$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: A+LjTDAnkTD6DbFENCq3g9kvfrPE1imltVlncyZZkyQ= Subject key identifier: 05:B2:9A:63:F6:A4:74:D0:54:CA:A1:18:E1:E3:A4:E9:3A:FB:D8:24 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 60A4A3963996B4F00C8027AD19CFF3287A66DAFF Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa Signing time: Tue 10 Jun 2025 22:00:01 +0000 ROA not before: Tue 10 Jun 2025 21:55:01 +0000 ROA not after: Tue 09 Jun 2026 22:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:f::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a4:a3:96:39:96:b4:f0:0c:80:27:ad:19:cf:f3:28:7a:66:da:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jun 10 21:55:01 2025 GMT Not After : Jun 9 22:00:01 2026 GMT Subject: CN=05B29A63F6A474D054CAA118E1E3A4E93AFBD824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6e:76:b8:76:62:5c:67:9e:91:73:6f:5e:2e: 4d:2a:d4:e2:0f:89:f3:94:f7:19:7f:f1:8e:52:47: 87:23:87:a1:95:a6:d9:95:8c:31:16:1c:00:ff:89: 39:e9:93:6b:43:01:5a:b0:2b:37:84:59:0e:c7:62: 33:03:e8:c5:e6:f6:e9:b7:59:0f:f8:d5:6f:c0:c5: 9b:ec:4b:f3:41:b7:0e:01:63:0e:9f:7c:a1:f7:40: b1:ce:13:de:26:df:cb:25:ce:ef:26:93:e8:60:aa: 9b:fd:d7:45:ea:96:d0:99:5b:d2:c6:56:bf:14:97: 1f:6f:11:c6:65:60:93:f0:f4:f0:c9:89:a9:ec:51: 3d:f2:f9:79:22:19:bd:fe:62:1a:48:7e:18:7f:ac: 5d:3b:41:aa:20:2b:a3:bf:06:c9:23:47:fa:fc:fe: 5a:fc:e7:67:eb:aa:77:42:1b:36:e6:b3:18:2d:b5: c0:63:cd:57:1b:b6:d7:ab:3c:8d:73:57:36:e1:f6: 77:4f:98:bc:9a:11:d9:72:0b:5a:e1:35:5d:6d:85: 63:e0:32:19:7c:d5:c2:d5:79:ce:31:be:73:d1:c8: 9d:a6:1f:a1:0f:6b:b5:3b:14:e5:22:c9:2f:11:ec: b0:ac:a7:fc:e9:33:1e:69:c4:cd:da:05:c0:ea:64: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B2:9A:63:F6:A4:74:D0:54:CA:A1:18:E1:E3:A4:E9:3A:FB:D8:24 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a663a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:f::/48 Signature Algorithm: sha256WithRSAEncryption 91:39:3e:4f:26:83:91:d7:b0:f3:2f:9f:3b:0f:20:1d:4f:f0: f9:e2:bd:28:e3:6e:1f:72:ad:fb:f2:0e:2f:cd:46:3a:96:fd: 0f:da:fa:61:44:63:4c:50:e3:26:ed:4c:24:b6:f6:55:75:3d: d3:76:54:2e:1d:87:e8:d9:ab:d2:07:ac:fa:d3:8a:6f:af:fb: 13:24:10:3a:b6:49:30:38:15:ef:8b:79:39:df:00:dc:74:ca: 27:93:ce:91:ed:13:93:6f:aa:da:ba:26:4d:82:d3:8c:e0:b3: 6d:e7:20:ea:e9:42:26:1a:04:34:2f:dd:0f:c0:d3:36:53:bb: 97:6c:1e:ab:1b:e6:e2:77:15:b3:87:27:6f:3e:0c:48:ec:67: f7:8e:54:3d:2f:86:9a:80:0a:19:e4:a9:a1:91:8c:ac:1e:d2: e2:31:80:c3:03:69:a2:97:8f:38:af:23:fe:47:7e:3a:b5:63: 09:9a:6a:f9:4f:38:83:fb:b1:14:6a:63:5d:d1:ec:6a:72:eb: 95:92:72:57:b5:81:71:6b:64:5b:fb:78:e4:10:e9:36:ea:0b: 38:bc:6b:80:0b:51:11:f0:3f:39:fd:04:89:59:0b:f5:a0:8d: 4e:79:99:c4:9a:31:c7:52:ea:be:42:6d:85:a9:e2:99:49:e5: 06:ed:1e:3a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUYKSjljmWtPAMgCetGc/zKHpm2v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNTA2MTAyMTU1MDFaFw0yNjA2MDkyMjAwMDFaMDMxMTAvBgNV BAMTKDA1QjI5QTYzRjZBNDc0RDA1NENBQTExOEUxRTNBNEU5M0FGQkQ4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkbna4dmJcZ56Rc29eLk0q1OIP ifOU9xl/8Y5SR4cjh6GVptmVjDEWHAD/iTnpk2tDAVqwKzeEWQ7HYjMD6MXm9um3 WQ/41W/AxZvsS/NBtw4BYw6ffKH3QLHOE94m38slzu8mk+hgqpv910XqltCZW9LG Vr8Ulx9vEcZlYJPw9PDJiansUT3y+XkiGb3+YhpIfhh/rF07QaogK6O/BskjR/r8 /lr852frqndCGzbmsxgttcBjzVcbtterPI1zVzbh9ndPmLyaEdlyC1rhNV1thWPg Mhl81cLVec4xvnPRyJ2mH6EPa7U7FOUiyS8R7LCsp/zpMx5pxM3aBcDqZIKXAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUBbKaY/akdNBUyqEY4eOk6Tr72CQwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAPMA0G CSqGSIb3DQEBCwUAA4IBAQCROT5PJoOR17DzL587DyAdT/D54r0o424fcq378g4v zUY6lv0P2vphRGNMUOMm7UwktvZVdT3TdlQuHYfo2avSB6z604pvr/sTJBA6tkkw OBXvi3k53wDcdMonk86R7ROTb6rauiZNgtOM4LNt5yDq6UImGgQ0L90PwNM2U7uX bB6rG+bidxWzhydvPgxI7Gf3jlQ9L4aagAoZ5KmhkYysHtLiMYDDA2mil484ryP+ R346tWMJmmr5TziD+7EUamNd0exqcuuVknJXtYFxa2Rb+3jkEOk26gs4vGuAC1ER 8D85/QSJWQv1oI1OeZnEmjHHUuq+Qm2FqeKZSeUG7R46 -----END CERTIFICATE-----Generated at Mon Jun 16 12:07:36 2025 by rpki-client