$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa File: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (raw, json) Hash identifier: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks= Subject key identifier: 39:B0:CE:F4:60:4E:5C:2C:45:83:25:D4:DE:CE:5D:8E:77:21:C2:1A Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 604F0736C15740BB46D1424432EB481FB862D365 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa Signing time: Mon 02 Jun 2025 02:04:58 +0000 ROA not before: Mon 02 Jun 2025 01:59:58 +0000 ROA not after: Mon 01 Jun 2026 02:04:58 +0000 asID: 46056 IP address blocks: 2001:df0:44a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4f:07:36:c1:57:40:bb:46:d1:42:44:32:eb:48:1f:b8:62:d3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Jun 2 01:59:58 2025 GMT Not After : Jun 1 02:04:58 2026 GMT Subject: CN=39B0CEF4604E5C2C458325D4DECE5D8E7721C21A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:26:5e:6c:21:0c:9f:21:85:42:da:79:a5: 77:d7:e6:be:09:50:68:43:4c:07:35:fe:e4:f8:cc: bb:cc:46:43:32:fb:65:d8:6e:78:7e:45:4f:72:2c: 68:4a:12:45:93:62:17:a0:35:83:72:3f:ef:bf:04: fc:4e:89:0a:40:65:92:97:90:df:df:45:81:06:9f: 48:a2:a4:0b:5e:c2:d4:7e:61:65:42:a9:aa:37:5e: b2:7c:2d:6c:f9:3a:7b:27:34:3a:c1:86:2c:2b:29: 5f:36:1b:b6:09:15:65:47:e9:df:6f:d9:9a:e6:5b: f4:9b:7c:41:2e:af:1a:51:a3:72:2f:65:3e:73:be: 54:2b:a0:11:20:4b:28:c7:fd:02:e0:12:e3:45:06: 3d:30:a8:c4:f8:9b:68:84:94:12:dc:24:4a:40:8f: c5:85:83:0b:c7:98:c6:4c:0c:6d:a7:44:19:6a:c2: de:b3:9d:70:14:90:88:3b:ef:9c:a7:61:34:e1:61: 8f:ca:38:d0:30:65:29:ca:f8:0a:03:87:af:b4:60: 82:c4:89:f1:1f:30:ba:63:de:a1:33:be:cb:0d:43: 44:36:6c:03:d0:97:8b:f8:7b:0e:8e:f2:b5:7d:cd: 20:fe:bb:1f:6f:d5:f0:69:91:51:3e:3e:e4:ce:0b: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B0:CE:F4:60:4E:5C:2C:45:83:25:D4:DE:CE:5D:8E:77:21:C2:1A X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:44a::/48 Signature Algorithm: sha256WithRSAEncryption 90:23:ca:9f:5e:7c:c8:73:92:6d:dc:0a:aa:60:26:24:eb:66: 54:04:e4:62:e0:dd:32:21:b4:fb:a2:69:62:56:e0:01:cf:21: 21:22:ee:c9:f0:32:e6:3b:98:12:49:67:69:9c:e4:c8:a5:17: 3b:ca:74:53:40:da:92:9a:92:90:ff:87:75:51:8d:fa:ed:a0: ab:15:95:2f:53:68:61:63:56:41:fc:b6:db:3f:9c:e5:30:7b: 01:b7:a7:05:3f:8e:5b:05:ff:f2:95:19:b7:79:81:3b:bd:03: fd:79:39:04:67:1e:93:91:ea:56:d3:a4:b6:16:df:61:c2:46: 7a:6b:b7:43:2d:6f:66:1c:ff:d2:d7:b8:ca:93:27:76:f5:31: bf:27:69:49:73:ad:08:11:fc:11:ce:51:5d:bd:72:fd:29:aa: c2:67:72:da:fd:07:25:65:53:9c:02:3f:e0:0a:5e:ab:2f:02: 94:3c:f5:d5:eb:9b:f0:4b:13:db:ec:10:4a:06:f3:36:0c:c1: 67:9a:fb:04:c4:61:8d:e5:c0:30:b8:fe:8b:7f:04:75:aa:16: 48:dc:fc:8e:b5:b0:34:bc:b5:38:63:06:03:97:e2:dd:71:2c: 1a:61:da:5c:18:0b:e0:38:cb:e8:ed:a0:5a:c5:7d:ef:25:7e: c4:77:58:59 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYE8HNsFXQLtG0UJEMutIH7hi02UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTA2MDIwMTU5NThaFw0yNjA2MDEwMjA0NThaMDMxMTAvBgNV BAMTKDM5QjBDRUY0NjA0RTVDMkM0NTgzMjVENERFQ0U1RDhFNzcyMUMyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqByZebCEMnyGFQtp5pXfX5r4J UGhDTAc1/uT4zLvMRkMy+2XYbnh+RU9yLGhKEkWTYhegNYNyP++/BPxOiQpAZZKX kN/fRYEGn0iipAtewtR+YWVCqao3XrJ8LWz5OnsnNDrBhiwrKV82G7YJFWVH6d9v 2ZrmW/SbfEEurxpRo3IvZT5zvlQroBEgSyjH/QLgEuNFBj0wqMT4m2iElBLcJEpA j8WFgwvHmMZMDG2nRBlqwt6znXAUkIg775ynYTThYY/KONAwZSnK+AoDh6+0YILE ifEfMLpj3qEzvssNQ0Q2bAPQl4v4ew6O8rV9zSD+ux9v1fBpkVE+PuTOCxJlAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUObDO9GBOXCxFgyXU3s5djnchwhowHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0MTBmYTQzLTBiZTMtNDcxYS05 YzIwLTgxMDQ2MjkxY2ExMS8wLzMyMzAzMDMxM2E2NDY2MzAzYTM0MzQ2MTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzMDM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3wBEow DQYJKoZIhvcNAQELBQADggEBAJAjyp9efMhzkm3cCqpgJiTrZlQE5GLg3TIhtPui aWJW4AHPISEi7snwMuY7mBJJZ2mc5MilFzvKdFNA2pKakpD/h3VRjfrtoKsVlS9T aGFjVkH8tts/nOUwewG3pwU/jlsF//KVGbd5gTu9A/15OQRnHpOR6lbTpLYW32HC Rnprt0Mtb2Yc/9LXuMqTJ3b1Mb8naUlzrQgR/BHOUV29cv0pqsJnctr9ByVlU5wC P+AKXqsvApQ89dXrm/BLE9vsEEoG8zYMwWea+wTEYY3lwDC4/ot/BHWqFkjc/I61 sDS8tThjBgOX4t1xLBph2lwYC+A4y+jtoFrFfe8lfsR3WFk= -----END CERTIFICATE-----Generated at Wed Jun 18 05:22:48 2025 by rpki-client