$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31303a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: CoQNUyH0/uXqC7pAeBB5FatraRk4tqXckXLIKMOlh08= Subject key identifier: 84:87:8F:80:71:D6:FC:2E:0D:8F:F4:0D:CA:74:C7:8D:78:1F:17:39 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 5970D4C6C5415AECF7B3D11466E4FD8B36040E85 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 06:00:01 +0000 ROA not before: Fri 31 Oct 2025 05:55:01 +0000 ROA not after: Fri 30 Oct 2026 06:00:01 +0000 asID: 58552 IP address blocks: 2404:fd00:10::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:70:d4:c6:c5:41:5a:ec:f7:b3:d1:14:66:e4:fd:8b:36:04:0e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 05:55:01 2025 GMT Not After : Oct 30 06:00:01 2026 GMT Subject: CN=84878F8071D6FC2E0D8FF40DCA74C78D781F1739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:89:98:5a:89:d6:d6:a8:8c:a6:2b:05:bb: 17:05:34:89:b0:1c:e6:d2:3e:a0:4c:7a:41:bf:ec: e8:fb:2e:81:3c:d4:7c:19:ff:ce:27:0e:b9:fb:67: bb:a4:80:b1:42:37:ca:03:ec:70:d5:08:78:8b:1c: 1e:bc:82:6a:ef:f7:e5:94:71:48:4f:c8:d2:56:48: 90:bd:25:c6:1c:13:a1:2d:0b:9c:ee:84:83:4c:61: 4b:e2:89:02:a7:e9:41:96:ee:02:b7:8d:be:1d:a9: 0e:5b:9e:49:df:af:9f:5e:4e:c2:f3:8d:84:e0:ad: 3b:ce:53:db:4e:16:f1:1a:e3:86:d4:b4:d1:06:0a: 76:7f:cb:8f:c2:0a:eb:7d:99:3e:b9:ed:13:e4:65: 89:94:c1:1e:81:cc:15:78:49:fc:d2:92:c1:7d:ac: 5d:42:2a:ed:bc:6a:ee:cc:63:1b:6b:02:c9:77:99: cd:12:b1:93:61:6f:89:a9:8c:69:cd:95:65:f0:b0: 77:e5:ac:0d:3c:5a:86:25:19:63:47:a7:b3:7a:96: cd:ec:25:5c:b6:7d:e5:a5:a6:22:d7:63:c6:79:d1: 1d:d6:df:59:00:e6:88:3c:9d:c5:20:19:80:46:0f: 9a:5f:3f:44:b9:b1:ed:46:d4:67:bd:9c:3b:e9:5e: 38:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:87:8F:80:71:D6:FC:2E:0D:8F:F4:0D:CA:74:C7:8D:78:1F:17:39 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:10::/48 Signature Algorithm: sha256WithRSAEncryption 55:c3:29:6b:78:22:ef:93:d8:13:c0:4b:f7:e0:3c:2c:dc:5b: d7:f4:98:b2:20:2b:82:d9:8d:ed:d2:e4:3c:65:50:88:a0:41: 01:d5:3e:62:21:5b:93:b9:70:4d:7b:02:32:65:a6:aa:3c:cf: 85:81:16:2d:16:ec:03:d3:43:3d:f1:93:1e:bc:53:03:d6:00: e2:7f:7d:71:f1:ed:3d:26:71:2a:95:b3:58:fe:e8:a9:f4:00: 37:8d:98:cf:84:3d:2d:56:54:06:54:8f:17:5d:ba:c0:6b:36: 08:43:06:df:05:b1:9e:49:6f:aa:c7:fe:01:ca:3d:e9:73:7c: 03:c1:9e:b2:59:7c:af:5a:7a:74:12:40:04:a3:a7:4c:da:1d: 94:e1:94:d6:43:f0:a8:4d:44:ff:f8:1a:01:75:39:00:0b:91: df:77:43:47:e8:02:cc:d2:d0:c0:ca:8f:04:05:07:49:7f:67: b1:14:41:61:fc:59:24:01:92:da:21:bf:d0:b8:45:4b:cd:95: c7:7a:ff:cb:d5:37:d3:34:5c:f7:e3:fa:b1:41:53:21:b3:e6: 4d:1d:f7:2c:de:ce:5c:b6:1d:4f:e1:ae:4c:88:2b:75:90:f2: 32:c5:4f:8c:57:01:78:b7:d9:b3:30:5e:5c:b4:c0:58:ea:fe: b2:b4:b3:da -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWXDUxsVBWuz3s9EUZuT9izYEDoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNTU1MDFaFw0yNjEwMzAwNjAwMDFaMDMxMTAvBgNV BAMTKDg0ODc4RjgwNzFENkZDMkUwRDhGRjQwRENBNzRDNzhENzgxRjE3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIW4mYWonW1qiMpisFuxcFNImw HObSPqBMekG/7Oj7LoE81HwZ/84nDrn7Z7ukgLFCN8oD7HDVCHiLHB68gmrv9+WU cUhPyNJWSJC9JcYcE6EtC5zuhINMYUviiQKn6UGW7gK3jb4dqQ5bnknfr59eTsLz jYTgrTvOU9tOFvEa44bUtNEGCnZ/y4/CCut9mT657RPkZYmUwR6BzBV4SfzSksF9 rF1CKu28au7MYxtrAsl3mc0SsZNhb4mpjGnNlWXwsHflrA08WoYlGWNHp7N6ls3s JVy2feWlpiLXY8Z50R3W31kA5og8ncUgGYBGD5pfP0S5se1G1Ge9nDvpXjihAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUhIePgHHW/C4Nj/QNynTHjXgfFzkwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABAw DQYJKoZIhvcNAQELBQADggEBAFXDKWt4Iu+T2BPAS/fgPCzcW9f0mLIgK4LZje3S 5DxlUIigQQHVPmIhW5O5cE17AjJlpqo8z4WBFi0W7APTQz3xkx68UwPWAOJ/fXHx 7T0mcSqVs1j+6Kn0ADeNmM+EPS1WVAZUjxddusBrNghDBt8FsZ5Jb6rH/gHKPelz fAPBnrJZfK9aenQSQASjp0zaHZThlNZD8KhNRP/4GgF1OQALkd93Q0foAszS0MDK jwQFB0l/Z7EUQWH8WSQBktohv9C4RUvNlcd6/8vVN9M0XPfj+rFBUyGz5k0d9yze zly2HU/hrkyIK3WQ8jLFT4xXAXi32bMwXly0wFjq/rK0s9o= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:07 2025 by rpki-client