$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: g1SWGaTXcB9EzZfH25/7mvOifHEROtlDi1QhqVSledA= Subject key identifier: 18:F7:FB:44:36:8D:66:91:32:4A:76:49:5F:14:44:37:DB:C3:41:DF Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 60AA192C0257F9DB6EBEB94BDA2B8BE5C0755B93 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 06:00:00 +0000 ROA not before: Fri 31 Oct 2025 05:55:00 +0000 ROA not after: Fri 30 Oct 2026 06:00:00 +0000 asID: 58552 IP address blocks: 2404:fd00:11::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:aa:19:2c:02:57:f9:db:6e:be:b9:4b:da:2b:8b:e5:c0:75:5b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 05:55:00 2025 GMT Not After : Oct 30 06:00:00 2026 GMT Subject: CN=18F7FB44368D6691324A76495F144437DBC341DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:5e:f6:18:f6:93:d5:6d:51:23:9a:cc:17: d5:b4:8c:b4:c4:6e:e6:92:f6:07:37:70:47:81:fc: bf:39:06:f8:ee:7f:5c:8b:e6:23:44:d8:b9:14:ba: 99:4e:52:85:60:7a:38:01:41:56:d9:43:15:22:64: 24:77:08:59:eb:38:5c:96:c7:aa:cc:35:53:21:76: fc:1c:aa:33:f8:fb:77:ec:f9:6e:3e:e3:17:6d:00: 55:30:61:ea:5d:a2:f4:ec:91:6b:3f:d5:e0:7c:0a: f2:15:53:3a:ed:e5:f2:0e:7f:b9:e9:c7:23:f5:b6: 4b:09:c9:11:5d:7e:42:52:10:34:92:f8:32:3b:f8: d6:fd:a3:0e:86:ab:5d:1d:93:5d:c7:e7:02:99:a5: 98:eb:ee:72:15:12:f0:9b:fe:f3:d7:f1:4a:32:5e: 3c:2e:47:a1:ea:3d:f1:22:af:91:73:c5:c6:bc:97: c8:ee:81:48:21:9c:e4:38:fa:b2:9f:88:ab:0c:92: 90:1e:f4:ed:0e:c2:70:c0:bd:d0:54:fd:99:c4:47: 2d:74:c5:5b:b4:83:b5:f6:d4:79:1b:39:ee:e2:4d: e4:bd:2f:3b:ce:15:33:0a:36:9c:f3:1c:90:e7:98: b0:f2:5c:44:15:cd:97:f5:26:58:8c:7b:1e:04:e6: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F7:FB:44:36:8D:66:91:32:4A:76:49:5F:14:44:37:DB:C3:41:DF X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31313a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:11::/48 Signature Algorithm: sha256WithRSAEncryption 6b:3f:fa:10:ee:32:22:42:13:87:3b:0b:bd:77:3a:ba:79:aa: 79:c8:70:cd:ce:0f:01:22:4c:d2:e6:d1:7b:33:d3:41:53:fd: ad:8e:50:d2:fd:40:a3:dd:24:6f:f3:71:b4:7b:e0:cb:61:9d: 32:26:4d:8c:bb:02:eb:4c:f9:bc:43:51:de:a6:f3:53:d7:28: 62:61:ed:f4:3f:1f:9b:30:f5:95:5e:4f:78:6c:d6:79:8c:bc: ff:52:96:0f:49:08:39:b4:95:20:b6:dd:8a:91:86:88:15:75: 6b:8c:ea:ae:76:b5:c3:00:66:41:86:01:8b:9f:a6:cf:d8:20: 7e:7e:99:d2:5d:0e:c5:db:02:61:dd:80:51:4f:67:01:27:f8: cd:39:c8:94:d7:25:7b:dd:a4:f5:dc:4f:1b:b0:11:48:a1:83: 27:c1:e3:54:2a:87:5c:fa:27:56:59:5f:96:be:66:ed:af:ab: a7:4d:c4:41:a0:96:38:c1:ab:92:1a:88:53:f4:de:b3:fc:73: ff:ae:6f:b8:2b:6b:c5:de:1f:fa:8a:c4:19:1e:8d:81:79:d5: dd:e3:ba:4e:40:1b:9c:8c:31:e9:1c:f4:07:cb:1f:b5:4a:50: f7:ff:cc:14:17:03:9f:03:c0:7e:1d:bc:d3:40:ed:a6:b8:c9: 04:59:f9:2c -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYKoZLAJX+dtuvrlL2iuL5cB1W5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNTU1MDBaFw0yNjEwMzAwNjAwMDBaMDMxMTAvBgNV BAMTKDE4RjdGQjQ0MzY4RDY2OTEzMjRBNzY0OTVGMTQ0NDM3REJDMzQxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5F72GPaT1W1RI5rMF9W0jLTE buaS9gc3cEeB/L85Bvjuf1yL5iNE2LkUuplOUoVgejgBQVbZQxUiZCR3CFnrOFyW x6rMNVMhdvwcqjP4+3fs+W4+4xdtAFUwYepdovTskWs/1eB8CvIVUzrt5fIOf7np xyP1tksJyRFdfkJSEDSS+DI7+Nb9ow6Gq10dk13H5wKZpZjr7nIVEvCb/vPX8Uoy XjwuR6HqPfEir5Fzxca8l8jugUghnOQ4+rKfiKsMkpAe9O0OwnDAvdBU/ZnERy10 xVu0g7X21HkbOe7iTeS9LzvOFTMKNpzzHJDnmLDyXEQVzZf1JliMex4E5iGFAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUGPf7RDaNZpEySnZJXxREN9vDQd8wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzMTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABEw DQYJKoZIhvcNAQELBQADggEBAGs/+hDuMiJCE4c7C713Orp5qnnIcM3ODwEiTNLm 0Xsz00FT/a2OUNL9QKPdJG/zcbR74MthnTImTYy7AutM+bxDUd6m81PXKGJh7fQ/ H5sw9ZVeT3hs1nmMvP9Slg9JCDm0lSC23YqRhogVdWuM6q52tcMAZkGGAYufps/Y IH5+mdJdDsXbAmHdgFFPZwEn+M05yJTXJXvdpPXcTxuwEUihgyfB41Qqh1z6J1ZZ X5a+Zu2vq6dNxEGgljjBq5IaiFP03rP8c/+ub7gra8XeH/qKxBkejYF51d3juk5A G5yMMekc9AfLH7VKUPf/zBQXA58DwH4dvNNA7aa4yQRZ+Sw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:44 2025 by rpki-client