$ rpki-client -vvf repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/323430363a656230303a3a2f33322d3438203d3e20313332363533.roa File: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (raw, json) Hash identifier: Gl8RPqW8PrXHdW+ycPmmKea6eNkUVcurFhY7MyX2sVk= Subject key identifier: 2C:4F:CE:4D:93:1B:06:30:06:55:EE:9F:25:65:CB:1B:B6:AD:47:7C Certificate issuer: /CN=A75550C54400A670523A712A4C8782FA740B4F07 Certificate serial: 1B0386015E3DC4D0A2A3BA6B1D076F17F1C40DCC Authority key identifier: A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/323430363a656230303a3a2f33322d3438203d3e20313332363533.roa Signing time: Mon 02 Jun 2025 02:03:31 +0000 ROA not before: Mon 02 Jun 2025 01:58:31 +0000 ROA not after: Mon 01 Jun 2026 02:03:31 +0000 asID: 132653 IP address blocks: 2406:eb00::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:03:86:01:5e:3d:c4:d0:a2:a3:ba:6b:1d:07:6f:17:f1:c4:0d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A75550C54400A670523A712A4C8782FA740B4F07 Validity Not Before: Jun 2 01:58:31 2025 GMT Not After : Jun 1 02:03:31 2026 GMT Subject: CN=2C4FCE4D931B06300655EE9F2565CB1BB6AD477C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:9c:96:8f:d7:b1:1e:fc:31:d6:6a:01:d2: a7:30:f9:d7:94:ee:29:ef:65:c8:20:00:eb:69:ac: 16:68:d5:c2:3e:35:ba:c4:ab:4d:fe:0a:e3:70:33: 26:5b:78:b8:57:f7:30:22:03:19:87:84:cd:71:48: 9f:d6:86:2f:85:43:8c:b3:48:a0:cf:b8:97:2b:da: c7:21:00:8d:84:42:97:0a:ad:6f:59:f1:11:17:b5: 32:b1:4d:dd:6f:c2:31:d4:72:11:0d:73:1f:e0:81: e0:4a:9c:21:4f:27:2b:2c:3b:7b:6d:3a:97:5a:e1: db:95:65:5d:92:ed:e5:21:12:72:63:37:31:10:84: fb:4b:27:56:d1:3e:10:42:c9:6c:4e:c9:53:96:62: e1:ff:54:e6:5a:23:c2:26:61:43:33:54:12:f8:e7: ac:9e:db:b4:e1:9f:06:13:c3:5a:65:33:95:6c:ea: a2:7a:4c:44:93:fc:d3:9c:17:47:3a:4e:7f:9d:c8: 71:78:45:74:be:bb:8e:ed:32:21:86:a7:24:9c:1b: e7:c2:0d:c2:95:78:06:d3:fc:55:69:24:9e:fe:42: af:8d:14:aa:32:45:ef:1f:b4:f5:64:35:da:d8:4d: fc:00:e6:af:3a:46:7f:a7:f0:08:2d:ab:50:08:38: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4F:CE:4D:93:1B:06:30:06:55:EE:9F:25:65:CB:1B:B6:AD:47:7C X509v3 Authority Key Identifier: keyid:A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/323430363a656230303a3a2f33322d3438203d3e20313332363533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:eb00::/32 Signature Algorithm: sha256WithRSAEncryption 33:00:75:12:df:6b:6a:87:c9:51:7f:44:61:9c:17:ee:9a:3f: 3d:ea:c7:4f:75:cf:75:c2:b8:bd:2f:05:55:70:a3:fe:e9:86: 23:13:0b:eb:60:e6:bb:25:dd:f3:20:57:a2:c8:80:55:e1:2b: c9:9d:23:50:d1:dc:b7:6b:b6:ef:23:8e:a3:f0:2b:40:d9:ed: 20:e3:ec:6e:e1:3e:b7:70:3b:75:1d:c6:6b:93:56:ae:b3:48: 75:f5:d1:2b:4a:a8:9d:2c:2c:d6:42:1c:53:96:9c:b2:59:ec: 4b:0c:4b:67:18:94:17:7b:13:a5:4c:47:6a:c3:19:c9:0a:e7: e0:de:4d:27:96:54:b6:73:e9:7c:25:36:ed:d8:ee:1c:67:a7: 8e:2e:8c:fe:69:4f:01:23:cd:47:36:be:0f:f2:7e:24:12:aa: e6:28:7e:89:72:24:87:5a:ac:bc:7d:ac:49:4d:5a:96:77:6a: 76:fa:11:25:1f:9f:54:fe:95:ad:48:e4:6f:6c:40:1c:c3:0c: d7:a7:9a:96:dd:b1:20:e4:30:f3:95:76:06:9d:40:e6:bd:13: f9:11:32:dd:d6:d0:89:7f:70:16:54:e1:df:51:34:89:b4:70: c6:af:89:02:df:06:71:0c:4e:f7:0a:2a:c9:16:23:ba:8b:46: ef:d7:53:f0 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUGwOGAV49xNCio7prHQdvF/HEDcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc1NTUwQzU0NDAwQTY3MDUyM0E3MTJBNEM4NzgyRkE3 NDBCNEYwNzAeFw0yNTA2MDIwMTU4MzFaFw0yNjA2MDEwMjAzMzFaMDMxMTAvBgNV BAMTKDJDNEZDRTREOTMxQjA2MzAwNjU1RUU5RjI1NjVDQjFCQjZBRDQ3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0JyWj9exHvwx1moB0qcw+deU 7invZcggAOtprBZo1cI+NbrEq03+CuNwMyZbeLhX9zAiAxmHhM1xSJ/Whi+FQ4yz SKDPuJcr2schAI2EQpcKrW9Z8REXtTKxTd1vwjHUchENcx/ggeBKnCFPJyssO3tt Opda4duVZV2S7eUhEnJjNzEQhPtLJ1bRPhBCyWxOyVOWYuH/VOZaI8ImYUMzVBL4 56ye27ThnwYTw1plM5Vs6qJ6TEST/NOcF0c6Tn+dyHF4RXS+u47tMiGGpyScG+fC DcKVeAbT/FVpJJ7+Qq+NFKoyRe8ftPVkNdrYTfwA5q86Rn+n8Agtq1AIOPuzAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQULE/OTZMbBjAGVe6fJWXLG7atR3wwHwYDVR0j BBgwFoAUp1VQxUQApnBSOnEqTIeC+nQLTwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YmQyN2MwYS05NzkyLTRjYmMtOWE5Ni1lNzEwNTBhMWRkZTAvMC9BNzU1NTBDNTQ0 MDBBNjcwNTIzQTcxMkE0Qzg3ODJGQTc0MEI0RjA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc1NTUwQzU0NDAwQTY3MDUyM0E3MTJBNEM4NzgyRkE3NDBC NEYwNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiZDI3YzBhLTk3OTItNGNiYy05 YTk2LWU3MTA1MGExZGRlMC8wLzMyMzQzMDM2M2E2NTYyMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzMjM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQG6wAwDQYJKoZI hvcNAQELBQADggEBADMAdRLfa2qHyVF/RGGcF+6aPz3qx091z3XCuL0vBVVwo/7p hiMTC+tg5rsl3fMgV6LIgFXhK8mdI1DR3Ldrtu8jjqPwK0DZ7SDj7G7hPrdwO3Ud xmuTVq6zSHX10StKqJ0sLNZCHFOWnLJZ7EsMS2cYlBd7E6VMR2rDGckK5+DeTSeW VLZz6XwlNu3Y7hxnp44ujP5pTwEjzUc2vg/yfiQSquYofolyJIdarLx9rElNWpZ3 anb6ESUfn1T+la1I5G9sQBzDDNenmpbdsSDkMPOVdgadQOa9E/kRMt3W0Il/cBZU 4d9RNIm0cMaviQLfBnEMTvcKKskWI7qLRu/XU/A= -----END CERTIFICATE-----Generated at Fri Jun 6 17:15:02 2025 by rpki-client