$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa File: 323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa (raw, json) Hash identifier: WRq926yt9quLkpimzppD9g7PHu8R08Uc+vlpwGqzs4s= Subject key identifier: BA:70:DF:E0:2B:0F:5E:05:FF:BA:82:A1:A9:A6:85:B8:BB:BB:A9:A0 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 77A78C360656C89CCD1793D3311C178012276878 Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa Signing time: Mon 16 Jun 2025 06:00:01 +0000 ROA not before: Mon 16 Jun 2025 05:55:01 +0000 ROA not after: Mon 15 Jun 2026 06:00:01 +0000 asID: 38753 IP address blocks: 2401:ae00:ae00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 11:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a7:8c:36:06:56:c8:9c:cd:17:93:d3:31:1c:17:80:12:27:68:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Jun 16 05:55:01 2025 GMT Not After : Jun 15 06:00:01 2026 GMT Subject: CN=BA70DFE02B0F5E05FFBA82A1A9A685B8BBBBA9A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:a2:d5:6c:d7:33:cb:fb:85:fa:36:b5:3d: f3:17:7f:11:8e:ca:32:5f:eb:91:51:98:c0:e0:ed: f0:37:97:5a:4e:fb:db:c3:76:85:fe:e3:78:5b:39: 3d:11:5e:e1:3a:55:f5:5f:10:5a:10:45:0d:9c:42: 81:ab:1a:dc:91:af:99:3b:d0:90:67:a5:8c:be:c1: 0f:c0:b8:cb:20:ed:b0:8a:8c:a0:b3:da:5d:da:2b: 1c:ef:a0:45:5b:7f:c9:35:6c:fc:14:e1:e3:f8:7a: c2:a9:9e:b3:ff:97:77:a3:87:e7:52:f1:48:cb:cd: 2a:9b:21:89:88:42:65:8d:0b:1f:fb:a7:a2:47:a5: 6c:63:ec:7f:d6:09:b2:55:3f:dd:07:a7:e6:b5:e4: 1e:95:c5:b1:91:ce:8f:69:16:86:f4:73:40:0f:ec: b6:c2:4d:b1:88:4b:14:01:61:54:b9:ce:82:45:eb: 8c:78:9a:01:a6:ef:a1:14:33:f5:b2:3b:ba:97:73: 87:aa:b3:bf:60:a0:14:24:7a:2b:a7:9e:3a:6b:c9: 63:a5:e7:36:c9:cf:e9:0f:6c:a1:e6:eb:9f:42:8f: 9e:96:68:60:31:64:8a:f4:d4:85:fd:78:ed:1d:68: a8:5e:16:7e:65:fd:17:ed:d0:2b:9b:2c:34:06:17: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:70:DF:E0:2B:0F:5E:05:FF:BA:82:A1:A9:A6:85:B8:BB:BB:A9:A0 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/323430313a616530303a616530303a3a2f34382d3438203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:ae00:ae00::/48 Signature Algorithm: sha256WithRSAEncryption a7:f6:3b:06:6c:ea:f3:23:ce:7e:f9:5a:56:3d:39:fd:ac:da: 81:87:ef:c9:cf:c7:e0:97:11:c1:e7:2e:33:e8:6d:76:c5:cd: f3:53:95:f2:36:38:29:f9:a0:73:82:7b:6b:5d:f8:39:02:56: d7:90:7f:de:33:a9:47:7c:3d:c3:9b:19:e9:46:af:54:22:2a: d0:6b:2f:1c:74:04:80:8c:03:8c:8a:ae:aa:db:87:45:bf:06: 6e:2c:5d:57:92:bd:c6:e5:8f:92:a1:7a:98:42:a2:1b:d6:4d: d1:4d:bb:c3:33:4d:97:71:d9:26:e9:31:40:64:27:c5:aa:e9: 7b:53:98:6a:85:6f:9d:19:35:d6:9c:77:d2:da:0e:e0:a3:9c: 71:5e:a5:a1:8e:5a:0b:88:93:27:0d:1f:1f:a7:cb:70:f4:99: 75:f6:35:9a:db:ae:ed:5d:fe:f5:6a:68:0e:6f:81:83:34:8a: d7:c1:0e:da:b5:08:a8:c3:8b:20:9d:2b:f0:10:6f:7d:99:7b: 5f:f1:7e:85:a9:e2:34:f0:cf:64:06:1f:a5:a6:57:3e:5d:b7: bd:e8:25:ab:bc:0d:e9:08:01:86:d1:f3:f9:44:94:58:06:57: fd:8f:f5:d7:69:1f:cf:0e:2b:2e:cc:0f:ed:28:b8:ca:40:69: 0c:a1:03:12 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUd6eMNgZWyJzNF5PTMRwXgBInaHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTA2MTYwNTU1MDFaFw0yNjA2MTUwNjAwMDFaMDMxMTAvBgNV BAMTKEJBNzBERkUwMkIwRjVFMDVGRkJBODJBMUE5QTY4NUI4QkJCQkE5QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbaLVbNczy/uF+ja1PfMXfxGO yjJf65FRmMDg7fA3l1pO+9vDdoX+43hbOT0RXuE6VfVfEFoQRQ2cQoGrGtyRr5k7 0JBnpYy+wQ/AuMsg7bCKjKCz2l3aKxzvoEVbf8k1bPwU4eP4esKpnrP/l3ejh+dS 8UjLzSqbIYmIQmWNCx/7p6JHpWxj7H/WCbJVP90Hp+a15B6VxbGRzo9pFob0c0AP 7LbCTbGISxQBYVS5zoJF64x4mgGm76EUM/WyO7qXc4eqs79goBQkeiunnjpryWOl 5zbJz+kPbKHm659Cj56WaGAxZIr01IX9eO0daKheFn5l/Rft0CubLDQGFyxHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUunDf4CsPXgX/uoKhqaaFuLu7qaAwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMyMzQzMDMxM2E2MTY1MzAzMDNhNjE2NTMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzczNTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAGu AK4AMA0GCSqGSIb3DQEBCwUAA4IBAQCn9jsGbOrzI85++VpWPTn9rNqBh+/Jz8fg lxHB5y4z6G12xc3zU5XyNjgp+aBzgntrXfg5AlbXkH/eM6lHfD3DmxnpRq9UIirQ ay8cdASAjAOMiq6q24dFvwZuLF1Xkr3G5Y+SoXqYQqIb1k3RTbvDM02Xcdkm6TFA ZCfFqul7U5hqhW+dGTXWnHfS2g7go5xxXqWhjloLiJMnDR8fp8tw9Jl19jWa267t Xf71amgOb4GDNIrXwQ7atQiow4sgnSvwEG99mXtf8X6FqeI08M9kBh+lplc+Xbe9 6CWrvA3pCAGG0fP5RJRYBlf9j/XXaR/PDisuzA/tKLjKQGkMoQMS -----END CERTIFICATE-----Generated at Thu Jun 19 10:50:07 2025 by rpki-client