$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/323430313a663563303a3a2f33322d3438203d3e20313336383631.roa File: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (raw, json) Hash identifier: EZvYjhUqWVWt3m8BlTlpwuqAgPj6OBoR83LID+/r3xw= Subject key identifier: 5D:67:FA:86:83:77:10:E7:A5:32:46:7F:21:AB:5D:07:AB:A2:B1:31 Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E Certificate serial: 2C10F265F58A5DE6AE7DFFA24E9FDF0ED30DF66C Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/323430313a663563303a3a2f33322d3438203d3e20313336383631.roa Signing time: Thu 01 May 2025 16:02:20 +0000 ROA not before: Thu 01 May 2025 15:57:20 +0000 ROA not after: Thu 30 Apr 2026 16:02:20 +0000 asID: 136861 IP address blocks: 2401:f5c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:10:f2:65:f5:8a:5d:e6:ae:7d:ff:a2:4e:9f:df:0e:d3:0d:f6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E Validity Not Before: May 1 15:57:20 2025 GMT Not After : Apr 30 16:02:20 2026 GMT Subject: CN=5D67FA86837710E7A532467F21AB5D07ABA2B131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:cf:dc:53:4a:fc:b6:88:1e:c2:16:15:c6: c6:b8:d5:7d:39:49:65:90:e2:2e:62:03:5d:92:f9: 57:1a:08:b8:ac:92:47:d9:22:37:af:2b:27:ae:1c: 41:bd:83:65:3e:3f:b6:fe:83:13:3c:99:3b:ac:7b: 59:5d:07:c2:46:d2:0f:d2:07:31:b0:ff:d7:3c:62: d1:df:22:c0:16:c1:60:bb:e8:75:d1:38:82:72:e2: 6f:33:90:9f:dc:d9:e3:08:6b:59:58:5c:99:c2:a5: 6b:3c:4e:09:9b:2f:26:9d:38:1f:0b:fd:57:63:be: d6:78:2d:25:32:c4:60:fc:ca:9a:e8:dc:44:ab:c6: ea:24:a3:02:5d:9a:f8:f2:29:7a:a0:ba:fc:10:93: 13:3f:b6:2a:ec:33:02:11:f7:9a:ae:ee:e6:ff:45: 0f:91:8e:5e:8b:f7:0c:7b:ed:e8:1f:df:54:7c:61: 7f:23:2a:6e:dd:b5:56:cf:e5:87:4a:91:0e:a0:90: b9:d4:ec:37:68:94:02:b0:27:85:c5:ca:c9:4a:2f: da:d9:fb:52:2d:80:09:b8:cf:c3:e7:02:20:17:74: 71:07:a0:f9:b1:4a:32:f9:e0:e0:40:1d:13:b1:82: 3b:ba:11:59:cb:10:60:48:d6:ba:51:a5:f3:49:09: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:FA:86:83:77:10:E7:A5:32:46:7F:21:AB:5D:07:AB:A2:B1:31 X509v3 Authority Key Identifier: keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/323430313a663563303a3a2f33322d3438203d3e20313336383631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:f5c0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:41:ff:6f:45:d3:72:73:16:e7:83:7b:f8:e6:b1:a3:f3:82: d3:bb:d1:05:b9:45:67:70:59:50:2c:f6:88:20:18:cf:d3:7e: 4d:52:f9:e9:89:ab:b9:bc:a5:af:6c:b0:b7:8e:a3:6b:6e:ef: 06:fb:39:06:46:57:00:40:3e:3b:8d:8a:83:9c:30:6f:95:38: c6:83:d9:e1:41:44:17:cc:b1:00:7e:6e:4c:4b:93:59:2b:cc: 62:cc:c2:c1:1e:98:86:4f:c4:0d:80:b2:6f:8b:79:ca:e8:34: 0d:82:47:35:28:78:e6:5f:82:6a:ff:dc:f6:48:db:33:6a:81: 6d:0e:3d:6d:0b:81:2d:4c:42:b6:ba:f7:c8:0a:58:90:1d:bb: 53:bd:4a:3a:86:ae:cb:18:2b:66:01:1d:5b:65:1a:d1:a3:ad: 2a:67:a5:75:84:ef:74:5e:86:54:86:82:0d:b5:fc:dc:dc:52: 26:ae:a0:97:05:7d:00:4a:ed:86:4e:26:67:66:ec:2f:d4:1b: bd:2d:e3:65:e6:f6:6b:56:3b:1e:4b:72:ce:ef:c4:2a:64:bd: 02:4d:5c:df:c4:eb:37:ca:68:2a:7f:50:72:a1:4a:a1:88:42: e8:96:68:c3:96:b9:85:46:7b:24:f9:be:5d:ad:53:7a:54:19: 5a:6c:f1:88 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIULBDyZfWKXeauff+iTp/fDtMN9mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQy OTJCQ0IzRTAeFw0yNTA1MDExNTU3MjBaFw0yNjA0MzAxNjAyMjBaMDMxMTAvBgNV BAMTKDVENjdGQTg2ODM3NzEwRTdBNTMyNDY3RjIxQUI1RDA3QUJBMkIxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtc/cU0r8togewhYVxsa41X05 SWWQ4i5iA12S+VcaCLiskkfZIjevKyeuHEG9g2U+P7b+gxM8mTuse1ldB8JG0g/S BzGw/9c8YtHfIsAWwWC76HXROIJy4m8zkJ/c2eMIa1lYXJnCpWs8TgmbLyadOB8L /VdjvtZ4LSUyxGD8ypro3ESrxuokowJdmvjyKXqguvwQkxM/tirsMwIR95qu7ub/ RQ+Rjl6L9wx77egf31R8YX8jKm7dtVbP5YdKkQ6gkLnU7DdolAKwJ4XFyslKL9rZ +1ItgAm4z8PnAiAXdHEHoPmxSjL54OBAHROxgju6EVnLEGBI1rpRpfNJCWY/AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUXWf6hoN3EOelMkZ/IatdB6uisTEwHwYDVR0j BBgwFoAUdNTyeFyiYdAYyQm6Yi2CRCkryz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC83NEQ0RjI3ODVD QTI2MUQwMThDOTA5QkE2MjJEODI0NDI5MkJDQjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQyOTJC Q0IzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyZWE3N2I1LTg4ZjctNDA4NS1i MzMxLTk3NTAyNGNkMDQ2ZC8wLzMyMzQzMDMxM2E2NjM1NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNjM4MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQB9cAwDQYJKoZI hvcNAQELBQADggEBAHtB/29F03JzFueDe/jmsaPzgtO70QW5RWdwWVAs9oggGM/T fk1S+emJq7m8pa9ssLeOo2tu7wb7OQZGVwBAPjuNioOcMG+VOMaD2eFBRBfMsQB+ bkxLk1krzGLMwsEemIZPxA2Asm+LecroNA2CRzUoeOZfgmr/3PZI2zNqgW0OPW0L gS1MQra698gKWJAdu1O9SjqGrssYK2YBHVtlGtGjrSpnpXWE73RehlSGgg21/Nzc UiauoJcFfQBK7YZOJmdm7C/UG70t42Xm9mtWOx5Lcs7vxCpkvQJNXN/E6zfKaCp/ UHKhSqGIQuiWaMOWuYVGeyT5vl2tU3pUGVps8Yg= -----END CERTIFICATE-----Generated at Sun May 11 02:32:36 2025 by rpki-client