$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa File: 323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (raw, json) Hash identifier: N0CbxEaJ84FtSM59t7S0gaGm9kXwBwxvj0vCyUhse+Y= Subject key identifier: BD:48:77:E5:C4:9C:20:DA:2D:E7:D9:41:89:3D:F6:BA:12:D8:55:DE Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 0972780332131F53C4FC8CB1E34BF0309C8B2317 Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa Signing time: Fri 31 Jan 2025 12:00:01 +0000 ROA not before: Fri 31 Jan 2025 11:55:01 +0000 ROA not after: Fri 30 Jan 2026 12:00:01 +0000 asID: 9875 IP address blocks: 2001:f20:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Mar 2025 14:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:72:78:03:32:13:1f:53:c4:fc:8c:b1:e3:4b:f0:30:9c:8b:23:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Jan 31 11:55:01 2025 GMT Not After : Jan 30 12:00:01 2026 GMT Subject: CN=BD4877E5C49C20DA2DE7D941893DF6BA12D855DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:6e:2b:5f:70:1b:31:dd:1d:9d:9f:b8:60: 5f:fd:f9:98:19:61:09:5a:c9:8f:d6:c9:c7:1d:ac: 49:eb:cf:3e:78:b1:01:ec:2f:61:be:3d:bc:20:3f: c1:f4:ab:a9:b5:61:b8:90:66:64:92:cf:88:b7:ec: 81:77:9a:69:1e:84:d9:23:e1:fa:a3:87:10:29:e3: 17:d1:ba:4b:06:d9:6f:df:f4:28:d5:77:67:b8:0d: 91:37:52:59:67:b3:88:6e:6b:f9:b8:1e:86:90:51: 28:bf:4f:73:34:b8:26:02:3d:0b:cc:95:3f:7c:b2: 73:43:1c:13:fc:a4:5e:30:56:69:8b:bc:0c:c9:2a: 07:bc:b1:47:22:23:ce:8c:62:79:39:a4:03:04:99: 09:96:33:e0:03:12:88:0a:c1:ee:3f:2b:d8:86:57: fc:86:4d:db:32:09:04:d6:d7:12:cd:98:76:b3:d2: 0e:29:e3:f2:43:cb:90:ab:09:7c:37:c2:04:55:01: a9:e8:9d:7e:db:eb:c0:33:8e:9a:7e:57:3f:6b:f3: 50:21:1d:a9:a8:0a:aa:06:55:25:79:c6:2c:f9:ca: f2:6f:05:7d:46:9d:36:40:1f:02:b7:01:96:a2:d2: 51:a9:7d:56:56:32:90:c3:97:eb:ed:bb:f3:cf:4e: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:77:E5:C4:9C:20:DA:2D:E7:D9:41:89:3D:F6:BA:12:D8:55:DE X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:f20:1000::/36 Signature Algorithm: sha256WithRSAEncryption 08:fc:91:b0:2d:86:8e:f7:c5:2f:a8:1a:d6:8b:00:a5:bd:6f: 31:f1:93:0a:fc:75:ff:00:e1:3d:cb:01:99:d3:e1:22:6e:6a: 7d:3e:1c:cf:86:af:0f:d1:f1:8a:94:28:41:c6:82:69:dd:71: 21:96:78:93:ab:81:4f:0f:20:be:88:12:45:dc:7c:4b:e5:0d: d5:c1:b7:60:6f:4f:54:27:c2:3e:22:1b:a0:d4:76:13:2d:b0: 9d:e6:51:29:64:67:58:48:72:c9:0b:83:61:f8:fe:d9:f6:f4: 2f:b0:47:ba:2b:90:b7:46:cb:a4:c3:b5:db:54:ce:c4:b5:80: f0:b4:5b:c4:16:8f:61:66:ac:24:0b:48:a7:d1:f1:00:ac:03: fd:78:3f:85:97:0c:09:fe:73:00:c7:8c:5e:94:f3:da:ca:5c: bb:1b:de:35:f4:59:08:78:57:b3:a8:56:f0:f3:70:9a:33:1a: d3:a0:04:dc:e8:9a:1a:d6:dc:59:7a:b9:b7:66:b5:84:61:d5: 47:fc:53:62:0b:02:e3:5c:ed:ab:e5:70:3d:63:13:3e:0b:e4: 88:9f:b7:96:6f:27:82:aa:39:e4:ec:c7:7e:f6:07:a4:ca:a8: 54:14:b0:91:05:47:0e:3d:c3:7c:11:de:d4:33:66:88:8d:6f: a9:4d:d5:19 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUCXJ4AzITH1PE/Iyx40vwMJyLIxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNTAxMzExMTU1MDFaFw0yNjAxMzAxMjAwMDFaMDMxMTAvBgNV BAMTKEJENDg3N0U1QzQ5QzIwREEyREU3RDk0MTg5M0RGNkJBMTJEODU1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3K24rX3AbMd0dnZ+4YF/9+ZgZ YQlayY/WyccdrEnrzz54sQHsL2G+PbwgP8H0q6m1YbiQZmSSz4i37IF3mmkehNkj 4fqjhxAp4xfRuksG2W/f9CjVd2e4DZE3Ullns4hua/m4HoaQUSi/T3M0uCYCPQvM lT98snNDHBP8pF4wVmmLvAzJKge8sUciI86MYnk5pAMEmQmWM+ADEogKwe4/K9iG V/yGTdsyCQTW1xLNmHaz0g4p4/JDy5CrCXw3wgRVAanonX7b68Azjpp+Vz9r81Ah HamoCqoGVSV5xiz5yvJvBX1GnTZAHwK3AZai0lGpfVZWMpDDl+vtu/PPTkORAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUvUh35cScINot59lBiT32uhLYVd4wHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMDMxM2E2NjMyMzAzYTMxMzAzMDMwM2Ez YTJmMzMzNjJkMzQzODIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQgAQ8gEDAN BgkqhkiG9w0BAQsFAAOCAQEACPyRsC2GjvfFL6ga1osApb1vMfGTCvx1/wDhPcsB mdPhIm5qfT4cz4avD9HxipQoQcaCad1xIZZ4k6uBTw8gvogSRdx8S+UN1cG3YG9P VCfCPiIboNR2Ey2wneZRKWRnWEhyyQuDYfj+2fb0L7BHuiuQt0bLpMO121TOxLWA 8LRbxBaPYWasJAtIp9HxAKwD/Xg/hZcMCf5zAMeMXpTz2spcuxveNfRZCHhXs6hW 8PNwmjMa06AE3OiaGtbcWXq5t2a1hGHVR/xTYgsC41ztq+VwPWMTPgvkiJ+3lm8n gqo55OzHfvYHpMqoVBSwkQVHDj3DfBHe1DNmiI1vqU3VGQ== -----END CERTIFICATE-----Generated at Tue Mar 11 05:05:45 2025 by rpki-client