$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31323a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31323a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: W2/WplbczRDOAvaXIo1kRRYE4isLn07F1lduvOlpZpc= Subject key identifier: 6B:BF:BD:53:25:5E:13:96:9F:F8:76:10:E3:3F:75:EB:B8:A9:E1:1F Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 04E1EE2D20B915DC9FBF6BBB9149635B2663A6EE Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31323a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 05:00:01 +0000 ROA not before: Fri 31 Oct 2025 04:55:01 +0000 ROA not after: Fri 30 Oct 2026 05:00:01 +0000 asID: 58552 IP address blocks: 2404:fd00:12::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e1:ee:2d:20:b9:15:dc:9f:bf:6b:bb:91:49:63:5b:26:63:a6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 04:55:01 2025 GMT Not After : Oct 30 05:00:01 2026 GMT Subject: CN=6BBFBD53255E13969FF87610E33F75EBB8A9E11F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:7e:8a:11:95:66:a0:4b:40:f2:20:7a:ff: ff:da:54:68:90:19:3e:ee:8c:ff:60:98:c2:b8:59: cf:72:f0:90:78:a7:a3:9d:fe:33:74:6b:eb:0b:fc: 38:1b:0c:bc:e1:19:39:a1:93:2b:b5:cc:f8:75:74: 49:42:ed:ba:e6:65:04:78:4f:3b:cf:31:fc:54:8b: 29:ba:5d:12:b4:5d:1d:ff:ee:64:8b:d1:d5:a7:cf: 45:ba:e1:0d:ea:ee:b6:c4:90:f8:47:b8:bc:d3:08: a4:45:33:f5:4e:1d:80:63:b6:13:34:17:c1:5e:c2: 9b:c6:3c:36:29:9f:f3:27:46:ab:1f:dd:b2:fb:69: 04:79:a8:5a:cb:7b:1f:82:ab:36:ff:7b:e0:fd:cd: 65:a1:f0:b9:d3:4b:80:44:d4:0a:30:bb:5c:5f:71: fc:91:bf:fc:bd:1b:9d:a9:e2:84:e0:2b:aa:7b:d3: 4f:d1:55:93:64:e5:ef:cc:69:00:71:13:45:08:00: 69:a5:7b:de:da:8b:20:45:c1:d8:22:11:6e:55:e6: 19:98:3c:1a:c5:02:f9:a9:1f:bd:6e:85:e4:11:05: db:67:3b:65:09:46:8a:42:1c:fb:7d:2e:af:3e:5e: 0f:56:87:35:e2:da:c3:66:6e:ad:51:28:1d:f5:56: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BF:BD:53:25:5E:13:96:9F:F8:76:10:E3:3F:75:EB:B8:A9:E1:1F X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31323a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:12::/48 Signature Algorithm: sha256WithRSAEncryption 53:e8:ae:6e:25:97:50:b9:54:35:53:0d:69:73:47:e4:5b:88: 10:79:33:09:af:ac:03:cb:e7:c9:57:5e:1d:23:3a:07:36:9a: 47:96:24:6f:57:60:34:11:6b:1f:f1:84:0b:2b:b2:ff:2b:77: bb:7a:49:30:dd:ce:21:c3:a0:76:9e:7a:64:65:f8:d1:19:4f: 85:aa:22:8e:00:d4:fb:32:7e:0c:3e:b2:5e:df:ca:ad:a9:3e: d7:d0:a1:13:7a:6d:52:98:4b:19:1c:b3:97:08:3c:fa:17:ae: 35:52:2d:7c:ec:6c:a7:de:ae:93:b0:8c:6e:1f:d8:bb:61:2d: ac:df:65:0c:49:07:18:3e:33:df:c1:43:06:46:84:3f:21:4f: 60:1f:07:f8:dd:4e:1d:e2:7d:27:dc:be:38:c7:b2:3d:18:04: b2:9c:c2:c3:e1:86:b0:3d:d5:4f:11:05:c1:76:22:fa:ce:25: 50:7e:c4:8c:67:c1:63:00:d5:2b:eb:68:24:d5:fc:c0:92:f7: a6:8f:d4:88:2b:7b:23:c2:6d:64:2d:ba:1f:e1:b7:60:04:0f: 34:25:09:28:e6:09:9a:63:72:80:cd:fd:44:c6:e5:d7:2b:09: 9e:b0:2b:10:71:c7:a8:0f:63:e1:fe:0a:06:83:1f:5c:70:3a: 90:22:92:16 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBOHuLSC5Fdyfv2u7kUljWyZjpu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNDU1MDFaFw0yNjEwMzAwNTAwMDFaMDMxMTAvBgNV BAMTKDZCQkZCRDUzMjU1RTEzOTY5RkY4NzYxMEUzM0Y3NUVCQjhBOUUxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmn6KEZVmoEtA8iB6///aVGiQ GT7ujP9gmMK4Wc9y8JB4p6Od/jN0a+sL/DgbDLzhGTmhkyu1zPh1dElC7brmZQR4 TzvPMfxUiym6XRK0XR3/7mSL0dWnz0W64Q3q7rbEkPhHuLzTCKRFM/VOHYBjthM0 F8FewpvGPDYpn/MnRqsf3bL7aQR5qFrLex+Cqzb/e+D9zWWh8LnTS4BE1Aowu1xf cfyRv/y9G52p4oTgK6p700/RVZNk5e/MaQBxE0UIAGmle97aiyBFwdgiEW5V5hmY PBrFAvmpH71uheQRBdtnO2UJRopCHPt9Lq8+Xg9WhzXi2sNmbq1RKB31VihTAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUa7+9UyVeE5af+HYQ4z9167ip4R8wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABIw DQYJKoZIhvcNAQELBQADggEBAFPorm4ll1C5VDVTDWlzR+RbiBB5MwmvrAPL58lX Xh0jOgc2mkeWJG9XYDQRax/xhAsrsv8rd7t6STDdziHDoHaeemRl+NEZT4WqIo4A 1Psyfgw+sl7fyq2pPtfQoRN6bVKYSxkcs5cIPPoXrjVSLXzsbKferpOwjG4f2Lth LazfZQxJBxg+M9/BQwZGhD8hT2AfB/jdTh3ifSfcvjjHsj0YBLKcwsPhhrA91U8R BcF2IvrOJVB+xIxnwWMA1SvraCTV/MCS96aP1IgreyPCbWQtuh/ht2AEDzQlCSjm CZpjcoDN/UTG5dcrCZ6wKxBxx6gPY+H+CgaDH1xwOpAikhY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:15:07 2025 by rpki-client