$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a383a3a2f34382d3438203d3e203338373533.roa File: 323430313a616530303a383a3a2f34382d3438203d3e203338373533.roa (raw, json) Hash identifier: PolrkWULjB2Ejpi+c92er3yQ/SMsCIVyscFF78+jHLI= Subject key identifier: 2B:CB:B2:70:93:DD:A4:53:6C:D8:88:AA:A0:91:D5:18:60:07:F8:2F Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 01F31BD7CB1B985BCADC129BF5522F414AB09544 Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a383a3a2f34382d3438203d3e203338373533.roa Signing time: Mon 16 Jun 2025 05:03:20 +0000 ROA not before: Mon 16 Jun 2025 04:58:20 +0000 ROA not after: Mon 15 Jun 2026 05:03:20 +0000 asID: 38753 IP address blocks: 2401:ae00:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 09:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f3:1b:d7:cb:1b:98:5b:ca:dc:12:9b:f5:52:2f:41:4a:b0:95:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Jun 16 04:58:20 2025 GMT Not After : Jun 15 05:03:20 2026 GMT Subject: CN=2BCBB27093DDA4536CD888AAA091D5186007F82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:65:88:3c:a2:d1:05:8d:7b:fa:f4:ff:0d: a2:b8:47:da:a6:d0:14:a9:78:79:c9:13:56:58:1a: d6:90:48:fb:cd:fb:31:40:d7:16:94:99:21:a2:3a: 19:0b:f4:7c:f4:f2:e2:81:01:76:75:0f:54:a0:8e: 17:08:b7:ec:ab:85:e0:db:29:f2:00:41:2c:38:3f: 6a:3e:e2:f6:88:4c:80:44:fe:7b:b2:f5:d1:5e:c0: 8d:81:37:5f:67:39:d6:20:14:d7:33:86:85:80:b6: a8:7e:d0:af:cd:d5:8c:ca:a9:c0:5e:16:94:3a:46: 2c:00:fe:52:42:0d:3b:3f:25:f3:8f:2d:cf:fa:a2: 93:28:6d:b0:52:d3:02:ec:ca:b8:75:84:e8:aa:17: 44:e2:af:dc:f1:25:86:57:0a:44:dc:16:6f:57:6a: 86:92:4f:cb:a0:ee:d1:64:ea:2c:23:b6:89:f1:fb: ae:13:7c:bf:84:49:60:47:d4:3b:20:62:35:0e:b6: 79:0b:c3:05:1d:20:44:2a:d6:9d:35:0e:e8:b7:de: 21:bf:5e:e8:9f:cc:70:40:ae:8b:30:4c:09:60:e0: 15:9f:e4:f2:19:c7:ca:3b:7a:61:58:59:e1:30:05: 7b:32:d0:87:e3:b5:5c:f7:70:72:8d:14:46:1a:c2: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CB:B2:70:93:DD:A4:53:6C:D8:88:AA:A0:91:D5:18:60:07:F8:2F X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a383a3a2f34382d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00:8::/48 Signature Algorithm: sha256WithRSAEncryption 9d:96:f6:8f:83:6f:41:3e:44:7e:b2:5b:8c:57:d4:19:3e:49: 25:3a:73:7d:d1:0d:c3:ee:28:e0:93:5c:37:a2:7a:b2:e8:fe: ba:1e:ab:e9:e0:b4:ef:59:21:99:35:72:24:fe:50:ba:fc:f7: 76:8d:2d:64:35:d7:16:00:74:a5:b1:64:4c:7a:eb:3b:31:42: 3d:4f:d8:86:cd:2c:0d:3a:a2:88:a2:9c:45:b6:59:b0:dd:6a: 1f:f8:a2:1b:40:b6:ef:08:d8:de:62:87:d8:8c:08:0f:64:a6: 1c:e1:e5:ff:9f:33:c8:5f:36:20:ec:d7:4b:66:e4:88:5d:ac: 85:4e:23:29:d2:99:94:71:9d:95:d5:3d:01:62:0b:02:f2:33: 6d:36:0a:69:6b:a8:84:88:3f:a5:10:47:22:fe:26:c9:3b:12: 64:aa:85:e0:ab:e5:0d:13:f1:54:63:cf:37:fb:6c:84:ec:7d: b0:c4:6b:f6:ab:a1:3f:f3:18:ac:18:1d:d6:30:fe:ee:82:0b: a6:34:32:ab:72:c2:e0:e1:90:e1:62:c4:1b:75:68:38:65:a7: fd:46:10:f3:e9:88:bf:8e:55:32:1f:e8:cd:09:f2:ac:1f:98: 1f:02:10:a9:ca:cf:03:55:d0:e2:40:b6:0e:17:eb:b5:2c:a7: 01:be:07:b0 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUAfMb18sbmFvK3BKb9VIvQUqwlUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTA2MTYwNDU4MjBaFw0yNjA2MTUwNTAzMjBaMDMxMTAvBgNV BAMTKDJCQ0JCMjcwOTNEREE0NTM2Q0Q4ODhBQUEwOTFENTE4NjAwN0Y4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kWWIPKLRBY17+vT/DaK4R9qm 0BSpeHnJE1ZYGtaQSPvN+zFA1xaUmSGiOhkL9Hz08uKBAXZ1D1SgjhcIt+yrheDb KfIAQSw4P2o+4vaITIBE/nuy9dFewI2BN19nOdYgFNczhoWAtqh+0K/N1YzKqcBe FpQ6RiwA/lJCDTs/JfOPLc/6opMobbBS0wLsyrh1hOiqF0Tir9zxJYZXCkTcFm9X aoaST8ug7tFk6iwjtonx+64TfL+ESWBH1DsgYjUOtnkLwwUdIEQq1p01Dui33iG/ XuifzHBAroswTAlg4BWf5PIZx8o7emFYWeEwBXsy0IfjtVz3cHKNFEYawlptAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUK8uycJPdpFNs2IiqoJHVGGAH+C8wHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzczNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAGuAAAIMA0G CSqGSIb3DQEBCwUAA4IBAQCdlvaPg29BPkR+sluMV9QZPkklOnN90Q3D7ijgk1w3 onqy6P66Hqvp4LTvWSGZNXIk/lC6/Pd2jS1kNdcWAHSlsWRMeus7MUI9T9iGzSwN OqKIopxFtlmw3Wof+KIbQLbvCNjeYofYjAgPZKYc4eX/nzPIXzYg7NdLZuSIXayF TiMp0pmUcZ2V1T0BYgsC8jNtNgppa6iEiD+lEEci/ibJOxJkqoXgq+UNE/FUY883 +2yE7H2wxGv2q6E/8xisGB3WMP7uggumNDKrcsLg4ZDhYsQbdWg4Zaf9RhDz6Yi/ jlUyH+jNCfKsH5gfAhCpys8DVdDiQLYOF+u1LKcBvgew -----END CERTIFICATE-----Generated at Mon Jun 16 22:49:44 2025 by rpki-client