$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa File: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (raw, json) Hash identifier: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw= Subject key identifier: 4B:D2:37:5C:B2:5E:1B:FE:87:39:5F:25:39:00:F0:19:B2:59:7F:F6 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 0838D2B53FA93C772EB03E0478B6993BBA488EF8 Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa Signing time: Mon 16 Jun 2025 18:02:27 +0000 ROA not before: Mon 16 Jun 2025 17:57:27 +0000 ROA not after: Mon 15 Jun 2026 18:02:27 +0000 asID: 140007 IP address blocks: 2001:df2:e780::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:38:d2:b5:3f:a9:3c:77:2e:b0:3e:04:78:b6:99:3b:ba:48:8e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Jun 16 17:57:27 2025 GMT Not After : Jun 15 18:02:27 2026 GMT Subject: CN=4BD2375CB25E1BFE87395F253900F019B2597FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:17:46:f9:df:df:a1:a3:ac:43:1e:da:dc: 54:b7:49:7c:ab:c1:7d:1b:6f:b4:a3:c2:15:fb:8d: c4:39:69:42:b7:b0:8e:42:1e:9f:8a:eb:9f:92:9e: 0c:59:37:86:2b:dd:3b:5d:6d:b9:1b:f7:21:2e:3e: 08:ae:a7:b7:45:08:47:dc:a4:ea:dc:af:a2:d4:ef: 75:37:d9:78:78:a8:c2:9f:a2:58:d8:ea:51:43:7c: f9:ac:aa:1b:ea:62:43:a3:ed:a7:9f:ed:72:50:c1: d3:fc:7a:e1:6a:94:2a:7e:88:da:17:96:50:e9:fe: 05:0a:bb:c6:3c:11:cd:99:f2:c4:f4:cc:12:70:63: 39:44:fa:20:a9:88:b5:00:83:4c:c7:18:af:df:6d: 5f:ba:f6:89:b3:9b:71:7f:99:70:82:ed:7b:b4:bb: df:f9:53:c0:cd:1f:12:2d:1c:e7:75:93:5a:5f:a8: 31:75:2b:51:db:b8:55:b4:ab:53:a4:4b:f4:e7:56: 83:13:d2:07:18:0a:d1:fc:74:cb:f1:de:34:5b:95: 09:e2:65:61:fb:26:64:d0:ba:5f:98:e0:86:68:81: 66:81:6f:ab:1c:03:a8:67:66:d0:fe:92:5a:76:b2: 03:64:34:e2:44:85:51:88:81:30:0a:d6:e1:5b:b2: 05:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D2:37:5C:B2:5E:1B:FE:87:39:5F:25:39:00:F0:19:B2:59:7F:F6 X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:e780::/48 Signature Algorithm: sha256WithRSAEncryption 0e:ad:89:c0:6c:13:c7:02:1a:11:81:ca:91:9a:47:48:b8:54: a0:be:4e:4c:0e:30:b3:97:6a:8a:e5:06:5c:52:0f:48:47:6e: ec:d4:68:06:d9:59:ac:93:d7:ec:2e:b3:3b:43:08:49:99:19: d9:2d:6b:33:a1:db:d5:06:0a:18:56:31:fe:ac:f4:3e:60:69: 7a:91:04:98:b2:b8:4b:f8:a5:d0:32:74:b6:99:e2:29:d8:8f: 1b:f9:d2:53:8f:bc:54:83:d0:71:50:76:91:a0:f8:9d:42:9f: 10:19:ce:ee:57:07:bc:5b:3e:bc:2e:d2:8e:06:01:f5:fe:83: fa:24:d3:6d:34:06:01:92:55:31:d5:bb:42:aa:ba:d3:66:77: 22:a0:05:10:f3:29:ee:a9:15:88:73:5e:63:b2:bf:34:7b:54: c7:df:e1:35:68:f8:cb:a2:6b:14:96:58:b9:c7:4b:74:ba:b5: 68:4a:cf:87:e9:fc:da:28:78:7e:5a:8d:74:6f:76:35:0b:59: 46:4c:88:8e:fb:d3:e7:a4:3e:a2:ae:02:91:00:23:5b:0b:7c: 1d:05:89:9b:15:77:10:05:4a:41:f8:1a:97:a4:25:d4:fb:02: 85:09:28:cb:f4:22:0b:24:a8:42:a2:64:da:39:7f:f3:f4:fc: 35:e6:df:ff -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCDjStT+pPHcusD4EeLaZO7pIjvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTA2MTYxNzU3MjdaFw0yNjA2MTUxODAyMjdaMDMxMTAvBgNV BAMTKDRCRDIzNzVDQjI1RTFCRkU4NzM5NUYyNTM5MDBGMDE5QjI1OTdGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnpBdG+d/foaOsQx7a3FS3SXyr wX0bb7SjwhX7jcQ5aUK3sI5CHp+K65+SngxZN4Yr3Ttdbbkb9yEuPgiup7dFCEfc pOrcr6LU73U32Xh4qMKfoljY6lFDfPmsqhvqYkOj7aef7XJQwdP8euFqlCp+iNoX llDp/gUKu8Y8Ec2Z8sT0zBJwYzlE+iCpiLUAg0zHGK/fbV+69omzm3F/mXCC7Xu0 u9/5U8DNHxItHOd1k1pfqDF1K1HbuFW0q1OkS/TnVoMT0gcYCtH8dMvx3jRblQni ZWH7JmTQul+Y4IZogWaBb6scA6hnZtD+klp2sgNkNOJEhVGIgTAK1uFbsgWlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUS9I3XLJeG/6HOV8lOQDwGbJZf/YwHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0NmY1YTA1LTMyYjUtNGQzYy1i NGUwLWFiZGRjZjczZjVlOS8wLzMyMzAzMDMxM2E2NDY2MzIzYTY1MzczODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzAzMDM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8ueAMA0GCSqGSIb3DQEBCwUAA4IBAQAOrYnAbBPHAhoRgcqRmkdIuFSgvk5MDjCz l2qK5QZcUg9IR27s1GgG2Vmsk9fsLrM7QwhJmRnZLWszodvVBgoYVjH+rPQ+YGl6 kQSYsrhL+KXQMnS2meIp2I8b+dJTj7xUg9BxUHaRoPidQp8QGc7uVwe8Wz68LtKO BgH1/oP6JNNtNAYBklUx1btCqrrTZncioAUQ8ynuqRWIc15jsr80e1TH3+E1aPjL omsUlli5x0t0urVoSs+H6fzaKHh+Wo10b3Y1C1lGTIiO+9PnpD6irgKRACNbC3wd BYmbFXcQBUpB+BqXpCXU+wKFCSjL9CILJKhComTaOX/z9Pw15t// -----END CERTIFICATE-----Generated at Tue Jun 17 15:40:35 2025 by rpki-client