$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: xKZnucs2cCs9+M1n4+3V/G6LOM6N17WjKY0jpXnq6D0= Subject key identifier: 92:B0:EE:66:FD:B3:F4:B9:E6:29:33:E2:AE:5C:FE:5F:B7:FB:63:D2 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 3924DCF8E455201815DA91A74561A803E2704BBA Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 06:00:00 +0000 ROA not before: Fri 31 Oct 2025 05:55:00 +0000 ROA not after: Fri 30 Oct 2026 06:00:00 +0000 asID: 58552 IP address blocks: 2404:fd00:18::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:24:dc:f8:e4:55:20:18:15:da:91:a7:45:61:a8:03:e2:70:4b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 05:55:00 2025 GMT Not After : Oct 30 06:00:00 2026 GMT Subject: CN=92B0EE66FDB3F4B9E62933E2AE5CFE5FB7FB63D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:e8:52:35:39:c0:5c:57:c6:87:71:eb:e0: a7:1f:2b:11:fd:10:20:59:ec:c0:25:1c:44:4b:fb: 5f:f8:2d:d4:93:5b:e1:ce:1c:27:bc:93:78:5e:c7: 8b:4e:eb:96:98:5e:54:de:93:32:85:df:31:2c:8b: 42:7c:7d:3d:48:b3:5d:39:4e:a3:29:99:24:58:27: 69:76:f7:13:0d:20:3f:a5:f4:a7:71:c1:d1:99:c0: 80:25:8f:e7:f7:07:90:85:e0:87:60:36:fe:5b:a0: ae:40:54:45:d3:3f:68:81:f5:3f:4d:cf:00:b6:6b: d8:11:01:f4:93:27:b7:23:56:54:7b:a7:24:ab:78: 31:dd:7a:b8:98:22:3e:1a:47:94:72:0e:9f:f1:c2: 59:66:2e:47:1b:b5:6e:79:fc:24:9a:a6:9d:cb:60: 69:e9:a2:e7:bc:1f:ba:e0:45:9c:5c:f2:b8:84:ac: 59:a3:c0:91:bc:ae:b7:ff:1f:7f:e1:87:1b:4b:a1: 1a:e7:fc:c8:77:59:a5:46:20:74:bd:cb:a4:bc:e0: 22:03:da:b4:a7:58:5f:bc:b7:b8:3c:d3:be:6d:a9: a8:09:d0:30:0e:91:89:8a:51:dc:c1:db:db:ee:f0: c1:d5:63:b5:ae:89:4f:84:a7:ab:54:a5:d8:34:72: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B0:EE:66:FD:B3:F4:B9:E6:29:33:E2:AE:5C:FE:5F:B7:FB:63:D2 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31383a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:18::/48 Signature Algorithm: sha256WithRSAEncryption 4c:83:74:3a:c8:6b:6c:68:33:16:8b:9d:7c:83:fc:63:b6:56: 9e:8c:51:27:ea:f1:e2:ad:c6:82:f9:c8:e5:f1:23:8e:56:70: b0:6b:81:b1:58:f9:fd:8b:3b:65:f2:73:04:fa:c3:19:aa:37: 00:e7:30:24:33:7c:1e:ee:11:73:6d:a4:fa:56:11:81:ad:f4: af:49:ee:c5:24:ac:37:9a:80:d0:44:10:f1:06:63:52:8c:c6: 8d:b4:8e:26:63:90:9c:f3:be:69:7f:b3:23:e1:3f:de:ae:15: 8b:ba:00:fc:fb:dd:c1:a8:45:58:b6:38:88:e0:34:9a:36:7b: 02:35:c7:92:85:09:38:35:3a:0e:b7:70:76:08:63:3e:be:52: 1b:d1:25:76:22:49:3f:31:67:90:66:f2:12:35:fe:33:fd:05: b0:9d:e8:21:79:16:5e:3d:57:20:a4:24:35:d3:25:c4:e2:56: 06:01:b8:a0:ca:82:1e:d1:0d:d6:fe:f7:d3:7f:a9:00:f4:b2: 2a:3f:89:dc:4a:c4:d5:d8:ca:a7:ee:9a:30:d2:9b:39:5d:68: 7c:fb:ea:5f:2c:6b:0e:44:ee:48:d1:59:6e:aa:fd:9b:6f:2d: a3:96:5d:60:d8:e7:7b:d2:ff:3e:ca:53:0a:25:ad:27:f0:5a: 09:d9:52:6d -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUOSTc+ORVIBgV2pGnRWGoA+JwS7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNTU1MDBaFw0yNjEwMzAwNjAwMDBaMDMxMTAvBgNV BAMTKDkyQjBFRTY2RkRCM0Y0QjlFNjI5MzNFMkFFNUNGRTVGQjdGQjYzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61+hSNTnAXFfGh3Hr4KcfKxH9 ECBZ7MAlHERL+1/4LdSTW+HOHCe8k3hex4tO65aYXlTekzKF3zEsi0J8fT1Is105 TqMpmSRYJ2l29xMNID+l9KdxwdGZwIAlj+f3B5CF4IdgNv5boK5AVEXTP2iB9T9N zwC2a9gRAfSTJ7cjVlR7pySreDHderiYIj4aR5RyDp/xwllmLkcbtW55/CSapp3L YGnpoue8H7rgRZxc8riErFmjwJG8rrf/H3/hhxtLoRrn/Mh3WaVGIHS9y6S84CID 2rSnWF+8t7g8075tqagJ0DAOkYmKUdzB29vu8MHVY7WuiU+Ep6tUpdg0chxFAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUkrDuZv2z9LnmKTPirlz+X7f7Y9IwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABgw DQYJKoZIhvcNAQELBQADggEBAEyDdDrIa2xoMxaLnXyD/GO2Vp6MUSfq8eKtxoL5 yOXxI45WcLBrgbFY+f2LO2XycwT6wxmqNwDnMCQzfB7uEXNtpPpWEYGt9K9J7sUk rDeagNBEEPEGY1KMxo20jiZjkJzzvml/syPhP96uFYu6APz73cGoRVi2OIjgNJo2 ewI1x5KFCTg1Og63cHYIYz6+UhvRJXYiST8xZ5Bm8hI1/jP9BbCd6CF5Fl49VyCk JDXTJcTiVgYBuKDKgh7RDdb+99N/qQD0sio/idxKxNXYyqfumjDSmzldaHz76l8s aw5E7kjRWW6q/ZtvLaOWXWDY53vS/z7KUwolrSfwWgnZUm0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:39 2025 by rpki-client