$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa File: 323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa (raw, json) Hash identifier: FMTDgQIzYg7LkyNw3U8hdH5e4+pcbdgl2jE3AQpixqA= Subject key identifier: 55:8B:01:0E:EC:3D:CD:64:30:28:97:FD:BD:A4:C5:48:58:01:D6:D7 Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 5F11622A85C51A7855C89E96AE3A2E3C61C9B95D Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa Signing time: Mon 27 Jan 2025 17:00:01 +0000 ROA not before: Mon 27 Jan 2025 16:55:01 +0000 ROA not after: Mon 26 Jan 2026 17:00:01 +0000 asID: 139417 IP address blocks: 2404:cac0:d35::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 09:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:11:62:2a:85:c5:1a:78:55:c8:9e:96:ae:3a:2e:3c:61:c9:b9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Jan 27 16:55:01 2025 GMT Not After : Jan 26 17:00:01 2026 GMT Subject: CN=558B010EEC3DCD64302897FDBDA4C5485801D6D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:08:df:c3:f9:33:01:ac:b2:dc:7a:08:ee: 01:ae:38:0e:74:bb:32:8b:a1:f2:62:76:dc:34:1c: f1:ca:63:07:a3:90:3f:15:e9:3e:fe:a4:5a:13:ec: 8c:1e:a7:7d:d5:c4:29:6c:72:e4:da:07:5f:ad:a9: 3d:80:1d:25:79:1b:7f:b7:35:66:63:7a:bb:4d:6a: 4f:df:74:ba:29:33:c4:7a:5c:e0:2e:c4:79:33:e2: ea:40:ed:de:d4:ff:78:a2:5f:78:2b:9b:48:a2:87: 1e:b3:9f:ef:64:bd:24:51:c7:8c:ca:d4:d5:f8:78: 4f:51:f1:11:a3:db:0d:32:f2:74:fc:94:f7:26:0e: 98:ed:86:af:a5:ec:be:01:77:5a:fb:56:30:30:89: 35:c3:77:ae:a3:ac:29:2a:8a:1f:5a:e5:e6:d1:d4: 8f:60:82:ad:0b:6e:40:b4:c2:bd:ee:6d:22:9f:65: ed:5f:54:86:43:5a:31:e3:e1:55:7e:5b:11:3d:e8: d0:fd:a2:27:f8:84:4a:08:f4:70:de:ed:5e:6d:af: 25:f6:75:ae:99:ef:2b:cb:a6:60:91:d2:ec:a0:20: 8d:48:7a:16:1a:f2:ed:96:58:10:d2:1b:2e:1d:39: 79:55:ba:0b:59:6a:2a:d1:4b:84:2d:89:8a:76:3f: 83:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8B:01:0E:EC:3D:CD:64:30:28:97:FD:BD:A4:C5:48:58:01:D6:D7 X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6433353a3a2f34382d3438203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cac0:d35::/48 Signature Algorithm: sha256WithRSAEncryption 74:d4:84:56:34:2e:a8:6d:a2:fc:75:a2:fd:b7:ce:3c:a9:90: 92:39:12:3e:2f:26:69:50:d4:e9:8e:60:da:15:24:ae:15:80: 21:05:f9:74:ee:6b:fd:26:07:48:af:a7:1a:5e:6e:3b:3a:b9: ca:56:00:b4:17:05:56:75:73:14:26:39:93:48:81:b3:85:79: 37:19:58:e9:3b:fe:36:03:a4:af:bc:23:28:41:46:2e:75:08: 13:1a:f0:a6:6a:c6:cf:e7:19:b0:8b:63:e7:62:ec:54:70:9f: 81:18:81:20:5a:8b:44:b7:59:8e:8d:db:a6:99:4e:07:44:e0: 0c:6a:b0:bc:2e:67:a1:e5:ad:9f:ca:6b:d1:be:97:35:8f:17: 62:36:39:7f:d7:19:13:f7:cd:dd:bc:fa:ca:8f:4a:a7:a8:bc: 0a:0e:fc:84:3f:a8:ae:fa:3e:35:22:01:78:ac:86:dd:19:3b: 75:2a:19:a1:da:cc:78:c0:c7:ce:a0:18:25:f4:2b:5b:c9:89: 27:a3:92:97:fc:e2:15:4e:5e:37:1b:82:eb:7a:85:88:e5:ee: 56:5f:27:17:55:e4:a2:fb:8f:25:d4:12:1e:f2:f8:9e:07:76: 96:f1:9e:70:3e:fa:88:9c:e6:64:08:f2:86:d9:3c:aa:7a:47: 35:95:29:dd -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXxFiKoXFGnhVyJ6WrjouPGHJuV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNTAxMjcxNjU1MDFaFw0yNjAxMjYxNzAwMDFaMDMxMTAvBgNV BAMTKDU1OEIwMTBFRUMzRENENjQzMDI4OTdGREJEQTRDNTQ4NTgwMUQ2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcgjfw/kzAayy3HoI7gGuOA50 uzKLofJidtw0HPHKYwejkD8V6T7+pFoT7Iwep33VxClscuTaB1+tqT2AHSV5G3+3 NWZjertNak/fdLopM8R6XOAuxHkz4upA7d7U/3iiX3grm0iihx6zn+9kvSRRx4zK 1NX4eE9R8RGj2w0y8nT8lPcmDpjthq+l7L4Bd1r7VjAwiTXDd66jrCkqih9a5ebR 1I9ggq0LbkC0wr3ubSKfZe1fVIZDWjHj4VV+WxE96ND9oif4hEoI9HDe7V5tryX2 da6Z7yvLpmCR0uygII1IehYa8u2WWBDSGy4dOXlVugtZairRS4QtiYp2P4OxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVYsBDuw9zWQwKJf9vaTFSFgB1tcwHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhNjQzMzM1M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzMTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATK wA01MA0GCSqGSIb3DQEBCwUAA4IBAQB01IRWNC6obaL8daL9t848qZCSORI+LyZp UNTpjmDaFSSuFYAhBfl07mv9JgdIr6caXm47OrnKVgC0FwVWdXMUJjmTSIGzhXk3 GVjpO/42A6SvvCMoQUYudQgTGvCmasbP5xmwi2PnYuxUcJ+BGIEgWotEt1mOjdum mU4HROAMarC8Lmeh5a2fymvRvpc1jxdiNjl/1xkT983dvPrKj0qnqLwKDvyEP6iu +j41IgF4rIbdGTt1Khmh2sx4wMfOoBgl9CtbyYkno5KX/OIVTl43G4LreoWI5e5W XycXVeSi+48l1BIe8vieB3aW8Z5wPvqInOZkCPKG2Tyqekc1lSnd -----END CERTIFICATE-----Generated at Sun May 11 01:05:29 2025 by rpki-client