$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: mRVC59D9W1PDe4swlDlkNGIAJnUIyikUq1vfifZ+Epo= Subject key identifier: F3:CB:34:22:09:B0:5D:32:DC:AC:6B:E1:16:BF:B3:6A:ED:C0:53:7F Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 636438CB0344E4BCE1045AD4C5A94F8C2C3B2914 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 11 Jun 2025 01:00:01 +0000 ROA not before: Wed 11 Jun 2025 00:55:01 +0000 ROA not after: Wed 10 Jun 2026 01:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:64:38:cb:03:44:e4:bc:e1:04:5a:d4:c5:a9:4f:8c:2c:3b:29:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jun 11 00:55:01 2025 GMT Not After : Jun 10 01:00:01 2026 GMT Subject: CN=F3CB342209B05D32DCAC6BE116BFB36AEDC0537F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:61:96:a6:1e:00:0c:71:a7:7e:d3:f5:04:be: 7b:52:97:fa:e4:52:6e:70:15:ec:25:b0:2f:1a:52: 48:59:e4:ff:56:3d:76:03:89:53:3f:2c:72:0d:18: e4:24:6e:19:55:d7:bd:9d:f0:82:c8:c7:6c:ee:5d: 85:7d:53:a8:54:6d:87:70:28:7b:a2:71:7f:3f:df: 97:93:80:74:fc:6d:bf:da:e5:11:5f:61:84:aa:83: 0a:d8:35:19:7b:36:b1:86:81:c7:14:a6:87:7a:e9: 23:4e:01:ae:1c:d1:e6:2e:84:7f:86:d6:e4:68:c8: c5:09:27:a5:6f:84:db:5c:63:bb:2c:f7:21:ef:57: 91:12:d6:b5:77:97:bb:30:cc:33:01:6a:23:a7:93: 49:db:02:93:15:7d:35:2e:d3:ef:ad:fc:c8:91:d4: 82:6f:f2:6d:a5:40:f8:8b:02:36:b1:69:92:bb:38: 17:f0:54:57:80:f1:11:af:d4:da:d0:e1:3a:02:c9: d2:22:d0:52:a0:82:9b:0f:60:ef:24:b9:15:b0:94: 5d:21:fe:de:ce:d5:2c:41:e9:44:31:5d:f4:8f:af: 0e:52:28:35:33:ef:fe:37:ac:d7:a6:85:57:be:ec: f9:ad:57:e8:4e:e3:3b:b2:76:a7:bc:4e:74:6c:77: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CB:34:22:09:B0:5D:32:DC:AC:6B:E1:16:BF:B3:6A:ED:C0:53:7F X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:c::/48 Signature Algorithm: sha256WithRSAEncryption b6:cb:07:00:25:86:d9:48:94:bb:e1:b8:97:1b:c7:e6:1d:27: 81:e6:f9:1d:f4:b6:04:a4:c2:91:5b:8d:12:de:d8:c1:5a:e2: 5d:39:f7:a5:5b:c8:24:ec:09:b0:61:08:42:a3:06:5b:87:56: 80:6e:6a:39:50:8b:5d:42:05:7e:b3:08:a9:bd:ac:87:8d:81: 86:da:01:90:02:28:9b:69:69:89:51:ee:24:e7:8a:04:a1:d5: ba:9f:8f:d9:56:f4:d6:58:af:09:9c:84:ac:e8:77:71:25:5f: 3e:f4:0f:d2:ba:7d:d0:e8:f4:d4:ea:16:09:ce:78:fd:e1:a6: 46:b3:9a:08:d2:71:d7:8d:d3:97:22:19:4a:70:74:c0:4b:0f: ec:2d:e7:5a:cd:1a:fb:c4:78:3a:8c:5b:64:e9:f6:cb:64:c7: dc:83:db:ea:cf:7e:88:4a:06:26:29:0a:ef:db:c8:71:5e:ad: cb:59:c5:83:2f:58:ea:7f:1c:13:d7:11:99:59:f1:7a:25:89: 4e:dd:df:e5:73:6f:7a:49:74:f8:2e:20:2d:06:e0:fb:56:c9: 50:86:94:e8:b7:74:c7:0a:97:fc:d0:5b:84:65:f8:92:bb:bc: 99:cd:62:8e:cb:c6:80:9b:7c:a0:c9:cf:05:17:5e:8c:10:2d: 76:af:56:b8 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUY2Q4ywNE5LzhBFrUxalPjCw7KRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNTA2MTEwMDU1MDFaFw0yNjA2MTAwMTAwMDFaMDMxMTAvBgNV BAMTKEYzQ0IzNDIyMDlCMDVEMzJEQ0FDNkJFMTE2QkZCMzZBRURDMDUzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYZamHgAMcad+0/UEvntSl/rk Um5wFewlsC8aUkhZ5P9WPXYDiVM/LHINGOQkbhlV172d8ILIx2zuXYV9U6hUbYdw KHuicX8/35eTgHT8bb/a5RFfYYSqgwrYNRl7NrGGgccUpod66SNOAa4c0eYuhH+G 1uRoyMUJJ6VvhNtcY7ss9yHvV5ES1rV3l7swzDMBaiOnk0nbApMVfTUu0++t/MiR 1IJv8m2lQPiLAjaxaZK7OBfwVFeA8RGv1NrQ4ToCydIi0FKggpsPYO8kuRWwlF0h /t7O1SxB6UQxXfSPrw5SKDUz7/43rNemhVe+7PmtV+hO4zuydqe8TnRsd4ExAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU88s0IgmwXTLcrGvhFr+zau3AU38wHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAMMA0G CSqGSIb3DQEBCwUAA4IBAQC2ywcAJYbZSJS74biXG8fmHSeB5vkd9LYEpMKRW40S 3tjBWuJdOfelW8gk7AmwYQhCowZbh1aAbmo5UItdQgV+swipvayHjYGG2gGQAiib aWmJUe4k54oEodW6n4/ZVvTWWK8JnISs6HdxJV8+9A/Sun3Q6PTU6hYJznj94aZG s5oI0nHXjdOXIhlKcHTASw/sLedazRr7xHg6jFtk6fbLZMfcg9vqz36ISgYmKQrv 28hxXq3LWcWDL1jqfxwT1xGZWfF6JYlO3d/lc296SXT4LiAtBuD7VslQhpTot3TH Cpf80FuEZfiSu7yZzWKOy8aAm3ygyc8FF16MEC12r1a4 -----END CERTIFICATE-----Generated at Mon Jun 16 11:53:11 2025 by rpki-client