$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa File: 323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa (raw, json) Hash identifier: wt7eFCCV93S85zolaoxrt66SRsXg924dAmCbnOUMNKw= Subject key identifier: 55:C7:B7:3F:D2:2E:AA:F4:F3:FC:FD:C1:0D:A7:6D:1D:1C:53:54:5B Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 04C36E5C42252970767409FBEC4EBC650C042750 Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa Signing time: Mon 16 Jun 2025 05:03:20 +0000 ROA not before: Mon 16 Jun 2025 04:58:20 +0000 ROA not after: Mon 15 Jun 2026 05:03:20 +0000 asID: 38753 IP address blocks: 2401:ae00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 09:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c3:6e:5c:42:25:29:70:76:74:09:fb:ec:4e:bc:65:0c:04:27:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Jun 16 04:58:20 2025 GMT Not After : Jun 15 05:03:20 2026 GMT Subject: CN=55C7B73FD22EAAF4F3FCFDC10DA76D1D1C53545B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:fc:5c:71:88:ef:aa:54:83:33:90:28:ee: 04:03:af:9b:1c:7a:e7:bb:1c:36:b4:7d:5e:63:be: 6f:39:51:8f:8c:57:67:83:6f:7a:a1:0b:6b:fe:47: 75:35:91:7e:74:35:13:6d:8a:12:53:72:9a:87:70: 9f:e0:ac:f6:9e:20:8e:c2:80:1f:e6:77:b0:8e:fb: c7:22:e6:9f:40:e1:1a:9b:80:45:18:09:d5:94:6e: d5:88:52:ed:10:75:35:95:7e:31:89:5e:f0:37:84: 03:84:1a:f5:b3:81:7d:29:db:47:37:8e:58:18:9b: eb:05:01:e1:b7:95:bc:44:3a:b9:51:7d:3a:59:62: 55:2f:6e:14:a8:fb:68:36:17:d8:69:19:bf:06:dc: b9:40:6a:cd:7b:07:9c:b4:f1:99:36:30:c9:aa:5c: b7:46:ae:eb:2d:f4:a3:f2:b1:95:df:31:a8:e5:d7: e0:41:60:0e:51:64:11:f4:b4:03:a0:a9:5a:4e:e2: 27:f2:63:95:b5:3e:53:b5:49:12:97:d2:c5:7e:d1: ae:e0:32:d2:a8:b7:8c:f7:22:3a:41:53:1b:1a:92: f1:1e:0c:61:4c:21:16:a7:d2:03:18:99:90:cd:ac: b3:b8:33:bb:bc:7a:30:37:2d:ab:4d:64:0b:e2:a2: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C7:B7:3F:D2:2E:AA:F4:F3:FC:FD:C1:0D:A7:6D:1D:1C:53:54:5B X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a313a3a2f34382d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00:1::/48 Signature Algorithm: sha256WithRSAEncryption 4a:1c:0a:0b:2c:94:0b:8a:27:7c:3c:0d:92:3f:57:ae:90:10: db:9f:ce:0d:5d:c9:45:8a:18:b8:e4:32:52:13:21:01:aa:5e: 76:23:c4:bb:5e:cc:5d:e6:95:72:23:a8:fc:f5:68:a4:dd:b3: bc:64:20:82:b8:4e:40:2d:5e:5a:30:d9:b3:13:71:6d:b2:75: ac:58:3a:b3:9e:da:ad:ff:f6:39:11:0f:52:64:a7:07:a9:64: 1b:8c:25:8a:3e:1e:a9:ff:db:7e:92:e1:08:ed:e1:3c:fc:9b: da:fe:37:4a:7d:8b:e2:23:90:25:57:be:ab:44:24:ca:ff:11: c0:e9:8d:5a:34:90:1d:47:82:4d:ad:cd:57:65:f5:d7:79:56: b5:cc:f7:ab:eb:b8:a8:f5:a0:be:f4:14:3d:74:e7:f7:9b:d1: 60:73:fe:37:0b:91:e9:a3:2d:d9:1e:04:be:ec:c0:a1:00:8f: d8:e0:cc:35:30:89:80:fe:f8:a2:cc:b6:41:d1:4f:8e:9a:05: 57:a3:f1:c9:1e:0c:bd:68:52:08:a2:5c:50:db:07:85:25:6d: 27:c5:13:ee:b3:4d:d6:ed:4f:9f:b1:ad:49:1c:b6:b3:08:a5: 61:41:a5:98:ea:0e:61:22:18:e7:5d:8a:e4:f7:d9:02:50:36: a1:e4:88:4c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUBMNuXEIlKXB2dAn77E68ZQwEJ1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTA2MTYwNDU4MjBaFw0yNjA2MTUwNTAzMjBaMDMxMTAvBgNV BAMTKDU1QzdCNzNGRDIyRUFBRjRGM0ZDRkRDMTBEQTc2RDFEMUM1MzU0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8X/xccYjvqlSDM5Ao7gQDr5sc eue7HDa0fV5jvm85UY+MV2eDb3qhC2v+R3U1kX50NRNtihJTcpqHcJ/grPaeII7C gB/md7CO+8ci5p9A4RqbgEUYCdWUbtWIUu0QdTWVfjGJXvA3hAOEGvWzgX0p20c3 jlgYm+sFAeG3lbxEOrlRfTpZYlUvbhSo+2g2F9hpGb8G3LlAas17B5y08Zk2MMmq XLdGrust9KPysZXfMajl1+BBYA5RZBH0tAOgqVpO4ifyY5W1PlO1SRKX0sV+0a7g MtKot4z3IjpBUxsakvEeDGFMIRan0gMYmZDNrLO4M7u8ejA3LatNZAviolHvAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUVce3P9IuqvTz/P3BDadtHRxTVFswHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzczNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAGuAAABMA0G CSqGSIb3DQEBCwUAA4IBAQBKHAoLLJQLiid8PA2SP1eukBDbn84NXclFihi45DJS EyEBql52I8S7Xsxd5pVyI6j89Wik3bO8ZCCCuE5ALV5aMNmzE3FtsnWsWDqzntqt //Y5EQ9SZKcHqWQbjCWKPh6p/9t+kuEI7eE8/Jva/jdKfYviI5AlV76rRCTK/xHA 6Y1aNJAdR4JNrc1XZfXXeVa1zPer67io9aC+9BQ9dOf3m9Fgc/43C5Hpoy3ZHgS+ 7MChAI/Y4Mw1MImA/viizLZB0U+OmgVXo/HJHgy9aFIIolxQ2weFJW0nxRPus03W 7U+fsa1JHLazCKVhQaWY6g5hIhjnXYrk99kCUDah5IhM -----END CERTIFICATE-----Generated at Wed Jun 18 05:24:48 2025 by rpki-client