$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32303a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a32303a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: QOww+64KNbXJ3l/NzTBdIaUEqHpbqjfez5t39ZKPf5c= Subject key identifier: 6D:1A:B5:AA:C7:90:10:22:C3:80:2F:C8:F5:C8:14:CC:97:43:69:68 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 438D46DC280D7F86185FA49B6152D805DB85D21D Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32303a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 31 Oct 2025 06:00:02 +0000 ROA not before: Fri 31 Oct 2025 05:55:02 +0000 ROA not after: Fri 30 Oct 2026 06:00:02 +0000 asID: 58552 IP address blocks: 2404:fd00:20::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8d:46:dc:28:0d:7f:86:18:5f:a4:9b:61:52:d8:05:db:85:d2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 05:55:02 2025 GMT Not After : Oct 30 06:00:02 2026 GMT Subject: CN=6D1AB5AAC7901022C3802FC8F5C814CC97436968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:db:36:9f:d3:5a:2d:59:22:fd:20:33:59: ba:bd:f6:3e:ac:7a:af:1b:34:0f:95:ae:31:49:9c: f9:34:ba:56:f8:91:bc:40:b4:9f:c1:bf:4a:a0:cc: 2d:f7:ee:a4:c2:cd:c8:32:ff:2e:c7:df:4e:c4:ce: 5e:ea:af:93:63:e4:42:6e:50:7d:a9:a3:95:38:60: 5e:07:db:7e:5f:ae:87:3d:3c:ca:4b:d8:79:21:02: 15:f8:de:bd:28:9c:de:9b:ee:76:11:35:5a:af:f3: ca:d8:b0:5b:cc:c3:5d:45:1c:9c:35:49:3e:9a:3a: 3b:93:40:d1:4f:5d:0a:27:6e:13:38:d8:b2:ae:9a: 55:94:25:a5:7c:00:be:ff:ff:89:2f:e2:09:42:d4: c2:61:69:6d:c8:a4:98:14:16:59:77:79:d9:f6:17: 8c:62:6d:7e:d8:20:da:1d:03:89:f7:c9:81:d1:70: 3b:32:53:1c:a9:23:91:36:a8:01:2c:ad:01:ff:97: af:75:a9:c9:aa:de:32:18:6a:c6:fb:de:ba:4e:cd: 52:01:1c:71:17:c5:c6:c5:81:bb:60:48:79:71:0c: 3d:f8:8d:7d:70:07:d2:08:47:47:bf:82:c8:ae:9e: 28:de:f0:1e:15:0a:c4:ec:f6:1c:d3:6c:a4:a8:0a: 10:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:B5:AA:C7:90:10:22:C3:80:2F:C8:F5:C8:14:CC:97:43:69:68 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32303a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:20::/48 Signature Algorithm: sha256WithRSAEncryption b8:00:b0:30:60:2b:16:ec:9e:94:ca:f2:0b:ca:90:31:93:46: 92:44:10:54:6e:37:5f:ac:60:e7:87:57:5e:3c:4c:f9:a9:84: 07:7f:3e:25:9a:7d:e0:94:e1:34:d3:9d:6d:13:34:7e:ab:e1: 48:aa:45:7b:77:f0:f5:fd:97:3e:db:d7:80:13:7a:11:2e:8c: 96:dd:bf:3c:b3:c0:b7:8b:f6:c9:cb:09:54:8c:01:c6:da:2d: 65:87:63:78:d3:88:b1:d7:da:df:b1:78:72:ae:41:37:a7:b1: a3:cf:40:f8:0c:0c:23:d2:b5:8e:f7:80:3f:4a:a3:d6:1f:b8: f6:62:35:09:79:70:d2:fa:11:8a:6c:c5:c7:ac:3c:c3:58:63: 1a:a7:d3:bd:45:e0:b9:70:75:57:bf:e8:9b:45:78:59:9c:3b: ea:84:75:cf:b3:52:2d:46:fb:90:83:23:39:03:aa:05:64:d3: a2:23:38:63:39:76:fa:1e:bd:e4:79:c1:56:a6:e7:32:9b:6c: d4:54:9c:fe:da:7d:c1:5e:62:03:ba:93:c8:f0:2e:79:91:6a: 88:da:57:84:8a:d7:24:ff:5a:e1:e7:1b:2a:5a:51:28:6c:ab: dd:4e:50:f0:e5:44:17:9e:9d:8d:9b:22:bd:ed:6a:7f:cd:50: 7e:bd:68:91 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQ41G3CgNf4YYX6SbYVLYBduF0h0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwNTU1MDJaFw0yNjEwMzAwNjAwMDJaMDMxMTAvBgNV BAMTKDZEMUFCNUFBQzc5MDEwMjJDMzgwMkZDOEY1QzgxNENDOTc0MzY5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUmts2n9NaLVki/SAzWbq99j6s eq8bNA+VrjFJnPk0ulb4kbxAtJ/Bv0qgzC337qTCzcgy/y7H307Ezl7qr5Nj5EJu UH2po5U4YF4H235froc9PMpL2HkhAhX43r0onN6b7nYRNVqv88rYsFvMw11FHJw1 ST6aOjuTQNFPXQonbhM42LKumlWUJaV8AL7//4kv4glC1MJhaW3IpJgUFll3edn2 F4xibX7YINodA4n3yYHRcDsyUxypI5E2qAEsrQH/l691qcmq3jIYasb73rpOzVIB HHEXxcbFgbtgSHlxDD34jX1wB9IIR0e/gsiunije8B4VCsTs9hzTbKSoChARAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUbRq1qseQECLDgC/I9cgUzJdDaWgwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzIzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AACAw DQYJKoZIhvcNAQELBQADggEBALgAsDBgKxbsnpTK8gvKkDGTRpJEEFRuN1+sYOeH V148TPmphAd/PiWafeCU4TTTnW0TNH6r4UiqRXt38PX9lz7b14ATehEujJbdvzyz wLeL9snLCVSMAcbaLWWHY3jTiLHX2t+xeHKuQTensaPPQPgMDCPStY73gD9Ko9Yf uPZiNQl5cNL6EYpsxcesPMNYYxqn071F4LlwdVe/6JtFeFmcO+qEdc+zUi1G+5CD IzkDqgVk06IjOGM5dvoeveR5wVam5zKbbNRUnP7afcFeYgO6k8jwLnmRaojaV4SK 1yT/WuHnGypaUShsq91OUPDlRBeenY2bIr3tan/NUH69aJE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:58 2025 by rpki-client