$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa File: 323430303a643734303a3a2f33322d3438203d3e20313336313036.roa (raw, json) Hash identifier: KZfJixsHkSMjEdnxEqfciQELwK4VgwssWsbQl45Zf+U= Subject key identifier: 22:E6:6B:50:28:11:FA:E0:41:86:48:19:F4:22:B8:34:4D:66:BE:9F Certificate issuer: /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC Certificate serial: 38185419A524B734837424866E3EF13811C0143B Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa Signing time: Mon 02 Jun 2025 02:03:58 +0000 ROA not before: Mon 02 Jun 2025 01:58:58 +0000 ROA not after: Mon 01 Jun 2026 02:03:58 +0000 asID: 136106 IP address blocks: 2400:d740::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 10:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:18:54:19:a5:24:b7:34:83:74:24:86:6e:3e:f1:38:11:c0:14:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC Validity Not Before: Jun 2 01:58:58 2025 GMT Not After : Jun 1 02:03:58 2026 GMT Subject: CN=22E66B502811FAE041864819F422B8344D66BE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:a3:1b:e5:5a:96:6d:24:cf:70:63:e3:29: ab:43:81:c2:8a:d9:3b:a7:31:31:c8:50:f8:c3:68: 26:ab:4e:c7:cf:11:d9:6a:0a:9b:86:28:43:63:e4: e2:96:1c:f9:cf:09:67:6a:4e:79:78:9e:31:17:b1: e9:83:7e:db:78:f6:b1:04:07:1c:4d:4f:35:5b:ed: a6:f6:98:70:3a:18:07:c6:c1:47:2b:07:1a:f4:fe: 75:63:9d:e4:37:29:85:23:28:d2:b7:7b:db:bf:eb: 78:e2:84:70:3a:7c:af:96:bd:60:1b:46:39:f0:24: eb:be:70:b0:cb:c1:ed:87:11:31:ab:d1:45:4e:c6: f5:8d:7d:98:6a:73:d9:f2:5a:2f:e5:97:3e:f5:57: f1:ac:2e:91:f3:5b:d7:08:34:9e:62:84:ac:ba:46: 97:90:43:f9:ea:4f:45:2f:32:46:e9:51:e4:6f:9a: 9d:12:86:80:bd:cf:37:ad:d2:0e:da:9a:55:34:2d: 65:37:44:f1:3b:53:75:bb:33:e9:b3:66:74:2e:62: 55:1d:e9:0b:a2:1b:f5:db:ea:33:89:89:6e:7b:10: c1:5a:16:2e:33:e8:3f:33:28:e8:e8:89:b1:46:2e: 89:9e:df:4f:a8:c2:ba:ed:26:ef:68:6f:f9:6f:63: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E6:6B:50:28:11:FA:E0:41:86:48:19:F4:22:B8:34:4D:66:BE:9F X509v3 Authority Key Identifier: keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/323430303a643734303a3a2f33322d3438203d3e20313336313036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d740::/32 Signature Algorithm: sha256WithRSAEncryption ad:39:f8:d5:0d:96:16:ea:a7:a9:52:fa:e5:13:59:99:6b:e5: b1:67:7a:65:c0:14:b2:1e:29:0f:ae:aa:16:f5:63:70:f7:8f: 7f:54:01:ef:77:53:ed:63:5c:38:fa:e5:c1:4e:95:60:32:f0: 4c:99:7b:31:a3:59:cf:b5:4c:f3:a8:e5:df:3e:5d:66:4a:11: d4:7b:3c:68:2a:09:2c:e7:98:c4:a7:83:41:35:96:86:b2:20: f3:5c:f4:f3:e3:d2:5a:3d:4e:56:fa:7b:03:57:95:93:23:13: 52:5d:93:02:7e:0f:12:32:cf:67:2b:7b:45:b0:c1:62:b2:84: a3:91:b4:40:66:38:fe:05:86:95:b6:18:27:b5:06:aa:30:62: dd:6e:93:07:f8:97:2f:d1:35:25:41:e9:d1:6a:e3:a7:e7:5c: e4:75:96:33:c0:cb:ab:12:7d:81:90:98:d0:a1:76:47:a3:71: a5:9f:2e:a5:36:8c:dc:ba:ba:25:7a:75:e0:14:4b:80:ad:2d: ab:02:41:fc:47:14:bf:a8:98:d4:72:0f:1b:ad:eb:16:e6:dd: 18:89:64:ad:47:a8:4d:63:7e:5a:5a:36:fe:d2:2e:2f:32:2d: 91:2e:d7:a5:1a:ac:75:15:26:76:b1:f5:a2:9c:aa:d2:13:65: 0e:0b:e6:7f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUOBhUGaUktzSDdCSGbj7xOBHAFDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJB RkY2MzRDQzAeFw0yNTA2MDIwMTU4NThaFw0yNjA2MDEwMjAzNThaMDMxMTAvBgNV BAMTKDIyRTY2QjUwMjgxMUZBRTA0MTg2NDgxOUY0MjJCODM0NEQ2NkJFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8daMb5VqWbSTPcGPjKatDgcKK 2TunMTHIUPjDaCarTsfPEdlqCpuGKENj5OKWHPnPCWdqTnl4njEXsemDftt49rEE BxxNTzVb7ab2mHA6GAfGwUcrBxr0/nVjneQ3KYUjKNK3e9u/63jihHA6fK+WvWAb RjnwJOu+cLDLwe2HETGr0UVOxvWNfZhqc9nyWi/llz71V/GsLpHzW9cINJ5ihKy6 RpeQQ/nqT0UvMkbpUeRvmp0ShoC9zzet0g7amlU0LWU3RPE7U3W7M+mzZnQuYlUd 6QuiG/Xb6jOJiW57EMFaFi4z6D8zKOjoibFGLome30+owrrtJu9ob/lvY473AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUIuZrUCgR+uBBhkgZ9CK4NE1mvp8wHwYDVR0j BBgwFoAUVf6Snz3xjktbxDCXaapscq/2NMwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Yzk3NmVjNS1iMDVhLTQ4MGYtODZkYS1kNTU3Zjg0YTIzNjQvMC81NUZFOTI5RjNE RjE4RTRCNUJDNDMwOTc2OUFBNkM3MkFGRjYzNENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJBRkY2 MzRDQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjOTc2ZWM1LWIwNWEtNDgwZi04 NmRhLWQ1NTdmODRhMjM2NC8wLzMyMzQzMDMwM2E2NDM3MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNjMxMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQA10AwDQYJKoZI hvcNAQELBQADggEBAK05+NUNlhbqp6lS+uUTWZlr5bFnemXAFLIeKQ+uqhb1Y3D3 j39UAe93U+1jXDj65cFOlWAy8EyZezGjWc+1TPOo5d8+XWZKEdR7PGgqCSznmMSn g0E1loayIPNc9PPj0lo9Tlb6ewNXlZMjE1JdkwJ+DxIyz2cre0WwwWKyhKORtEBm OP4FhpW2GCe1BqowYt1ukwf4ly/RNSVB6dFq46fnXOR1ljPAy6sSfYGQmNChdkej caWfLqU2jNy6uiV6deAUS4CtLasCQfxHFL+omNRyDxut6xbm3RiJZK1HqE1jflpa Nv7SLi8yLZEu16UarHUVJnax9aKcqtITZQ4L5n8= -----END CERTIFICATE-----Generated at Fri Jun 6 16:45:23 2025 by rpki-client