$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a3a2f33322d3332203d3e20313337333330.roa File: 323430323a616134303a3a2f33322d3332203d3e20313337333330.roa (raw, json) Hash identifier: vtCuldzUtylI5t9/fCW+s++nz3SUBB8oSaeAOGcN8rI= Subject key identifier: 60:69:9B:96:F6:4F:B0:03:5F:B7:9A:74:14:C3:40:C0:86:AE:3A:37 Certificate issuer: /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Certificate serial: 2183AA190F819B3451037E4F72937925E9CB72EC Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a3a2f33322d3332203d3e20313337333330.roa Signing time: Fri 27 Jun 2025 03:02:10 +0000 ROA not before: Fri 27 Jun 2025 02:57:10 +0000 ROA not after: Fri 26 Jun 2026 03:02:10 +0000 asID: 137330 IP address blocks: 2402:aa40::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:83:aa:19:0f:81:9b:34:51:03:7e:4f:72:93:79:25:e9:cb:72:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003 Validity Not Before: Jun 27 02:57:10 2025 GMT Not After : Jun 26 03:02:10 2026 GMT Subject: CN=60699B96F64FB0035FB79A7414C340C086AE3A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b5:82:a7:36:c8:7f:57:79:33:69:2c:ea:bb: e0:35:57:55:6e:42:74:cb:7a:22:9f:48:7a:80:2e: b4:03:f3:f8:cd:be:f4:04:35:de:28:ae:d5:e4:42: c1:cd:74:fd:88:54:ef:91:58:36:33:a5:05:3b:35: a5:81:44:fc:78:d2:1c:7c:dc:8f:c5:03:3a:2c:b0: b1:03:ce:9b:89:c0:3b:51:e5:d6:1b:e7:3d:bf:16: 08:90:58:9a:f8:53:61:0e:d7:cb:ef:ba:bf:cd:46: f9:e3:63:09:05:26:ad:5b:9e:22:12:38:ea:1a:59: b7:b4:65:33:9a:14:47:42:59:38:11:08:92:6e:06: ff:15:a4:f3:ec:4e:6d:54:b1:a4:15:42:7b:99:db: 45:4c:0a:9d:e9:fb:4e:51:f6:40:74:03:a1:1b:0c: 87:2c:21:93:42:a0:e5:5e:e5:5f:f5:b4:3d:04:ba: 6e:7b:46:35:b6:09:62:0d:d9:62:78:37:ef:67:7f: f4:b1:a5:ee:45:b9:c7:eb:40:bb:39:fa:b9:82:ae: ae:31:3d:3c:3f:5c:45:94:61:2d:7b:11:54:11:dd: 65:d2:ec:69:12:53:7e:8f:aa:5a:7a:42:89:bd:dc: ef:d9:f7:72:3d:ce:74:f2:1e:6b:58:c9:f8:af:72: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:69:9B:96:F6:4F:B0:03:5F:B7:9A:74:14:C3:40:C0:86:AE:3A:37 X509v3 Authority Key Identifier: keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a3a2f33322d3332203d3e20313337333330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:aa40::/32 Signature Algorithm: sha256WithRSAEncryption 83:56:83:38:52:03:89:52:ce:7f:17:33:f2:3c:76:ed:48:d3: 61:32:ed:5c:00:d6:5c:39:3f:70:33:78:92:a4:7a:16:ff:2f: 37:dc:a4:1f:ff:a4:b4:d3:e0:db:c8:c1:3f:95:9f:cc:e0:78: 41:fe:10:10:77:e4:5b:61:da:77:46:22:23:29:87:2d:37:75: 33:0c:17:54:f6:3d:50:06:78:58:48:02:74:d4:9e:d7:cb:b3: 22:15:d7:84:da:63:f7:81:62:a0:1f:d6:f8:39:69:07:44:a4: 8f:8b:d9:f6:6c:6f:4c:45:5f:1d:2b:3c:09:d9:b4:6c:f5:9b: fe:49:26:18:05:c2:cd:b7:ec:7b:a9:5a:74:c3:be:08:b4:55: 26:4a:c8:bf:3f:a0:4c:59:3f:e6:01:c8:28:49:bf:d4:f3:c2: 1a:f2:dd:f5:34:b3:8d:8d:98:0b:9e:28:67:cf:6f:74:3e:82: 5a:f6:31:88:8a:e9:84:1f:79:b1:46:eb:c0:25:0c:41:76:25: 4f:6a:b1:49:c4:8e:bc:1e:6c:0d:c6:05:cf:a1:e8:1e:b0:93: 3e:8e:99:94:33:0d:79:b4:3c:81:f7:5a:c2:ad:63:d4:3b:5f: 12:26:6a:3f:e1:1a:6d:13:93:fd:a0:4b:60:c6:39:28:fe:40: 33:03:77:58 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUIYOqGQ+BmzRRA35PcpN5JenLcuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF NEMxRDAwMzAeFw0yNTA2MjcwMjU3MTBaFw0yNjA2MjYwMzAyMTBaMDMxMTAvBgNV BAMTKDYwNjk5Qjk2RjY0RkIwMDM1RkI3OUE3NDE0QzM0MEMwODZBRTNBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgtYKnNsh/V3kzaSzqu+A1V1Vu QnTLeiKfSHqALrQD8/jNvvQENd4ortXkQsHNdP2IVO+RWDYzpQU7NaWBRPx40hx8 3I/FAzossLEDzpuJwDtR5dYb5z2/FgiQWJr4U2EO18vvur/NRvnjYwkFJq1bniIS OOoaWbe0ZTOaFEdCWTgRCJJuBv8VpPPsTm1UsaQVQnuZ20VMCp3p+05R9kB0A6Eb DIcsIZNCoOVe5V/1tD0Eum57RjW2CWIN2WJ4N+9nf/Sxpe5FucfrQLs5+rmCrq4x PTw/XEWUYS17EVQR3WXS7GkSU36Pqlp6Qom93O/Z93I9znTyHmtYyfivctS3AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUYGmblvZPsANft5p0FMNAwIauOjcwHwYDVR0j BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx RDAwMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04 N2RmLTUzMTAzYjZkYzI1My8wLzMyMzQzMDMyM2E2MTYxMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCqkAwDQYJKoZI hvcNAQELBQADggEBAINWgzhSA4lSzn8XM/I8du1I02Ey7VwA1lw5P3AzeJKkehb/ LzfcpB//pLTT4NvIwT+Vn8zgeEH+EBB35Fth2ndGIiMphy03dTMMF1T2PVAGeFhI AnTUntfLsyIV14TaY/eBYqAf1vg5aQdEpI+L2fZsb0xFXx0rPAnZtGz1m/5JJhgF ws237HupWnTDvgi0VSZKyL8/oExZP+YByChJv9Tzwhry3fU0s42NmAueKGfPb3Q+ glr2MYiK6YQfebFG68AlDEF2JU9qsUnEjrwebA3GBc+h6B6wkz6OmZQzDXm0PIH3 WsKtY9Q7XxImaj/hGm0Tk/2gS2DGOSj+QDMDd1g= -----END CERTIFICATE-----Generated at Mon Jun 30 19:05:28 2025 by rpki-client