9b:8a:72:f4:b8:da:e0: 0b:f8:f7:14:ac:dd:a9:82:fb:ff:ba:f8:88:ff:f1:fd:1a:b1: e7:ba:9e:38:34:36:75:88:f3:5c:f3:15:1b:1d:ed:68:1a:7a: d3:51:1f:5d:eb:d8:ce:4d:d9:36:6c:2d:37:75:5d:6a:9f:f1: 92:93:c2:2a:31:f9:c8:f0:bb:ec:b6:70:43:4b:dd:1f:10:6b: 90:05:ee:9a:dc:a7:a6:eb:ee:c2:32:80:75:99:78:de:ca:6b: bc:4f:39:d1:cb:b5:5f:5f:57:25:bc:3c:34:8e:9b:9d:b4:0d: 73:e6:3e:9a:9d:98:7d:f3:66:6e:1d:89:28:ef:d2:10:44:48: 34:27:b9:34:2a:2c:4b:61:77:76:73:6f:66:ae:81:f6:f4:2d: 75:1e:98:69:3c:19:3a:18:e3:9e:00:80:d1:17:55:90:0f:c7: e7:dd:b2:05:bc:fb:43:9a:a3:1e:6d:ab:ce:f9:b3:59:73:23: 96:73:18:95:0c:d8:7f:67:c2:c0:74:00:60:1f:5a:20:47:f6: b5:b7:56:f2 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUJHMwAU8BDLSwBsoL1TzFm/VbLD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTAzMjQwNTU1MDZaFw0yNjAzMjMwNjAwMDZaMDMxMTAvBgNV BAMTKDVBQ0UyNjEwRkM2ODhCNTQxRTI1MjcxNkRGQTFEMTE5Qzg2NjFEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQX2zFqDt4xIrTgKx1uVN36WZ cKME8Isb4gvRNdyVtiuKAbuhm308B2ivg7zu3XHIt7to2mzB1P7r/4+CilpVYi0h HH8HUeA6ABbs9jcPiarIgjvJ67FjF7cUnhFsLrnRuxlFFk3qdvGGjy4MeOw9S8+X U97mVJ7u0WDsDCvDCA+R4Iw9feaU8/DsKEI+q/dv5ibewpqsGUxaPPvo0Y91P9Pw ffUw5qAiLxkkKrAoisxVNkeC8n13naj2Bjr/Ai5sDV9tDlysRlMjBr1X/D2w59hH QYpimD9ziXHIP3oRNDjaL8yolK4JBCsZwhJt4XoQipDPfLK1jsT1cUVXbYlbAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUWs4mEPxoi1QeJScW36HRGchmHZMwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFmLWQ5YzctNGZmZC1i YTAzLWEzZTFjZGQ4YWVlMC8wLzMyMzQzMDMxM2EzMTYyMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzgzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkARsAMA0GCSqGSIb3 DQEBCwUAA4IBAQAnYMiiRTZ4i5qzRSSNrJsh78BDKrsuqDYqvcAFMZXacIiNDc+U Lx1XBd2uN8H/65uKcvS42uAL+PcUrN2pgvv/uviI//H9GrHnup44NDZ1iPNc8xUb He1oGnrTUR9d69jOTdk2bC03dV1qn/GSk8IqMfnI8LvstnBDS90fEGuQBe6a3Kem 6+7CMoB1mXjeymu8TznRy7VfX1clvDw0jpudtA1z5j6anZh982ZuHYko79IQREg0 J7k0KixLYXd2c29mroH29C11HphpPBk6GOOeAIDRF1WQD8fn3bIFvPtDmqMebavO +bNZcyOWcxiVDNh/Z8LAdABgH1ogR/a1t1by -----END CERTIFICATE-----Generated at Sun Apr 6 10:50:27 2025 by rpki-client