$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa File: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (raw, json) Hash identifier: 4k+7oiIZgf8A+xoNtWkGh4r/bBNQQHgBlobDBAPY3jY= Subject key identifier: DA:B3:F5:81:86:02:B7:8F:44:E1:10:75:80:7F:1F:F6:72:E5:C4:01 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 0E4257E6C4789B49836E49A0D3EA61B9BB3EDEDA Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa Signing time: Tue 29 Apr 2025 03:02:24 +0000 ROA not before: Tue 29 Apr 2025 02:57:24 +0000 ROA not after: Tue 28 Apr 2026 03:02:24 +0000 asID: 38496 IP address blocks: 2407:3e80:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 14:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:42:57:e6:c4:78:9b:49:83:6e:49:a0:d3:ea:61:b9:bb:3e:de:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: Apr 29 02:57:24 2025 GMT Not After : Apr 28 03:02:24 2026 GMT Subject: CN=DAB3F5818602B78F44E11075807F1FF672E5C401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ad:38:bc:e6:e2:fa:9c:36:fa:da:9f:13:e7: 70:5c:d3:88:e2:ab:da:8b:76:90:ea:fa:e2:19:14: e0:6b:be:4d:e2:07:74:3e:b6:b0:9e:0f:0b:b2:4c: d8:95:92:73:d2:28:dd:2e:1c:ff:e9:8e:a0:1e:20: 91:33:28:44:18:d0:58:80:42:1d:a7:69:19:7d:62: e5:52:29:c2:66:74:f1:07:25:ed:bd:65:22:c6:45: fe:cc:49:f7:28:10:d3:84:f4:35:77:6d:2f:e3:e3: eb:35:f4:5d:42:f3:c9:a3:5b:e2:84:e8:dd:37:b8: 6c:6b:04:29:3a:c7:3b:bd:c6:59:b7:3f:79:81:30: 4f:eb:8c:2c:05:e0:bf:2d:28:45:52:e4:55:e8:b3: 44:5f:60:2b:46:28:ee:52:e4:50:98:ee:2a:75:e2: 9e:48:f2:51:5f:d6:51:00:04:d2:2c:44:49:77:96: 85:97:09:3e:2e:d3:8d:a9:0e:f3:1a:48:78:4c:d4: aa:b1:bf:fd:18:43:95:6d:a0:58:ab:37:03:f0:2b: 37:95:57:c3:8a:fc:a9:57:1b:8e:e7:1c:36:89:36: ef:12:19:23:70:8b:82:b7:f5:dc:0a:b4:d7:cd:8c: 89:1e:a2:97:4c:8f:09:ee:da:49:a9:a0:79:cd:92: be:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:F5:81:86:02:B7:8F:44:E1:10:75:80:7F:1F:F6:72:E5:C4:01 X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:3e80:6::/48 Signature Algorithm: sha256WithRSAEncryption 66:57:bb:6b:f3:61:72:9e:d9:f9:9a:2f:8e:f8:33:4d:ae:94: 4b:22:ed:2c:38:2b:b8:90:8e:84:51:09:31:52:91:9e:d8:32: 6d:51:d8:fb:74:1a:89:02:7a:9b:3c:c4:bf:9c:ba:ad:97:3d: 92:0e:37:fe:f5:1e:6d:fe:33:51:69:28:8a:89:0d:c8:d3:bd: 92:57:bb:69:85:37:43:cd:47:da:8d:06:9e:11:31:96:e0:39: 91:5b:27:f0:99:8d:5a:00:48:54:62:d3:ac:95:55:3d:a1:92: c6:e8:fd:53:4a:8c:9d:f5:d1:2b:66:ef:61:0b:0b:e5:ba:9f: a1:82:90:ac:db:ab:14:b6:3e:f6:0c:84:09:a8:9f:8a:fa:6e: 26:bb:58:12:61:27:51:e1:0a:16:31:5c:92:e9:e2:3d:bb:ef: f8:33:fe:c9:e2:34:26:bc:a6:5d:1f:ee:da:c1:53:c8:10:fa: 4f:33:95:d4:0a:90:9d:b1:f1:eb:83:f5:98:72:d1:dc:ac:9a: c1:a3:ae:4d:c6:a1:80:69:27:91:7c:2e:82:9c:64:e1:e4:d0: 76:72:37:e1:1d:bb:7a:eb:07:74:dd:85:27:42:b2:c1:19:15: 41:6e:6e:0b:d6:84:a3:0d:3d:97:86:c3:d3:a2:6d:07:62:75: 5f:7b:74:ea -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUDkJX5sR4m0mDbkmg0+phubs+3towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNTA0MjkwMjU3MjRaFw0yNjA0MjgwMzAyMjRaMDMxMTAvBgNV BAMTKERBQjNGNTgxODYwMkI3OEY0NEUxMTA3NTgwN0YxRkY2NzJFNUM0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsrTi85uL6nDb62p8T53Bc04ji q9qLdpDq+uIZFOBrvk3iB3Q+trCeDwuyTNiVknPSKN0uHP/pjqAeIJEzKEQY0FiA Qh2naRl9YuVSKcJmdPEHJe29ZSLGRf7MSfcoENOE9DV3bS/j4+s19F1C88mjW+KE 6N03uGxrBCk6xzu9xlm3P3mBME/rjCwF4L8tKEVS5FXos0RfYCtGKO5S5FCY7ip1 4p5I8lFf1lEABNIsREl3loWXCT4u042pDvMaSHhM1Kqxv/0YQ5VtoFirNwPwKzeV V8OK/KlXG47nHDaJNu8SGSNwi4K39dwKtNfNjIkeopdMjwnu2kmpoHnNkr7BAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU2rP1gYYCt49E4RB1gH8f9nLlxAEwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxZTk0MjQzLTg3ZjAtNDI2Zi1h OWNhLTRjMTllZGIwNmI0Mi8wLzMyMzQzMDM3M2EzMzY1MzgzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAc+gAAGMA0G CSqGSIb3DQEBCwUAA4IBAQBmV7tr82Fyntn5mi+O+DNNrpRLIu0sOCu4kI6EUQkx UpGe2DJtUdj7dBqJAnqbPMS/nLqtlz2SDjf+9R5t/jNRaSiKiQ3I072SV7tphTdD zUfajQaeETGW4DmRWyfwmY1aAEhUYtOslVU9oZLG6P1TSoyd9dErZu9hCwvlup+h gpCs26sUtj72DIQJqJ+K+m4mu1gSYSdR4QoWMVyS6eI9u+/4M/7J4jQmvKZdH+7a wVPIEPpPM5XUCpCdsfHrg/WYctHcrJrBo65NxqGAaSeRfC6CnGTh5NB2cjfhHbt6 6wd03YUnQrLBGRVBbm4L1oSjDT2XhsPTom0HYnVfe3Tq -----END CERTIFICATE-----Generated at Sun May 11 10:26:31 2025 by rpki-client