$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31393a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31393a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: Lp9dYKUSdLZwyZVgfJqh0eKMOjxMuKGnqGTlI3sAsCs= Subject key identifier: 9E:91:AF:1E:94:9E:55:2F:E4:68:98:92:44:5E:B3:75:F3:16:6B:3F Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 452B3FEC431EA02B2588D4F796CFDDE3C3796EB4 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31393a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 06:00:01 +0000 ROA not before: Fri 31 Oct 2025 05:55:01 +0000 ROA not after: Fri 30 Oct 2026 06:00:01 +0000 asID: 58552 IP address blocks: 2404:fd00:19::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2b:3f:ec:43:1e:a0:2b:25:88:d4:f7:96:cf:dd:e3:c3:79:6e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 05:55:01 2025 GMT Not After : Oct 30 06:00:01 2026 GMT Subject: CN=9E91AF1E949E552FE4689892445EB375F3166B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:25:67:61:38:36:d2:6b:08:91:36:ee:3e: d2:3a:54:39:55:9c:36:1d:fd:9a:fc:06:0c:e1:25: aa:0a:06:21:76:04:67:cd:b5:e5:1e:bc:6c:6e:07: 9a:dd:73:c4:8e:c2:10:99:bf:eb:e4:2d:3a:ad:f4: e3:30:b4:b1:fa:1c:15:0e:59:03:12:6c:88:75:e1: 2a:7d:b5:72:0e:59:7e:b0:97:3b:95:86:ba:99:03: cb:07:96:0c:20:ba:f6:31:97:a0:dc:b2:49:1f:f2: c4:0d:c0:72:e9:3f:ac:0e:60:62:5c:c6:6c:ff:e0: 75:ba:20:bf:b7:52:3e:e1:82:6c:06:4e:96:6e:08: 0c:bd:f2:e5:51:e8:e6:ed:87:5c:49:92:e4:38:95: f4:35:97:50:52:70:a2:97:61:0a:1e:be:9e:cf:d8: c2:3a:20:fa:d5:a2:82:98:d3:8e:21:9f:20:b0:59: 4a:cd:7b:9e:fa:2a:5b:0f:e9:11:ce:09:b2:a6:d0: 09:21:02:99:ec:95:53:30:d7:d2:5a:3d:f0:b0:7a: b3:07:54:e8:06:19:d1:e4:f7:9c:a0:bc:67:79:fd: 44:4c:83:a4:fe:53:83:d1:9e:f3:aa:4a:88:63:ab: 5b:46:2e:23:39:87:c9:5a:39:31:65:80:ae:23:f2: 3a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:91:AF:1E:94:9E:55:2F:E4:68:98:92:44:5E:B3:75:F3:16:6B:3F X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31393a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:19::/48 Signature Algorithm: sha256WithRSAEncryption 08:ef:d1:e4:ee:c6:c4:ee:8d:2a:21:20:b5:ff:dc:3d:c4:d8: 59:0b:7f:4d:1b:36:fb:7d:54:12:63:2f:72:77:a8:9f:a0:7a: 59:4d:21:57:a5:00:df:a4:a1:c8:1c:a1:fc:72:1f:b1:61:87: a2:b2:57:99:09:59:b4:d7:3c:6b:c3:e5:82:12:17:a1:0b:fc: 00:90:63:e4:3d:37:f8:b2:25:dc:bb:f5:32:e7:9d:24:27:d9: fc:5f:a3:f4:28:2a:22:7a:c0:57:94:68:a5:85:ca:8f:26:24: 11:a5:fe:97:0d:2d:77:70:e1:2f:75:9e:d4:19:f1:ac:61:f5: 57:66:7f:e6:96:c0:50:29:76:74:69:90:ba:80:1f:b0:86:92: 94:78:b0:0a:92:b6:3d:c0:f2:55:ec:9c:6d:95:b0:92:51:46: 1e:cd:f2:37:2e:45:3b:b4:0d:a9:22:2c:2c:8d:14:c2:81:0d: 71:24:88:6d:35:c3:97:d9:34:4c:15:26:83:d2:63:da:39:f2: bd:d5:cd:99:f3:a6:6d:1d:0a:2a:67:3b:0c:d8:19:ec:7b:74: 25:a3:c3:ab:2f:03:07:61:74:97:11:2e:d2:a2:6f:da:37:97: c3:95:a5:ae:ab:bc:fc:4c:68:18:8e:96:1b:4d:1c:32:6f:88: 93:d5:88:98 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURSs/7EMeoCsliNT3ls/d48N5brQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNTU1MDFaFw0yNjEwMzAwNjAwMDFaMDMxMTAvBgNV BAMTKDlFOTFBRjFFOTQ5RTU1MkZFNDY4OTg5MjQ0NUVCMzc1RjMxNjZCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQoiVnYTg20msIkTbuPtI6VDlV nDYd/Zr8BgzhJaoKBiF2BGfNteUevGxuB5rdc8SOwhCZv+vkLTqt9OMwtLH6HBUO WQMSbIh14Sp9tXIOWX6wlzuVhrqZA8sHlgwguvYxl6Dcskkf8sQNwHLpP6wOYGJc xmz/4HW6IL+3Uj7hgmwGTpZuCAy98uVR6Obth1xJkuQ4lfQ1l1BScKKXYQoevp7P 2MI6IPrVooKY044hnyCwWUrNe576KlsP6RHOCbKm0AkhApnslVMw19JaPfCwerMH VOgGGdHk95ygvGd5/URMg6T+U4PRnvOqSohjq1tGLiM5h8laOTFlgK4j8jrrAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUnpGvHpSeVS/kaJiSRF6zdfMWaz8wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzOTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABkw DQYJKoZIhvcNAQELBQADggEBAAjv0eTuxsTujSohILX/3D3E2FkLf00bNvt9VBJj L3J3qJ+gellNIVelAN+kocgcofxyH7Fhh6KyV5kJWbTXPGvD5YISF6EL/ACQY+Q9 N/iyJdy79TLnnSQn2fxfo/QoKiJ6wFeUaKWFyo8mJBGl/pcNLXdw4S91ntQZ8axh 9Vdmf+aWwFApdnRpkLqAH7CGkpR4sAqStj3A8lXsnG2VsJJRRh7N8jcuRTu0Daki LCyNFMKBDXEkiG01w5fZNEwVJoPSY9o58r3VzZnzpm0dCipnOwzYGex7dCWjw6sv AwdhdJcRLtKib9o3l8OVpa6rvPxMaBiOlhtNHDJviJPViJg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:51 2025 by rpki-client