$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31613a3a2f34382d3438203d3e203536323436.roa File: 323430343a666430303a31613a3a2f34382d3438203d3e203536323436.roa (raw, json) Hash identifier: zDyVWP9FvZQZiZP9gP6DTD+0akIqo4mH7zOQAOnpvi0= Subject key identifier: 23:43:8A:B5:C7:FF:86:6C:31:27:60:6A:9F:B6:7B:AE:BD:DB:D3:62 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 45C97EE3864FEAD36CB8EE3F0DDAEDE7127D09E6 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31613a3a2f34382d3438203d3e203536323436.roa Signing time: Fri 31 Oct 2025 05:00:00 +0000 ROA not before: Fri 31 Oct 2025 04:55:00 +0000 ROA not after: Fri 30 Oct 2026 05:00:00 +0000 asID: 56246 IP address blocks: 2404:fd00:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c9:7e:e3:86:4f:ea:d3:6c:b8:ee:3f:0d:da:ed:e7:12:7d:09:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 04:55:00 2025 GMT Not After : Oct 30 05:00:00 2026 GMT Subject: CN=23438AB5C7FF866C3127606A9FB67BAEBDDBD362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:9e:71:b2:67:31:35:c1:64:76:7d:8c:16: 50:83:fd:ee:f3:5d:ef:74:71:65:e1:08:30:b1:d9: 5a:dc:b9:fb:9f:90:5c:6c:43:9b:1d:e4:9c:af:cb: 22:82:3f:3d:97:6f:f0:70:a1:7b:8f:8b:8e:98:2f: a8:d4:6c:ff:66:93:4f:88:c7:ab:c6:fc:67:df:f9: 24:ca:b8:1a:2f:ba:c8:dc:f2:9b:9d:fc:f6:6a:5f: 7d:da:e2:6b:5a:6d:11:5b:8a:72:6b:3f:db:e0:1f: c8:4e:6e:d6:d6:9b:e3:a9:95:b3:7f:a0:5e:d4:c2: d6:49:2b:55:5b:cd:ac:71:73:61:80:57:35:e4:e1: ad:4f:65:9c:e3:3e:fd:24:32:11:5c:0b:67:07:d1: 8f:55:74:d6:21:7d:5a:c6:f9:d3:89:29:4d:c9:47: 2f:d2:1a:d6:fd:ab:c0:93:0b:1d:91:23:e0:50:b7: d4:49:c5:85:2c:f8:21:48:e2:e3:9e:40:8d:24:e1: 3c:bd:72:ba:1d:af:be:74:c7:53:6b:54:3f:2d:81: af:e5:dc:0b:02:de:82:44:be:b3:34:c0:b9:18:8d: 7d:0c:8e:a1:aa:7d:e6:ae:43:ea:16:41:31:36:5e: 0d:ab:2f:d9:73:5b:0f:ce:ef:70:7f:07:33:2c:46: 60:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:8A:B5:C7:FF:86:6C:31:27:60:6A:9F:B6:7B:AE:BD:DB:D3:62 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31613a3a2f34382d3438203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:1a::/48 Signature Algorithm: sha256WithRSAEncryption b3:59:18:f4:41:01:de:8b:69:85:7a:62:41:4d:06:61:f7:ce: f2:1a:11:78:f2:70:ca:2d:c7:d3:ef:19:67:90:ee:8d:1a:2c: e9:dd:2a:7f:d5:1a:38:ff:ae:d1:dc:70:c5:30:5b:55:a3:c0: af:47:99:11:da:49:9d:a8:85:58:7a:4e:9f:53:85:27:ee:18: 02:66:d3:4c:6b:d6:f9:4e:9e:4f:bd:61:30:e2:96:50:a5:28: 63:26:38:f7:40:37:46:3b:b9:d8:3d:3a:1c:a2:ce:65:1c:14: c2:3a:7c:e3:d3:4e:6b:95:ce:87:de:2b:f5:ea:43:be:91:55: fc:86:93:cd:48:93:9a:2c:dc:d8:f6:51:b8:b9:92:f0:b5:b4: f7:5e:62:00:12:b6:11:37:9c:ed:5f:9a:ad:68:07:d8:4a:ff: 96:1a:28:06:82:6b:cd:33:ab:7f:31:be:9a:a0:87:4b:07:a0: 50:6d:43:0a:cd:57:2a:1a:1d:50:23:9e:66:68:7a:ac:69:40: e8:c0:35:03:7c:05:60:50:a4:a5:5e:90:77:6b:64:1a:eb:e3: ee:09:b4:d5:6e:38:cd:1c:e3:bd:64:f1:03:b6:53:80:62:67: d7:f7:a1:0a:b9:74:ac:b6:16:ed:84:e5:83:0d:b2:8d:ec:37: 99:2c:28:34 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURcl+44ZP6tNsuO4/Ddrt5xJ9CeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNDU1MDBaFw0yNjEwMzAwNTAwMDBaMDMxMTAvBgNV BAMTKDIzNDM4QUI1QzdGRjg2NkMzMTI3NjA2QTlGQjY3QkFFQkREQkQzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApJ5xsmcxNcFkdn2MFlCD/e7z Xe90cWXhCDCx2VrcufufkFxsQ5sd5JyvyyKCPz2Xb/BwoXuPi46YL6jUbP9mk0+I x6vG/Gff+STKuBovusjc8pud/PZqX33a4mtabRFbinJrP9vgH8hObtbWm+OplbN/ oF7UwtZJK1Vbzaxxc2GAVzXk4a1PZZzjPv0kMhFcC2cH0Y9VdNYhfVrG+dOJKU3J Ry/SGtb9q8CTCx2RI+BQt9RJxYUs+CFI4uOeQI0k4Ty9crodr750x1NrVD8tga/l 3AsC3oJEvrM0wLkYjX0MjqGqfeauQ+oWQTE2Xg2rL9lzWw/O73B/BzMsRmDLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUI0OKtcf/hmwxJ2Bqn7Z7rr3b02IwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzE2MTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzYzMjM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABow DQYJKoZIhvcNAQELBQADggEBALNZGPRBAd6LaYV6YkFNBmH3zvIaEXjycMotx9Pv GWeQ7o0aLOndKn/VGjj/rtHccMUwW1WjwK9HmRHaSZ2ohVh6Tp9ThSfuGAJm00xr 1vlOnk+9YTDillClKGMmOPdAN0Y7udg9OhyizmUcFMI6fOPTTmuVzofeK/XqQ76R VfyGk81Ik5os3Nj2Ubi5kvC1tPdeYgASthE3nO1fmq1oB9hK/5YaKAaCa80zq38x vpqgh0sHoFBtQwrNVyoaHVAjnmZoeqxpQOjANQN8BWBQpKVekHdrZBrr4+4JtNVu OM0c471k8QO2U4BiZ9f3oQq5dKy2Fu2E5YMNso3sN5ksKDQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:06 2025 by rpki-client