$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa File: 323430363a343634303a3a2f33322d3332203d3e20313430343637.roa (raw, json) Hash identifier: +ck2E10dFd5/OEf+e40wX7Ntpp2HW/ZWwaXbGUuqd1Q= Subject key identifier: 9D:DC:DD:F2:12:8E:8D:E7:2F:22:1F:E0:55:85:8E:75:9E:64:0D:72 Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Certificate serial: 085FCFDB64DB492C86F2DCB147D6E747CDAC8304 Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa Signing time: Mon 05 May 2025 09:00:00 +0000 ROA not before: Mon 05 May 2025 08:55:00 +0000 ROA not after: Mon 04 May 2026 09:00:00 +0000 asID: 140467 IP address blocks: 2406:4640::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5f:cf:db:64:db:49:2c:86:f2:dc:b1:47:d6:e7:47:cd:ac:83:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Validity Not Before: May 5 08:55:00 2025 GMT Not After : May 4 09:00:00 2026 GMT Subject: CN=9DDCDDF2128E8DE72F221FE055858E759E640D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8d:51:ec:1c:5d:51:a1:b0:c3:6b:c1:19:f0: 47:f5:70:22:8b:a5:51:86:b7:c5:87:e6:a1:f3:97: 2b:56:e7:12:9e:eb:d0:00:f8:5d:a3:1d:e2:70:66: 9d:73:9f:79:e8:fd:35:56:e9:83:4c:e4:7b:78:31: 00:8d:7d:e2:e7:a4:98:1a:cd:6d:f3:9a:9a:51:fa: f0:d5:37:37:3f:25:07:67:a6:a0:9b:16:24:cb:f6: 14:d6:dc:b0:e2:94:c4:df:27:0d:b7:cd:d0:08:f3: 7f:48:2c:c1:65:fd:c6:79:0d:8b:20:e9:d0:6c:e5: 6e:66:47:3a:2b:7d:d4:79:21:9c:2c:99:1c:1a:56: 55:b3:8e:7f:d2:12:8e:9c:45:8e:26:f2:3e:31:62: 95:58:fc:bd:87:ae:6d:c1:a0:66:66:4e:c3:c5:ca: 30:c8:bb:c8:09:0a:f3:2e:3d:60:21:f7:8f:31:e8: ac:54:3a:3a:62:3f:1a:49:ea:d8:8d:a5:22:93:c3: 8b:fd:c2:86:9d:6f:5f:42:3a:72:df:24:4a:3f:cc: f0:5f:a7:74:f9:05:85:5a:bc:5b:9b:d0:e0:9e:cc: 49:d1:bf:6b:85:ae:e9:d0:38:ba:e7:7e:b1:4c:11: 60:d0:d4:f9:cc:e7:71:6c:2b:df:a2:ef:5b:52:b5: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:DD:F2:12:8E:8D:E7:2F:22:1F:E0:55:85:8E:75:9E:64:0D:72 X509v3 Authority Key Identifier: keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/323430363a343634303a3a2f33322d3332203d3e20313430343637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4640::/32 Signature Algorithm: sha256WithRSAEncryption 84:ae:12:fc:17:f3:a4:c0:41:18:be:8b:91:b8:3e:ac:8f:e2: b7:e8:d8:09:38:a2:3d:1e:bb:2e:66:00:e1:66:7f:c6:9e:e5: ef:ce:52:41:e9:4a:80:95:e0:07:0c:33:cf:b8:ad:d3:c6:2f: 13:29:c8:11:39:4b:0a:6a:04:81:ba:99:d2:6d:f4:45:3d:cf: 5b:af:65:18:cb:7d:6a:bd:ca:a1:a4:cd:cf:b0:69:e7:73:fe: 59:fc:11:84:38:4b:a6:cd:3c:92:b0:ae:3b:60:e1:4f:fe:90: 1d:49:56:ff:45:4c:40:1d:29:07:90:78:43:a1:5d:1e:4f:34: 33:9b:bf:3d:bc:96:61:f4:c0:11:a9:7f:08:f1:ff:0a:eb:1f: a1:93:87:a3:45:fa:ab:41:92:e2:54:2c:45:e1:85:76:cc:02: 3c:98:c7:59:47:71:59:a6:1f:96:b7:a0:28:9b:09:13:0c:02: ff:f3:63:e5:37:b9:7e:ee:a1:9b:b1:a7:a3:a6:7f:a1:cb:4d: e7:ad:63:ef:43:5e:49:33:d1:59:4b:c2:8e:d8:f3:63:39:e7: 33:e2:6a:09:6c:8f:57:43:f6:d9:d7:b3:af:11:6a:62:ac:05: f5:13:91:6e:52:b9:d0:46:46:db:54:10:95:e4:12:75:a0:4a: 6b:03:ed:1a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUCF/P22TbSSyG8tyxR9bnR82sgwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4 NjA4RUUxOTAeFw0yNTA1MDUwODU1MDBaFw0yNjA1MDQwOTAwMDBaMDMxMTAvBgNV BAMTKDlERENEREYyMTI4RThERTcyRjIyMUZFMDU1ODU4RTc1OUU2NDBENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpjVHsHF1RobDDa8EZ8Ef1cCKL pVGGt8WH5qHzlytW5xKe69AA+F2jHeJwZp1zn3no/TVW6YNM5Ht4MQCNfeLnpJga zW3zmppR+vDVNzc/JQdnpqCbFiTL9hTW3LDilMTfJw23zdAI839ILMFl/cZ5DYsg 6dBs5W5mRzorfdR5IZwsmRwaVlWzjn/SEo6cRY4m8j4xYpVY/L2Hrm3BoGZmTsPF yjDIu8gJCvMuPWAh948x6KxUOjpiPxpJ6tiNpSKTw4v9woadb19COnLfJEo/zPBf p3T5BYVavFub0OCezEnRv2uFrunQOLrnfrFMEWDQ1PnM53FsK9+i71tStf+vAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUndzd8hKOjecvIh/gVYWOdZ5kDXIwHwYDVR0j BBgwFoAUR8utGmSHFcXoZ/Gi7TVYaIYI7hkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDk1NjUwNS1kNmIzLTQzZGMtOTA3MC1kNGRiZGI3Y2Y5NjMvMC80N0NCQUQxQTY0 ODcxNUM1RTg2N0YxQTJFRDM1NTg2ODg2MDhFRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4NjA4 RUUxOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0OTU2NTA1LWQ2YjMtNDNkYy05 MDcwLWQ0ZGJkYjdjZjk2My8wLzMyMzQzMDM2M2EzNDM2MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGRkAwDQYJKoZI hvcNAQELBQADggEBAISuEvwX86TAQRi+i5G4PqyP4rfo2Ak4oj0euy5mAOFmf8ae 5e/OUkHpSoCV4AcMM8+4rdPGLxMpyBE5SwpqBIG6mdJt9EU9z1uvZRjLfWq9yqGk zc+waedz/ln8EYQ4S6bNPJKwrjtg4U/+kB1JVv9FTEAdKQeQeEOhXR5PNDObvz28 lmH0wBGpfwjx/wrrH6GTh6NF+qtBkuJULEXhhXbMAjyYx1lHcVmmH5a3oCibCRMM Av/zY+U3uX7uoZuxp6Omf6HLTeetY+9DXkkz0VlLwo7Y82M55zPiaglsj1dD9tnX s68RamKsBfUTkW5SudBGRttUEJXkEnWgSmsD7Ro= -----END CERTIFICATE-----Generated at Sat May 10 04:44:14 2025 by rpki-client