$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa File: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (raw, json) Hash identifier: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU= Subject key identifier: A6:04:46:CB:BE:1E:F8:AA:DF:7B:F4:27:1B:FE:0C:0B:B7:71:CE:7C Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 2254FF3FCEF9CB3DA68AC633CE85E4E517C2CA3D Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa Signing time: Mon 02 Jun 2025 01:02:43 +0000 ROA not before: Mon 02 Jun 2025 00:57:43 +0000 ROA not after: Mon 01 Jun 2026 01:02:43 +0000 asID: 137306 IP address blocks: 2402:6ac0::/33 maxlen: 33 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:54:ff:3f:ce:f9:cb:3d:a6:8a:c6:33:ce:85:e4:e5:17:c2:ca:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Jun 2 00:57:43 2025 GMT Not After : Jun 1 01:02:43 2026 GMT Subject: CN=A60446CBBE1EF8AADF7BF4271BFE0C0BB771CE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:51:8d:e7:86:74:0e:c5:d1:3f:60:76:84: dd:d7:4f:25:ca:66:2b:d2:cd:cb:74:38:72:5e:1a: 89:9b:00:ab:64:fb:c7:54:7d:4a:96:eb:30:a8:60: 85:86:7b:16:43:92:78:a5:b4:11:87:24:5b:26:fe: 76:55:02:d7:e6:a6:da:53:12:82:95:da:4f:78:44: 80:4b:78:51:16:20:e5:4f:2a:97:83:7e:5f:a9:ac: be:bc:04:e7:98:f5:e8:a7:6e:83:42:c4:b1:e8:a0: b7:81:f9:46:01:9c:7c:13:bf:44:1c:82:16:33:10: 7f:91:42:73:1e:d4:aa:57:a1:77:68:2e:c2:1d:69: 7f:eb:cd:64:c0:7f:7a:55:27:45:a5:c0:a2:61:22: f5:fe:e8:ed:a0:97:63:09:36:03:95:58:fd:34:d7: 0e:5c:83:4b:e6:41:d9:55:cd:a0:b8:00:ee:27:27: a0:ae:fa:6c:c6:37:51:4c:13:52:5b:c7:ee:59:ee: 08:e2:fc:5d:f7:ad:8c:0e:c3:ec:7d:30:ff:17:84: 7c:c7:e3:2e:58:4b:c5:fe:af:95:d8:4d:74:7b:cc: a9:6d:a9:da:e8:5e:38:e5:ac:32:1d:0a:c4:7f:05: de:0a:1e:98:1e:54:81:0a:5a:c4:99:47:72:ee:a6: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:04:46:CB:BE:1E:F8:AA:DF:7B:F4:27:1B:FE:0C:0B:B7:71:CE:7C X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/323430323a366163303a3a2f33332d3333203d3e20313337333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:6ac0::/33 Signature Algorithm: sha256WithRSAEncryption 2c:27:8d:a5:8b:34:d8:e3:12:d0:c6:99:3b:d7:37:79:e5:6a: 55:98:ae:4b:52:a4:bf:6c:c3:9a:1a:37:46:95:3b:30:c1:f6: 68:25:fd:be:90:e1:09:ca:e1:2f:53:ba:76:5b:76:d9:1f:31: 33:50:21:53:c0:30:52:e4:77:6b:b3:3e:59:a6:8d:07:37:f4: af:a8:8d:5f:1c:64:f9:99:26:68:1c:ea:c8:6b:22:26:3c:a0: f4:49:8d:1a:5c:2c:26:e7:94:c1:23:8b:b9:97:c7:0f:30:b1: ef:17:ed:d6:e0:f3:db:dd:0d:48:36:4b:e5:10:d8:ac:72:a2: 68:6a:37:77:d0:07:36:fd:70:56:03:cd:d8:82:d7:f3:95:cc: a0:64:e3:11:4f:1b:9c:fb:41:79:9f:8f:7b:47:df:5e:f3:0a: d6:c9:9a:78:a5:7e:3b:0e:be:94:bd:81:11:43:f2:af:50:f5: eb:0c:34:3e:58:e0:c2:e2:bc:5c:fa:a2:a4:4e:20:12:ce:42: 3e:e1:5d:16:81:9b:07:c1:23:bf:01:7d:e8:a0:3b:a1:20:78: 41:59:00:a0:f8:f8:32:98:58:3f:82:d5:e3:ee:47:83:10:13: 9c:57:84:fd:26:33:b5:1f:61:d0:50:ba:c2:e1:ea:cf:90:95: 46:8e:15:cf -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIlT/P875yz2misYzzoXk5RfCyj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA2MDIwMDU3NDNaFw0yNjA2MDEwMTAyNDNaMDMxMTAvBgNV BAMTKEE2MDQ0NkNCQkUxRUY4QUFERjdCRjQyNzFCRkUwQzBCQjc3MUNFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaflGN54Z0DsXRP2B2hN3XTyXK ZivSzct0OHJeGombAKtk+8dUfUqW6zCoYIWGexZDkniltBGHJFsm/nZVAtfmptpT EoKV2k94RIBLeFEWIOVPKpeDfl+prL68BOeY9einboNCxLHooLeB+UYBnHwTv0Qc ghYzEH+RQnMe1KpXoXdoLsIdaX/rzWTAf3pVJ0WlwKJhIvX+6O2gl2MJNgOVWP00 1w5cg0vmQdlVzaC4AO4nJ6Cu+mzGN1FME1Jbx+5Z7gji/F33rYwOw+x9MP8XhHzH 4y5YS8X+r5XYTXR7zKltqdroXjjlrDIdCsR/Bd4KHpgeVIEKWsSZR3LupjXbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpgRGy74e+Krfe/QnG/4MC7dxznwwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMzViZjc5LWU4NGEtNDBlMC04 ZmQ0LWYxNjljMTg2YmU4Zi8wLzMyMzQzMDMyM2EzNjYxNjMzMDNhM2EyZjMzMzMy ZDMzMzMyMDNkM2UyMDMxMzMzNzMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGByQCasAAMA0GCSqG SIb3DQEBCwUAA4IBAQAsJ42lizTY4xLQxpk71zd55WpVmK5LUqS/bMOaGjdGlTsw wfZoJf2+kOEJyuEvU7p2W3bZHzEzUCFTwDBS5Hdrsz5Zpo0HN/SvqI1fHGT5mSZo HOrIayImPKD0SY0aXCwm55TBI4u5l8cPMLHvF+3W4PPb3Q1INkvlENiscqJoajd3 0Ac2/XBWA83YgtfzlcygZOMRTxuc+0F5n497R99e8wrWyZp4pX47Dr6UvYERQ/Kv UPXrDDQ+WODC4rxc+qKkTiASzkI+4V0WgZsHwSO/AX3ooDuhIHhBWQCg+PgymFg/ gtXj7keDEBOcV4T9JjO1H2HQULrC4erPkJVGjhXP -----END CERTIFICATE-----Generated at Mon Jun 16 05:33:36 2025 by rpki-client