$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32343a3a2f34382d3438203d3e203536323436.roa File: 323430343a666430303a32343a3a2f34382d3438203d3e203536323436.roa (raw, json) Hash identifier: teYSyjAAIepfH2LUkdq8hO5bA0Q+j1BoLkEy9Dgot54= Subject key identifier: 21:8F:25:A3:B3:A7:20:90:16:4B:EA:2C:7A:BF:ED:AD:D2:22:23:BD Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 5DC5312D1421F3C285CE9A015885EA41FDB095AF Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32343a3a2f34382d3438203d3e203536323436.roa Signing time: Fri 31 Oct 2025 04:02:26 +0000 ROA not before: Fri 31 Oct 2025 03:57:26 +0000 ROA not after: Fri 30 Oct 2026 04:02:26 +0000 asID: 56246 IP address blocks: 2404:fd00:24::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c5:31:2d:14:21:f3:c2:85:ce:9a:01:58:85:ea:41:fd:b0:95:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 31 03:57:26 2025 GMT Not After : Oct 30 04:02:26 2026 GMT Subject: CN=218F25A3B3A72090164BEA2C7ABFEDADD22223BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:10:7c:66:bf:da:df:33:96:21:c3:e9:68: d9:12:b4:5d:38:29:e2:c4:b4:ef:77:b1:69:34:11: 3c:d0:2b:f8:2f:e1:7d:23:55:4a:fc:7b:61:69:96: 14:18:66:ed:98:96:ac:16:6c:20:3b:22:46:78:b5: f5:42:de:d5:40:2b:45:15:c9:34:f4:7f:42:02:19: af:b2:b5:84:34:12:7b:a8:15:e5:6c:dc:89:3c:ac: ee:7d:01:82:70:59:d9:0b:eb:08:76:b4:c1:0a:e9: c6:3f:55:1d:e2:eb:f0:db:f3:76:4a:41:4e:0d:96: 32:bd:d6:bd:27:e6:ff:68:db:38:b8:32:da:1f:58: 81:68:33:93:c9:a3:d6:99:a6:d1:52:1a:40:40:a1: 22:e9:bf:bd:d2:b7:6f:a3:33:8c:b3:d7:1c:8c:05: 9b:dd:2e:7a:f6:e9:32:8b:3e:78:80:1c:6d:cf:54: bc:43:3f:59:8d:6b:8a:b3:ee:80:63:b2:07:8d:e5: 1f:6a:8d:4d:63:8d:c6:54:b5:3e:e9:37:f2:1f:83: 3b:70:e6:e9:3d:96:d0:c3:ee:77:c6:eb:74:4e:24: 9a:ea:e7:83:b3:04:d9:64:8c:0e:0d:e1:60:10:48: 95:b1:5b:d6:42:19:36:10:67:c8:c8:42:73:cf:19: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8F:25:A3:B3:A7:20:90:16:4B:EA:2C:7A:BF:ED:AD:D2:22:23:BD X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32343a3a2f34382d3438203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:24::/48 Signature Algorithm: sha256WithRSAEncryption 64:d4:c9:ce:1f:5a:2e:88:08:20:3e:34:cc:54:2b:51:cc:dc: d3:31:ac:bb:17:51:36:eb:ac:62:fd:f7:6b:2f:b4:d1:53:d1: f8:d3:d5:e3:d7:da:b0:59:a1:7b:f8:7f:3b:0e:ee:34:c9:04: de:8c:da:2d:25:57:40:d6:0e:28:93:01:38:bf:21:da:ed:bc: ff:2e:8c:c5:05:8c:a5:83:b1:e4:af:1b:be:9f:6f:6e:00:5d: 45:12:85:fa:8d:8b:3b:23:0a:f6:f1:c3:2e:b1:ba:35:d7:a1: 47:76:ec:3e:41:a4:f2:f7:4b:86:30:76:26:a5:9a:d4:44:01: cb:40:f2:8f:63:86:9f:f8:7a:a9:69:4e:3d:6e:53:1e:8c:76: f4:f9:68:fd:f9:f1:0c:f7:c6:06:f0:7f:14:60:10:64:c9:b3: 67:51:00:4c:59:09:28:fe:60:ec:e7:6b:5a:8f:51:ee:ff:bd: 36:30:54:a4:b4:ae:06:00:fa:cb:1c:50:8c:88:bf:c4:6b:e3: 83:4b:60:a7:9c:d4:53:9f:39:65:49:c0:83:b8:b8:c8:82:03: 2f:c4:e9:f0:83:d3:ba:b3:83:a0:eb:c1:97:94:23:5e:29:7c: 53:2e:3c:e6:33:05:12:f5:49:17:c3:96:75:85:e5:c2:54:83: 3a:cf:c7:b9 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUXcUxLRQh88KFzpoBWIXqQf2wla8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMzEwMzU3MjZaFw0yNjEwMzAwNDAyMjZaMDMxMTAvBgNV BAMTKDIxOEYyNUEzQjNBNzIwOTAxNjRCRUEyQzdBQkZFREFERDIyMjIzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADBB8Zr/a3zOWIcPpaNkStF04 KeLEtO93sWk0ETzQK/gv4X0jVUr8e2FplhQYZu2YlqwWbCA7IkZ4tfVC3tVAK0UV yTT0f0ICGa+ytYQ0EnuoFeVs3Ik8rO59AYJwWdkL6wh2tMEK6cY/VR3i6/Db83ZK QU4NljK91r0n5v9o2zi4MtofWIFoM5PJo9aZptFSGkBAoSLpv73St2+jM4yz1xyM BZvdLnr26TKLPniAHG3PVLxDP1mNa4qz7oBjsgeN5R9qjU1jjcZUtT7pN/Ifgztw 5uk9ltDD7nfG63ROJJrq54OzBNlkjA4N4WAQSJWxW9ZCGTYQZ8jIQnPPGZaHAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUIY8lo7OnIJAWS+oser/trdIiI70wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzIzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzYzMjM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AACQw DQYJKoZIhvcNAQELBQADggEBAGTUyc4fWi6ICCA+NMxUK1HM3NMxrLsXUTbrrGL9 92svtNFT0fjT1ePX2rBZoXv4fzsO7jTJBN6M2i0lV0DWDiiTATi/IdrtvP8ujMUF jKWDseSvG76fb24AXUUShfqNizsjCvbxwy6xujXXoUd27D5BpPL3S4YwdialmtRE ActA8o9jhp/4eqlpTj1uUx6MdvT5aP358Qz3xgbwfxRgEGTJs2dRAExZCSj+YOzn a1qPUe7/vTYwVKS0rgYA+sscUIyIv8Rr44NLYKec1FOfOWVJwIO4uMiCAy/E6fCD 07qzg6DrwZeUI14pfFMuPOYzBRL1SRfDlnWF5cJUgzrPx7k= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:06 2025 by rpki-client