$ rpki-client -vvf repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa File: 323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa (raw, json) Hash identifier: tDG6Iti0PLnRCu0mbkQzT0b2dqDqUbKctSFPSn5Mn7g= Subject key identifier: 2C:B3:C6:2D:47:77:48:97:A2:DC:E2:CF:AF:17:1A:C5:05:3B:35:36 Certificate issuer: /CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Certificate serial: 11E2075FDD9ADB552CC405F2602DDF7FEE99A2ED Authority key identifier: 5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa Signing time: Sun 04 May 2025 15:02:24 +0000 ROA not before: Sun 04 May 2025 14:57:24 +0000 ROA not after: Sun 03 May 2026 15:02:24 +0000 asID: 140413 IP address blocks: 2406:13c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e2:07:5f:dd:9a:db:55:2c:c4:05:f2:60:2d:df:7f:ee:99:a2:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AB2F048BCF9D60D6323A72EF7255F38A81A93BE Validity Not Before: May 4 14:57:24 2025 GMT Not After : May 3 15:02:24 2026 GMT Subject: CN=2CB3C62D47774897A2DCE2CFAF171AC5053B3536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:9a:6b:0d:5d:04:d1:f5:7f:52:e2:59:b5: 84:40:23:fd:d7:90:f8:73:5c:1d:8a:f6:70:38:94: 48:d5:47:42:28:06:3d:a4:c2:51:46:81:33:00:1e: 1c:cc:01:a9:b6:8b:00:82:84:39:04:18:cc:28:3c: 43:d9:b7:1c:18:88:be:4d:cb:2f:de:0b:2b:1d:87: 89:fe:f0:3d:0c:6a:4a:ff:76:5c:47:10:c0:9a:0d: 32:a2:e2:eb:5b:c0:18:7f:c3:85:32:50:2a:92:03: f1:5d:06:b3:0f:ba:09:71:d5:13:75:71:28:c2:c1: 68:ab:5d:de:b9:71:5d:dc:36:fe:66:c0:0e:3c:0c: df:ef:c4:4d:43:b5:5d:21:01:d6:0a:33:02:c9:f0: a6:d7:ca:48:d3:12:31:98:f2:95:f9:f4:fb:a1:4d: 3b:25:6b:f0:2a:1a:01:e7:5b:49:18:dd:fd:ad:21: 3a:3c:8c:70:9d:6d:63:16:29:41:42:9e:a9:40:4b: b7:c8:7b:0a:02:80:77:71:d0:3b:f8:fb:fb:ac:59: c3:ca:09:4a:2c:30:40:c3:57:2e:37:74:87:2f:1f: 62:92:23:57:d4:31:75:aa:72:c1:47:4a:64:3d:d6: 44:dc:ca:e2:ad:44:27:b7:01:aa:d4:c7:fc:c5:b4: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B3:C6:2D:47:77:48:97:A2:DC:E2:CF:AF:17:1A:C5:05:3B:35:36 X509v3 Authority Key Identifier: keyid:5A:B2:F0:48:BC:F9:D6:0D:63:23:A7:2E:F7:25:5F:38:A8:1A:93:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AB2F048BCF9D60D6323A72EF7255F38A81A93BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a313a3a2f34382d3438203d3e20313430343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:13c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 03:84:b7:c9:11:fd:cb:f6:19:0a:f1:eb:03:34:96:46:2c:85: 79:a9:db:38:6b:6b:15:21:7c:a5:09:02:3e:be:75:63:7a:bd: 3e:df:9b:c0:29:78:25:43:dc:78:8b:c5:a6:15:f9:72:4c:b4: 26:8a:35:fb:34:e2:c7:4e:e9:4a:9f:64:e9:14:ef:e7:26:6c: 48:c9:43:a7:2b:f8:c8:d1:1e:32:24:7f:b0:34:14:6f:5c:6c: ce:3a:ed:89:84:c3:7a:0c:c7:f8:d7:ee:92:21:3e:be:2c:4d: df:25:37:05:6e:50:0d:14:db:1f:20:ff:c4:78:ac:eb:84:70: 4c:21:f2:96:b4:78:a3:97:ea:fb:bb:7b:01:0c:77:0c:78:81: aa:29:35:27:3f:ef:fa:cc:ac:fc:08:cb:ad:c6:c9:dc:2b:62: 94:9d:4e:06:5a:03:55:43:9e:ee:44:90:56:86:f4:89:66:e7: f9:27:c1:2f:e0:d1:ad:f2:5a:5c:c4:0e:9d:26:d6:b5:c4:f0: 0c:85:64:1b:4e:6a:d1:e4:29:bb:8c:e5:31:91:47:bd:2e:88: 3b:19:43:0c:c2:d5:64:12:f2:73:63:ee:11:aa:88:ab:b3:ce: 09:0d:c8:8d:b5:cd:c0:3f:28:2a:cc:e7:ec:6b:7d:b5:5f:ca: 91:c5:de:53 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUEeIHX92a21UsxAXyYC3ff+6Zou0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhB ODFBOTNCRTAeFw0yNTA1MDQxNDU3MjRaFw0yNjA1MDMxNTAyMjRaMDMxMTAvBgNV BAMTKDJDQjNDNjJENDc3NzQ4OTdBMkRDRTJDRkFGMTcxQUM1MDUzQjM1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+JprDV0E0fV/UuJZtYRAI/3X kPhzXB2K9nA4lEjVR0IoBj2kwlFGgTMAHhzMAam2iwCChDkEGMwoPEPZtxwYiL5N yy/eCysdh4n+8D0Makr/dlxHEMCaDTKi4utbwBh/w4UyUCqSA/FdBrMPuglx1RN1 cSjCwWirXd65cV3cNv5mwA48DN/vxE1DtV0hAdYKMwLJ8KbXykjTEjGY8pX59Puh TTsla/AqGgHnW0kY3f2tITo8jHCdbWMWKUFCnqlAS7fIewoCgHdx0Dv4+/usWcPK CUosMEDDVy43dIcvH2KSI1fUMXWqcsFHSmQ91kTcyuKtRCe3AarUx/zFtF8pAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQULLPGLUd3SJei3OLPrxcaxQU7NTYwHwYDVR0j BBgwFoAUWrLwSLz51g1jI6cu9yVfOKgak74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmQ3ZWRlMS0zZmQwLTQ2MjQtYmVmOC0wZTczZTg0OTk0YmMvMC81QUIyRjA0OEJD RjlENjBENjMyM0E3MkVGNzI1NUYzOEE4MUE5M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFCMkYwNDhCQ0Y5RDYwRDYzMjNBNzJFRjcyNTVGMzhBODFB OTNCRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAEw DQYJKoZIhvcNAQELBQADggEBAAOEt8kR/cv2GQrx6wM0lkYshXmp2zhraxUhfKUJ Aj6+dWN6vT7fm8ApeCVD3HiLxaYV+XJMtCaKNfs04sdO6UqfZOkU7+cmbEjJQ6cr +MjRHjIkf7A0FG9cbM467YmEw3oMx/jX7pIhPr4sTd8lNwVuUA0U2x8g/8R4rOuE cEwh8pa0eKOX6vu7ewEMdwx4gaopNSc/7/rMrPwIy63GydwrYpSdTgZaA1VDnu5E kFaG9Ilm5/knwS/g0a3yWlzEDp0m1rXE8AyFZBtOatHkKbuM5TGRR70uiDsZQwzC 1WQS8nNj7hGqiKuzzgkNyI21zcA/KCrM5+xrfbVfypHF3lM= -----END CERTIFICATE-----Generated at Wed May 7 09:04:48 2025 by rpki-client