$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa File: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (raw, json) Hash identifier: Dbjg+vJVIA/12edzQmA2oSGprW6vIebqnxwMgbbyHSg= Subject key identifier: 27:56:82:48:16:54:6A:97:7D:56:D2:22:44:3B:B0:C5:CF:09:F9:4D Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 27F199645681DCE8AFD25B62D04C51B54D15A528 Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa Signing time: Mon 27 Jan 2025 17:00:01 +0000 ROA not before: Mon 27 Jan 2025 16:55:01 +0000 ROA not after: Mon 26 Jan 2026 17:00:01 +0000 asID: 139417 IP address blocks: 2404:cac0:db5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 16:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:f1:99:64:56:81:dc:e8:af:d2:5b:62:d0:4c:51:b5:4d:15:a5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Jan 27 16:55:01 2025 GMT Not After : Jan 26 17:00:01 2026 GMT Subject: CN=2756824816546A977D56D222443BB0C5CF09F94D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:39:35:b2:54:2a:e8:48:2e:61:ea:4a:c5: 66:73:8e:df:77:5e:69:e7:16:11:ae:84:ce:b6:f5: 1b:1b:a9:8c:fb:a3:54:05:5e:b1:bc:59:c6:e3:24: e5:e5:07:ce:ce:e0:eb:22:fa:23:b5:e1:38:49:fb: 61:77:3d:3e:e5:10:72:b6:53:08:70:99:12:fa:3c: 6f:52:b6:d0:be:e7:17:bb:08:47:96:d4:6d:b3:d9: 4c:92:2c:c4:78:71:cf:b4:29:f4:06:e2:a0:99:bc: db:e2:54:0a:1b:c5:59:da:92:d9:7f:79:d8:35:b7: cc:75:ea:6f:d4:ab:9e:e8:84:e1:dc:85:6b:1e:d3: ee:e6:51:8c:b3:b2:fd:38:70:52:1a:db:da:eb:da: c7:6f:ae:06:1e:f8:0a:97:e1:3c:9a:18:e9:ee:b7: 65:85:91:76:3f:01:03:bd:49:4c:23:e7:ae:ad:0c: 25:8c:c2:ba:ac:5d:90:00:ac:3a:6b:24:02:09:61: f5:89:56:05:a5:ab:91:15:50:d1:83:62:0d:09:74: a2:51:35:63:ab:14:e2:3e:5d:69:3d:de:21:be:e7: f3:a2:ce:82:07:71:6d:d2:b3:2a:dc:7a:18:da:0c: a1:ca:b7:d1:72:99:a6:d0:c7:e1:99:81:fa:30:f3: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:56:82:48:16:54:6A:97:7D:56:D2:22:44:3B:B0:C5:CF:09:F9:4D X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cac0:db5::/48 Signature Algorithm: sha256WithRSAEncryption 83:73:3e:ad:f8:5d:93:2c:18:95:ba:4c:74:fc:d3:1c:94:fb: 54:76:ef:4b:8c:b7:d9:66:7b:dc:1f:19:32:57:8d:42:08:60: bd:48:9a:e5:98:60:d2:80:4f:6f:a6:ff:12:0d:0e:f9:dd:35: 56:f4:e6:61:d0:1a:82:6c:da:b6:23:e9:e6:75:3b:c1:fd:a3: 75:d2:ec:1e:c9:bd:e6:07:4f:0d:74:55:2e:76:fc:15:d3:46: dc:32:89:51:c6:11:73:9c:7b:85:13:d8:8d:e6:8a:05:2d:d0: ab:e8:49:48:5e:59:a2:9b:2f:10:6d:2a:d6:39:b9:0a:f0:9b: d5:a4:cb:e8:56:c7:e5:ec:36:67:7f:a7:18:9c:3d:25:ab:09: ec:58:22:a6:7f:a8:9d:35:db:db:4c:8f:e9:62:33:2b:ed:43: 80:83:66:5b:c2:aa:d2:2d:91:fd:bc:a7:92:a9:f3:64:cf:78: ae:3a:ab:47:92:c4:10:05:1a:dd:37:30:c5:24:b5:0b:86:9e: c5:9b:3d:8f:2c:fd:34:94:9f:e3:fb:64:e3:aa:fc:aa:70:fa: 6b:6a:18:ec:cd:3d:29:a5:ca:bd:dd:8b:8a:4f:12:22:44:18: 2f:45:74:a2:57:0b:61:56:72:e5:d1:45:57:28:39:2f:b2:f7: 00:6d:68:f9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJ/GZZFaB3Oiv0lti0ExRtU0VpSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNTAxMjcxNjU1MDFaFw0yNjAxMjYxNzAwMDFaMDMxMTAvBgNV BAMTKDI3NTY4MjQ4MTY1NDZBOTc3RDU2RDIyMjQ0M0JCMEM1Q0YwOUY5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Vjk1slQq6EguYepKxWZzjt93 XmnnFhGuhM629RsbqYz7o1QFXrG8WcbjJOXlB87O4Osi+iO14ThJ+2F3PT7lEHK2 UwhwmRL6PG9SttC+5xe7CEeW1G2z2UySLMR4cc+0KfQG4qCZvNviVAobxVnaktl/ edg1t8x16m/Uq57ohOHchWse0+7mUYyzsv04cFIa29rr2sdvrgYe+AqX4TyaGOnu t2WFkXY/AQO9SUwj566tDCWMwrqsXZAArDprJAIJYfWJVgWlq5EVUNGDYg0JdKJR NWOrFOI+XWk93iG+5/OizoIHcW3SsyrcehjaDKHKt9FymabQx+GZgfow84WnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUJ1aCSBZUapd9VtIiRDuwxc8J+U0wHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhNjQ2MjM1M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzMTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATK wA21MA0GCSqGSIb3DQEBCwUAA4IBAQCDcz6t+F2TLBiVukx0/NMclPtUdu9LjLfZ ZnvcHxkyV41CCGC9SJrlmGDSgE9vpv8SDQ753TVW9OZh0BqCbNq2I+nmdTvB/aN1 0uweyb3mB08NdFUudvwV00bcMolRxhFznHuFE9iN5ooFLdCr6ElIXlmimy8QbSrW ObkK8JvVpMvoVsfl7DZnf6cYnD0lqwnsWCKmf6idNdvbTI/pYjMr7UOAg2ZbwqrS LZH9vKeSqfNkz3iuOqtHksQQBRrdNzDFJLULhp7Fmz2PLP00lJ/j+2TjqvyqcPpr ahjszT0ppcq93YuKTxIiRBgvRXSiVwthVnLl0UVXKDkvsvcAbWj5 -----END CERTIFICATE-----Generated at Sun Apr 6 11:13:07 2025 by rpki-client