$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: 9kHtQIH8YzD0HWbTI7ApFkcBevmm7B3ZG7jYr4s08fM= Subject key identifier: E8:5F:33:7D:2E:81:C2:AF:CC:92:21:77:92:25:BD:86:52:EB:A6:E1 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 2AF0C4FF42D5C7CA3C8E1AB1F0D7E345A7253F18 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa Signing time: Tue 01 Apr 2025 21:00:00 +0000 ROA not before: Tue 01 Apr 2025 20:55:00 +0000 ROA not after: Tue 31 Mar 2026 21:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:12::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f0:c4:ff:42:d5:c7:ca:3c:8e:1a:b1:f0:d7:e3:45:a7:25:3f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Apr 1 20:55:00 2025 GMT Not After : Mar 31 21:00:00 2026 GMT Subject: CN=E85F337D2E81C2AFCC9221779225BD8652EBA6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:e1:23:e7:fe:7e:eb:7c:8a:86:38:53:1f: b3:a9:53:19:13:29:77:ab:35:8a:4b:4c:e1:ae:27: 00:7c:08:41:70:15:c0:b7:c5:3e:53:9e:5b:7b:3e: 5b:c6:8b:5a:8f:02:86:f8:08:c0:b4:d0:62:d2:30: 3c:08:f2:fb:38:1e:3f:d9:07:7e:72:b7:29:bd:3e: b6:67:bb:85:52:bf:66:49:af:d7:77:df:a1:6b:65: 3c:9e:46:7e:47:7a:97:74:30:a4:7f:e9:93:d5:c5: 69:ac:e3:96:17:21:85:c3:4e:90:66:e5:31:2d:56: 00:0c:31:7a:02:b1:e9:e7:a6:63:f1:84:5a:59:60: e4:a2:5c:d8:70:b4:7a:57:10:a4:0e:63:00:dc:ad: c5:9b:8e:c0:b0:54:71:fc:31:62:3a:0d:2e:33:91: fb:01:07:49:6c:4e:81:7f:99:c4:48:8b:fb:ea:37: aa:06:aa:72:dc:9c:45:91:a2:c0:86:6a:7d:42:3b: ad:9f:58:30:9b:fd:fa:dd:71:79:b1:25:75:5e:1a: 70:1a:d1:7f:b1:83:81:69:19:f1:cb:98:c3:ec:1f: b5:9a:de:ae:5b:29:72:f8:c8:d4:62:6e:21:b3:d5: 58:94:e7:36:81:8d:08:12:a8:75:6a:7e:e9:60:13: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5F:33:7D:2E:81:C2:AF:CC:92:21:77:92:25:BD:86:52:EB:A6:E1 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:12::/48 Signature Algorithm: sha256WithRSAEncryption 56:e0:28:ae:23:06:13:e1:70:ef:9a:18:fb:91:f2:57:bd:70: 30:9f:e3:76:c0:9c:71:f9:18:73:3e:73:f3:bc:1e:5b:a7:c5: 19:71:1e:1a:0e:4d:bd:46:8b:7d:bd:fd:ad:0b:bd:26:ab:d2: 6e:dc:58:03:74:73:b6:c1:00:0a:67:87:2f:85:30:40:d7:99: 5b:01:e5:12:e8:76:b1:83:3d:7e:e1:53:96:7d:5d:c8:af:3e: bc:b6:56:7e:1b:56:ec:d6:61:74:db:77:67:af:04:e0:cc:2f: e3:01:bf:f9:ae:78:c1:9e:7a:83:de:5c:0d:f9:96:62:18:8f: 68:49:f5:4a:65:b3:0f:47:fc:3f:8b:73:c7:f6:33:4c:01:fe: 80:0f:0c:61:fa:3f:7b:14:27:05:b0:a9:a4:1d:82:d8:5d:ba: b6:6a:80:a4:04:a3:b7:53:f5:35:9d:e1:a1:8a:29:15:77:e3: d2:37:21:b9:ba:39:5e:8f:5a:a9:be:5a:fc:12:de:1a:75:ba: 35:92:5a:40:68:1e:64:91:e6:5b:41:27:5e:91:f7:02:ee:28: 09:18:74:39:9b:80:54:ac:78:1a:df:45:8a:af:06:ad:7a:5d: 88:82:9e:8b:2f:7b:40:1a:77:52:90:10:e1:78:ea:96:ff:3d: 5f:42:70:63 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKvDE/0LVx8o8jhqx8NfjRaclPxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNTA0MDEyMDU1MDBaFw0yNjAzMzEyMTAwMDBaMDMxMTAvBgNV BAMTKEU4NUYzMzdEMkU4MUMyQUZDQzkyMjE3NzkyMjVCRDg2NTJFQkE2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbuEj5/5+63yKhjhTH7OpUxkT KXerNYpLTOGuJwB8CEFwFcC3xT5Tnlt7PlvGi1qPAob4CMC00GLSMDwI8vs4Hj/Z B35ytym9PrZnu4VSv2ZJr9d336FrZTyeRn5Hepd0MKR/6ZPVxWms45YXIYXDTpBm 5TEtVgAMMXoCsennpmPxhFpZYOSiXNhwtHpXEKQOYwDcrcWbjsCwVHH8MWI6DS4z kfsBB0lsToF/mcRIi/vqN6oGqnLcnEWRosCGan1CO62fWDCb/frdcXmxJXVeGnAa 0X+xg4FpGfHLmMPsH7Wa3q5bKXL4yNRibiGz1ViU5zaBjQgSqHVqfulgE9B3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU6F8zfS6Bwq/MkiF3kiW9hlLrpuEwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzEzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA EjANBgkqhkiG9w0BAQsFAAOCAQEAVuAoriMGE+Fw75oY+5HyV71wMJ/jdsCccfkY cz5z87weW6fFGXEeGg5NvUaLfb39rQu9JqvSbtxYA3RztsEACmeHL4UwQNeZWwHl Euh2sYM9fuFTln1dyK8+vLZWfhtW7NZhdNt3Z68E4Mwv4wG/+a54wZ56g95cDfmW YhiPaEn1SmWzD0f8P4tzx/YzTAH+gA8MYfo/exQnBbCppB2C2F26tmqApASjt1P1 NZ3hoYopFXfj0jchubo5Xo9aqb5a/BLeGnW6NZJaQGgeZJHmW0EnXpH3Au4oCRh0 OZuAVKx4Gt9Fiq8GrXpdiIKeiy97QBp3UpAQ4Xjqlv89X0JwYw== -----END CERTIFICATE-----Generated at Tue Apr 29 10:17:56 2025 by rpki-client