$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/323430353a646238303a3a2f33322d3332203d3e20313335343539.roa File: 323430353a646238303a3a2f33322d3332203d3e20313335343539.roa (raw, json) Hash identifier: YaMwkR41AdvOC7lp8b8/qG+wA8LmPjMEdab45baxyRY= Subject key identifier: 74:46:D0:D5:31:93:BF:DF:F9:60:89:84:5B:3D:07:70:0B:99:50:25 Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Certificate serial: 010134525B5BC2CA8241A26F83BF0C950C516959 Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/323430353a646238303a3a2f33322d3332203d3e20313335343539.roa Signing time: Wed 22 Oct 2025 18:00:01 +0000 ROA not before: Wed 22 Oct 2025 17:55:01 +0000 ROA not after: Wed 21 Oct 2026 18:00:01 +0000 asID: 135459 IP address blocks: 2405:db80::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:01:34:52:5b:5b:c2:ca:82:41:a2:6f:83:bf:0c:95:0c:51:69:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Validity Not Before: Oct 22 17:55:01 2025 GMT Not After : Oct 21 18:00:01 2026 GMT Subject: CN=7446D0D53193BFDFF96089845B3D07700B995025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:bc:c1:97:a6:82:91:93:be:55:1f:e3:67: e8:dd:e4:45:fb:c4:04:59:5a:34:8b:14:a1:fa:1f: 1b:57:c4:4d:74:0f:6c:66:e8:cf:96:6d:80:69:aa: 08:8d:46:f5:aa:21:1c:87:bf:20:3e:ee:d8:53:d4: aa:d3:f1:4a:af:1d:85:f6:66:14:bc:fe:f3:ad:50: e7:90:91:a3:c6:68:53:50:d1:d6:33:81:17:41:ad: e9:ef:3c:3f:c4:d3:b0:65:fb:fd:f7:4c:4f:9c:0a: af:ec:90:f7:01:a7:5e:26:a0:e4:e5:56:10:7f:09: 8c:d2:4e:ae:82:b5:7d:c5:e3:d3:ec:f0:eb:63:96: 85:46:93:96:7f:54:24:58:06:4e:fe:50:f8:22:92: fe:0c:7f:1f:7a:5d:d0:5e:bf:b2:17:83:11:88:4c: e1:e9:60:6d:22:a2:55:a8:08:2e:85:0f:50:70:da: 2e:41:c5:13:2d:35:f3:45:a5:34:0b:d4:73:b3:a9: 23:e8:11:a3:02:83:3a:34:2e:61:b5:29:4d:a2:08: 15:4a:03:3f:6e:f3:c2:4c:11:f6:3f:aa:55:89:3a: de:c0:b2:a3:2c:b8:af:12:c6:ed:58:ef:f9:85:ff: 17:24:45:4c:fb:4e:a4:d5:04:82:f4:bd:df:3c:9d: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:D0:D5:31:93:BF:DF:F9:60:89:84:5B:3D:07:70:0B:99:50:25 X509v3 Authority Key Identifier: keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/323430353a646238303a3a2f33322d3332203d3e20313335343539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:db80::/32 Signature Algorithm: sha256WithRSAEncryption 0d:2e:a8:2e:ca:d5:83:32:db:99:8f:5d:f5:05:25:b9:93:b0: 39:b0:da:3c:ae:0e:69:97:b6:ba:96:52:2a:82:a4:6d:e5:d0: 19:63:f5:e0:ec:71:78:98:d7:14:0f:fb:fe:77:25:3c:49:bb: 80:d1:ab:7b:d9:8b:8e:36:09:71:36:28:a6:93:7c:17:2d:ec: 3e:d8:7c:04:ab:fe:59:c1:75:31:87:6f:64:09:d1:98:4c:7b: e9:71:83:a2:0f:c3:63:7a:6a:b7:c9:39:33:e6:17:f1:a3:1a: d3:15:72:ff:24:b6:fd:e6:ff:fa:a5:c5:ce:ab:3a:27:ce:7b: 11:fd:c2:75:63:cd:a5:6b:64:9c:1f:1f:a7:0b:8d:c2:eb:71: ed:db:8b:6c:66:00:a0:a0:2e:ac:8b:4e:34:50:a3:88:0a:06: 08:1b:5d:67:71:e5:bb:cf:20:2e:e9:c9:50:dd:9a:10:dc:3a: c3:c1:dd:88:ab:be:b1:89:f9:d2:35:f7:aa:1e:4d:a9:6d:58: 5a:69:08:54:20:8a:06:b0:fa:ef:83:96:d1:61:b3:14:b6:1c: b1:86:e8:08:f2:dc:2f:5c:95:07:79:20:de:2b:28:63:55:bd: 53:cc:29:98:b7:16:eb:7c:f6:4e:ba:9b:0d:1e:85:29:2a:ca: 68:11:22:c5 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUAQE0UltbwsqCQaJvg78MlQxRaVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw RTMxMDQ0ODAeFw0yNTEwMjIxNzU1MDFaFw0yNjEwMjExODAwMDFaMDMxMTAvBgNV BAMTKDc0NDZEMEQ1MzE5M0JGREZGOTYwODk4NDVCM0QwNzcwMEI5OTUwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvG7zBl6aCkZO+VR/jZ+jd5EX7 xARZWjSLFKH6HxtXxE10D2xm6M+WbYBpqgiNRvWqIRyHvyA+7thT1KrT8UqvHYX2 ZhS8/vOtUOeQkaPGaFNQ0dYzgRdBrenvPD/E07Bl+/33TE+cCq/skPcBp14moOTl VhB/CYzSTq6CtX3F49Ps8OtjloVGk5Z/VCRYBk7+UPgikv4Mfx96XdBev7IXgxGI TOHpYG0iolWoCC6FD1Bw2i5BxRMtNfNFpTQL1HOzqSPoEaMCgzo0LmG1KU2iCBVK Az9u88JMEfY/qlWJOt7AsqMsuK8Sxu1Y7/mF/xckRUz7TqTVBIL0vd88nc45AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUdEbQ1TGTv9/5YImEWz0HcAuZUCUwHwYDVR0j BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx MDQ0OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h M2QwLTg3OWVkNmExOTE5Ni8wLzMyMzQzMDM1M2E2NDYyMzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNTM0MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQF24AwDQYJKoZI hvcNAQELBQADggEBAA0uqC7K1YMy25mPXfUFJbmTsDmw2jyuDmmXtrqWUiqCpG3l 0Blj9eDscXiY1xQP+/53JTxJu4DRq3vZi442CXE2KKaTfBct7D7YfASr/lnBdTGH b2QJ0ZhMe+lxg6IPw2N6arfJOTPmF/GjGtMVcv8ktv3m//qlxc6rOifOexH9wnVj zaVrZJwfH6cLjcLrce3bi2xmAKCgLqyLTjRQo4gKBggbXWdx5bvPIC7pyVDdmhDc OsPB3YirvrGJ+dI196oeTaltWFppCFQgigaw+u+DltFhsxS2HLGG6Ajy3C9clQd5 IN4rKGNVvVPMKZi3Fut89k66mw0ehSkqymgRIsU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:51 2025 by rpki-client