$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a653a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a653a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: B/3lkDmiwyqod8GB+KTQuGXDwXNNO40GYakyAznEWas= Subject key identifier: 1E:7D:B2:19:2D:59:8D:43:1C:4D:7A:61:C0:B0:C4:7C:99:94:7A:01 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 05BAEB883FEA9C13E14257F98F3AF65B01BA4B99 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a653a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 11 Jun 2025 00:00:01 +0000 ROA not before: Tue 10 Jun 2025 23:55:01 +0000 ROA not after: Wed 10 Jun 2026 00:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:e::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ba:eb:88:3f:ea:9c:13:e1:42:57:f9:8f:3a:f6:5b:01:ba:4b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jun 10 23:55:01 2025 GMT Not After : Jun 10 00:00:01 2026 GMT Subject: CN=1E7DB2192D598D431C4D7A61C0B0C47C99947A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:fd:44:3b:7c:c2:fd:3b:d6:33:08:60:42: 6f:8d:fa:d7:d5:9b:fb:4c:aa:dd:a2:50:ed:f4:05: b4:6a:3f:7f:d4:68:0d:1e:ba:66:d7:c1:36:44:0b: 00:a1:53:6b:31:ba:14:dd:7f:0a:2c:b3:53:60:11: 31:63:f0:40:42:05:21:64:d5:58:c0:7c:0c:b3:14: 4a:b2:a0:ab:ab:be:aa:7a:5f:4a:2a:d7:69:e7:43: 37:8c:22:22:c3:0c:46:f1:21:0a:0d:f5:45:a7:87: 5a:1d:23:25:d4:72:11:eb:bf:77:c2:f3:18:23:e4: cb:15:60:38:63:9b:42:26:9a:42:82:e7:bf:4b:db: 67:1b:78:ea:ed:f6:b8:f9:0a:85:39:ae:96:02:92: 5c:fd:98:d5:c2:74:32:42:60:e1:02:56:5b:72:83: 47:62:70:74:80:89:41:54:70:b5:bf:29:dd:5f:2b: 7f:cb:46:37:0b:bb:49:4b:15:1f:ed:de:e2:22:56: ff:c9:a9:50:af:64:3d:25:cb:a2:82:66:1e:e6:a1: 33:22:c6:91:54:66:78:fc:d9:0f:8d:24:31:8f:c2: 9e:66:b3:dd:b2:9f:a2:8a:03:21:c0:32:e1:cc:7f: 11:aa:d3:46:81:75:68:51:58:1e:b6:fa:b5:53:b1: 06:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:B2:19:2D:59:8D:43:1C:4D:7A:61:C0:B0:C4:7C:99:94:7A:01 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a653a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:e::/48 Signature Algorithm: sha256WithRSAEncryption 66:01:f2:b0:68:53:b4:33:dc:63:e9:5d:71:74:1a:ab:fd:d3: 71:38:0a:1e:d0:aa:98:4c:0d:34:67:da:e9:8a:80:dc:d8:37: 21:f9:49:81:8e:6d:f1:d2:93:3e:c2:fc:4a:50:41:37:4f:45: 76:6c:3e:5c:5b:57:32:86:1c:3f:dd:ba:92:ff:dc:d6:d6:68: 37:36:37:ac:33:f7:49:01:96:dc:f6:fd:ea:ce:32:38:d6:43: a9:ca:f6:94:8f:c6:09:f9:b9:5b:e4:7e:c3:40:f9:94:ec:ce: 7e:f1:60:81:74:36:16:60:75:f1:72:22:a0:26:e0:1a:22:cc: 25:37:21:b5:56:3b:5f:da:d8:a8:ee:64:b8:c9:1f:08:3e:a0: 84:bc:b0:5c:aa:04:18:0c:b2:c9:f1:08:fa:59:fe:10:d9:00: 4e:0f:6a:c1:56:15:82:d3:aa:aa:1f:9e:18:b4:dc:d1:5d:16: e9:5a:98:f4:72:a6:d9:5f:82:4e:82:4e:c7:81:4b:c7:02:61: 6c:ed:74:6d:f9:cc:d2:69:59:62:7a:cb:b3:74:45:ff:67:18: 04:e1:5c:86:f2:8b:c6:d2:31:51:54:ae:3f:97:3d:e0:91:67: 7c:ed:c1:05:7d:97:29:2b:f8:2c:e5:9e:ad:0f:ef:61:ca:42: 00:67:e1:03 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUBbrriD/qnBPhQlf5jzr2WwG6S5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNTA2MTAyMzU1MDFaFw0yNjA2MTAwMDAwMDFaMDMxMTAvBgNV BAMTKDFFN0RCMjE5MkQ1OThENDMxQzREN0E2MUMwQjBDNDdDOTk5NDdBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMuf1EO3zC/TvWMwhgQm+N+tfV m/tMqt2iUO30BbRqP3/UaA0eumbXwTZECwChU2sxuhTdfwoss1NgETFj8EBCBSFk 1VjAfAyzFEqyoKurvqp6X0oq12nnQzeMIiLDDEbxIQoN9UWnh1odIyXUchHrv3fC 8xgj5MsVYDhjm0ImmkKC579L22cbeOrt9rj5CoU5rpYCklz9mNXCdDJCYOECVlty g0dicHSAiUFUcLW/Kd1fK3/LRjcLu0lLFR/t3uIiVv/JqVCvZD0ly6KCZh7moTMi xpFUZnj82Q+NJDGPwp5ms92yn6KKAyHAMuHMfxGq00aBdWhRWB62+rVTsQYBAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUHn2yGS1ZjUMcTXphwLDEfJmUegEwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAOMA0G CSqGSIb3DQEBCwUAA4IBAQBmAfKwaFO0M9xj6V1xdBqr/dNxOAoe0KqYTA00Z9rp ioDc2Dch+UmBjm3x0pM+wvxKUEE3T0V2bD5cW1cyhhw/3bqS/9zW1mg3NjesM/dJ AZbc9v3qzjI41kOpyvaUj8YJ+blb5H7DQPmU7M5+8WCBdDYWYHXxciKgJuAaIswl NyG1Vjtf2tio7mS4yR8IPqCEvLBcqgQYDLLJ8Qj6Wf4Q2QBOD2rBVhWC06qqH54Y tNzRXRbpWpj0cqbZX4JOgk7HgUvHAmFs7XRt+czSaVliesuzdEX/ZxgE4VyG8ovG 0jFRVK4/lz3gkWd87cEFfZcpK/gs5Z6tD+9hykIAZ+ED -----END CERTIFICATE-----Generated at Mon Jun 16 11:56:30 2025 by rpki-client