$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130383a3a2f34372d3437203d3e203233363739.roa File: 323430313a323930303a3130383a3a2f34372d3437203d3e203233363739.roa (raw, json) Hash identifier: /0k0pKUdJJ3iW7mZDbFPskNChsyN9L2K+U4xdFsf1ho= Subject key identifier: 91:2F:6A:80:A0:CE:F8:26:A1:AB:99:41:64:7E:14:AD:F4:3F:42:B5 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 30AA299CD7EC56D10D287E8D392C86E6678F43C6 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130383a3a2f34372d3437203d3e203233363739.roa Signing time: Wed 29 Oct 2025 09:46:29 +0000 ROA not before: Wed 29 Oct 2025 09:41:29 +0000 ROA not after: Wed 28 Oct 2026 09:46:29 +0000 asID: 23679 IP address blocks: 2401:2900:108::/47 maxlen: 47 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 12:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:aa:29:9c:d7:ec:56:d1:0d:28:7e:8d:39:2c:86:e6:67:8f:43:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Oct 29 09:41:29 2025 GMT Not After : Oct 28 09:46:29 2026 GMT Subject: CN=912F6A80A0CEF826A1AB9941647E14ADF43F42B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:53:74:25:d2:4c:93:82:56:d6:3f:f4:46: e6:91:15:9f:8b:3f:ad:8b:de:e0:a6:16:af:84:41: d0:dd:ea:6f:0d:95:c7:66:32:0c:28:30:91:ff:07: f5:ea:72:02:28:1c:ac:e5:70:86:79:f2:c5:d5:3b: 19:6d:4e:df:ee:68:8d:8d:05:02:0d:19:26:02:c8: ff:7c:89:bd:e3:9e:22:3b:38:9d:be:42:35:94:68: ab:a6:15:cc:de:96:78:76:72:4d:a9:e3:e6:e3:c7: 0a:23:cf:86:d0:6f:a8:94:8e:08:17:41:3e:27:82: 42:fa:ff:85:a7:26:81:a9:93:45:42:31:0a:f4:a8: 7b:54:c0:b9:61:d1:ea:0f:3a:44:e5:e6:b6:ba:78: 12:ca:75:c5:26:2b:0b:92:ba:9e:f7:fc:89:3d:37: ff:9c:91:aa:43:c0:ea:4f:2a:5e:f6:92:8a:1a:83: c0:a3:11:cd:25:d5:f0:8f:ad:62:8c:a9:a2:93:ef: b4:d3:c8:5f:0f:6f:77:6a:f2:a7:bd:ab:44:66:c0: b6:6d:77:1e:9a:b0:64:85:f0:63:49:32:60:08:2e: 55:45:14:37:c0:f7:73:bc:85:ac:80:2a:31:53:5c: 66:98:ed:d7:9d:f1:33:72:b3:9c:de:cd:a7:9a:14: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2F:6A:80:A0:CE:F8:26:A1:AB:99:41:64:7E:14:AD:F4:3F:42:B5 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130383a3a2f34372d3437203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:108::/47 Signature Algorithm: sha256WithRSAEncryption ac:34:ad:75:0d:78:a5:69:c9:f1:87:ee:33:04:c3:a5:26:66: 9d:7f:08:f4:d8:9c:14:c7:6e:ac:30:34:ab:38:81:6b:82:9e: 6e:72:a6:56:54:98:51:2d:99:93:55:7d:fa:b0:59:e5:a7:11: 72:a2:10:2c:53:d4:df:8c:2a:42:e7:11:7e:2a:c6:fb:69:d3: 5d:58:65:81:f6:2b:c5:ba:09:46:95:f9:19:09:a8:18:58:e1: 99:5f:07:35:74:66:09:cd:60:60:0c:4f:cf:7a:1e:92:36:77: 66:c4:fe:b1:d8:f6:a6:a3:a6:9c:8c:39:79:66:cb:e6:be:b7: 4f:46:b8:ca:45:93:96:36:c1:cf:01:c7:0b:18:3d:65:5c:32: cd:93:1d:65:0b:1f:ac:69:e7:93:c6:bd:67:af:52:dd:dc:ff: 2c:69:b9:95:7e:63:b0:72:18:ad:da:19:5c:a8:31:65:0c:0b: 43:b9:ff:61:7e:30:fb:39:d4:55:37:a0:d4:b8:59:25:c3:71: 3f:00:a6:73:4f:ad:5e:39:b2:82:1a:51:1e:b1:5e:1c:16:7a: 36:05:27:32:c2:82:2b:4b:69:3c:e0:8b:bc:d7:70:d9:69:3d: d4:c0:a3:b6:bc:2f:c2:b1:d9:00:8a:4f:cf:51:3a:5c:97:29: 2d:e1:46:ca -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUMKopnNfsVtENKH6NOSyG5mePQ8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEwMjkwOTQxMjlaFw0yNjEwMjgwOTQ2MjlaMDMxMTAvBgNV BAMTKDkxMkY2QTgwQTBDRUY4MjZBMUFCOTk0MTY0N0UxNEFERjQzRjQyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNVN0JdJMk4JW1j/0RuaRFZ+L P62L3uCmFq+EQdDd6m8NlcdmMgwoMJH/B/XqcgIoHKzlcIZ58sXVOxltTt/uaI2N BQINGSYCyP98ib3jniI7OJ2+QjWUaKumFczelnh2ck2p4+bjxwojz4bQb6iUjggX QT4ngkL6/4WnJoGpk0VCMQr0qHtUwLlh0eoPOkTl5ra6eBLKdcUmKwuSup73/Ik9 N/+ckapDwOpPKl72kooag8CjEc0l1fCPrWKMqaKT77TTyF8Pb3dq8qe9q0RmwLZt dx6asGSF8GNJMmAILlVFFDfA93O8hayAKjFTXGaY7ded8TNys5zezaeaFCtTAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkS9qgKDO+Cahq5lBZH4UrfQ/QrUwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDM4M2Ez YTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQBKQAB CDANBgkqhkiG9w0BAQsFAAOCAQEArDStdQ14pWnJ8YfuMwTDpSZmnX8I9NicFMdu rDA0qziBa4KebnKmVlSYUS2Zk1V9+rBZ5acRcqIQLFPU34wqQucRfirG+2nTXVhl gfYrxboJRpX5GQmoGFjhmV8HNXRmCc1gYAxPz3oekjZ3ZsT+sdj2pqOmnIw5eWbL 5r63T0a4ykWTljbBzwHHCxg9ZVwyzZMdZQsfrGnnk8a9Z69S3dz/LGm5lX5jsHIY rdoZXKgxZQwLQ7n/YX4w+znUVTeg1LhZJcNxPwCmc0+tXjmyghpRHrFeHBZ6NgUn MsKCK0tpPOCLvNdw2Wk91MCjtrwvwrHZAIpPz1E6XJcpLeFGyg== -----END CERTIFICATE-----Generated at Wed Nov 5 09:34:36 2025 by rpki-client