$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa File: 323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa (raw, json) Hash identifier: LK7y7Lgv53BZtTgHVdhNU9vAFNrTBJKQoUlDcnr1peM= Subject key identifier: 87:C0:18:90:12:61:E5:E5:C0:74:D6:58:11:EF:9A:0B:7B:5E:14:D1 Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 715E97BE2D920E4463B154FDA6EF2A022D242B66 Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa Signing time: Fri 31 Jan 2025 11:00:02 +0000 ROA not before: Fri 31 Jan 2025 10:55:02 +0000 ROA not after: Fri 30 Jan 2026 11:00:02 +0000 asID: 9875 IP address blocks: 2001:f20:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 01:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5e:97:be:2d:92:0e:44:63:b1:54:fd:a6:ef:2a:02:2d:24:2b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Jan 31 10:55:02 2025 GMT Not After : Jan 30 11:00:02 2026 GMT Subject: CN=87C018901261E5E5C074D65811EF9A0B7B5E14D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:5b:d1:55:9e:f0:53:2f:15:0d:80:38:0a: 2c:df:27:df:bf:54:90:c3:77:e1:a9:07:13:cd:98: 2c:c8:41:11:bb:da:ae:f0:40:d1:3e:98:22:2b:74: b6:26:b7:a7:d4:9b:1c:75:a0:5d:d9:93:b6:4a:5e: 95:2e:4b:ae:f1:12:1f:89:15:d5:b6:27:c1:d8:0a: 90:97:6f:b9:06:07:c5:1b:cc:54:73:bc:08:d8:3b: c6:55:c5:65:fa:88:60:d2:5b:26:49:25:14:bd:f2: 78:c4:9d:04:e8:ee:e9:70:b8:c2:0b:a1:16:d5:db: 7e:d2:10:15:71:c3:09:d1:b7:b8:12:3f:48:58:60: af:2d:bf:e1:fe:24:34:30:0d:ba:97:9d:35:8f:09: 99:a3:8d:73:02:da:61:04:ba:43:b0:63:1c:ed:6a: a7:bf:0b:4b:b3:87:4d:cc:a0:94:5c:e7:2f:b8:26: 36:74:f0:b2:e9:64:b3:c4:a3:a2:3c:2a:d7:bd:9c: ad:8c:03:55:0b:ec:8c:54:08:66:31:aa:bf:dc:02: d2:43:99:dd:a8:bc:68:11:50:38:33:84:83:71:5e: 00:50:36:49:8c:5a:19:b4:a2:22:3b:cd:bc:ce:29: f4:23:38:b0:46:f8:f2:0f:91:fe:e3:b1:a2:bb:72: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:18:90:12:61:E5:E5:C0:74:D6:58:11:EF:9A:0B:7B:5E:14:D1 X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a333030303a3a2f33362d3438203d3e2039383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:f20:3000::/36 Signature Algorithm: sha256WithRSAEncryption 6f:2e:16:c0:9e:aa:38:52:1c:20:8d:a1:2c:e7:03:58:18:c7: 97:c2:c6:73:f4:a4:75:25:93:24:60:d6:28:b7:29:47:ef:eb: c2:e3:84:a7:42:b7:84:d1:7f:39:a7:4d:e7:64:ed:b8:8b:a9: 21:ab:fb:8e:9a:6e:61:79:f5:30:e7:62:cb:6d:6f:81:db:3a: 91:e7:42:ad:83:3d:55:b0:68:36:6a:d2:b6:cb:99:42:97:ac: 51:2b:02:3e:73:28:24:53:67:58:eb:7e:61:26:c7:28:89:54: 2e:c0:01:86:d8:9d:5d:9a:b9:53:1a:1e:bb:08:6c:fc:b7:74: c4:9f:d8:f9:06:b4:a2:99:cc:1e:cb:c1:ec:f9:ae:e8:78:cc: d8:15:db:16:3e:a7:38:12:2c:f7:a1:06:4b:9a:22:e3:78:ff: 10:ed:d3:2a:08:ee:68:ce:84:41:8f:eb:e5:df:69:82:19:84: c6:aa:41:c3:a2:34:21:12:33:f4:00:b4:68:ee:ce:1a:f5:c3: 6a:73:a0:05:31:63:b1:b1:62:da:de:36:a4:3c:9e:86:10:ec: 00:05:d6:e1:91:96:95:0c:d2:ba:d9:23:d6:5a:b5:c9:2e:2a: ba:08:16:77:ed:f3:5c:b3:69:b1:79:c7:4c:e1:ac:45:e5:d2: d7:90:8d:91 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUcV6Xvi2SDkRjsVT9pu8qAi0kK2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNTAxMzExMDU1MDJaFw0yNjAxMzAxMTAwMDJaMDMxMTAvBgNV BAMTKDg3QzAxODkwMTI2MUU1RTVDMDc0RDY1ODExRUY5QTBCN0I1RTE0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRFvRVZ7wUy8VDYA4CizfJ9+/ VJDDd+GpBxPNmCzIQRG72q7wQNE+mCIrdLYmt6fUmxx1oF3Zk7ZKXpUuS67xEh+J FdW2J8HYCpCXb7kGB8UbzFRzvAjYO8ZVxWX6iGDSWyZJJRS98njEnQTo7ulwuMIL oRbV237SEBVxwwnRt7gSP0hYYK8tv+H+JDQwDbqXnTWPCZmjjXMC2mEEukOwYxzt aqe/C0uzh03MoJRc5y+4JjZ08LLpZLPEo6I8Kte9nK2MA1UL7IxUCGYxqr/cAtJD md2ovGgRUDgzhINxXgBQNkmMWhm0oiI7zbzOKfQjOLBG+PIPkf7jsaK7ctptAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQUh8AYkBJh5eXAdNZYEe+aC3teFNEwHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMDMxM2E2NjMyMzAzYTMzMzAzMDMwM2Ez YTJmMzMzNjJkMzQzODIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQgAQ8gMDAN BgkqhkiG9w0BAQsFAAOCAQEAby4WwJ6qOFIcII2hLOcDWBjHl8LGc/SkdSWTJGDW KLcpR+/rwuOEp0K3hNF/OadN52TtuIupIav7jppuYXn1MOdiy21vgds6kedCrYM9 VbBoNmrStsuZQpesUSsCPnMoJFNnWOt+YSbHKIlULsABhtidXZq5Uxoeuwhs/Ld0 xJ/Y+Qa0opnMHsvB7Pmu6HjM2BXbFj6nOBIs96EGS5oi43j/EO3TKgjuaM6EQY/r 5d9pghmExqpBw6I0IRIz9AC0aO7OGvXDanOgBTFjsbFi2t42pDyehhDsAAXW4ZGW lQzSutkj1lq1yS4quggWd+3zXLNpsXnHTOGsReXS15CNkQ== -----END CERTIFICATE-----Generated at Sun Apr 6 07:20:18 2025 by rpki-client