$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa File: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (raw, json) Hash identifier: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4= Subject key identifier: 15:CA:D1:F7:1D:E3:14:F3:39:00:1F:BD:59:D8:91:C5:52:74:8A:3F Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 1E6DF74EF4F91AE08A158A8821EAE489895B3062 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa Signing time: Thu 01 May 2025 16:00:01 +0000 ROA not before: Thu 01 May 2025 15:55:01 +0000 ROA not after: Thu 30 Apr 2026 16:00:01 +0000 asID: 134655 IP address blocks: 2404:5980::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6d:f7:4e:f4:f9:1a:e0:8a:15:8a:88:21:ea:e4:89:89:5b:30:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: May 1 15:55:01 2025 GMT Not After : Apr 30 16:00:01 2026 GMT Subject: CN=15CAD1F71DE314F339001FBD59D891C552748A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:3a:c7:f8:88:d4:46:52:81:ef:9e:04:1c: e4:8c:ac:86:2e:6b:9c:9e:d2:55:30:e4:4a:0d:15: dc:d6:3e:57:05:47:39:bc:90:8b:65:a0:37:0e:24: 4a:4b:fa:5b:d9:f8:23:b1:bb:98:a9:d5:60:12:2b: 17:02:a9:95:fd:ad:89:60:5e:85:39:9d:f6:ed:9d: d8:8a:f2:73:3a:49:9a:5c:59:85:44:99:d6:6b:6e: 4a:ef:b7:1b:c4:2b:26:50:37:ee:06:be:4f:67:e5: 2e:c4:ed:0e:5b:4a:54:30:17:00:e7:09:f7:97:48: f6:3a:60:3a:40:4c:89:3a:03:9b:1d:a3:0a:1e:24: 5b:7e:d4:49:e2:19:1b:f1:0f:23:44:bd:52:78:32: 57:95:d8:03:04:f8:ac:9e:00:3b:65:86:48:e8:b8: c0:0f:56:e8:ff:1d:73:d9:b6:19:16:57:f0:33:75: e6:28:83:8b:68:b7:60:e2:c2:da:81:b4:e2:54:88: a7:11:99:0e:eb:99:c1:ba:e4:d7:56:10:b0:10:20: 36:3e:7e:1c:7e:9d:bd:21:5a:1e:5d:78:b5:e5:0d: ff:ea:39:1c:91:c5:2a:cf:df:89:ad:1b:34:97:2a: 07:a2:b7:4a:51:8d:b5:a6:3c:1e:81:79:66:05:23: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CA:D1:F7:1D:E3:14:F3:39:00:1F:BD:59:D8:91:C5:52:74:8A:3F X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/323430343a353938303a3a2f33322d3332203d3e20313334363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:5980::/32 Signature Algorithm: sha256WithRSAEncryption 22:d9:19:a1:e8:04:07:36:69:1f:6b:0d:5c:bf:03:df:c7:be: 1b:1d:33:f1:27:0a:a6:71:a1:1f:5a:8e:7b:63:75:0f:a0:ee: ef:72:20:43:80:a0:75:ae:bf:eb:ae:cd:a2:16:39:29:32:1e: a9:5b:6c:5a:4c:06:69:6d:08:3a:31:5c:27:ba:4f:09:1a:4d: fe:8f:b4:3c:7b:69:d1:e7:ff:b6:2e:78:40:05:43:ce:23:ee: f3:c1:3c:de:c7:40:27:07:be:7b:b2:82:d1:75:ee:83:0f:7d: 71:13:80:c6:58:03:7f:c7:7b:1e:dd:fd:6a:97:0a:49:de:20: 86:70:60:ca:52:d1:3a:86:41:e6:50:0c:e7:72:b6:bf:0a:7e: ed:1f:fa:05:a4:a0:f8:3d:af:f9:3d:13:cb:20:45:c3:28:97: 09:35:e3:dc:e6:7e:87:7d:ee:4c:12:03:f5:2a:30:ef:21:1a: 17:54:b1:13:27:09:1b:73:d6:fe:10:16:fa:2a:43:b3:93:8e: 6a:1c:f4:0e:a7:88:76:63:39:46:e9:43:16:dd:38:1a:bf:7d: 6c:d2:f2:e1:5b:9c:70:ac:f1:df:95:35:92:6c:e3:34:1c:8c: 57:e9:f6:75:94:a0:82:b3:23:49:03:86:76:a2:2a:cf:35:5a: 33:65:97:44 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUHm33TvT5GuCKFYqIIerkiYlbMGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTA1MDExNTU1MDFaFw0yNjA0MzAxNjAwMDFaMDMxMTAvBgNV BAMTKDE1Q0FEMUY3MURFMzE0RjMzOTAwMUZCRDU5RDg5MUM1NTI3NDhBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/YTrH+IjURlKB754EHOSMrIYu a5ye0lUw5EoNFdzWPlcFRzm8kItloDcOJEpL+lvZ+COxu5ip1WASKxcCqZX9rYlg XoU5nfbtndiK8nM6SZpcWYVEmdZrbkrvtxvEKyZQN+4Gvk9n5S7E7Q5bSlQwFwDn CfeXSPY6YDpATIk6A5sdowoeJFt+1EniGRvxDyNEvVJ4MleV2AME+KyeADtlhkjo uMAPVuj/HXPZthkWV/AzdeYog4tot2DiwtqBtOJUiKcRmQ7rmcG65NdWELAQIDY+ fhx+nb0hWh5deLXlDf/qORyRxSrP34mtGzSXKgeit0pRjbWmPB6BeWYFI/crAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUFcrR9x3jFPM5AB+9WdiRxVJ0ij8wHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i YTkwLWNlZThkMzk3OWZjZC8wLzMyMzQzMDM0M2EzNTM5MzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNDM2MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEWYAwDQYJKoZI hvcNAQELBQADggEBACLZGaHoBAc2aR9rDVy/A9/HvhsdM/EnCqZxoR9ajntjdQ+g 7u9yIEOAoHWuv+uuzaIWOSkyHqlbbFpMBmltCDoxXCe6TwkaTf6PtDx7adHn/7Yu eEAFQ84j7vPBPN7HQCcHvnuygtF17oMPfXETgMZYA3/Hex7d/WqXCkneIIZwYMpS 0TqGQeZQDOdytr8Kfu0f+gWkoPg9r/k9E8sgRcMolwk149zmfod97kwSA/UqMO8h GhdUsRMnCRtz1v4QFvoqQ7OTjmoc9A6niHZjOUbpQxbdOBq/fWzS8uFbnHCs8d+V NZJs4zQcjFfp9nWUoIKzI0kDhnaiKs81WjNll0Q= -----END CERTIFICATE-----Generated at Wed May 14 07:05:26 2025 by rpki-client