$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa File: AS48.roa (raw, json) Hash identifier: tnIHiyydMBODQZAGAIWJ55BdRFMyohaiaQfvZCTRwvM= Subject key identifier: 6F:12:90:88:60:F3:63:CC:22:60:10:0C:8D:EE:80:6C:41:B7:55:66 Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 52A4686DF9898DE87076BEBC15BDC62E469868F5 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa Signing time: Sun 13 Apr 2025 07:00:01 +0000 ROA not before: Sun 13 Apr 2025 06:55:01 +0000 ROA not after: Sun 12 Apr 2026 07:00:01 +0000 asID: 48 IP address blocks: 2400:d680:1f3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a4:68:6d:f9:89:8d:e8:70:76:be:bc:15:bd:c6:2e:46:98:68:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Apr 13 06:55:01 2025 GMT Not After : Apr 12 07:00:01 2026 GMT Subject: CN=6F12908860F363CC2260100C8DEE806C41B75566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:81:87:3a:bb:43:80:32:1d:6d:bf:27:06: c2:78:12:a2:a2:25:b0:42:2b:c1:c9:92:5d:57:88: dd:a8:67:47:40:c6:21:6b:93:54:a9:62:72:5e:12: c1:eb:f1:63:c2:94:ff:78:88:18:39:94:11:86:47: ff:82:de:c3:fb:b5:46:e6:3d:52:29:aa:f9:0f:56: 36:1b:0d:de:af:85:4e:c3:24:a7:7a:b6:cf:a5:db: f9:11:be:6a:46:94:37:04:4e:af:29:f1:13:8e:fb: 8e:4b:a2:97:59:d8:0c:eb:62:80:1a:a2:48:d4:16: 33:92:c7:55:08:ba:1e:e1:5a:24:29:28:e2:d0:1a: b6:48:04:5f:d3:1d:6c:67:38:31:50:d4:56:16:67: 59:e0:4e:a1:c8:a9:99:ee:6e:7f:34:0a:4e:61:16: ba:9c:1d:32:d2:fd:20:3d:3c:51:cc:86:d8:d9:be: 5f:4b:30:51:e1:26:b6:9a:4a:57:95:e6:40:85:ff: 1d:53:75:f8:6f:2a:e3:40:db:94:26:dc:69:92:66: 76:16:78:51:a2:25:29:79:cd:b5:85:5f:6a:f7:05: 23:65:64:b2:d6:7a:cc:6b:07:ba:d7:df:14:80:60: d5:33:25:8a:63:73:1a:da:93:d0:33:f2:cb:ca:05: 2a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:12:90:88:60:F3:63:CC:22:60:10:0C:8D:EE:80:6C:41:B7:55:66 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:d680:1f3::/48 Signature Algorithm: sha256WithRSAEncryption 1d:44:58:5c:d0:35:7a:9b:1c:eb:80:b3:28:46:5a:6b:a2:63: aa:c1:ee:00:e3:6a:fb:f1:0a:b1:6c:d4:a5:cd:2a:30:47:d2: ff:68:37:c3:b5:23:92:44:20:ec:af:6f:a6:df:a3:02:af:5b: 2f:fd:74:fe:fc:85:cb:9c:eb:e4:2a:c1:37:b2:7f:8d:54:87: 4d:81:34:7a:ff:32:b7:02:01:73:fb:8d:8b:71:c1:f5:79:5c: 3d:68:e6:ae:9b:b3:ae:c1:6a:32:c5:b0:bc:33:6f:d9:cd:74: 12:17:ad:b0:f3:d4:21:d0:fe:08:c0:43:a9:a8:a1:c2:2b:d4: e9:9f:d2:81:d0:95:29:76:43:37:a1:86:de:42:4a:e4:e6:54: 0a:08:4f:31:7c:8d:30:37:75:fc:dc:6a:e5:11:bd:30:6f:ea: 9d:7a:99:bc:71:ca:81:e2:48:6e:9d:b2:1d:5d:54:e2:91:20: b2:30:74:46:7f:41:3a:59:66:15:1b:d9:6f:86:8c:a7:cb:bf: 94:6b:30:f1:88:a2:20:fc:ca:b0:2e:91:8a:59:f2:b0:5d:08: ee:8f:da:62:6a:32:27:96:89:63:e4:81:2e:36:5a:56:f9:68: ac:43:0b:f2:f1:88:ee:9f:0d:4c:67:94:91:53:c9:e2:76:b2: 9d:ec:2f:2c -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUUqRobfmJjehwdr68Fb3GLkaYaPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA0MTMwNjU1MDFaFw0yNjA0MTIwNzAwMDFaMDMxMTAvBgNV BAMTKDZGMTI5MDg4NjBGMzYzQ0MyMjYwMTAwQzhERUU4MDZDNDFCNzU1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsYGHOrtDgDIdbb8nBsJ4EqKi JbBCK8HJkl1XiN2oZ0dAxiFrk1SpYnJeEsHr8WPClP94iBg5lBGGR/+C3sP7tUbm PVIpqvkPVjYbDd6vhU7DJKd6ts+l2/kRvmpGlDcETq8p8ROO+45LopdZ2AzrYoAa okjUFjOSx1UIuh7hWiQpKOLQGrZIBF/THWxnODFQ1FYWZ1ngTqHIqZnubn80Ck5h FrqcHTLS/SA9PFHMhtjZvl9LMFHhJraaSleV5kCF/x1TdfhvKuNA25Qm3GmSZnYW eFGiJSl5zbWFX2r3BSNlZLLWesxrB7rX3xSAYNUzJYpjcxrak9Az8svKBSprAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUbxKQiGDzY8wiYBAMje6AbEG3VWYwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9hODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02 OGQyYmQ2M2M5YzMvMC9BUzQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADWgAHzMA0GCSqGSIb3DQEB CwUAA4IBAQAdRFhc0DV6mxzrgLMoRlpromOqwe4A42r78QqxbNSlzSowR9L/aDfD tSOSRCDsr2+m36MCr1sv/XT+/IXLnOvkKsE3sn+NVIdNgTR6/zK3AgFz+42LccH1 eVw9aOaum7OuwWoyxbC8M2/ZzXQSF62w89Qh0P4IwEOpqKHCK9Tpn9KB0JUpdkM3 oYbeQkrk5lQKCE8xfI0wN3X83GrlEb0wb+qdepm8ccqB4khunbIdXVTikSCyMHRG f0E6WWYVG9lvhoyny7+UazDxiKIg/MqwLpGKWfKwXQjuj9piajInlolj5IEuNlpW +WisQwvy8Yjunw1MZ5SRU8nidrKd7C8s -----END CERTIFICATE-----Generated at Sat Apr 26 16:22:24 2025 by rpki-client