$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: 62idZGQxlSWM3llZuSqKAdjwW6hLve0VhfHgcV849wU= Subject key identifier: 34:7B:A6:97:53:F7:C0:01:E3:B8:3C:AE:B5:A2:75:05:77:6B:B1:FB Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 7E872356816DA1465409AE5317E5654E68D6267F Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Tue 10 Dec 2024 05:54:58 +0000 ROA not before: Tue 10 Dec 2024 05:49:58 +0000 ROA not after: Tue 09 Dec 2025 05:54:58 +0000 asID: 153087 IP address blocks: 2404:97c0:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 14:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:87:23:56:81:6d:a1:46:54:09:ae:53:17:e5:65:4e:68:d6:26:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Dec 10 05:49:58 2024 GMT Not After : Dec 9 05:54:58 2025 GMT Subject: CN=347BA69753F7C001E3B83CAEB5A27505776BB1FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:0b:09:22:b1:21:c9:e5:9b:9a:d9:30:28: 85:20:9c:ae:d5:4d:e0:f5:5c:e6:b7:1f:fe:5b:fc: e8:63:2c:97:71:82:16:44:4d:12:48:c6:0e:09:b2: a0:04:89:05:89:c0:48:2a:2f:80:d5:f2:4c:d4:34: ff:93:ac:63:dc:6c:bf:ac:6f:86:d8:0b:df:f0:23: 26:dc:b9:37:91:8a:e3:45:70:0e:44:89:3a:a5:4d: 29:66:33:af:2e:e3:f9:62:d0:eb:26:13:75:ee:36: 95:df:85:75:6c:37:f3:58:a9:58:fc:a8:37:56:f1: ef:be:86:2f:8a:8f:da:c0:67:8a:dc:5d:32:ee:e2: 59:1e:a7:fc:ae:41:50:80:6b:91:f9:25:83:28:6f: 11:e1:a1:ad:9a:27:04:c5:e5:4a:ba:f6:c7:cc:98: 9f:4f:1a:90:f0:b9:60:11:67:d1:99:d6:0b:d7:ce: 82:48:2e:2f:18:6c:9d:a9:41:27:71:15:fc:37:6e: 1d:62:b9:90:04:48:d3:ae:cd:bd:82:0e:ed:7e:87: b8:ac:62:9f:1b:a8:c4:e9:8d:fe:38:a7:08:02:36: 59:a7:21:d3:b1:2d:5f:c7:f5:04:d1:83:73:72:f7: 8f:01:38:b4:ab:8b:c2:b7:a2:7f:0d:d4:80:b1:5f: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:A6:97:53:F7:C0:01:E3:B8:3C:AE:B5:A2:75:05:77:6B:B1:FB X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:6000::/36 Signature Algorithm: sha256WithRSAEncryption 0b:27:f3:22:d2:ff:50:04:c5:68:9f:18:0a:32:56:bc:40:57: 3a:2b:9e:6b:7e:fe:5c:ed:86:b2:65:83:09:17:b0:5b:83:ca: 4c:f1:1d:05:10:8e:51:19:48:02:02:20:07:a0:f3:b4:56:14: 97:40:d0:98:1e:6d:91:a6:25:99:5a:d3:79:38:a5:61:60:46: 77:ed:3a:b2:7e:87:52:5b:ea:13:89:e9:cf:94:3e:72:16:6b: a3:30:36:ae:aa:3f:68:50:4b:55:d6:c2:6f:48:11:46:9b:f0: 4e:e0:f0:88:69:70:37:08:79:d3:f9:fe:b6:5b:4e:03:e2:91: 49:b2:10:20:4f:1b:13:01:df:e9:71:34:bf:24:d2:4e:62:72: 5d:7c:10:ce:48:6d:52:0f:d8:48:8d:4a:55:ee:b0:26:03:fb: 46:37:ff:c9:24:4d:41:fa:e2:16:71:47:8a:63:8f:c8:1f:e2: 58:a0:3a:75:18:0e:12:2b:3d:74:4e:e3:ae:01:b2:e1:4c:5a: 60:08:71:63:7b:de:28:64:4f:6c:08:4d:78:e6:44:ce:1d:3d: d6:c4:af:4f:8e:4c:b6:dc:dc:a7:45:6f:df:44:00:cd:5f:5b: 30:66:c5:d1:5e:c9:97:b6:a3:e5:13:39:a3:7f:91:c4:47:bb: ae:a6:4f:67 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUfocjVoFtoUZUCa5TF+VlTmjWJn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNDEyMTAwNTQ5NThaFw0yNTEyMDkwNTU0NThaMDMxMTAvBgNV BAMTKDM0N0JBNjk3NTNGN0MwMDFFM0I4M0NBRUI1QTI3NTA1Nzc2QkIxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YwsJIrEhyeWbmtkwKIUgnK7V TeD1XOa3H/5b/OhjLJdxghZETRJIxg4JsqAEiQWJwEgqL4DV8kzUNP+TrGPcbL+s b4bYC9/wIybcuTeRiuNFcA5EiTqlTSlmM68u4/li0OsmE3XuNpXfhXVsN/NYqVj8 qDdW8e++hi+Kj9rAZ4rcXTLu4lkep/yuQVCAa5H5JYMobxHhoa2aJwTF5Uq69sfM mJ9PGpDwuWARZ9GZ1gvXzoJILi8YbJ2pQSdxFfw3bh1iuZAESNOuzb2CDu1+h7is Yp8bqMTpjf44pwgCNlmnIdOxLV/H9QTRg3Ny948BOLSri8K3on8N1ICxXyLFAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUNHuml1P3wAHjuDyutaJ1BXdrsfswHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzYzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfAYDANBgkqhkiG9w0BAQsFAAOCAQEACyfzItL/UATFaJ8YCjJWvEBXOiuea37+ XO2GsmWDCRewW4PKTPEdBRCOURlIAgIgB6DztFYUl0DQmB5tkaYlmVrTeTilYWBG d+06sn6HUlvqE4npz5Q+chZrozA2rqo/aFBLVdbCb0gRRpvwTuDwiGlwNwh50/n+ tltOA+KRSbIQIE8bEwHf6XE0vyTSTmJyXXwQzkhtUg/YSI1KVe6wJgP7Rjf/ySRN QfriFnFHimOPyB/iWKA6dRgOEis9dE7jrgGy4UxaYAhxY3veKGRPbAhNeOZEzh09 1sSvT45Mttzcp0Vv30QAzV9bMGbF0V7Jl7aj5RM5o3+RxEe7rqZPZw== -----END CERTIFICATE-----Generated at Thu May 1 13:24:28 2025 by rpki-client