$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa File: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (raw, json) Hash identifier: tQTDeuCAhgIHqT4JvN+SYFcrP542mVZbW7Uy9er1rk4= Subject key identifier: F5:EB:EF:AF:28:AE:A0:23:5C:45:02:5D:FF:A9:95:2C:86:C4:EC:F2 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 18CD5828F94BF31B0066DD96C170D2B2A1846080 Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa Signing time: Thu 10 Apr 2025 04:00:01 +0000 ROA not before: Thu 10 Apr 2025 03:55:01 +0000 ROA not after: Thu 09 Apr 2026 04:00:01 +0000 asID: 137330 IP address blocks: 2402:aa40:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 06:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cd:58:28:f9:4b:f3:1b:00:66:dd:96:c1:70:d2:b2:a1:84:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Apr 10 03:55:01 2025 GMT Not After : Apr 9 04:00:01 2026 GMT Subject: CN=F5EBEFAF28AEA0235C45025DFFA9952C86C4ECF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:2a:ba:6b:24:14:cc:7f:a6:e8:d3:e4:f9: 8a:22:c2:92:bb:25:b9:6d:3e:15:d1:b3:28:ab:af: 0e:b8:27:01:79:e8:67:d3:92:f8:2e:f7:6e:81:56: 4c:60:7f:57:9b:b3:ef:fd:15:cc:21:8c:f6:74:64: aa:e4:30:41:ad:ce:a3:6f:a6:9c:5d:f5:41:aa:3e: bb:2f:4e:34:ef:04:ac:d9:4d:2d:1a:aa:f1:fd:c2: 3d:10:25:38:c8:75:23:25:bd:8e:df:64:57:78:a2: 8c:d9:c5:1b:2c:79:ab:7f:2b:72:9e:0a:b2:39:7a: 81:c5:68:01:62:4d:8d:75:c6:33:b1:03:7f:dd:40: 77:1d:f5:6b:83:02:88:e5:41:4c:1b:de:af:78:a5: 6e:50:f4:b5:6f:1a:85:80:a2:56:f9:c3:64:b1:a1: b6:c1:82:f2:70:39:27:17:19:da:d5:80:7e:55:51: 2e:f9:77:97:de:a9:b5:f1:8a:f9:da:be:4e:d2:57: 19:cb:b4:5b:d2:18:bf:f0:d6:b2:2a:ed:44:75:7a: 4c:df:d5:4a:d1:01:90:1c:dd:ec:3c:d0:07:77:f1: 68:94:39:f8:91:37:02:a0:d0:cb:c1:97:ca:5f:16: 63:b9:07:09:e1:5f:a3:fa:de:f1:63:68:bd:19:cd: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EB:EF:AF:28:AE:A0:23:5C:45:02:5D:FF:A9:95:2C:86:C4:EC:F2 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40:6::/48 Signature Algorithm: sha256WithRSAEncryption 43:ca:03:6a:eb:79:ca:6f:e9:4a:5c:71:99:91:9c:29:8a:81: 38:65:9d:37:d1:14:4e:aa:ba:ad:a0:63:77:84:32:69:a7:3a: bd:3d:96:af:92:a8:fb:93:c3:a3:0a:f9:40:e6:ac:32:db:3c: 44:d7:03:8f:f8:da:f2:ca:6f:76:65:2f:ef:b9:63:a5:69:94: 9f:67:dd:ce:15:4a:14:af:f7:12:91:8b:bb:b8:df:85:83:74: 52:96:9c:2b:b9:85:fd:eb:de:09:82:2c:3f:b3:27:42:15:83: c1:02:21:74:64:ab:48:82:53:84:84:df:28:74:ba:65:8a:28: 18:13:f2:50:30:93:7e:86:73:61:d3:ed:a7:66:e9:b4:cb:41: 5b:76:8f:7c:9a:0e:ac:81:22:5b:61:c5:2d:d6:2d:8e:f8:fd: 38:da:50:3c:b4:a0:a4:8d:30:a2:9c:98:78:26:60:00:8a:00: 51:8b:c3:a2:56:6c:d9:43:63:1a:24:ce:c6:09:a5:d0:28:af: a4:32:a8:b1:07:16:46:ea:e4:de:71:cd:5e:66:97:29:ed:fb: 15:04:ae:64:65:ae:cc:0b:e4:11:73:ed:52:28:a8:d5:ef:1c: ae:0e:46:f5:85:03:86:6d:36:23:36:7c:10:2e:28:e9:0a:54: 23:ac:e6:93 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUGM1YKPlL8xsAZt2WwXDSsqGEYIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA0MTAwMzU1MDFaFw0yNjA0MDkwNDAwMDFaMDMxMTAvBgNV BAMTKEY1RUJFRkFGMjhBRUEwMjM1QzQ1MDI1REZGQTk5NTJDODZDNEVDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAkCq6ayQUzH+m6NPk+YoiwpK7 JbltPhXRsyirrw64JwF56GfTkvgu926BVkxgf1ebs+/9FcwhjPZ0ZKrkMEGtzqNv ppxd9UGqPrsvTjTvBKzZTS0aqvH9wj0QJTjIdSMlvY7fZFd4oozZxRsseat/K3Ke CrI5eoHFaAFiTY11xjOxA3/dQHcd9WuDAojlQUwb3q94pW5Q9LVvGoWAolb5w2Sx obbBgvJwOScXGdrVgH5VUS75d5feqbXxivnavk7SVxnLtFvSGL/w1rIq7UR1ekzf 1UrRAZAc3ew80Ad38WiUOfiRNwKg0MvBl8pfFmO5BwnhX6P63vFjaL0ZzRgtAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU9evvryiuoCNcRQJd/6mVLIbE7PIwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAqpAAAYw DQYJKoZIhvcNAQELBQADggEBAEPKA2rrecpv6UpccZmRnCmKgThlnTfRFE6quq2g Y3eEMmmnOr09lq+SqPuTw6MK+UDmrDLbPETXA4/42vLKb3ZlL++5Y6VplJ9n3c4V ShSv9xKRi7u434WDdFKWnCu5hf3r3gmCLD+zJ0IVg8ECIXRkq0iCU4SE3yh0umWK KBgT8lAwk36Gc2HT7adm6bTLQVt2j3yaDqyBIlthxS3WLY74/TjaUDy0oKSNMKKc mHgmYACKAFGLw6JWbNlDYxokzsYJpdAor6QyqLEHFkbq5N5xzV5mlynt+xUErmRl rswL5BFz7VIoqNXvHK4ORvWFA4ZtNiM2fBAuKOkKVCOs5pM= -----END CERTIFICATE-----Generated at Tue Apr 29 02:28:50 2025 by rpki-client