$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a613a3a2f34382d3438203d3e203338353234.roa File: 323430313a646538303a613a3a2f34382d3438203d3e203338353234.roa (raw, json) Hash identifier: pNB97yTZ4+y+RCwQyB1EGzRL6Wm3SjrQHys/tAFmrag= Subject key identifier: 76:66:85:23:D9:82:2A:52:F5:46:04:DD:E4:8C:82:7F:9C:F1:F5:A9 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 36A546DA3CF55BFEF9A00316F409140DBBE9DA36 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a613a3a2f34382d3438203d3e203338353234.roa Signing time: Wed 11 Jun 2025 01:00:01 +0000 ROA not before: Wed 11 Jun 2025 00:55:01 +0000 ROA not after: Wed 10 Jun 2026 01:00:01 +0000 asID: 38524 IP address blocks: 2401:de80:a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 17:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a5:46:da:3c:f5:5b:fe:f9:a0:03:16:f4:09:14:0d:bb:e9:da:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jun 11 00:55:01 2025 GMT Not After : Jun 10 01:00:01 2026 GMT Subject: CN=76668523D9822A52F54604DDE48C827F9CF1F5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:c4:5c:51:7b:57:2a:ef:00:9c:eb:a3:48: 82:fe:fe:bc:60:0d:79:a3:88:53:c2:66:81:05:a2: 52:ec:4f:ff:d2:0a:6e:e4:9b:14:2a:2e:79:2b:0f: 07:e2:46:c0:3e:24:0d:16:dc:11:fd:63:f0:fd:4d: c1:4b:50:fa:84:ca:89:9c:73:c7:d4:ba:8c:2a:bf: f5:2e:f1:e8:17:4d:f2:77:70:49:8a:9d:aa:1d:a2: de:12:0f:38:87:65:49:e2:21:5e:f8:17:ca:6b:ce: 6d:53:66:de:96:aa:3f:57:b5:84:1b:1c:86:1b:2e: 9a:e0:74:4f:3b:a3:c0:ba:1c:f9:ed:26:be:f5:d9: b2:fe:d5:85:c0:4c:8f:0a:f8:d3:1b:4b:58:6f:ad: 72:fb:5c:2d:7f:b0:48:14:dc:cb:d0:5b:b5:1d:29: dc:27:61:2a:9d:fe:6a:02:e0:72:62:d9:78:87:7d: f2:a8:c6:e8:d1:a4:fd:ae:55:e5:7f:88:8b:8f:df: 81:2d:34:6a:e3:9f:4f:05:1f:65:0c:d7:17:25:23: 8b:b8:1b:64:0d:a1:71:39:54:8e:18:22:4a:79:fb: 76:d2:64:d3:5e:69:c2:e7:20:28:84:04:a1:77:37: 82:51:fd:88:9e:6e:5a:96:7d:9a:23:84:e1:51:74: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:66:85:23:D9:82:2A:52:F5:46:04:DD:E4:8C:82:7F:9C:F1:F5:A9 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a613a3a2f34382d3438203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:de80:a::/48 Signature Algorithm: sha256WithRSAEncryption 02:e2:fa:1b:4f:98:c4:bf:7d:3d:9d:8f:32:5e:b9:f5:04:90: dc:45:4f:d0:1c:d4:02:21:d9:55:5d:c0:07:47:4a:11:29:0e: f1:fd:9b:76:ac:b5:bb:9a:ef:8d:14:7c:d5:8a:d9:77:fc:27: 62:d0:84:9d:5a:c7:f3:0a:44:9f:d8:95:39:54:86:47:ad:dd: 87:7a:3d:5f:72:99:05:d0:66:c5:a4:da:ee:63:ac:47:d2:91: 0f:22:d6:ae:66:51:35:a2:73:1f:9c:ca:09:cf:df:a3:41:5d: 4e:0b:bc:25:e9:f9:cf:c4:a1:e4:d8:1b:77:a6:c8:1a:d6:9e: 9b:da:f5:e7:f5:6c:ac:7c:2b:a9:7b:14:62:0a:5a:51:93:c6: 8b:3d:ad:44:64:63:61:1b:d3:de:13:0f:ee:6b:ff:61:21:4a: fe:5f:07:cd:30:bb:ff:dc:a3:5d:7a:d6:16:dc:2d:47:7f:ec: d0:ae:14:b0:7b:3f:05:18:78:13:76:ed:58:d6:de:79:6b:10: bc:72:4e:70:db:4f:fd:08:c8:0f:73:f1:6d:c0:45:4f:88:d6: fe:d9:c6:8b:47:28:19:f2:fe:65:b1:b2:d0:55:57:7d:68:c0: a0:9c:d0:58:fa:10:c7:1b:86:3b:e6:c9:1d:19:3d:1b:94:af: 79:2b:c1:65 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUNqVG2jz1W/75oAMW9AkUDbvp2jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNTA2MTEwMDU1MDFaFw0yNjA2MTAwMTAwMDFaMDMxMTAvBgNV BAMTKDc2NjY4NTIzRDk4MjJBNTJGNTQ2MDREREU0OEM4MjdGOUNGMUY1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwcRcUXtXKu8AnOujSIL+/rxg DXmjiFPCZoEFolLsT//SCm7kmxQqLnkrDwfiRsA+JA0W3BH9Y/D9TcFLUPqEyomc c8fUuowqv/Uu8egXTfJ3cEmKnaodot4SDziHZUniIV74F8przm1TZt6Wqj9XtYQb HIYbLprgdE87o8C6HPntJr712bL+1YXATI8K+NMbS1hvrXL7XC1/sEgU3MvQW7Ud KdwnYSqd/moC4HJi2XiHffKoxujRpP2uVeV/iIuP34EtNGrjn08FH2UM1xclI4u4 G2QNoXE5VI4YIkp5+3bSZNNeacLnICiEBKF3N4JR/YieblqWfZojhOFRdFKXAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUdmaFI9mCKlL1RgTd5IyCf5zx9akwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmZjk2OWZjLTM5YzctNDRjZC04 NzE2LTljZTRjNmQ1YWM5MS8wLzMyMzQzMDMxM2E2NDY1MzgzMDNhNjEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAHegAAKMA0G CSqGSIb3DQEBCwUAA4IBAQAC4vobT5jEv309nY8yXrn1BJDcRU/QHNQCIdlVXcAH R0oRKQ7x/Zt2rLW7mu+NFHzVitl3/Cdi0ISdWsfzCkSf2JU5VIZHrd2Hej1fcpkF 0GbFpNruY6xH0pEPItauZlE1onMfnMoJz9+jQV1OC7wl6fnPxKHk2Bt3psga1p6b 2vXn9WysfCupexRiClpRk8aLPa1EZGNhG9PeEw/ua/9hIUr+XwfNMLv/3KNdetYW 3C1Hf+zQrhSwez8FGHgTdu1Y1t55axC8ck5w20/9CMgPc/FtwEVPiNb+2caLRygZ 8v5lsbLQVVd9aMCgnNBY+hDHG4Y75skdGT0blK95K8Fl -----END CERTIFICATE-----Generated at Mon Jun 30 08:54:29 2025 by rpki-client