$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386632303a3a2f34342d3434203d3e20313333373938.roa File: 323430323a353638303a386632303a3a2f34342d3434203d3e20313333373938.roa (raw, json) Hash identifier: nIDXG5C+8w9V0ft+uz9QOPFOgWgIBg54dvuoB2dVs70= Subject key identifier: 9E:7C:F8:34:50:DB:5F:8E:D6:CB:C2:E2:6A:F1:A2:F5:4D:ED:A7:1E Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 5D509042F12C27DAC027119F8184146136BA46A3 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386632303a3a2f34342d3434203d3e20313333373938.roa Signing time: Thu 03 Apr 2025 03:23:30 +0000 ROA not before: Thu 03 Apr 2025 03:18:30 +0000 ROA not after: Thu 02 Apr 2026 03:23:30 +0000 asID: 133798 IP address blocks: 2402:5680:8f20::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 20:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:50:90:42:f1:2c:27:da:c0:27:11:9f:81:84:14:61:36:ba:46:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Apr 3 03:18:30 2025 GMT Not After : Apr 2 03:23:30 2026 GMT Subject: CN=9E7CF83450DB5F8ED6CBC2E26AF1A2F54DEDA71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:91:b7:75:a2:59:d3:4c:25:85:72:d9:33: 9b:61:75:73:ae:0f:76:bf:a0:19:d8:76:82:0c:6c: 04:56:89:09:46:82:97:e9:0f:2b:89:40:f2:d2:cf: 4a:07:27:66:b4:56:ea:7e:73:5a:02:84:03:ed:0d: 1e:d4:aa:a0:50:4b:aa:9e:93:aa:db:9a:bc:20:7f: f4:2c:90:5c:a3:b7:b1:58:d2:09:65:8b:49:01:4d: 2f:c2:ae:10:18:a9:20:19:ba:c5:a9:48:5a:21:3a: 3a:36:d2:ab:56:3d:d1:38:9c:af:83:78:ae:9f:db: 3e:c9:5e:bc:18:93:d4:fb:2f:86:55:90:21:a4:1b: cb:13:2c:49:1b:ae:58:78:38:31:16:ed:8b:b0:75: f0:a2:e8:bd:82:57:7b:92:54:24:67:8b:a1:82:af: 97:1d:a7:d2:ff:58:ea:37:48:7f:6d:ef:88:51:c1: 5d:e1:88:57:cf:46:6f:da:2f:d2:70:29:ee:2f:52: cd:c9:cc:5c:d1:ff:a1:86:a9:41:60:1d:ec:3d:09: 6d:93:8d:08:1e:07:89:a0:2e:96:47:1c:86:be:f7: 86:2a:f9:78:4a:87:5c:16:a8:0a:16:72:c6:55:51: 95:63:fd:37:7f:9e:88:33:b4:77:f4:03:c1:a3:fa: 01:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:F8:34:50:DB:5F:8E:D6:CB:C2:E2:6A:F1:A2:F5:4D:ED:A7:1E X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386632303a3a2f34342d3434203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5680:8f20::/44 Signature Algorithm: sha256WithRSAEncryption 0c:5a:fc:79:c6:dc:14:2f:2d:b9:55:57:96:e5:08:7d:69:63: b3:5f:b4:61:28:17:03:fc:5f:6b:cc:c1:39:45:af:35:c5:32: 4c:22:c5:d6:6c:71:91:ca:a8:bc:51:c0:0f:3d:b3:d4:83:fa: b7:e6:86:79:4b:09:0f:cf:0e:e5:90:e9:1f:87:a6:4a:8d:1c: 12:c0:ca:fd:19:f7:dd:32:48:8c:25:40:a9:11:df:5b:06:f0: 34:75:95:26:4c:96:8c:b8:d5:e9:83:53:5f:3a:1c:33:e4:5d: 65:63:3a:15:7b:20:84:b6:64:91:f4:08:9b:fa:81:4f:52:f1: 97:39:5d:34:4e:56:c1:7b:0e:d4:21:65:d5:c0:91:d8:92:6e: 05:01:02:8e:0c:d6:0a:d4:c3:dd:45:45:1b:64:02:44:c4:ce: 1b:f8:32:0d:9d:be:4e:f9:d8:ee:43:d8:b5:2a:43:45:85:59: ce:33:88:ff:37:e0:a5:e1:3a:71:2b:43:63:85:fc:45:59:18: f7:b0:98:c6:21:cb:e2:41:ad:15:fe:40:c1:3c:9f:1f:2f:e3: fb:a0:50:e6:88:35:7e:3f:9c:54:a3:13:d2:97:3c:3b:48:35: a1:79:37:8a:1c:cc:a2:be:b1:50:c7:06:c5:a5:64:2b:56:55: 21:72:8a:1c -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUXVCQQvEsJ9rAJxGfgYQUYTa6RqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTA0MDMwMzE4MzBaFw0yNjA0MDIwMzIzMzBaMDMxMTAvBgNV BAMTKDlFN0NGODM0NTBEQjVGOEVENkNCQzJFMjZBRjFBMkY1NERFREE3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/5G3daJZ00wlhXLZM5thdXOu D3a/oBnYdoIMbARWiQlGgpfpDyuJQPLSz0oHJ2a0Vup+c1oChAPtDR7UqqBQS6qe k6rbmrwgf/QskFyjt7FY0glli0kBTS/CrhAYqSAZusWpSFohOjo20qtWPdE4nK+D eK6f2z7JXrwYk9T7L4ZVkCGkG8sTLEkbrlh4ODEW7YuwdfCi6L2CV3uSVCRni6GC r5cdp9L/WOo3SH9t74hRwV3hiFfPRm/aL9JwKe4vUs3JzFzR/6GGqUFgHew9CW2T jQgeB4mgLpZHHIa+94Yq+XhKh1wWqAoWcsZVUZVj/Td/nogztHf0A8Gj+gHBAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUnnz4NFDbX47Wy8LiavGi9U3tpx4wHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzQzMDMyM2EzNTM2MzgzMDNhMzg2NjMyMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk AlaAjyAwDQYJKoZIhvcNAQELBQADggEBAAxa/HnG3BQvLblVV5blCH1pY7NftGEo FwP8X2vMwTlFrzXFMkwixdZscZHKqLxRwA89s9SD+rfmhnlLCQ/PDuWQ6R+HpkqN HBLAyv0Z990ySIwlQKkR31sG8DR1lSZMloy41emDU186HDPkXWVjOhV7IIS2ZJH0 CJv6gU9S8Zc5XTROVsF7DtQhZdXAkdiSbgUBAo4M1grUw91FRRtkAkTEzhv4Mg2d vk752O5D2LUqQ0WFWc4ziP834KXhOnErQ2OF/EVZGPewmMYhy+JBrRX+QME8nx8v 4/ugUOaINX4/nFSjE9KXPDtINaF5N4oczKK+sVDHBsWlZCtWVSFyihw= -----END CERTIFICATE-----Generated at Mon May 12 17:46:11 2025 by rpki-client