$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa File: 323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa (raw, json) Hash identifier: 2VXkBERpiJiZLjiYjOttCzwgaX3QQinpVMluingheHs= Subject key identifier: CF:87:A0:CA:4C:DF:BE:02:CF:E3:B4:22:BE:B7:03:3B:3D:B5:C8:40 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 025CC5DA202170637E707315753C177358BED8C4 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa Signing time: Fri 28 Mar 2025 11:35:14 +0000 ROA not before: Fri 28 Mar 2025 11:30:14 +0000 ROA not after: Fri 27 Mar 2026 11:35:14 +0000 asID: 23679 IP address blocks: 2401:2900:106::/47 maxlen: 47 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 15:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5c:c5:da:20:21:70:63:7e:70:73:15:75:3c:17:73:58:be:d8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Mar 28 11:30:14 2025 GMT Not After : Mar 27 11:35:14 2026 GMT Subject: CN=CF87A0CA4CDFBE02CFE3B422BEB7033B3DB5C840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:3f:9f:52:f3:da:46:65:79:2c:cc:86:3b: e3:2e:50:aa:5b:1b:c0:75:f6:30:dd:e0:0b:60:88: 80:ad:5e:64:f3:32:94:dc:cf:14:93:be:20:3c:d7: d9:d9:12:d1:08:55:e3:5d:41:7d:03:66:25:eb:8a: ec:54:66:fa:1b:01:ca:e6:88:4b:7d:e0:fb:f8:c7: b3:7a:cf:94:bb:40:49:e8:75:aa:dc:3a:6c:2a:31: 82:27:23:79:96:b7:7d:c0:73:f7:bf:24:b0:6a:bb: 18:68:22:b7:1b:3a:d7:b3:29:e7:c1:c1:01:a5:54: b6:10:71:2e:43:f9:3c:c1:ee:41:9c:0f:c4:c2:b1: f1:1b:7b:5e:4b:d8:01:75:bc:8e:ce:1f:49:ea:fc: 98:67:a1:94:c5:22:f5:8f:a7:2e:e3:d5:cf:9d:ff: bf:0e:e0:28:5f:b0:11:f0:c9:a3:8e:b7:59:1f:81: 33:ef:66:b4:5a:96:c8:9f:1d:b9:f2:87:ec:d0:bf: ba:ec:87:7f:01:19:21:f9:29:66:0c:84:d1:29:c6: d0:5d:f6:1b:42:af:4e:e8:a5:e0:76:e8:9b:5b:ad: 66:f2:7e:f2:d5:44:f2:3b:e0:36:7b:9d:5d:a0:ef: 46:ea:c5:3d:99:e5:dc:43:6b:40:d5:84:d2:87:a9: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:87:A0:CA:4C:DF:BE:02:CF:E3:B4:22:BE:B7:03:3B:3D:B5:C8:40 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130363a3a2f34372d3437203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:106::/47 Signature Algorithm: sha256WithRSAEncryption 61:4f:e2:44:04:e7:79:33:a4:1a:53:55:e9:27:0a:fb:5a:b1: 89:72:12:14:e4:b9:78:28:ec:15:30:d3:25:21:58:c7:a3:10: e4:5d:1b:31:c7:33:62:ec:4c:ab:03:69:9f:6a:b6:a2:07:83: f3:75:ef:4b:76:70:5c:86:94:5c:97:cb:aa:7c:46:17:51:31: bb:10:f0:f9:c8:26:00:b8:d7:04:53:57:80:bd:43:3c:1c:bf: f3:70:b6:b4:7b:53:33:4d:8b:07:81:88:b9:86:e0:30:1f:fc: d7:74:31:6a:ce:f1:70:0e:43:97:c5:ac:ce:a0:e1:43:1a:fb: 51:16:49:d2:13:2e:e3:39:54:f3:44:e5:3a:38:25:35:74:d0: 31:1b:73:15:e7:13:5f:ce:8e:81:58:c0:55:e4:ef:5f:64:4d: 9a:7e:4d:f4:69:0f:86:9f:0a:b9:3b:68:a7:cd:39:7c:e7:16: 2e:d8:f6:4c:78:01:b8:90:8e:db:74:0c:2f:1d:1f:8d:87:90: 3e:e9:1d:31:4b:9a:22:3c:06:68:df:76:dc:a0:5b:45:92:1b: 34:24:f3:e1:55:ea:a8:72:6a:67:4c:8d:2b:41:65:53:89:e4: 50:0b:74:88:89:fb:6e:a2:54:26:f5:a4:ec:82:83:0d:9f:61: ec:8e:7a:5f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUAlzF2iAhcGN+cHMVdTwXc1i+2MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTAzMjgxMTMwMTRaFw0yNjAzMjcxMTM1MTRaMDMxMTAvBgNV BAMTKENGODdBMENBNENERkJFMDJDRkUzQjQyMkJFQjcwMzNCM0RCNUM4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTRD+fUvPaRmV5LMyGO+MuUKpb G8B19jDd4AtgiICtXmTzMpTczxSTviA819nZEtEIVeNdQX0DZiXriuxUZvobAcrm iEt94Pv4x7N6z5S7QEnodarcOmwqMYInI3mWt33Ac/e/JLBquxhoIrcbOtezKefB wQGlVLYQcS5D+TzB7kGcD8TCsfEbe15L2AF1vI7OH0nq/JhnoZTFIvWPpy7j1c+d /78O4ChfsBHwyaOOt1kfgTPvZrRalsifHbnyh+zQv7rsh38BGSH5KWYMhNEpxtBd 9htCr07opeB26JtbrWbyfvLVRPI74DZ7nV2g70bqxT2Z5dxDa0DVhNKHqRCPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUz4egykzfvgLP47QivrcDOz21yEAwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDM2M2Ez YTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQBKQAB BjANBgkqhkiG9w0BAQsFAAOCAQEAYU/iRATneTOkGlNV6ScK+1qxiXISFOS5eCjs FTDTJSFYx6MQ5F0bMcczYuxMqwNpn2q2ogeD83XvS3ZwXIaUXJfLqnxGF1ExuxDw +cgmALjXBFNXgL1DPBy/83C2tHtTM02LB4GIuYbgMB/813Qxas7xcA5Dl8WszqDh Qxr7URZJ0hMu4zlU80TlOjglNXTQMRtzFecTX86OgVjAVeTvX2RNmn5N9GkPhp8K uTtop805fOcWLtj2THgBuJCO23QMLx0fjYeQPukdMUuaIjwGaN923KBbRZIbNCTz 4VXqqHJqZ0yNK0FlU4nkUAt0iIn7bqJUJvWk7IKDDZ9h7I56Xw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:42 2025 by rpki-client