$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa File: 323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa (raw, json) Hash identifier: v6PyG0ZfaK8mElZDMBdGhOWu4eBXE60+RohYgBBjOeQ= Subject key identifier: 98:C5:9B:7F:38:3F:BE:C0:97:8B:4B:7D:93:B5:A6:13:22:37:D0:3A Certificate issuer: /CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F Certificate serial: 7771B356124255F33F7785F189C330D7B4AC9B3E Authority key identifier: 17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa Signing time: Tue 20 May 2025 12:00:01 +0000 ROA not before: Tue 20 May 2025 11:55:01 +0000 ROA not after: Tue 19 May 2026 12:00:01 +0000 asID: 131713 IP address blocks: 2001:df3:2980::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.crl rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 17:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:71:b3:56:12:42:55:f3:3f:77:85:f1:89:c3:30:d7:b4:ac:9b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F Validity Not Before: May 20 11:55:01 2025 GMT Not After : May 19 12:00:01 2026 GMT Subject: CN=98C59B7F383FBEC0978B4B7D93B5A6132237D03A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:70:db:08:57:dc:48:98:b4:9d:0c:e7:9c:a6: 9a:cd:04:1f:3f:82:42:f0:8e:b9:b7:20:81:38:f3: a2:9d:59:40:f6:d0:15:75:77:be:f3:f4:4a:03:ad: ee:19:7a:42:cf:aa:63:90:80:7c:5e:b2:bf:33:7b: 11:aa:d1:18:5d:3b:fb:f6:1b:80:15:3c:77:66:31: 19:ae:5c:cc:d9:41:d8:92:93:c8:f7:68:52:7d:92: db:8e:54:c9:90:8a:e6:fb:cc:b9:98:90:e9:44:56: 32:3d:a3:da:79:91:b6:38:c8:b9:da:73:75:6a:32: 4e:c5:18:c2:3e:6b:6b:ab:25:39:fc:79:67:20:e2: 39:f4:4f:0d:f4:46:45:19:c4:b5:2a:da:75:de:92: fb:79:03:ad:6c:b1:87:e5:51:86:4c:4a:6b:f8:d7: 7c:bf:3f:0b:bc:d5:22:39:88:bb:11:03:d8:96:e1: c4:f6:c1:1a:33:ea:bb:28:0c:d8:b7:9a:a7:e4:90: 89:cc:8e:66:6d:ec:e2:90:9f:8f:b1:94:bb:c5:3b: 81:2d:d0:45:69:64:58:7c:41:b0:59:46:d7:fd:62: b3:25:4a:43:fa:62:4e:1b:c3:a1:04:6e:70:0b:84: 5f:f2:c6:94:d9:b4:32:8a:9c:04:85:6a:65:03:72: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C5:9B:7F:38:3F:BE:C0:97:8B:4B:7D:93:B5:A6:13:22:37:D0:3A X509v3 Authority Key Identifier: keyid:17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:2980::/48 Signature Algorithm: sha256WithRSAEncryption 96:0d:6d:ad:c2:7e:a4:4b:1e:1c:bb:95:61:8d:b8:35:c8:8b: 88:b4:1c:28:3f:c6:cd:60:75:29:b6:7a:c1:cd:9f:23:03:f7: 90:72:1a:f9:1a:66:ca:fa:66:56:df:8d:1f:cb:17:f6:43:7a: 58:a5:04:63:67:c6:a7:c5:cd:0f:28:fc:96:3d:30:1c:02:a6: 46:c6:c1:36:64:ec:91:04:a6:73:cd:9f:d0:53:73:ad:ef:52: 07:2f:d3:97:30:8e:c8:16:cf:7f:5c:2e:eb:a0:2a:88:38:e5: 2b:7b:38:aa:dc:31:4a:c8:f4:32:34:97:45:c1:08:21:eb:4a: 66:e0:31:12:1a:21:f1:09:f8:93:ee:ae:cc:d8:a2:ad:ea:68: 7e:a9:96:71:62:8b:12:6e:ee:70:58:26:e0:14:a2:3f:c3:ae: dc:06:88:e3:62:4b:93:38:f4:7a:e5:ae:dc:0a:8d:3b:de:3a: d3:77:97:00:61:9e:9e:f1:73:1d:0e:4d:cb:52:05:4e:d7:24: 44:99:86:47:20:04:51:e4:76:1c:7a:80:ce:58:a7:73:b0:de: ea:f1:d8:82:f3:f2:34:4a:2f:59:3b:45:27:ba:a7:2c:9f:24: 63:7d:8d:d2:6f:25:3e:48:7d:32:7d:43:23:3e:17:d9:73:4f: 66:a4:b0:be -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUd3GzVhJCVfM/d4XxicMw17Ssmz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc5QjRFQjIzMzBFMjZFQ0Q3N0M4MjU0RDhGOEJEREQx Q0NCNkU3RjAeFw0yNTA1MjAxMTU1MDFaFw0yNjA1MTkxMjAwMDFaMDMxMTAvBgNV BAMTKDk4QzU5QjdGMzgzRkJFQzA5NzhCNEI3RDkzQjVBNjEzMjIzN0QwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcNsIV9xImLSdDOecpprNBB8/ gkLwjrm3IIE486KdWUD20BV1d77z9EoDre4ZekLPqmOQgHxesr8zexGq0RhdO/v2 G4AVPHdmMRmuXMzZQdiSk8j3aFJ9ktuOVMmQiub7zLmYkOlEVjI9o9p5kbY4yLna c3VqMk7FGMI+a2urJTn8eWcg4jn0Tw30RkUZxLUq2nXekvt5A61ssYflUYZMSmv4 13y/Pwu81SI5iLsRA9iW4cT2wRoz6rsoDNi3mqfkkInMjmZt7OKQn4+xlLvFO4Et 0EVpZFh8QbBZRtf9YrMlSkP6Yk4bw6EEbnALhF/yxpTZtDKKnASFamUDckQ1AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUmMWbfzg/vsCXi0t9k7WmEyI30DowHwYDVR0j BBgwFoAUF5tOsjMOJuzXfIJU2Pi93RzLbn8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMGU2Yy0xNDVhLTRjZjMtYjI4My00MmM0YWY4MTkxODgvMC8xNzlCNEVCMjMz MEUyNkVDRDc3QzgyNTREOEY4QkRERDFDQ0I2RTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc5QjRFQjIzMzBFMjZFQ0Q3N0M4MjU0RDhGOEJEREQxQ0NC NkU3Ri5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1N2YwZTZjLTE0NWEtNGNmMy1i MjgzLTQyYzRhZjgxOTE4OC8wLzMyMzAzMDMxM2E2NDY2MzMzYTMyMzkzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMxMzczMTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8ymAMA0GCSqGSIb3DQEBCwUAA4IBAQCWDW2twn6kSx4cu5Vhjbg1yIuItBwoP8bN YHUptnrBzZ8jA/eQchr5GmbK+mZW340fyxf2Q3pYpQRjZ8anxc0PKPyWPTAcAqZG xsE2ZOyRBKZzzZ/QU3Ot71IHL9OXMI7IFs9/XC7roCqIOOUreziq3DFKyPQyNJdF wQgh60pm4DESGiHxCfiT7q7M2KKt6mh+qZZxYosSbu5wWCbgFKI/w67cBojjYkuT OPR65a7cCo073jrTd5cAYZ6e8XMdDk3LUgVO1yREmYZHIARR5HYceoDOWKdzsN7q 8diC8/I0Si9ZO0UnuqcsnyRjfY3SbyU+SH0yfUMjPhfZc09mpLC+ -----END CERTIFICATE-----Generated at Sat Jun 7 19:29:08 2025 by rpki-client