$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa File: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (raw, json) Hash identifier: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY= Subject key identifier: 3D:C2:95:4D:3B:F1:D2:69:2D:E1:3C:4E:31:DA:20:DA:C8:D5:D7:7F Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 5F64489411131702BB22D6AC98F9DF84DB960563 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa Signing time: Tue 10 Jun 2025 04:00:01 +0000 ROA not before: Tue 10 Jun 2025 03:55:01 +0000 ROA not after: Tue 09 Jun 2026 04:00:01 +0000 asID: 140012 IP address blocks: 2405:c940::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:64:48:94:11:13:17:02:bb:22:d6:ac:98:f9:df:84:db:96:05:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Jun 10 03:55:01 2025 GMT Not After : Jun 9 04:00:01 2026 GMT Subject: CN=3DC2954D3BF1D2692DE13C4E31DA20DAC8D5D77F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:c0:92:1c:8d:da:e9:43:87:41:17:f0:b7: e4:a8:ae:6b:ff:0f:43:7c:30:61:69:1a:6a:c5:8c: 05:9a:f4:30:b5:f3:2a:a7:3b:7b:07:35:2b:56:3c: fb:b3:f1:8a:47:de:35:a8:f6:91:ef:6f:c1:7e:03: a6:c2:a1:2a:c6:5d:e0:37:45:fd:14:be:74:70:35: b1:69:66:ec:e5:09:74:81:dd:79:20:4d:71:57:54: 1d:54:0b:14:94:04:a2:77:11:85:7a:c3:94:61:e1: b4:c9:82:12:23:8d:49:f1:de:89:04:c9:83:83:a6: 1d:81:07:9d:61:59:3e:06:9c:e0:5c:38:67:79:48: 5e:71:f3:82:ab:23:0c:d0:6f:43:ed:e3:33:5c:e3: 44:f3:73:3a:33:e7:80:f8:6b:fd:cc:87:a6:98:1e: ad:34:5c:63:8d:15:94:21:96:80:b8:f9:e5:4b:9a: 3d:5b:a4:cc:97:98:5f:c9:08:2c:c8:bf:2a:90:9c: 53:ea:1f:83:83:0a:d9:26:d5:0e:8b:d4:ff:68:2a: cb:dd:e5:76:dd:9e:72:9b:e3:ee:86:f2:dd:2f:f2: 6a:db:0e:2a:bf:4c:0e:20:5e:eb:bd:e1:f0:86:19: 23:8d:20:8d:4b:3f:71:18:a4:29:24:17:1f:31:47: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C2:95:4D:3B:F1:D2:69:2D:E1:3C:4E:31:DA:20:DA:C8:D5:D7:7F X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c940::/32 Signature Algorithm: sha256WithRSAEncryption 2c:32:c1:19:9b:85:60:7b:a8:28:07:0f:33:b2:d2:57:a7:3b: 0f:98:f1:48:d8:80:4a:95:9a:4c:5d:6c:90:7c:55:f4:a8:fc: 65:2d:34:a3:2e:ea:d6:71:7f:71:20:8f:27:14:53:7f:99:cf: 1c:9e:25:9c:37:c5:47:bd:24:0f:eb:41:74:ad:39:e8:39:83: d8:d4:62:3b:b2:d1:9b:a2:00:2c:b7:4f:74:ee:0a:32:89:38: f4:11:2a:7e:50:c0:10:c9:bd:3a:a8:f4:1e:04:40:7f:7a:9a: 88:4c:8a:57:e9:46:04:6d:d2:fd:a8:52:fb:c8:d9:65:92:cb: c3:35:86:b1:9f:0b:f7:7c:3e:ec:bf:4b:2d:be:e1:9a:9a:a3: 82:d5:90:56:d8:04:8f:c1:33:66:33:ff:38:2c:c4:62:96:dc: d0:e5:84:f3:b0:3c:75:02:39:72:b4:e2:a0:9e:75:05:b8:f1: d6:dc:3c:e8:3f:f8:96:2d:0e:f8:5b:e3:dd:fc:18:81:99:b4: 15:6f:95:6b:03:df:9d:c6:c3:9d:9d:5e:3c:22:ca:ab:0a:88: 14:d6:8b:72:f5:5a:ee:ff:6b:c3:a4:20:9d:8f:98:70:47:52: 11:ad:f4:70:f2:ea:bb:b3:8f:ac:5c:47:8c:58:cc:78:2b:6e: 24:38:01:7a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUX2RIlBETFwK7ItasmPnfhNuWBWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNTA2MTAwMzU1MDFaFw0yNjA2MDkwNDAwMDFaMDMxMTAvBgNV BAMTKDNEQzI5NTREM0JGMUQyNjkyREUxM0M0RTMxREEyMERBQzhENUQ3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDay8CSHI3a6UOHQRfwt+Sormv/ D0N8MGFpGmrFjAWa9DC18yqnO3sHNStWPPuz8YpH3jWo9pHvb8F+A6bCoSrGXeA3 Rf0UvnRwNbFpZuzlCXSB3XkgTXFXVB1UCxSUBKJ3EYV6w5Rh4bTJghIjjUnx3okE yYODph2BB51hWT4GnOBcOGd5SF5x84KrIwzQb0Pt4zNc40Tzczoz54D4a/3Mh6aY Hq00XGONFZQhloC4+eVLmj1bpMyXmF/JCCzIvyqQnFPqH4ODCtkm1Q6L1P9oKsvd 5XbdnnKb4+6G8t0v8mrbDiq/TA4gXuu94fCGGSONII1LP3EYpCkkFx8xR4vJAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUPcKVTTvx0mkt4TxOMdog2sjV138wHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyYWM5ZTYzLTk4OTAtNDIyZS04 OGRjLTdjYjZkZGFjMjJmYS8wLzMyMzQzMDM1M2E2MzM5MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDMwMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFyUAwDQYJKoZI hvcNAQELBQADggEBACwywRmbhWB7qCgHDzOy0lenOw+Y8UjYgEqVmkxdbJB8VfSo /GUtNKMu6tZxf3EgjycUU3+ZzxyeJZw3xUe9JA/rQXStOeg5g9jUYjuy0ZuiACy3 T3TuCjKJOPQRKn5QwBDJvTqo9B4EQH96mohMilfpRgRt0v2oUvvI2WWSy8M1hrGf C/d8Puy/Sy2+4Zqao4LVkFbYBI/BM2Yz/zgsxGKW3NDlhPOwPHUCOXK04qCedQW4 8dbcPOg/+JYtDvhb4938GIGZtBVvlWsD353Gw52dXjwiyqsKiBTWi3L1Wu7/a8Ok IJ2PmHBHUhGt9HDy6ruzj6xcR4xYzHgrbiQ4AXo= -----END CERTIFICATE-----Generated at Tue Jun 17 10:33:47 2025 by rpki-client