$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa File: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (raw, json) Hash identifier: HPsSqRVXNC2X//zSidaG64Nq6wN6hLBRPgB5Ogk0SaQ= Subject key identifier: BE:C1:14:D2:1A:AC:2E:6F:B7:15:98:EF:54:AF:E0:F3:EB:81:5E:E2 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 5D8293CFC8349D672B3910ACE7B3BC1B44C80D23 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa Signing time: Wed 22 Oct 2025 06:00:02 +0000 ROA not before: Wed 22 Oct 2025 05:55:02 +0000 ROA not after: Wed 21 Oct 2026 06:00:02 +0000 asID: 141127 IP address blocks: 2001:df5:5280::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:82:93:cf:c8:34:9d:67:2b:39:10:ac:e7:b3:bc:1b:44:c8:0d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Oct 22 05:55:02 2025 GMT Not After : Oct 21 06:00:02 2026 GMT Subject: CN=BEC114D21AAC2E6FB71598EF54AFE0F3EB815EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:a1:e6:da:59:b0:8d:c3:49:ec:66:18:22: 9c:ca:94:4f:96:fd:f1:f7:3b:38:22:f5:78:ec:d8: 17:3a:de:db:d6:72:a0:47:6d:91:9c:8e:a3:a4:4e: c4:6e:6b:75:a9:52:86:c4:f4:25:4c:b2:c4:8c:f9: 05:23:2a:63:96:06:3f:f5:e0:7d:46:45:d4:a8:6a: 44:24:8a:fb:b1:9b:c7:69:af:f6:e3:6d:20:44:94: 46:db:f5:9f:7d:10:f6:40:d9:b8:7c:9f:50:74:51: 88:5f:92:c8:74:f0:db:b5:f7:b5:f2:79:e6:6d:09: f1:a5:f7:5e:c4:75:19:05:81:74:cd:da:5f:63:ed: 34:6c:18:0a:95:30:1d:04:f8:5b:10:c5:52:97:2e: d8:a5:11:70:0e:65:af:11:07:1d:6e:0b:c1:07:d5: 3a:e9:cf:a7:82:d9:b6:1a:fc:cf:77:d1:6c:ea:06: be:17:11:e5:2b:06:6d:14:72:75:74:8a:97:97:11: 11:ae:5b:8e:d4:27:1c:f2:2b:9e:12:34:61:bc:f3: 96:1c:92:5e:7d:38:a6:c4:05:23:28:d2:8b:5a:13: 5e:bb:5e:51:fc:ad:58:4b:10:f0:af:83:32:78:b9: d3:e1:24:93:08:a7:9c:59:3f:78:3d:21:ee:93:1c: 2a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:14:D2:1A:AC:2E:6F:B7:15:98:EF:54:AF:E0:F3:EB:81:5E:E2 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:5280::/48 Signature Algorithm: sha256WithRSAEncryption 2e:f5:19:b0:1d:65:ff:a9:2e:69:18:53:9a:cd:91:04:22:8a: ef:4f:f6:4e:c5:de:51:28:a0:9f:43:35:5a:4b:2a:8f:51:cb: 76:20:ee:c3:0d:c2:59:5d:5d:6c:91:84:77:e8:72:a9:3c:55: 8f:44:24:d5:7d:25:97:cd:97:30:8e:c6:12:b7:3a:45:73:0d: 7c:dc:b5:1f:55:ee:6e:18:8c:39:54:02:02:91:2d:8a:4b:03: 63:bf:88:42:02:08:f5:6f:84:ff:30:b1:b4:3b:82:a7:e4:67: 31:8a:93:43:7a:ec:d6:8c:10:f3:c7:ba:42:fb:f1:24:2a:20: c9:78:93:ab:f7:3a:d0:1f:b1:5f:86:70:4e:4c:dd:ae:14:f5: 70:bd:cf:07:aa:f5:8e:bf:16:98:dc:1a:ae:e7:e2:75:0c:9e: 54:8c:f3:e4:62:85:d5:59:db:f2:05:52:7e:d9:bf:c1:3f:b3: 23:02:cd:56:35:cf:0e:94:12:53:a7:41:88:e2:9a:be:64:32: c7:18:75:b8:f2:07:b8:16:0e:9b:0c:fe:bb:80:be:8a:76:54: fe:b1:c2:4c:59:4d:b9:f6:68:7d:b3:d2:17:f1:6c:af:ad:64: eb:9d:82:92:18:61:69:ac:03:40:9d:20:2a:22:e8:5f:c4:30: 17:0c:32:8c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXYKTz8g0nWcrORCs57O8G0TIDSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTEwMjIwNTU1MDJaFw0yNjEwMjEwNjAwMDJaMDMxMTAvBgNV BAMTKEJFQzExNEQyMUFBQzJFNkZCNzE1OThFRjU0QUZFMEYzRUI4MTVFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HqHm2lmwjcNJ7GYYIpzKlE+W /fH3Ozgi9Xjs2Bc63tvWcqBHbZGcjqOkTsRua3WpUobE9CVMssSM+QUjKmOWBj/1 4H1GRdSoakQkivuxm8dpr/bjbSBElEbb9Z99EPZA2bh8n1B0UYhfksh08Nu197Xy eeZtCfGl917EdRkFgXTN2l9j7TRsGAqVMB0E+FsQxVKXLtilEXAOZa8RBx1uC8EH 1Trpz6eC2bYa/M930WzqBr4XEeUrBm0UcnV0ipeXERGuW47UJxzyK54SNGG885Yc kl59OKbEBSMo0otaE167XlH8rVhLEPCvgzJ4udPhJJMIp5xZP3g9Ie6THCqfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUvsEU0hqsLm+3FZjvVK/g8+uBXuIwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyYzUxMWJlLTY3YTItNDRjOS1i MTgyLWE5MTFiYTk1YmUwMC8wLzMyMzAzMDMxM2E2NDY2MzUzYTM1MzIzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzEzMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9VKAMA0GCSqGSIb3DQEBCwUAA4IBAQAu9RmwHWX/qS5pGFOazZEEIorvT/ZOxd5R KKCfQzVaSyqPUct2IO7DDcJZXV1skYR36HKpPFWPRCTVfSWXzZcwjsYStzpFcw18 3LUfVe5uGIw5VAICkS2KSwNjv4hCAgj1b4T/MLG0O4Kn5GcxipNDeuzWjBDzx7pC +/EkKiDJeJOr9zrQH7FfhnBOTN2uFPVwvc8HqvWOvxaY3Bqu5+J1DJ5UjPPkYoXV WdvyBVJ+2b/BP7MjAs1WNc8OlBJTp0GI4pq+ZDLHGHW48ge4Fg6bDP67gL6KdlT+ scJMWU259mh9s9IX8WyvrWTrnYKSGGFprANAnSAqIuhfxDAXDDKM -----END CERTIFICATE-----Generated at Tue Nov 4 07:44:24 2025 by rpki-client