$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa File: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (raw, json) Hash identifier: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4= Subject key identifier: 29:E4:17:5F:2D:ED:E2:F9:65:F6:FE:F7:F2:08:83:29:E6:FE:C5:DB Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 2B647BC792DC699E74CE00327C568F0C3F84BC77 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa Signing time: Fri 21 Mar 2025 23:00:00 +0000 ROA not before: Fri 21 Mar 2025 22:55:00 +0000 ROA not after: Fri 20 Mar 2026 23:00:00 +0000 asID: 150980 IP address blocks: 2001:df2:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 14:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:64:7b:c7:92:dc:69:9e:74:ce:00:32:7c:56:8f:0c:3f:84:bc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Mar 21 22:55:00 2025 GMT Not After : Mar 20 23:00:00 2026 GMT Subject: CN=29E4175F2DEDE2F965F6FEF7F2088329E6FEC5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:29:e2:ca:4b:bc:a0:38:16:38:d3:d2:75: d6:d6:e4:d9:2e:ed:f6:17:1d:56:52:47:58:2f:2a: 6d:79:6c:d9:2f:9b:7f:b3:bd:2b:f0:1b:d1:73:40: dd:97:4f:4b:b5:e0:41:c6:09:2e:a7:43:0e:ef:94: dc:84:f9:c4:7f:45:81:e2:83:2b:50:02:dd:f2:26: c6:47:31:53:18:37:7e:76:17:7a:56:81:fc:b2:23: 11:92:78:5c:50:dc:e3:8e:78:55:8d:1a:ed:78:0b: ba:68:e2:76:fb:43:4a:df:36:bd:24:59:e8:0c:ce: 0c:41:ef:72:10:e9:66:4a:e0:ae:a7:8b:72:a6:4b: 30:0d:29:3b:f1:00:14:c8:42:a8:bd:94:88:d2:cf: 7c:d8:d5:e3:6c:03:9f:0e:8e:18:01:4a:72:05:2b: b9:23:12:c6:32:49:3c:c6:b6:c2:7c:62:f1:41:2c: 39:99:d5:9c:97:87:79:71:63:dd:61:52:3e:9f:7e: cc:7d:6d:6d:6a:ba:25:f1:14:33:8a:88:69:78:03: 56:a2:bd:d6:3d:c2:1c:09:f1:d0:ec:d4:70:2e:28: c2:9a:e1:45:2e:c3:12:07:fa:7c:25:6c:13:df:7e: a8:7b:8b:4e:a9:10:cb:2e:7a:f2:2a:fe:f8:05:89: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E4:17:5F:2D:ED:E2:F9:65:F6:FE:F7:F2:08:83:29:E6:FE:C5:DB X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 85:d8:a8:a2:4f:4c:4f:cf:cf:1c:58:28:e8:d0:4c:e9:44:4d: 47:46:7c:8a:60:9a:d9:db:e5:b8:6e:0b:0a:3e:5c:67:f0:e0: d6:af:84:df:b6:e8:47:de:e0:cf:5e:9c:fd:42:67:5a:06:97: cb:03:fa:48:bb:44:f2:5a:d4:e7:23:9c:86:1c:8f:8d:da:98: 7a:99:43:46:c7:e1:8e:5f:9e:1b:26:d7:bc:82:67:36:27:e5: e0:9f:7a:8b:d1:60:31:90:b5:be:6c:0b:ca:16:fd:64:92:61: 6f:79:fa:27:c6:da:f3:6b:0d:55:70:74:81:fc:2d:fc:c7:e2: 38:83:4c:c1:2f:3c:6e:82:d0:fd:05:03:4f:4d:aa:8e:8b:54: 40:5b:89:7d:50:3c:6d:0b:ef:82:88:43:0f:9c:0d:46:16:d7: 6f:cc:03:b4:e5:2c:ba:20:75:e7:39:70:ed:bf:73:43:aa:0d: b3:5a:86:d6:63:ac:22:36:d0:4b:4d:aa:de:2b:42:66:bc:82: b4:30:12:d2:a2:11:3f:fe:9e:d6:68:e1:56:ee:93:66:e1:7d: 79:aa:46:07:3f:4a:e7:bf:66:b7:92:6a:57:38:fa:e9:99:bd: 81:01:2e:83:64:c1:84:ab:c6:07:2e:00:b0:ee:93:e8:29:c8: 30:a1:04:97 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUK2R7x5LcaZ50zgAyfFaPDD+EvHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTAzMjEyMjU1MDBaFw0yNjAzMjAyMzAwMDBaMDMxMTAvBgNV BAMTKDI5RTQxNzVGMkRFREUyRjk2NUY2RkVGN0YyMDg4MzI5RTZGRUM1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpyniyku8oDgWONPSddbW5Nku 7fYXHVZSR1gvKm15bNkvm3+zvSvwG9FzQN2XT0u14EHGCS6nQw7vlNyE+cR/RYHi gytQAt3yJsZHMVMYN352F3pWgfyyIxGSeFxQ3OOOeFWNGu14C7po4nb7Q0rfNr0k WegMzgxB73IQ6WZK4K6ni3KmSzANKTvxABTIQqi9lIjSz3zY1eNsA58OjhgBSnIF K7kjEsYySTzGtsJ8YvFBLDmZ1ZyXh3lxY91hUj6ffsx9bW1quiXxFDOKiGl4A1ai vdY9whwJ8dDs1HAuKMKa4UUuwxIH+nwlbBPffqh7i06pEMsuevIq/vgFifOJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUKeQXXy3t4vll9v738giDKeb+xdswHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzMjUwNjYyLTNlZWYtNGFhOS05 ZWRlLTU2MjlkNWI2ZWE5NS8wLzMyMzAzMDMxM2E2NDY2MzIzYTM3MzQ2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzkzODMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8nTAMA0GCSqGSIb3DQEBCwUAA4IBAQCF2KiiT0xPz88cWCjo0EzpRE1HRnyKYJrZ 2+W4bgsKPlxn8ODWr4TftuhH3uDPXpz9QmdaBpfLA/pIu0TyWtTnI5yGHI+N2ph6 mUNGx+GOX54bJte8gmc2J+Xgn3qL0WAxkLW+bAvKFv1kkmFvefonxtrzaw1VcHSB /C38x+I4g0zBLzxugtD9BQNPTaqOi1RAW4l9UDxtC++CiEMPnA1GFtdvzAO05Sy6 IHXnOXDtv3NDqg2zWobWY6wiNtBLTareK0JmvIK0MBLSohE//p7WaOFW7pNm4X15 qkYHP0rnv2a3kmpXOPrpmb2BAS6DZMGEq8YHLgCw7pPoKcgwoQSX -----END CERTIFICATE-----Generated at Sun May 11 19:44:19 2025 by rpki-client