$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa File: 323430353a6334303a3a2f33362d3336203d3e20313338383837.roa (raw, json) Hash identifier: UDxgb+p/OheGc5Pu54zU2k+ER7Buis6ZE5oNXaOKTTA= Subject key identifier: 20:D9:2B:3D:A4:9C:E5:CE:EA:6A:D9:3C:FC:40:88:E6:54:1E:16:48 Certificate issuer: /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D Certificate serial: 250991581C904824594556D76F10B556DA9B52A4 Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa Signing time: Thu 01 May 2025 11:00:01 +0000 ROA not before: Thu 01 May 2025 10:55:01 +0000 ROA not after: Thu 30 Apr 2026 11:00:01 +0000 asID: 138887 IP address blocks: 2405:c40::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:09:91:58:1c:90:48:24:59:45:56:d7:6f:10:b5:56:da:9b:52:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D Validity Not Before: May 1 10:55:01 2025 GMT Not After : Apr 30 11:00:01 2026 GMT Subject: CN=20D92B3DA49CE5CEEA6AD93CFC4088E6541E1648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:72:a0:4c:e9:81:f7:82:35:43:19:de:cc: 35:76:fa:34:b4:d7:f4:29:6c:59:35:4c:90:9e:bb: 42:ae:15:44:01:cb:2c:2f:02:83:eb:34:03:0f:8c: 79:df:39:bd:06:ae:1c:92:8f:8d:d2:1e:44:40:80: 01:30:49:da:c7:63:1b:21:60:0f:1b:85:1e:18:f6: ac:05:b9:06:b6:94:10:02:bd:e5:8e:ac:99:23:18: ac:b6:c0:31:72:88:91:0b:e0:e6:52:ae:44:4e:c6: 9d:94:ef:0d:42:5e:eb:35:9f:70:26:6a:e3:a6:b6: 7e:c5:d4:04:6d:d4:04:80:cc:36:5c:a9:b0:8d:e6: 28:cc:eb:e8:98:0f:6d:66:0e:9c:b2:6a:6b:5f:c4: cb:03:88:75:71:71:17:a4:1d:5f:64:a8:79:8f:f2: 98:93:31:92:f3:58:1f:50:b7:d1:f7:35:c0:c3:83: 5a:80:41:6a:be:1e:06:ba:4e:8f:e4:9a:e2:86:a5: 01:e4:91:88:54:67:ff:cc:7e:48:36:04:23:1c:de: 4a:e4:39:73:e6:77:17:27:d5:cc:bd:d9:ff:12:2c: a6:a2:c8:c4:cb:03:c1:c0:aa:cb:de:3f:1d:c3:71: 2f:05:af:d6:76:ef:27:59:66:f8:ed:56:ee:60:96: d3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D9:2B:3D:A4:9C:E5:CE:EA:6A:D9:3C:FC:40:88:E6:54:1E:16:48 X509v3 Authority Key Identifier: keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/323430353a6334303a3a2f33362d3336203d3e20313338383837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c40::/36 Signature Algorithm: sha256WithRSAEncryption 26:cc:31:f6:45:75:b5:7d:17:f0:76:63:05:96:f6:3f:bc:aa: a3:04:8e:7e:15:d3:76:b0:cc:0f:eb:58:17:f1:af:1d:2c:36: ec:ae:ba:47:65:2f:cd:17:db:b0:e3:64:2d:bd:71:fc:58:06: 67:9b:dd:b2:38:32:a9:f7:52:5a:f8:f2:92:ae:2d:40:c4:06: 92:e2:a0:96:43:ad:57:1c:41:b2:0c:5d:95:2b:c2:38:97:87: 74:91:eb:7c:17:de:7b:38:0b:6b:0d:ad:31:a3:39:75:a6:16: af:06:c8:6b:93:07:45:ee:a2:0c:0e:44:14:7c:4e:7c:d3:4a: 8c:f4:87:51:30:9c:ca:5b:3f:f2:18:08:26:ee:96:47:cf:b9: 53:7f:70:a4:e6:d9:41:f4:aa:c3:66:d0:49:39:6f:2f:11:69: 3d:2d:44:36:7a:ed:7a:af:b8:23:b8:1a:2b:b0:75:5f:e5:70: 88:a8:e7:59:5c:4a:4d:7a:b4:0d:c9:82:8c:ec:92:86:27:44: c5:f2:6a:af:cf:11:71:cc:25:0b:da:2f:67:fe:e6:50:db:9a: 27:e6:3d:cb:68:5a:be:56:70:2b:66:80:61:93:b6:d7:a2:9f: 55:a0:51:be:e6:a1:34:68:43:50:e3:75:df:39:56:fd:3f:96: 5b:a8:83:f8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJQmRWByQSCRZRVbXbxC1VtqbUqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhG Rjg1OEUzRDAeFw0yNTA1MDExMDU1MDFaFw0yNjA0MzAxMTAwMDFaMDMxMTAvBgNV BAMTKDIwRDkyQjNEQTQ5Q0U1Q0VFQTZBRDkzQ0ZDNDA4OEU2NTQxRTE2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCysHKgTOmB94I1QxnezDV2+jS0 1/QpbFk1TJCeu0KuFUQByywvAoPrNAMPjHnfOb0GrhySj43SHkRAgAEwSdrHYxsh YA8bhR4Y9qwFuQa2lBACveWOrJkjGKy2wDFyiJEL4OZSrkROxp2U7w1CXus1n3Am auOmtn7F1ARt1ASAzDZcqbCN5ijM6+iYD21mDpyyamtfxMsDiHVxcRekHV9kqHmP 8piTMZLzWB9Qt9H3NcDDg1qAQWq+Hga6To/kmuKGpQHkkYhUZ//Mfkg2BCMc3krk OXPmdxcn1cy92f8SLKaiyMTLA8HAqsvePx3DcS8Fr9Z27ydZZvjtVu5gltNJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUINkrPaSc5c7qatk8/ECI5lQeFkgwHwYDVR0j BBgwFoAUgPntWSkK133ihW7P2DQOKP+Fjj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDdjODhkYS0yYjU2LTQ4N2UtOWVmZS01NzExNzBiMTAyODYvMC84MEY5RUQ1OTI5 MEFENzdERTI4NTZFQ0ZEODM0MEUyOEZGODU4RTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBGOUVENTkyOTBBRDc3REUyODU2RUNGRDgzNDBFMjhGRjg1 OEUzRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwN2M4OGRhLTJiNTYtNDg3ZS05 ZWZlLTU3MTE3MGIxMDI4Ni8wLzMyMzQzMDM1M2E2MzM0MzAzYTNhMmYzMzM2MmQz MzM2MjAzZDNlMjAzMTMzMzgzODM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBQxAADANBgkqhkiG 9w0BAQsFAAOCAQEAJswx9kV1tX0X8HZjBZb2P7yqowSOfhXTdrDMD+tYF/GvHSw2 7K66R2UvzRfbsONkLb1x/FgGZ5vdsjgyqfdSWvjykq4tQMQGkuKglkOtVxxBsgxd lSvCOJeHdJHrfBfeezgLaw2tMaM5daYWrwbIa5MHRe6iDA5EFHxOfNNKjPSHUTCc yls/8hgIJu6WR8+5U39wpObZQfSqw2bQSTlvLxFpPS1ENnrteq+4I7gaK7B1X+Vw iKjnWVxKTXq0DcmCjOyShidExfJqr88RccwlC9ovZ/7mUNuaJ+Y9y2havlZwK2aA YZO216KfVaBRvuahNGhDUON13zlW/T+WW6iD+A== -----END CERTIFICATE-----Generated at Mon Jun 16 05:17:15 2025 by rpki-client