$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa File: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (raw, json) Hash identifier: xoAFKq/o5an6vKaY7+FEI8eF7uN0DJPTXe0V7TuXoIk= Subject key identifier: 7E:8F:56:BB:E8:0A:7F:DE:B6:DD:12:9E:F2:8F:30:24:CB:3B:29:14 Certificate issuer: /CN=C79C17C4F5C843791A7028B499932A84B65CD399 Certificate serial: 4ED3E4465A5A553DD17392FFC6E7C4EE581970E7 Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa Signing time: Wed 04 Jun 2025 12:00:02 +0000 ROA not before: Wed 04 Jun 2025 11:55:02 +0000 ROA not after: Wed 03 Jun 2026 12:00:02 +0000 asID: 152800 IP address blocks: 2001:df3:dfc0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 23:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d3:e4:46:5a:5a:55:3d:d1:73:92:ff:c6:e7:c4:ee:58:19:70:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399 Validity Not Before: Jun 4 11:55:02 2025 GMT Not After : Jun 3 12:00:02 2026 GMT Subject: CN=7E8F56BBE80A7FDEB6DD129EF28F3024CB3B2914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:24:0c:41:d2:fb:e4:08:50:6f:2f:e4:92: c3:4e:14:ce:0e:a1:5e:fe:84:9b:1c:5f:d7:0f:c0: 30:b6:ee:a0:42:02:b4:04:aa:6f:27:4c:38:8e:81: dc:9c:f5:86:f0:c6:21:56:5f:c5:5a:10:0e:97:88: 00:e4:10:41:ec:3f:ed:81:f3:42:87:32:3c:7a:ec: c5:29:15:31:94:50:e1:c6:fb:0d:0b:59:45:28:1c: aa:da:61:32:f4:46:38:df:d0:40:9d:7f:3e:c3:ca: 8f:de:67:ff:66:70:d0:ac:2f:7e:8c:e9:f6:be:e8: 01:f0:6c:13:b6:eb:4f:71:2f:37:2e:a3:29:61:5f: 94:f0:5a:37:7d:d1:d5:ab:0d:9c:11:88:82:77:96: e8:8e:93:87:05:52:49:bb:1a:4f:72:3b:40:ed:ed: ef:b7:67:5c:cd:06:41:7c:7b:e2:21:84:40:53:2e: 0b:7d:2e:c8:88:dd:4b:51:3f:b3:90:17:c3:ea:2b: cf:57:57:47:2f:14:64:70:bf:2b:21:0d:1b:b2:fc: 56:6e:09:cc:84:63:c5:e1:54:f9:f8:5a:5d:2c:20: db:af:3e:f0:fb:fd:a0:b4:95:f1:91:0f:fb:40:6a: 8d:da:12:23:6d:56:f5:de:84:5e:b1:74:60:ae:d4: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8F:56:BB:E8:0A:7F:DE:B6:DD:12:9E:F2:8F:30:24:CB:3B:29:14 X509v3 Authority Key Identifier: keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:dfc0::/48 Signature Algorithm: sha256WithRSAEncryption 9d:85:d1:c8:fc:e7:35:ea:cc:4d:f5:23:6f:6b:cc:ae:36:04: c8:b5:e7:2f:50:19:59:6f:7a:69:0a:db:e8:1b:7d:fb:b5:96: db:11:08:a2:23:7a:a2:fd:d9:6c:85:ff:2f:48:c1:32:6c:4f: d9:04:98:a9:93:fa:d9:00:2b:89:5e:08:74:c0:42:d6:66:a6: 0f:85:60:d9:62:e8:eb:a1:02:e1:ad:72:ab:8d:c4:a5:dc:5d: 51:ac:92:7e:a0:0d:96:4f:82:44:5b:5b:5a:f5:f2:0b:00:61: 45:0a:66:80:92:78:cd:c8:7d:20:28:af:c4:f8:87:29:0d:c9: 55:7a:0b:85:0a:78:f5:51:df:e3:8c:46:5a:08:9f:a1:b5:4f: 57:b6:c5:51:d6:92:1a:29:9b:7c:d9:09:26:01:f0:37:f1:28: 47:26:37:ae:e2:82:cc:2c:ef:61:31:61:71:c7:b8:55:d5:6f: 1c:20:2c:cc:73:35:a2:89:0a:49:99:19:bf:2b:7f:32:aa:15: e2:58:c5:24:17:97:6d:67:42:37:d2:d3:b1:11:15:99:76:0a: 6e:fd:7c:5e:ad:78:82:55:e9:da:02:f7:43:1b:91:d3:1c:cd: 65:48:6d:8c:20:31:c3:73:ef:ad:20:21:42:b9:7b:0d:33:80: 5f:ea:4f:99 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTtPkRlpaVT3Rc5L/xufE7lgZcOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJBODRC NjVDRDM5OTAeFw0yNTA2MDQxMTU1MDJaFw0yNjA2MDMxMjAwMDJaMDMxMTAvBgNV BAMTKDdFOEY1NkJCRTgwQTdGREVCNkREMTI5RUYyOEYzMDI0Q0IzQjI5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6yQMQdL75AhQby/kksNOFM4O oV7+hJscX9cPwDC27qBCArQEqm8nTDiOgdyc9YbwxiFWX8VaEA6XiADkEEHsP+2B 80KHMjx67MUpFTGUUOHG+w0LWUUoHKraYTL0Rjjf0ECdfz7Dyo/eZ/9mcNCsL36M 6fa+6AHwbBO2609xLzcuoylhX5TwWjd90dWrDZwRiIJ3luiOk4cFUkm7Gk9yO0Dt 7e+3Z1zNBkF8e+IhhEBTLgt9LsiI3UtRP7OQF8PqK89XV0cvFGRwvyshDRuy/FZu CcyEY8XhVPn4Wl0sINuvPvD7/aC0lfGRD/tAao3aEiNtVvXehF6xdGCu1GrtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUfo9Wu+gKf9623RKe8o8wJMs7KRQwHwYDVR0j BBgwFoAUx5wXxPXIQ3kacCi0mZMqhLZc05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMS9DNzlDMTdDNEY1 Qzg0Mzc5MUE3MDI4QjQ5OTkzMkE4NEI2NUNEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc5QzE3QzRGNUM4NDM3OTFBNzAyOEI0OTk5MzJBODRCNjVD RDM5OS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyNTZiYmJhLTE4MjYtNGQ4Ni1i ODczLTJmNmRkNjMyNTc3MS8xLzMyMzAzMDMxM2E2NDY2MzMzYTY0NjY2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzgzMDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89/AMA0GCSqGSIb3DQEBCwUAA4IBAQCdhdHI/Oc16sxN9SNva8yuNgTItecvUBlZ b3ppCtvoG337tZbbEQiiI3qi/dlshf8vSMEybE/ZBJipk/rZACuJXgh0wELWZqYP hWDZYujroQLhrXKrjcSl3F1RrJJ+oA2WT4JEW1ta9fILAGFFCmaAknjNyH0gKK/E +IcpDclVeguFCnj1Ud/jjEZaCJ+htU9XtsVR1pIaKZt82QkmAfA38ShHJjeu4oLM LO9hMWFxx7hV1W8cICzMczWiiQpJmRm/K38yqhXiWMUkF5dtZ0I30tOxERWZdgpu /XxerXiCVenaAvdDG5HTHM1lSG2MIDHDc++tICFCuXsNM4Bf6k+Z -----END CERTIFICATE-----Generated at Tue Jun 17 19:43:52 2025 by rpki-client