$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31623a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a31623a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: 2oGP6SlmCDTYDKnJBHZHJOmdfjrzzS8y2JLpKwxjfSA= Subject key identifier: 4F:F5:6C:4C:0E:44:7F:A3:E2:C0:DD:1B:3D:B4:97:CF:19:96:3F:E2 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 1D21D6C74596E1E5AB7D51EB3D0A13D136E22BAA Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31623a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 06:00:01 +0000 ROA not before: Fri 31 Oct 2025 05:55:01 +0000 ROA not after: Fri 30 Oct 2026 06:00:01 +0000 asID: 58552 IP address blocks: 2404:fd00:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:21:d6:c7:45:96:e1:e5:ab:7d:51:eb:3d:0a:13:d1:36:e2:2b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 05:55:01 2025 GMT Not After : Oct 30 06:00:01 2026 GMT Subject: CN=4FF56C4C0E447FA3E2C0DD1B3DB497CF19963FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2f:c6:06:b9:8c:c7:89:66:8e:62:66:ce:84: 21:ad:8c:87:53:7f:15:64:7a:41:af:19:df:d1:79: be:cf:d7:2d:6b:66:a7:3d:a1:4b:76:1c:21:53:d5: a5:37:d1:09:79:cb:f8:47:59:e7:46:d6:0b:57:e5: 3a:25:df:cf:73:ed:45:f4:fa:52:dc:61:ae:29:d4: c9:30:4a:b3:42:d2:24:9b:01:a4:98:1e:2f:40:a3: 87:dd:82:12:11:a4:31:94:a6:1e:b9:28:f4:2b:0a: d4:c1:e9:1a:79:d5:d6:4a:83:7c:f7:e0:d6:36:b4: b3:5e:13:47:d1:41:d2:17:6f:43:42:df:45:4f:4d: 63:b1:10:8d:21:b4:e0:da:23:4a:91:12:9d:cf:f3: f2:43:93:5a:ba:2a:34:c3:b8:9a:c9:8e:42:14:1e: d9:1d:33:2d:f4:53:44:2e:3d:43:60:62:38:64:69: 66:c1:e8:43:27:51:3a:ce:65:7b:32:e9:86:6b:11: fa:9a:41:d1:89:b4:f4:f1:b7:be:9e:1c:73:29:04: 24:b2:d6:23:54:00:c0:f6:b4:ad:94:0f:1a:68:4a: d4:bc:d6:8e:32:ef:3b:49:86:ca:cf:ce:83:01:d8: 9e:c5:3c:3a:85:a8:46:ac:0e:09:48:79:ee:cc:71: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F5:6C:4C:0E:44:7F:A3:E2:C0:DD:1B:3D:B4:97:CF:19:96:3F:E2 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31623a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:1b::/48 Signature Algorithm: sha256WithRSAEncryption 72:af:9c:e2:3c:7a:ef:ab:92:4c:0f:fa:e5:7e:78:4b:1e:33: 6e:12:ae:40:19:35:7b:39:06:1f:94:b7:11:52:eb:e6:7a:6d: a7:d7:36:44:66:9b:79:53:3d:27:de:0d:68:f7:b6:55:f3:0e: 2a:62:3e:57:3c:ab:cc:71:89:2a:40:2a:df:66:b2:2f:89:de: 5b:68:1a:6a:92:dd:6d:cb:81:8a:40:68:db:5c:1f:a0:9d:58: dd:ca:94:b6:36:37:39:35:db:13:a4:4a:94:48:71:13:4f:07: e5:a5:65:87:fa:61:4d:5d:97:07:1e:93:c1:a1:b3:aa:e7:a1: af:2e:bd:3c:55:30:5a:f4:74:d7:7a:e5:94:c4:08:0b:24:ff: bb:b2:ec:56:e0:e7:9f:d5:37:79:c4:4c:00:f0:60:22:b8:5e: 49:c4:a4:d0:71:8d:78:d8:82:54:29:29:f5:98:df:90:d6:c8: ba:f8:f3:3d:f2:19:d7:e1:bb:d7:2c:5c:2d:03:1a:ea:7b:22: 09:fe:63:95:4e:da:8b:5f:2e:85:e1:a6:47:5b:9b:3d:c1:c5: 10:8d:a9:55:c5:d0:fb:eb:6f:73:2b:77:67:18:12:e3:1f:b8: ff:5b:86:bf:ab:91:20:93:ca:4f:98:1f:7a:43:f7:f5:28:c7: 84:97:88:60 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHSHWx0WW4eWrfVHrPQoT0TbiK6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNTU1MDFaFw0yNjEwMzAwNjAwMDFaMDMxMTAvBgNV BAMTKDRGRjU2QzRDMEU0NDdGQTNFMkMwREQxQjNEQjQ5N0NGMTk5NjNGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzL8YGuYzHiWaOYmbOhCGtjIdT fxVkekGvGd/Reb7P1y1rZqc9oUt2HCFT1aU30Ql5y/hHWedG1gtX5Tol389z7UX0 +lLcYa4p1MkwSrNC0iSbAaSYHi9Ao4fdghIRpDGUph65KPQrCtTB6Rp51dZKg3z3 4NY2tLNeE0fRQdIXb0NC30VPTWOxEI0htODaI0qREp3P8/JDk1q6KjTDuJrJjkIU HtkdMy30U0QuPUNgYjhkaWbB6EMnUTrOZXsy6YZrEfqaQdGJtPTxt76eHHMpBCSy 1iNUAMD2tK2UDxpoStS81o4y7ztJhsrPzoMB2J7FPDqFqEasDglIee7McRDjAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUT/VsTA5Ef6PiwN0bPbSXzxmWP+IwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzE2MjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABsw DQYJKoZIhvcNAQELBQADggEBAHKvnOI8eu+rkkwP+uV+eEseM24SrkAZNXs5Bh+U txFS6+Z6bafXNkRmm3lTPSfeDWj3tlXzDipiPlc8q8xxiSpAKt9msi+J3ltoGmqS 3W3LgYpAaNtcH6CdWN3KlLY2Nzk12xOkSpRIcRNPB+WlZYf6YU1dlwcek8Ghs6rn oa8uvTxVMFr0dNd65ZTECAsk/7uy7Fbg55/VN3nETADwYCK4XknEpNBxjXjYglQp KfWY35DWyLr48z3yGdfhu9csXC0DGup7Ign+Y5VO2otfLoXhpkdbmz3BxRCNqVXF 0Pvrb3Mrd2cYEuMfuP9bhr+rkSCTyk+YH3pD9/Uox4SXiGA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:09 2025 by rpki-client