$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa File: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (raw, json) Hash identifier: H0tMLPWT/xMzJjo+X3cfcs6u4yhbTyToHbzV+AgsIh8= Subject key identifier: FF:B2:46:42:74:C2:55:57:CB:0E:82:9A:21:FB:DA:A1:E8:53:73:96 Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 6D316BDF510E03752075AC1E02957D0DD49482E2 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa Signing time: Mon 30 Jun 2025 10:02:52 +0000 ROA not before: Mon 30 Jun 2025 09:57:52 +0000 ROA not after: Mon 29 Jun 2026 10:02:52 +0000 asID: 151992 IP address blocks: 2001:df3:4b40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:31:6b:df:51:0e:03:75:20:75:ac:1e:02:95:7d:0d:d4:94:82:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Jun 30 09:57:52 2025 GMT Not After : Jun 29 10:02:52 2026 GMT Subject: CN=FFB2464274C25557CB0E829A21FBDAA1E8537396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:a5:49:b5:1a:76:3a:bf:f8:04:46:25:79: 36:24:38:5b:73:e7:0f:30:fd:ad:c6:16:8c:ec:92: 27:4a:80:1b:75:f8:2d:bd:88:87:b9:31:0e:45:89: f3:58:7f:5b:bb:71:e7:da:8f:63:7d:f0:3d:62:3c: de:99:a2:49:43:e6:b2:0a:a8:c9:1d:40:93:94:26: 8b:6f:a3:21:7f:ac:ef:4a:e9:49:a9:0c:45:5c:bb: a6:0b:ab:ed:75:7b:9d:d3:31:24:4d:2b:dd:7b:f8: 82:86:07:2f:c7:79:73:cd:8b:02:14:a3:01:f8:3b: 6a:ed:8c:1b:fe:da:67:d8:aa:67:22:ea:27:89:b7: e2:b2:95:e9:23:36:de:65:7c:7a:34:f2:5f:b8:76: 27:41:68:53:c9:86:96:4a:30:9c:ce:17:2d:aa:37: 4b:27:26:76:36:c4:ef:e0:78:b2:ba:f7:4c:fa:61: aa:a0:69:e2:94:eb:c9:dc:f9:7d:13:7c:34:eb:3d: 61:79:98:bd:aa:2e:4f:c0:15:c7:11:01:82:4a:3f: 25:ec:3e:07:f5:bf:88:7e:52:02:c2:fa:17:49:b8: 1a:69:80:e7:20:29:6d:cc:dd:77:ae:6a:0c:ee:c9: c4:68:bf:21:d9:1a:f2:98:06:1d:7b:e2:84:f3:29: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B2:46:42:74:C2:55:57:CB:0E:82:9A:21:FB:DA:A1:E8:53:73:96 X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 56:88:54:c4:99:b1:bd:cb:ca:94:38:ad:fc:ed:fc:2f:a2:8c: d1:3a:44:72:05:d4:da:c7:cc:34:c5:4d:ea:a9:44:c7:0d:8a: 66:5c:78:1c:33:e2:bc:c1:28:5c:df:dc:8a:08:5e:57:72:b2: ab:2a:db:b2:b7:a0:cd:99:07:fe:fb:5a:e4:3e:ec:c0:7d:a0: b2:a5:f7:36:00:c4:d5:e8:30:54:12:3a:54:9e:5d:97:33:06: 3e:93:1c:c6:98:36:27:e0:46:8a:00:62:6b:85:13:9e:74:eb: b0:54:55:22:24:e1:55:3f:2f:6f:22:49:63:96:9f:84:a2:ed: 31:7a:e1:90:79:ae:71:b7:23:65:66:97:a1:8c:5c:e9:56:65: 93:36:da:74:4c:13:9d:4b:4a:f1:52:3a:03:89:f7:33:cc:08: 47:78:f5:79:d5:61:ee:4c:3f:64:1f:51:6f:5f:6e:84:4a:e4: e1:45:6a:2e:c5:08:28:74:68:93:4b:24:71:ea:01:e8:0e:ca: 09:90:fb:4e:f0:62:3a:cd:64:e4:13:96:3f:c1:03:84:6f:a7: 85:09:6c:99:80:12:d1:bf:8b:f8:14:12:e3:31:f7:9e:b3:77: b3:af:6d:d6:79:b6:99:76:2d:99:0a:6d:32:93:ba:48:64:65: 2e:00:cb:6b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbTFr31EOA3UgdaweApV9DdSUguIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTA2MzAwOTU3NTJaFw0yNjA2MjkxMDAyNTJaMDMxMTAvBgNV BAMTKEZGQjI0NjQyNzRDMjU1NTdDQjBFODI5QTIxRkJEQUExRTg1MzczOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VKVJtRp2Or/4BEYleTYkOFtz 5w8w/a3GFozskidKgBt1+C29iIe5MQ5FifNYf1u7cefaj2N98D1iPN6ZoklD5rIK qMkdQJOUJotvoyF/rO9K6UmpDEVcu6YLq+11e53TMSRNK917+IKGBy/HeXPNiwIU owH4O2rtjBv+2mfYqmci6ieJt+KylekjNt5lfHo08l+4didBaFPJhpZKMJzOFy2q N0snJnY2xO/geLK690z6YaqgaeKU68nc+X0TfDTrPWF5mL2qLk/AFccRAYJKPyXs Pgf1v4h+UgLC+hdJuBppgOcgKW3M3XeuagzuycRovyHZGvKYBh174oTzKfzTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU/7JGQnTCVVfLDoKaIfvaoehTc5YwHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1N2YxZjQzLWNlN2UtNDk3MC1h YWQwLTc4MmIwMTliZDAzZS8wLzMyMzAzMDMxM2E2NDY2MzMzYTM0NjIzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzkzOTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 80tAMA0GCSqGSIb3DQEBCwUAA4IBAQBWiFTEmbG9y8qUOK387fwvoozROkRyBdTa x8w0xU3qqUTHDYpmXHgcM+K8wShc39yKCF5XcrKrKtuyt6DNmQf++1rkPuzAfaCy pfc2AMTV6DBUEjpUnl2XMwY+kxzGmDYn4EaKAGJrhROedOuwVFUiJOFVPy9vIklj lp+Eou0xeuGQea5xtyNlZpehjFzpVmWTNtp0TBOdS0rxUjoDifczzAhHePV51WHu TD9kH1FvX26ESuThRWouxQgodGiTSyRx6gHoDsoJkPtO8GI6zWTkE5Y/wQOEb6eF CWyZgBLRv4v4FBLjMfees3ezr23WebaZdi2ZCm0yk7pIZGUuAMtr -----END CERTIFICATE-----Generated at Tue Jul 1 21:20:53 2025 by rpki-client