$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa File: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (raw, json) Hash identifier: hBCdf6MQ44EMODLH0goT5EgLIomwJ27fDjdA8l3goK8= Subject key identifier: D0:E2:3E:A8:09:D9:3B:54:DD:1D:74:7A:10:4E:36:D4:6B:58:09:5A Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 3DCD2637EA42359A8A8D399EF8110E4CF5047C5F Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa Signing time: Wed 16 Apr 2025 04:18:10 +0000 ROA not before: Wed 16 Apr 2025 04:13:10 +0000 ROA not after: Wed 15 Apr 2026 04:18:10 +0000 asID: 38515 IP address blocks: 2402:600:c1b1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:cd:26:37:ea:42:35:9a:8a:8d:39:9e:f8:11:0e:4c:f5:04:7c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Apr 16 04:13:10 2025 GMT Not After : Apr 15 04:18:10 2026 GMT Subject: CN=D0E23EA809D93B54DD1D747A104E36D46B58095A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:a7:d4:eb:38:86:9d:19:83:c3:72:2e:42: 3d:f5:37:1b:65:fd:59:c2:f2:ed:36:5a:71:bc:4d: 8c:61:c9:31:1f:0e:c0:db:07:0e:ae:b5:d4:5c:68: 87:67:e4:d9:e2:8b:12:4d:bc:90:28:59:e8:5a:5a: 54:91:b9:61:89:d0:a7:e2:67:8b:5c:5e:53:fb:3f: d6:2a:43:c4:aa:2d:b9:6c:f3:f8:2c:ce:c3:61:06: 4b:c6:59:c5:9e:0e:44:d0:c1:e0:d3:c9:c2:41:62: 31:a0:b4:02:0c:4f:ae:79:69:77:22:ab:ff:51:57: e7:c5:e9:ac:78:74:07:de:f8:13:e1:8d:60:24:cc: ea:ab:8b:70:61:a4:62:23:f1:f7:90:78:0d:d7:7c: 05:5a:6f:d5:b7:df:34:0c:0b:1e:39:9f:89:7f:ea: 05:c3:ae:43:44:13:57:29:9f:ca:f8:13:b6:e7:36: 10:a9:c0:3c:f4:ef:6a:54:21:43:78:a0:86:6e:21: a2:d1:d1:48:06:ca:b5:85:07:6a:71:ae:04:ea:c6: a8:15:cf:59:03:6c:ff:ba:d7:cd:f9:e1:d0:40:b8: 54:e8:7c:7c:5f:4a:9c:10:09:48:a5:45:a4:f8:4b: 3f:33:89:9f:6b:ad:a2:dd:b1:67:6e:63:00:8f:15: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E2:3E:A8:09:D9:3B:54:DD:1D:74:7A:10:4E:36:D4:6B:58:09:5A X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:600:c1b1::/48 Signature Algorithm: sha256WithRSAEncryption 62:fb:2b:b7:25:26:83:23:0d:75:30:e2:18:83:1f:01:3b:53: 52:7b:ae:35:4e:6d:ad:4e:42:22:71:5d:5e:17:8b:a6:9f:3a: 50:3e:23:1d:fc:02:96:3f:6a:e9:72:10:68:bf:ec:33:25:1c: 88:b1:de:10:d6:80:30:44:fb:18:e1:8d:69:0a:80:3b:47:dd: e1:79:4b:5e:e4:59:27:de:78:e2:5b:53:13:02:f9:cc:c3:02: 31:a1:da:cd:1b:f0:54:96:32:39:68:f7:f2:d0:5c:09:77:64: 59:c3:41:a2:cf:f8:66:61:54:79:09:ca:8f:fd:2e:7c:50:13: 3a:73:fb:68:aa:53:19:ab:a3:82:6f:ba:06:3b:2d:26:4a:d8: 96:cd:50:ef:5d:8c:8c:32:c5:72:6b:67:36:ad:8d:71:6a:48: da:36:17:cb:a8:0d:63:9d:83:c0:17:61:6c:d9:1c:d5:3f:13: c8:34:d1:9e:f8:59:97:00:7d:1a:5c:07:30:82:55:ba:ce:ac: 78:d3:1d:48:38:8f:5e:2e:dd:73:03:ff:e1:b9:ea:9b:47:ec: 05:c6:39:e7:9c:4e:01:bf:69:5c:d1:54:7e:b9:ab:eb:4a:5d: 70:6c:89:7c:e0:6f:f4:88:89:66:e2:e5:20:4c:d7:9b:d3:de: 62:99:ac:ed -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPc0mN+pCNZqKjTme+BEOTPUEfF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNTA0MTYwNDEzMTBaFw0yNjA0MTUwNDE4MTBaMDMxMTAvBgNV BAMTKEQwRTIzRUE4MDlEOTNCNTRERDFENzQ3QTEwNEUzNkQ0NkI1ODA5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cKfU6ziGnRmDw3IuQj31Nxtl /VnC8u02WnG8TYxhyTEfDsDbBw6utdRcaIdn5NniixJNvJAoWehaWlSRuWGJ0Kfi Z4tcXlP7P9YqQ8SqLbls8/gszsNhBkvGWcWeDkTQweDTycJBYjGgtAIMT655aXci q/9RV+fF6ax4dAfe+BPhjWAkzOqri3BhpGIj8feQeA3XfAVab9W33zQMCx45n4l/ 6gXDrkNEE1cpn8r4E7bnNhCpwDz072pUIUN4oIZuIaLR0UgGyrWFB2pxrgTqxqgV z1kDbP+618354dBAuFTofHxfSpwQCUilRaT4Sz8ziZ9rraLdsWduYwCPFR+tAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU0OI+qAnZO1TdHXR6EE421GtYCVowHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMyMzQzMDMyM2EzNjMwMzAzYTYzMzE2MjMxM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCBgDB sTANBgkqhkiG9w0BAQsFAAOCAQEAYvsrtyUmgyMNdTDiGIMfATtTUnuuNU5trU5C InFdXheLpp86UD4jHfwClj9q6XIQaL/sMyUciLHeENaAMET7GOGNaQqAO0fd4XlL XuRZJ9544ltTEwL5zMMCMaHazRvwVJYyOWj38tBcCXdkWcNBos/4ZmFUeQnKj/0u fFATOnP7aKpTGaujgm+6BjstJkrYls1Q712MjDLFcmtnNq2NcWpI2jYXy6gNY52D wBdhbNkc1T8TyDTRnvhZlwB9GlwHMIJVus6seNMdSDiPXi7dcwP/4bnqm0fsBcY5 55xOAb9pXNFUfrmr60pdcGyJfOBv9IiJZuLlIEzXm9PeYpms7Q== -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:18 2025 by rpki-client