$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31363a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31363a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: lM/644C03PQcdX0oek20e+zTx/JZX/lMZl8biM1kRLI= Subject key identifier: C5:1B:FB:8F:04:2B:23:11:6F:02:5E:39:AE:1B:C8:E7:20:EC:2F:05 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 75CFA9580557879346307C9C64E782471D721003 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31363a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 06:00:01 +0000 ROA not before: Fri 31 Oct 2025 05:55:01 +0000 ROA not after: Fri 30 Oct 2026 06:00:01 +0000 asID: 58552 IP address blocks: 2404:fd00:16::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cf:a9:58:05:57:87:93:46:30:7c:9c:64:e7:82:47:1d:72:10:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 05:55:01 2025 GMT Not After : Oct 30 06:00:01 2026 GMT Subject: CN=C51BFB8F042B23116F025E39AE1BC8E720EC2F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b1:06:3a:b2:f6:f6:36:b7:3d:e1:5b:9a:65: ea:a8:ff:05:bf:e8:b6:b0:3f:9a:4e:9e:67:53:7d: f5:10:c3:0c:a9:f0:92:b8:5f:84:50:72:80:16:cf: 11:96:49:0a:58:92:b2:10:ec:08:fe:da:07:83:86: fa:3d:5c:12:7b:0f:6b:14:43:56:63:a8:dc:a4:f1: 54:1b:04:79:db:7e:d1:54:cf:42:65:49:3d:8d:74: b0:0a:2e:0a:ff:63:32:ae:9e:0d:f7:19:1f:43:28: a7:e7:c8:98:a2:9c:cb:b1:c5:fd:d2:66:72:00:51: 0a:43:4e:69:b1:6e:46:c3:eb:b0:a1:5c:4b:71:16: b0:1e:dd:a7:81:23:54:fb:34:a1:38:fc:21:30:6c: b7:f6:59:81:77:6e:94:b8:1e:a6:f4:7d:43:6e:a7: 41:1f:dd:d9:00:d5:e5:26:21:41:69:c4:9b:f4:10: ed:18:98:16:56:95:61:5d:49:ca:88:82:47:ac:f9: 5e:5d:83:2f:6f:1b:6d:41:ca:f1:1e:08:f8:6f:49: 6a:4c:27:21:57:a5:68:22:f3:be:eb:b5:66:0a:ba: a6:0c:97:0c:b0:5f:bb:e5:c5:78:d0:ca:2c:5f:0e: 7c:b7:21:4d:04:fe:1c:62:50:23:22:83:c2:5a:d0: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1B:FB:8F:04:2B:23:11:6F:02:5E:39:AE:1B:C8:E7:20:EC:2F:05 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31363a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:16::/48 Signature Algorithm: sha256WithRSAEncryption 86:56:a3:40:52:e1:4e:1f:71:96:b2:72:41:f3:e5:94:29:73: ab:fd:c7:c7:ab:fd:a5:40:ae:c0:d3:fe:85:c0:a2:dd:79:85: c7:af:f2:b2:ef:49:8f:4b:67:c1:8d:30:bb:e5:62:61:d8:e4: 68:95:13:af:ea:d8:7c:72:42:56:33:a3:93:bf:e2:e9:da:2d: 86:14:14:41:f4:ab:7a:43:56:e7:c8:7a:d8:87:63:fb:2b:91: 91:10:11:a6:2c:c8:45:8e:79:b0:f4:d7:f0:66:c6:47:ce:d3: 36:d1:38:34:a7:23:ad:e6:6b:d2:72:d1:78:3f:bc:28:53:9b: c9:99:66:ea:41:b3:8f:f4:66:b1:e2:c3:fb:86:9e:56:92:bf: 65:4a:1b:78:69:e7:88:c2:9c:d2:10:84:39:fe:15:ec:e2:50: 6e:b1:4f:f6:4a:35:2d:9e:4d:5a:5c:81:8a:7b:73:58:58:bf: 31:5d:63:ec:b1:19:5a:19:82:6d:3a:a3:df:d2:33:96:7e:af: db:2a:4e:c4:29:4a:a1:f6:fb:a4:34:f2:b9:be:11:dc:cc:0b: ca:1a:ca:03:80:e2:c1:ff:9c:a1:fe:b4:ac:48:b5:14:18:aa: bb:91:20:02:b1:f2:b6:a3:5c:79:64:23:b6:f6:c7:91:9e:f8: b7:98:f3:75 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUdc+pWAVXh5NGMHycZOeCRx1yEAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNTU1MDFaFw0yNjEwMzAwNjAwMDFaMDMxMTAvBgNV BAMTKEM1MUJGQjhGMDQyQjIzMTE2RjAyNUUzOUFFMUJDOEU3MjBFQzJGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwsQY6svb2Nrc94VuaZeqo/wW/ 6LawP5pOnmdTffUQwwyp8JK4X4RQcoAWzxGWSQpYkrIQ7Aj+2geDhvo9XBJ7D2sU Q1ZjqNyk8VQbBHnbftFUz0JlST2NdLAKLgr/YzKung33GR9DKKfnyJiinMuxxf3S ZnIAUQpDTmmxbkbD67ChXEtxFrAe3aeBI1T7NKE4/CEwbLf2WYF3bpS4Hqb0fUNu p0Ef3dkA1eUmIUFpxJv0EO0YmBZWlWFdScqIgkes+V5dgy9vG21ByvEeCPhvSWpM JyFXpWgi877rtWYKuqYMlwywX7vlxXjQyixfDny3IU0E/hxiUCMig8Ja0EeLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUxRv7jwQrIxFvAl45rhvI5yDsLwUwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABYw DQYJKoZIhvcNAQELBQADggEBAIZWo0BS4U4fcZayckHz5ZQpc6v9x8er/aVArsDT /oXAot15hcev8rLvSY9LZ8GNMLvlYmHY5GiVE6/q2HxyQlYzo5O/4unaLYYUFEH0 q3pDVufIetiHY/srkZEQEaYsyEWOebD01/BmxkfO0zbRODSnI63ma9Jy0Xg/vChT m8mZZupBs4/0ZrHiw/uGnlaSv2VKG3hp54jCnNIQhDn+FeziUG6xT/ZKNS2eTVpc gYp7c1hYvzFdY+yxGVoZgm06o9/SM5Z+r9sqTsQpSqH2+6Q08rm+EdzMC8oaygOA 4sH/nKH+tKxItRQYqruRIAKx8rajXHlkI7b2x5Ge+LeY83U= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:52 2025 by rpki-client