$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: PqiUcpNf/7FxBWSo0M7ORKTw4r0GFcdqTZ8jW03mfAU= Subject key identifier: 7C:12:02:3A:A7:9A:BF:46:77:64:36:B1:65:E2:16:0E:D0:97:4F:78 Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 1F33A5240902021E6C27F9A9EE465ABC416E2881 Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa Signing time: Sun 29 Dec 2024 08:00:00 +0000 ROA not before: Sun 29 Dec 2024 07:55:00 +0000 ROA not after: Sun 28 Dec 2025 08:00:00 +0000 asID: 139972 IP address blocks: 2405:c440:7::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 07:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:33:a5:24:09:02:02:1e:6c:27:f9:a9:ee:46:5a:bc:41:6e:28:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Dec 29 07:55:00 2024 GMT Not After : Dec 28 08:00:00 2025 GMT Subject: CN=7C12023AA79ABF46776436B165E2160ED0974F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:8e:ac:e1:75:fb:e8:8b:ac:b4:ad:21:b7: 51:e2:2d:dc:3b:52:54:38:45:31:93:b3:5d:f5:82: b2:9b:84:10:1a:e9:80:1b:e1:b0:cd:e0:8e:79:56: 1e:97:f9:4b:80:bc:44:90:66:e7:4d:b3:a0:bd:8e: e0:5a:5d:50:f8:c0:a8:1e:4a:94:f3:0d:42:ef:b8: 04:ee:ed:b3:99:6d:7d:23:29:71:5c:9a:78:47:cb: fc:c8:03:bb:bc:4c:3c:73:21:fa:8a:5e:55:b0:94: 64:4e:8b:fd:7f:dc:ae:df:e2:6d:0c:df:16:d5:b8: f8:ee:0a:7e:94:74:46:f8:7f:d0:4f:01:fc:5e:2b: f1:4a:a8:dc:87:2c:ef:1b:6f:4e:10:7a:ba:a8:61: 70:a7:0c:16:e4:f0:ba:c2:df:9d:89:d0:1c:24:36: 53:8d:66:88:19:41:f0:0f:b3:38:1d:56:e9:53:99: 4b:41:5e:b8:cd:6e:66:23:62:34:d1:32:8a:d0:f7: 1b:8a:a5:2c:ba:f3:63:b6:38:17:0d:33:b9:15:8f: 52:93:46:7a:53:9f:90:1e:51:81:dc:0f:02:53:78: 10:2d:90:85:63:24:a6:ba:53:be:c5:28:77:22:e3: d7:6a:2e:16:75:e1:bd:01:e6:a8:51:ea:9f:9d:32: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:12:02:3A:A7:9A:BF:46:77:64:36:B1:65:E2:16:0E:D0:97:4F:78 X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:7::/48 Signature Algorithm: sha256WithRSAEncryption 42:84:2c:95:c9:45:9a:de:09:62:3c:ab:80:a0:69:89:50:15: f8:11:2e:da:07:06:f5:68:d6:cc:34:cb:f8:25:c0:b2:61:89: e2:48:a4:41:4a:8f:0f:fc:d9:40:dc:fc:df:b7:73:74:db:06: 51:ce:3a:2f:16:0f:45:29:83:5f:78:f3:71:0b:5a:41:b0:de: 57:4c:46:02:23:de:20:38:65:23:b2:89:25:8d:de:f1:dd:5f: d6:91:0a:e4:13:f8:ea:fb:ca:51:dc:6a:a1:df:50:16:dc:70: 12:70:15:f7:df:ae:f0:81:53:82:c2:f7:95:9b:03:67:c7:4d: 52:44:90:85:0d:a3:4f:03:8f:df:f8:49:35:fb:8f:64:35:ea: de:06:7f:a8:22:07:99:03:0f:5b:49:6a:9a:3a:3a:58:34:35: e6:c8:4a:02:45:62:55:e9:6c:bb:7e:3b:9b:f3:c5:df:23:fa: a1:b6:d5:39:28:07:e6:f4:e2:72:94:a3:60:71:07:41:c1:a7: 41:bf:b3:d0:56:2f:be:74:1b:16:79:72:21:38:f6:2b:7f:2b: 96:db:12:03:da:e1:13:ce:36:40:2d:ae:a0:7d:4d:18:32:44: 22:19:32:6b:08:96:13:c0:42:a2:a6:35:dc:cf:82:2e:5c:cf: 0d:4f:7d:86 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHzOlJAkCAh5sJ/mp7kZavEFuKIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNDEyMjkwNzU1MDBaFw0yNTEyMjgwODAwMDBaMDMxMTAvBgNV BAMTKDdDMTIwMjNBQTc5QUJGNDY3NzY0MzZCMTY1RTIxNjBFRDA5NzRGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUo6s4XX76IustK0ht1HiLdw7 UlQ4RTGTs131grKbhBAa6YAb4bDN4I55Vh6X+UuAvESQZudNs6C9juBaXVD4wKge SpTzDULvuATu7bOZbX0jKXFcmnhHy/zIA7u8TDxzIfqKXlWwlGROi/1/3K7f4m0M 3xbVuPjuCn6UdEb4f9BPAfxeK/FKqNyHLO8bb04QerqoYXCnDBbk8LrC352J0Bwk NlONZogZQfAPszgdVulTmUtBXrjNbmYjYjTRMorQ9xuKpSy682O2OBcNM7kVj1KT RnpTn5AeUYHcDwJTeBAtkIVjJKa6U77FKHci49dqLhZ14b0B5qhR6p+dMmKnAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUfBICOqeav0Z3ZDaxZeIWDtCXT3gwHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzczYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAcw DQYJKoZIhvcNAQELBQADggEBAEKELJXJRZreCWI8q4CgaYlQFfgRLtoHBvVo1sw0 y/glwLJhieJIpEFKjw/82UDc/N+3c3TbBlHOOi8WD0Upg19483ELWkGw3ldMRgIj 3iA4ZSOyiSWN3vHdX9aRCuQT+Or7ylHcaqHfUBbccBJwFfffrvCBU4LC95WbA2fH TVJEkIUNo08Dj9/4STX7j2Q16t4Gf6giB5kDD1tJapo6Olg0NebISgJFYlXpbLt+ O5vzxd8j+qG21TkoB+b04nKUo2BxB0HBp0G/s9BWL750GxZ5ciE49it/K5bbEgPa 4RPONkAtrqB9TRgyRCIZMmsIlhPAQqKmNdzPgi5czw1PfYY= -----END CERTIFICATE-----Generated at Fri May 9 12:01:37 2025 by rpki-client