$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a3a2f33322d3438203d3e20313337333633.roa File: 323430323a666463303a3a2f33322d3438203d3e20313337333633.roa (raw, json) Hash identifier: j7jB38lRK0MyqdwJWx6N5CBz2kyL9r9I3yPoxuutiIw= Subject key identifier: 95:38:55:3D:BB:9B:5B:B8:9A:BD:6E:EE:78:17:84:4A:9C:16:C0:E0 Certificate issuer: /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Certificate serial: 5CC08A7B3DD8C2A8B31795548466F1F5E545E91D Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a3a2f33322d3438203d3e20313337333633.roa Signing time: Thu 05 Jun 2025 10:00:01 +0000 ROA not before: Thu 05 Jun 2025 09:55:01 +0000 ROA not after: Thu 04 Jun 2026 10:00:01 +0000 asID: 137363 IP address blocks: 2402:fdc0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 15:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c0:8a:7b:3d:d8:c2:a8:b3:17:95:54:84:66:f1:f5:e5:45:e9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Validity Not Before: Jun 5 09:55:01 2025 GMT Not After : Jun 4 10:00:01 2026 GMT Subject: CN=9538553DBB9B5BB89ABD6EEE7817844A9C16C0E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:3b:02:c7:4f:14:fc:66:54:98:e9:23:1e: 0f:79:e7:8b:08:f1:dd:61:d0:ec:01:a8:79:f1:d3: 9b:c8:a6:a7:03:78:4f:73:d8:72:a1:44:07:10:89: 46:5e:42:37:4a:77:21:c2:8e:91:7c:01:14:54:5b: 60:02:0a:67:df:cd:c7:12:e2:e8:29:f6:f1:18:73: 03:17:ae:1a:b3:9c:e3:1b:01:15:1f:ca:85:26:3b: 67:18:3d:e3:45:38:84:f7:bf:6a:5d:74:ce:0a:81: ce:ba:81:5f:b5:2a:1f:ab:4d:79:5f:e1:b8:12:e4: 02:e2:53:a8:86:23:18:25:fc:d3:f2:04:29:bb:be: 06:07:a0:81:02:a8:2d:89:e7:09:55:6a:35:bc:c8: 84:38:51:18:73:ca:4d:7a:06:30:dc:37:ed:25:8d: 82:57:92:1b:bb:f1:58:ef:31:05:a2:1f:0f:3e:f6: ec:42:33:ed:0a:dd:a3:a3:80:e5:19:07:6b:f1:40: 59:5a:bb:8a:43:44:af:e7:59:35:19:2c:1d:4f:fe: 05:19:f8:83:bb:b9:6e:0f:bd:cf:64:db:1f:0a:78: b6:9d:fa:99:3a:8b:34:f6:f7:75:d3:a1:23:97:41: 4b:09:63:a7:7e:06:25:07:e3:b1:7c:95:bd:c9:85: 23:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:38:55:3D:BB:9B:5B:B8:9A:BD:6E:EE:78:17:84:4A:9C:16:C0:E0 X509v3 Authority Key Identifier: keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/323430323a666463303a3a2f33322d3438203d3e20313337333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:fdc0::/32 Signature Algorithm: sha256WithRSAEncryption 25:3f:f6:bf:c2:0c:c0:d6:3f:b9:45:58:34:7b:1a:55:e0:b1: 9a:a4:68:41:38:5d:52:85:33:16:ad:aa:9f:0b:77:98:96:87: 72:70:22:e0:52:4a:59:65:47:46:d9:03:82:fc:27:07:e4:43: fb:77:40:72:c9:20:ce:6c:75:2a:d7:7b:e8:fb:4e:ef:6b:0c: bc:db:d5:e2:4a:f2:01:12:f7:6c:56:b7:bf:01:9b:cf:95:b2: 8d:8c:bb:e5:9c:32:c4:d7:35:fb:bc:99:3d:44:85:97:e4:c3: 3b:9a:d1:29:ab:ee:e0:c7:53:03:75:17:c6:f2:e4:b3:2f:43: e4:26:b1:d0:46:89:08:e5:2d:7d:92:62:af:9e:61:d8:67:f9: 5b:a8:ca:c9:03:76:0b:0c:83:ad:eb:a3:da:f8:ac:82:e6:62: 19:14:9d:b7:0f:20:a5:03:5f:85:ee:1f:4b:de:54:e1:c1:c3: 80:0b:68:12:40:d4:4e:ef:5e:20:db:2d:08:a9:11:1c:f5:82: eb:ce:88:c0:28:a8:b7:70:30:05:33:72:cd:fc:69:29:cc:2a: 7f:29:30:dd:4f:4a:ae:9e:54:6c:dd:d5:4f:01:d9:c1:c4:2b: 55:30:e5:7e:bb:b8:c7:af:2e:c5:3e:b1:28:22:b1:25:d0:05: 3c:62:48:85 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUXMCKez3YwqizF5VUhGbx9eVF6R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEy NDk5M0NBMzAeFw0yNTA2MDUwOTU1MDFaFw0yNjA2MDQxMDAwMDFaMDMxMTAvBgNV BAMTKDk1Mzg1NTNEQkI5QjVCQjg5QUJENkVFRTc4MTc4NDRBOUMxNkMwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxjsCx08U/GZUmOkjHg9554sI 8d1h0OwBqHnx05vIpqcDeE9z2HKhRAcQiUZeQjdKdyHCjpF8ARRUW2ACCmffzccS 4ugp9vEYcwMXrhqznOMbARUfyoUmO2cYPeNFOIT3v2pddM4Kgc66gV+1Kh+rTXlf 4bgS5ALiU6iGIxgl/NPyBCm7vgYHoIECqC2J5wlVajW8yIQ4URhzyk16BjDcN+0l jYJXkhu78VjvMQWiHw8+9uxCM+0K3aOjgOUZB2vxQFlau4pDRK/nWTUZLB1P/gUZ +IO7uW4Pvc9k2x8KeLad+pk6izT293XToSOXQUsJY6d+BiUH47F8lb3JhSOXAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUlThVPbubW7iavW7ueBeESpwWwOAwHwYDVR0j BBgwFoAUtu4fYdbo6e7GQMzB15HboSSZPKMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMC9CNkVFMUY2MUQ2 RThFOUVFQzY0MENDQzFENzkxREJBMTI0OTkzQ0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEyNDk5 M0NBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04 MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzQzMDMyM2E2NjY0NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNzMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQC/cAwDQYJKoZI hvcNAQELBQADggEBACU/9r/CDMDWP7lFWDR7GlXgsZqkaEE4XVKFMxatqp8Ld5iW h3JwIuBSSlllR0bZA4L8JwfkQ/t3QHLJIM5sdSrXe+j7Tu9rDLzb1eJK8gES92xW t78Bm8+Vso2Mu+WcMsTXNfu8mT1EhZfkwzua0Smr7uDHUwN1F8by5LMvQ+QmsdBG iQjlLX2SYq+eYdhn+VuoyskDdgsMg63ro9r4rILmYhkUnbcPIKUDX4XuH0veVOHB w4ALaBJA1E7vXiDbLQipERz1guvOiMAoqLdwMAUzcs38aSnMKn8pMN1PSq6eVGzd 1U8B2cHEK1Uw5X67uMevLsU+sSgisSXQBTxiSIU= -----END CERTIFICATE-----Generated at Wed Oct 29 13:21:13 2025 by rpki-client