$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: i7d8QzKEgDao+iaPNANckDpDhevpkRgWSoO2vIY9k00= Subject key identifier: 17:B2:0C:BE:A2:E1:9A:FD:B4:90:6A:E8:CA:19:20:30:F4:02:65:46 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 1EA0106DBD27254D4830BB01AAA44938346AEDE3 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa Signing time: Mon 02 Jun 2025 02:04:12 +0000 ROA not before: Mon 02 Jun 2025 01:59:12 +0000 ROA not after: Mon 01 Jun 2026 02:04:12 +0000 asID: 38156 IP address blocks: 2405:a540:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 10:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a0:10:6d:bd:27:25:4d:48:30:bb:01:aa:a4:49:38:34:6a:ed:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Jun 2 01:59:12 2025 GMT Not After : Jun 1 02:04:12 2026 GMT Subject: CN=17B20CBEA2E19AFDB4906AE8CA192030F4026546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:a4:1f:2c:5d:d2:db:8b:0d:4f:7d:18:24: f1:07:a7:9c:f0:40:6b:36:0b:a4:cb:d2:75:8d:9a: 79:f5:c9:82:c6:39:7c:7f:79:94:db:97:ca:a7:63: 00:df:d8:2e:78:ee:fa:5d:01:20:ef:ee:22:3b:9d: 25:87:6f:dd:7b:aa:2c:a7:34:eb:61:c1:0f:c4:16: fd:86:a2:cc:db:df:6e:eb:13:89:05:4d:7e:84:11: fa:95:e7:2c:80:04:1c:03:19:ee:a1:b2:05:c9:58: e8:ea:c2:02:a2:03:5f:8c:65:84:a0:b2:cd:a7:31: b0:3d:b5:c0:56:00:5e:04:0a:d3:2c:0b:20:c6:42: f9:20:96:c5:17:ff:08:53:7e:49:d7:07:7e:9d:ab: d7:c1:94:b9:73:e9:7e:4d:15:16:74:c2:fa:eb:39: 09:dc:21:90:08:ee:98:81:52:71:19:c2:4a:3d:4a: 00:0c:26:0c:4b:c2:fb:da:9a:f9:cb:c6:83:11:a7: b5:cc:a0:41:35:f2:b8:10:61:c8:e1:e9:16:85:6a: 75:f3:68:b3:5a:e6:9a:b2:ea:fa:fa:c3:f1:59:13: 90:ca:a8:18:02:3b:5f:47:10:4b:22:18:35:ea:61: 64:ff:13:86:39:14:3c:ff:b6:56:dd:6c:ad:00:19: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:0C:BE:A2:E1:9A:FD:B4:90:6A:E8:CA:19:20:30:F4:02:65:46 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030323a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1002::/48 Signature Algorithm: sha256WithRSAEncryption 32:99:0c:29:f9:03:30:4d:a2:8d:93:8a:00:ec:94:ac:0f:66: 6a:a6:13:bc:97:04:b1:1c:46:73:43:1e:c2:2b:e9:e2:a5:ad: 1e:74:42:3b:fa:f3:c0:7e:b8:8a:b7:a2:77:a7:86:42:81:e0: 28:55:b5:6e:87:a0:e5:4b:00:fb:cb:13:2a:21:eb:78:83:09: 8a:a2:2e:48:1c:f7:36:ba:91:26:3f:ce:f3:88:b0:c8:92:f8: 6f:93:06:5e:c9:c3:f3:ef:70:0d:16:9d:dc:42:df:c2:ce:15: d4:e9:95:19:3c:24:49:4b:61:5b:c0:12:a6:18:f0:9e:30:5b: a7:d2:5d:2f:6c:11:9e:b1:34:b3:49:b7:7a:ff:7a:54:8a:e3: 95:23:32:6f:2b:e9:11:66:d1:12:d2:7a:2b:96:a1:9b:b3:be: 13:b5:79:bc:43:72:51:0d:e5:83:b9:8a:9b:be:5b:d6:91:b4: 9a:51:17:a4:5a:d8:e7:0a:b7:d5:c5:0f:96:5a:97:6e:6c:4f: e9:9b:cb:49:27:82:42:02:41:d3:78:d6:d5:3a:7c:a9:d7:af: 05:38:c9:59:ae:16:ea:94:ff:a2:8a:eb:ed:87:3d:42:00:7e: ea:45:30:d8:3f:0c:67:3a:85:b9:12:bf:ea:81:34:8e:ef:aa: 0d:d2:ac:4b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHqAQbb0nJU1IMLsBqqRJODRq7eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTA2MDIwMTU5MTJaFw0yNjA2MDEwMjA0MTJaMDMxMTAvBgNV BAMTKDE3QjIwQ0JFQTJFMTlBRkRCNDkwNkFFOENBMTkyMDMwRjQwMjY1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYqQfLF3S24sNT30YJPEHp5zw QGs2C6TL0nWNmnn1yYLGOXx/eZTbl8qnYwDf2C547vpdASDv7iI7nSWHb917qiyn NOthwQ/EFv2Goszb327rE4kFTX6EEfqV5yyABBwDGe6hsgXJWOjqwgKiA1+MZYSg ss2nMbA9tcBWAF4ECtMsCyDGQvkglsUX/whTfknXB36dq9fBlLlz6X5NFRZ0wvrr OQncIZAI7piBUnEZwko9SgAMJgxLwvvamvnLxoMRp7XMoEE18rgQYcjh6RaFanXz aLNa5pqy6vr6w/FZE5DKqBgCO19HEEsiGDXqYWT/E4Y5FDz/tlbdbK0AGeFNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUF7IMvqLhmv20kGroyhkgMPQCZUYwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBACMA0GCSqGSIb3DQEBCwUAA4IBAQAymQwp+QMwTaKNk4oA7JSsD2ZqphO8lwSx HEZzQx7CK+nipa0edEI7+vPAfriKt6J3p4ZCgeAoVbVuh6DlSwD7yxMqIet4gwmK oi5IHPc2upEmP87ziLDIkvhvkwZeycPz73ANFp3cQt/CzhXU6ZUZPCRJS2FbwBKm GPCeMFun0l0vbBGesTSzSbd6/3pUiuOVIzJvK+kRZtES0norlqGbs74TtXm8Q3JR DeWDuYqbvlvWkbSaURekWtjnCrfVxQ+WWpdubE/pm8tJJ4JCAkHTeNbVOnyp168F OMlZrhbqlP+iiuvthz1CAH7qRTDYPwxnOoW5Er/qgTSO76oN0qxL -----END CERTIFICATE-----Generated at Fri Jun 6 16:40:20 2025 by rpki-client