$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: COaD5ARW37NcOF5xb7OG8WT0wbuZAYr8AfT+sR353h8= Subject key identifier: 3A:A9:88:36:31:40:80:93:F0:43:89:3F:73:5D:0B:BC:BD:7F:7D:74 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 1BE0C8CA5CD27909552DC3EDE9FDEB69A4EA2691 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa Signing time: Tue 24 Jun 2025 04:00:02 +0000 ROA not before: Tue 24 Jun 2025 03:55:02 +0000 ROA not after: Tue 23 Jun 2026 04:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:1010::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e0:c8:ca:5c:d2:79:09:55:2d:c3:ed:e9:fd:eb:69:a4:ea:26:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Jun 24 03:55:02 2025 GMT Not After : Jun 23 04:00:02 2026 GMT Subject: CN=3AA9883631408093F043893F735D0BBCBD7F7D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:39:a1:ca:65:dd:02:19:f7:51:39:e0:22: df:2e:0c:93:d7:86:2e:d8:05:a7:c3:26:12:e0:d0: 95:13:1a:aa:8f:5e:eb:fa:10:b6:1d:92:a9:da:f7: c0:73:7e:21:74:1a:2a:72:8f:a2:58:6f:90:09:9e: eb:33:a0:59:a1:38:9c:08:d8:e6:b1:e8:0f:df:27: f3:65:b1:cf:c3:1b:ac:38:40:0c:d8:c7:b9:35:a3: f6:2f:e1:3d:95:f5:63:28:8d:4a:f6:2d:98:46:f9: 17:c6:59:0c:06:f3:2d:4d:26:fe:18:d6:3c:ee:9f: a9:ff:12:d7:46:6f:89:de:2f:ab:06:9e:49:ef:bc: b3:8a:fc:8e:f3:52:00:30:69:99:ba:6d:2b:d5:ec: a5:2e:e3:c6:de:f9:b8:96:12:dc:51:ac:c6:84:cc: 38:1f:68:70:f7:39:e9:f2:5b:2f:d5:0c:88:e5:72: 09:83:59:ad:0e:84:6d:a2:7b:42:3c:9c:ea:19:86: 5c:9d:6d:f8:9b:24:cd:e3:09:bd:db:84:bc:23:e2: 1d:3b:e4:3d:ba:dc:8d:7b:e5:40:c4:27:2f:94:7c: 06:96:df:49:2c:82:de:09:31:f3:cc:f9:51:9a:52: 94:d3:3c:1a:6e:82:bd:31:07:02:0a:d5:cd:58:8d: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A9:88:36:31:40:80:93:F0:43:89:3F:73:5D:0B:BC:BD:7F:7D:74 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031303a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1010::/48 Signature Algorithm: sha256WithRSAEncryption 02:08:90:3e:15:eb:a5:9d:db:8a:e8:04:8d:cf:18:e6:f6:0d: c4:6f:99:8a:07:ea:9f:b8:88:70:db:03:bc:97:ba:74:48:dd: 25:ce:b4:7f:e6:5e:fb:39:06:9e:22:a9:14:7c:ec:89:93:4c: 5b:1d:ec:66:51:97:63:50:e1:7f:35:78:8c:3f:25:9b:6c:5b: 07:e8:fb:fa:cd:be:af:bd:e3:dc:44:7a:49:ae:75:98:69:6e: 72:94:77:73:3f:27:5f:e2:92:63:1c:02:2c:96:ed:f6:49:4a: 33:f9:88:78:d9:0e:65:80:37:b3:5a:2d:62:f5:4d:8b:1e:e0: aa:2d:23:a8:c0:fe:3b:62:f8:4f:ca:49:02:fc:02:b5:0c:7a: 86:56:64:62:56:f0:fb:95:0d:4f:db:de:d5:ce:34:3d:d2:d3: 8a:03:1c:37:af:dd:d8:f3:bd:91:0c:22:73:c4:15:a5:67:57: 4d:69:88:c2:f8:e8:14:12:b3:fa:6e:da:45:7f:ab:3e:1f:d4: b3:69:2b:26:21:f1:07:c5:31:c0:37:32:ab:a3:7d:06:62:a6: d3:8b:3c:03:9d:7f:95:08:02:3a:f8:23:c1:3a:5d:7d:73:82: 90:b5:5e:cf:ab:2a:aa:e3:cb:c6:cc:c4:94:05:d3:d3:a5:02: 6d:59:62:2b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUG+DIylzSeQlVLcPt6f3raaTqJpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTA2MjQwMzU1MDJaFw0yNjA2MjMwNDAwMDJaMDMxMTAvBgNV BAMTKDNBQTk4ODM2MzE0MDgwOTNGMDQzODkzRjczNUQwQkJDQkQ3RjdENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyAjmhymXdAhn3UTngIt8uDJPX hi7YBafDJhLg0JUTGqqPXuv6ELYdkqna98BzfiF0Gipyj6JYb5AJnuszoFmhOJwI 2Oax6A/fJ/Nlsc/DG6w4QAzYx7k1o/Yv4T2V9WMojUr2LZhG+RfGWQwG8y1NJv4Y 1jzun6n/EtdGb4neL6sGnknvvLOK/I7zUgAwaZm6bSvV7KUu48be+biWEtxRrMaE zDgfaHD3OenyWy/VDIjlcgmDWa0OhG2ie0I8nOoZhlydbfibJM3jCb3bhLwj4h07 5D263I175UDEJy+UfAaW30ksgt4JMfPM+VGaUpTTPBpugr0xBwIK1c1YjdW7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOqmINjFAgJPwQ4k/c10LvL1/fXQwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMxMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAQMA0GCSqGSIb3DQEBCwUAA4IBAQACCJA+FeulnduK6ASNzxjm9g3Eb5mKB+qf uIhw2wO8l7p0SN0lzrR/5l77OQaeIqkUfOyJk0xbHexmUZdjUOF/NXiMPyWbbFsH 6Pv6zb6vvePcRHpJrnWYaW5ylHdzPydf4pJjHAIslu32SUoz+Yh42Q5lgDezWi1i 9U2LHuCqLSOowP47YvhPykkC/AK1DHqGVmRiVvD7lQ1P297VzjQ90tOKAxw3r93Y 872RDCJzxBWlZ1dNaYjC+OgUErP6btpFf6s+H9SzaSsmIfEHxTHANzKro30GYqbT izwDnX+VCAI6+CPBOl19c4KQtV7Pqyqq48vGzMSUBdPTpQJtWWIr -----END CERTIFICATE-----Generated at Mon Jun 30 16:01:02 2025 by rpki-client