$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: UQ9JRplqMwFCB7htaHP9Q+pCtGS+aF3UsyV/7WSuDnc= Subject key identifier: A2:A0:61:89:2C:6E:3C:34:DF:6A:C7:1D:7A:56:50:22:55:E4:4A:3F Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 0D297A73A21031AC1E9F14031F4967A1BB299968 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa Signing time: Thu 22 May 2025 04:46:11 +0000 ROA not before: Thu 22 May 2025 04:41:11 +0000 ROA not after: Thu 21 May 2026 04:46:11 +0000 asID: 133798 IP address blocks: 2402:5680:8f30::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:29:7a:73:a2:10:31:ac:1e:9f:14:03:1f:49:67:a1:bb:29:99:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: May 22 04:41:11 2025 GMT Not After : May 21 04:46:11 2026 GMT Subject: CN=A2A061892C6E3C34DF6AC71D7A56502255E44A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:8c:97:ac:b6:70:ab:06:39:1e:18:4e:46: 81:48:3c:99:0b:a8:6f:0d:de:16:61:cc:b4:9b:88: ea:67:b3:af:c3:b6:94:2e:34:6d:8d:4a:2c:b0:46: 75:d3:c5:ac:df:f4:f8:c1:bc:be:72:f9:41:a9:bf: 68:87:b6:0e:5e:6c:b9:72:f4:e3:a4:70:61:02:1b: 6d:e0:ef:3c:6c:e3:f2:06:20:a2:c5:92:98:54:8e: 0a:72:0e:89:3e:80:23:76:0e:fb:d0:1d:9e:c0:b3: db:34:5e:72:c4:d0:be:ab:af:72:75:df:37:5e:c8: 06:0c:4c:ef:97:89:b2:ef:8a:26:52:a0:2b:d3:e8: 48:14:83:47:4d:66:40:f2:d0:0a:f2:d0:6a:e8:3c: 8d:42:69:7d:8f:42:d0:49:be:e2:e0:fc:80:9d:18: dd:13:fa:33:84:72:57:11:b9:34:be:53:b0:80:24: 14:4e:b4:27:99:f0:73:69:ca:0f:4f:eb:bf:87:e4: e9:6c:76:1a:cb:ec:72:29:0a:74:b0:6f:18:9f:e2: 10:f3:24:7c:53:48:f8:3d:eb:a1:95:84:d8:79:0e: 08:70:1f:6a:ec:3a:49:7e:0f:14:74:88:c9:ed:3e: c1:bb:e0:56:d6:59:10:ea:e5:dc:36:44:9e:95:5c: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A0:61:89:2C:6E:3C:34:DF:6A:C7:1D:7A:56:50:22:55:E4:4A:3F X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386633303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8f30::/44 Signature Algorithm: sha256WithRSAEncryption 10:6a:4c:83:ef:0b:6b:61:3b:1f:d9:b9:68:27:f8:3f:6a:e9: 9a:5f:66:74:53:ed:d2:f0:a8:5e:74:20:b6:c2:e6:d2:34:39: b4:76:f8:59:4f:98:0e:39:37:fd:ff:4f:5f:74:6b:38:2b:8c: a9:cd:c2:4b:26:b2:a7:fc:e6:ce:97:b4:b5:84:dc:b6:64:97: ef:00:6e:87:25:8f:48:aa:ac:99:de:20:10:92:6d:80:66:c0: f0:3b:1c:46:56:b6:7e:9f:df:94:f7:74:e8:da:ab:5e:1c:7c: 16:b1:fc:27:33:7b:ce:fd:53:0b:17:61:8e:b4:af:32:2a:5c: 75:95:f1:2c:07:8c:1d:37:22:4d:ef:ba:d2:60:2e:75:bc:46: 11:b8:f3:bb:6c:f4:45:56:f2:33:65:8c:2f:73:07:78:5e:c3: 5e:e9:37:0b:54:6a:ff:1c:be:01:31:66:d6:49:46:52:74:63: 8e:10:e4:fb:8a:c7:6c:94:c6:0d:69:dc:5f:26:39:7b:36:ff: 78:50:4e:06:17:2a:b0:1b:97:7c:79:75:dd:c4:88:7a:26:a6: 5a:ac:0f:74:bd:17:d6:40:ab:90:b2:92:91:d0:5a:a8:d1:d8: 1d:a0:6a:32:47:ae:5c:c0:c7:ef:aa:71:d6:f3:ad:d1:db:fd: 6f:23:e7:7e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUDSl6c6IQMawenxQDH0lnobspmWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA1MjIwNDQxMTFaFw0yNjA1MjEwNDQ2MTFaMDMxMTAvBgNV BAMTKEEyQTA2MTg5MkM2RTNDMzRERjZBQzcxRDdBNTY1MDIyNTVFNDRBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQn4yXrLZwqwY5HhhORoFIPJkL qG8N3hZhzLSbiOpns6/DtpQuNG2NSiywRnXTxazf9PjBvL5y+UGpv2iHtg5ebLly 9OOkcGECG23g7zxs4/IGIKLFkphUjgpyDok+gCN2DvvQHZ7As9s0XnLE0L6rr3J1 3zdeyAYMTO+XibLviiZSoCvT6EgUg0dNZkDy0Ary0GroPI1CaX2PQtBJvuLg/ICd GN0T+jOEclcRuTS+U7CAJBROtCeZ8HNpyg9P67+H5OlsdhrL7HIpCnSwbxif4hDz JHxTSPg966GVhNh5DghwH2rsOkl+DxR0iMntPsG74FbWWRDq5dw2RJ6VXMkLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUoqBhiSxuPDTfascdelZQIlXkSj8wHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2NjMzMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAjzAwDQYJKoZIhvcNAQELBQADggEBABBqTIPvC2thOx/ZuWgn+D9q6ZpfZnRT 7dLwqF50ILbC5tI0ObR2+FlPmA45N/3/T190azgrjKnNwksmsqf85s6XtLWE3LZk l+8Aboclj0iqrJneIBCSbYBmwPA7HEZWtn6f35T3dOjaq14cfBax/Ccze879UwsX YY60rzIqXHWV8SwHjB03Ik3vutJgLnW8RhG487ts9EVW8jNljC9zB3hew17pNwtU av8cvgExZtZJRlJ0Y44Q5PuKx2yUxg1p3F8mOXs2/3hQTgYXKrAbl3x5dd3EiHom plqsD3S9F9ZAq5CykpHQWqjR2B2gajJHrlzAx++qcdbzrdHb/W8j534= -----END CERTIFICATE-----Generated at Sat Jun 7 18:08:45 2025 by rpki-client