$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: NGGeHJuC2ljiiLtMI0nVuFvkCkAQ29gcmCt4HsN0b6U= Subject key identifier: 5C:C3:B0:C5:AC:11:E5:F4:69:BB:40:4C:75:76:CB:FF:ED:37:50:05 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 12504FFB63066F2B5EB88AEFAD66EE3A0A6288C0 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa Signing time: Tue 27 May 2025 16:58:43 +0000 ROA not before: Tue 27 May 2025 16:53:43 +0000 ROA not after: Tue 26 May 2026 16:58:43 +0000 asID: 133798 IP address blocks: 2402:5680:91d0::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:50:4f:fb:63:06:6f:2b:5e:b8:8a:ef:ad:66:ee:3a:0a:62:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: May 27 16:53:43 2025 GMT Not After : May 26 16:58:43 2026 GMT Subject: CN=5CC3B0C5AC11E5F469BB404C7576CBFFED375005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7d:20:3e:9d:c4:ef:74:14:50:3a:20:28:fe: 17:67:46:9b:54:86:2f:e2:67:10:88:97:ea:e1:31: 62:36:c1:8c:e4:37:b7:66:6d:d4:0b:34:0b:54:13: bd:60:4b:ff:6a:7d:44:16:95:25:aa:52:58:e6:fc: 1f:1d:30:f3:28:03:52:7f:8e:04:a6:cd:44:d3:9c: 8d:55:65:e3:68:8f:5b:92:0f:19:ec:71:d8:23:2f: f0:22:bd:a7:e2:84:c0:01:62:b4:0c:dc:ec:b6:76: 51:6e:39:18:34:eb:f3:af:a3:3d:27:fe:ee:48:42: f3:3f:89:7f:d8:96:15:66:01:ec:de:1f:a9:c1:51: c2:cc:aa:60:b5:bb:2d:46:66:90:8e:24:05:e0:04: 79:9f:05:f8:f9:07:98:ea:91:6f:10:77:66:97:01: fd:bc:fa:01:fe:ff:ee:f7:90:c0:76:b9:97:52:8b: bd:a4:c0:12:0b:ea:c2:25:6d:df:9c:0a:ed:cb:c0: 9c:6d:61:75:7e:e7:b0:64:46:72:1e:22:54:46:7c: fe:be:65:4b:76:8a:49:8c:6c:66:e2:4e:9b:d3:c4: 4d:7c:ce:17:56:c6:2f:d5:b1:b9:e0:13:72:35:37: 92:aa:be:a3:7f:5f:ac:c3:10:75:e3:d9:62:c1:ea: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:B0:C5:AC:11:E5:F4:69:BB:40:4C:75:76:CB:FF:ED:37:50:05 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a393164303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:91d0::/44 Signature Algorithm: sha256WithRSAEncryption 24:c3:ee:33:36:27:f8:f9:ec:92:2f:31:55:7a:d0:ec:fe:9c: d2:ed:2b:bc:35:71:9d:4f:f3:5c:40:30:6a:3c:bb:34:da:77: 87:37:5d:a2:df:c6:69:44:dd:3e:6f:9c:17:be:4d:e1:48:53: ae:a6:0a:b6:a6:98:58:c2:db:f5:cc:9d:59:82:f5:7f:c2:06: 93:d3:52:22:22:31:ec:7a:15:0e:97:90:95:17:13:f2:9a:cc: d4:7a:f2:e4:16:44:83:f2:4c:74:65:24:44:65:c9:03:cb:15: 17:2a:58:14:ad:90:6a:ed:d3:29:c5:50:1c:4e:43:99:11:88: e6:74:03:df:da:9c:f0:fb:48:8f:37:5c:de:18:72:37:4b:57: e0:5f:e5:99:38:30:8c:ec:92:47:f8:76:49:41:6e:85:be:3e: 5f:15:8e:53:09:1d:d5:c7:a2:08:6a:18:57:4d:7e:1f:57:29: 1b:d1:a9:54:ff:28:dc:15:27:bc:6a:cc:a7:87:7b:31:5b:94: 69:51:19:47:b8:9a:90:00:35:17:82:89:44:bd:91:12:7c:d9: aa:c4:af:f0:d4:82:81:4c:0c:1b:ee:f7:c6:ac:6e:78:a5:94: 15:3b:81:ca:e6:99:ae:0a:57:5d:d0:51:7e:da:8a:95:f6:31: a7:70:98:9b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUElBP+2MGbyteuIrvrWbuOgpiiMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA1MjcxNjUzNDNaFw0yNjA1MjYxNjU4NDNaMDMxMTAvBgNV BAMTKDVDQzNCMEM1QUMxMUU1RjQ2OUJCNDA0Qzc1NzZDQkZGRUQzNzUwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfSA+ncTvdBRQOiAo/hdnRptU hi/iZxCIl+rhMWI2wYzkN7dmbdQLNAtUE71gS/9qfUQWlSWqUljm/B8dMPMoA1J/ jgSmzUTTnI1VZeNoj1uSDxnscdgjL/AivafihMABYrQM3Oy2dlFuORg06/Ovoz0n /u5IQvM/iX/YlhVmAezeH6nBUcLMqmC1uy1GZpCOJAXgBHmfBfj5B5jqkW8Qd2aX Af28+gH+/+73kMB2uZdSi72kwBIL6sIlbd+cCu3LwJxtYXV+57BkRnIeIlRGfP6+ ZUt2ikmMbGbiTpvTxE18zhdWxi/VsbngE3I1N5KqvqN/X6zDEHXj2WLB6nbZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUXMOwxawR5fRpu0BMdXbL/+03UAUwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzkzMTY0MzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAkdAwDQYJKoZIhvcNAQELBQADggEBACTD7jM2J/j57JIvMVV60Oz+nNLtK7w1 cZ1P81xAMGo8uzTad4c3XaLfxmlE3T5vnBe+TeFIU66mCrammFjC2/XMnVmC9X/C BpPTUiIiMex6FQ6XkJUXE/KazNR68uQWRIPyTHRlJERlyQPLFRcqWBStkGrt0ynF UBxOQ5kRiOZ0A9/anPD7SI83XN4YcjdLV+Bf5Zk4MIzskkf4dklBboW+Pl8VjlMJ HdXHoghqGFdNfh9XKRvRqVT/KNwVJ7xqzKeHezFblGlRGUe4mpAANReCiUS9kRJ8 2arEr/DUgoFMDBvu98asbnillBU7gcrmma4KV13QUX7aipX2MadwmJs= -----END CERTIFICATE-----Generated at Thu Jun 19 12:47:34 2025 by rpki-client