$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31373a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31373a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: iTOLyTfbQ8jAq40ZodQnc5rrdI9VJsMYmlDMCR5tiwA= Subject key identifier: F2:4E:87:9B:29:AC:97:7F:6D:58:CF:C4:ED:79:8D:D4:4B:BA:E7:8F Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 3BD3444BF64A783B9DCC0631A69899B827B0011E Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31373a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 06:00:01 +0000 ROA not before: Fri 31 Oct 2025 05:55:01 +0000 ROA not after: Fri 30 Oct 2026 06:00:01 +0000 asID: 58552 IP address blocks: 2404:fd00:17::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d3:44:4b:f6:4a:78:3b:9d:cc:06:31:a6:98:99:b8:27:b0:01:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 05:55:01 2025 GMT Not After : Oct 30 06:00:01 2026 GMT Subject: CN=F24E879B29AC977F6D58CFC4ED798DD44BBAE78F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:d2:8a:63:54:1d:8e:63:b5:46:39:c6:58: 75:bd:17:d9:74:03:2e:58:b6:5d:8b:6a:fe:6b:09: 26:47:5c:20:aa:46:86:87:58:c6:06:4f:14:9c:6c: 29:6b:ed:70:34:3c:d4:8b:be:34:d6:13:90:d2:7f: f1:b4:20:ca:9c:a7:a5:42:ae:e3:3c:26:11:cd:0e: 54:3b:ae:c7:f0:fe:b0:b6:be:1a:f4:41:ea:87:19: 6b:b4:31:ea:cd:c9:14:cf:57:49:b4:d1:07:92:9c: f8:f7:71:e3:06:c1:22:ac:4a:ea:c4:8c:b2:74:99: 52:33:75:dc:56:d6:30:55:1a:81:df:1d:2c:23:cf: 7f:10:01:f7:72:46:48:cf:52:0a:8a:10:f5:43:1e: 5e:06:b4:5e:2e:e5:91:2e:ae:ae:48:8d:27:ee:e1: 72:d7:da:cb:d7:a1:0a:55:8d:41:4d:c5:15:b8:79: fe:58:5b:27:c6:33:08:91:43:1b:73:95:35:ab:5a: 2e:d1:52:33:d5:30:14:d3:76:41:9d:e4:58:6b:ae: d1:ed:f8:d5:f0:a1:cb:b9:48:37:14:33:4f:48:5f: e0:13:5b:1a:5b:96:61:79:ce:11:55:6a:ef:b3:6c: f2:06:91:5f:89:86:06:4f:b9:48:cc:10:38:43:70: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4E:87:9B:29:AC:97:7F:6D:58:CF:C4:ED:79:8D:D4:4B:BA:E7:8F X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31373a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:17::/48 Signature Algorithm: sha256WithRSAEncryption b0:03:39:29:ca:0f:6d:d4:a5:c5:70:de:23:f1:04:bf:15:e1: da:d9:00:88:ca:58:21:f0:ee:7c:fe:2e:bb:bd:e1:0e:fe:8f: 76:9f:ec:db:f8:47:38:29:c6:42:6a:c0:b4:32:38:2d:89:12: dc:19:7b:e4:3f:34:0b:23:fc:ee:82:9f:5f:e7:f2:9c:b7:fd: 97:81:da:af:17:ba:f9:dd:0d:2d:2e:b1:9a:7a:01:1a:55:c5: 14:9f:ca:7e:95:92:88:2b:a8:7f:4b:9c:00:30:3d:ec:aa:e8: f5:d5:fa:d9:b4:51:6d:7e:bf:e1:83:9c:5f:0a:19:96:81:8a: 20:ae:00:70:b1:fc:9a:83:11:43:11:b8:e9:fa:49:9a:fa:ca: 4e:d0:a3:2c:60:a0:9d:37:79:77:b0:b9:ab:c3:a2:28:96:7b: 05:44:01:50:9c:c6:3a:88:87:20:77:9a:9f:76:87:80:45:7d: 62:95:77:b9:97:a7:16:2c:9f:cc:40:f1:eb:e6:71:4d:a4:26: 68:11:31:f7:c2:2b:65:aa:20:b6:ba:64:25:4c:eb:96:0c:ce: 8e:de:09:88:54:23:ad:e4:c3:f1:80:ac:39:34:36:8d:87:50: e0:e6:45:89:10:37:5d:20:ea:36:95:b3:fd:16:2f:7c:86:5c: 23:1e:83:50 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUO9NES/ZKeDudzAYxppiZuCewAR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNTU1MDFaFw0yNjEwMzAwNjAwMDFaMDMxMTAvBgNV BAMTKEYyNEU4NzlCMjlBQzk3N0Y2RDU4Q0ZDNEVENzk4REQ0NEJCQUU3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMktKKY1QdjmO1RjnGWHW9F9l0 Ay5Ytl2Lav5rCSZHXCCqRoaHWMYGTxScbClr7XA0PNSLvjTWE5DSf/G0IMqcp6VC ruM8JhHNDlQ7rsfw/rC2vhr0QeqHGWu0MerNyRTPV0m00QeSnPj3ceMGwSKsSurE jLJ0mVIzddxW1jBVGoHfHSwjz38QAfdyRkjPUgqKEPVDHl4GtF4u5ZEurq5IjSfu 4XLX2svXoQpVjUFNxRW4ef5YWyfGMwiRQxtzlTWrWi7RUjPVMBTTdkGd5FhrrtHt +NXwocu5SDcUM09IX+ATWxpblmF5zhFVau+zbPIGkV+JhgZPuUjMEDhDcPZvAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU8k6Hmymsl39tWM/E7XmN1Eu6548wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzNzNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABcw DQYJKoZIhvcNAQELBQADggEBALADOSnKD23UpcVw3iPxBL8V4drZAIjKWCHw7nz+ Lru94Q7+j3af7Nv4RzgpxkJqwLQyOC2JEtwZe+Q/NAsj/O6Cn1/n8py3/ZeB2q8X uvndDS0usZp6ARpVxRSfyn6VkogrqH9LnAAwPeyq6PXV+tm0UW1+v+GDnF8KGZaB iiCuAHCx/JqDEUMRuOn6SZr6yk7QoyxgoJ03eXewuavDoiiWewVEAVCcxjqIhyB3 mp92h4BFfWKVd7mXpxYsn8xA8evmcU2kJmgRMffCK2WqILa6ZCVM65YMzo7eCYhU I63kw/GArDk0No2HUODmRYkQN10g6jaVs/0WL3yGXCMeg1A= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:21 2025 by rpki-client