$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa File: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (raw, json) Hash identifier: iZCPzSaE2GsmyRSPmdEgeihtKnDbX+HPnVIulKI0y0c= Subject key identifier: 10:FF:36:8B:B7:7A:97:2E:AF:85:00:22:52:74:F0:CB:2E:16:D5:DB Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 1E8610D524CD5F687A676409EE86C3CA82C7BDD1 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa Signing time: Wed 29 Oct 2025 11:02:24 +0000 ROA not before: Wed 29 Oct 2025 10:57:24 +0000 ROA not after: Wed 28 Oct 2026 11:02:24 +0000 asID: 141108 IP address blocks: 2001:df5:c80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:86:10:d5:24:cd:5f:68:7a:67:64:09:ee:86:c3:ca:82:c7:bd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Oct 29 10:57:24 2025 GMT Not After : Oct 28 11:02:24 2026 GMT Subject: CN=10FF368BB77A972EAF8500225274F0CB2E16D5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:99:9f:f1:af:27:a0:fd:d6:ed:5e:84:86: ac:42:b8:2d:e5:4d:b8:09:4f:67:09:8b:de:70:1c: 92:0a:71:8a:df:4f:ba:37:a4:e2:2f:3b:4a:8a:cb: 83:23:f7:db:2f:07:27:28:c9:07:cc:c3:1b:5f:f9: 42:69:a6:e4:f9:7b:2d:7b:73:d6:ef:e1:c6:c2:ed: 00:be:f4:cd:31:29:2c:3f:fa:66:1f:fa:ec:32:cf: f2:9d:49:9e:d3:5e:99:be:8b:f5:95:27:17:59:51: d5:7c:3d:04:ac:0c:4d:02:31:cd:6e:96:33:61:70: 12:97:99:13:51:50:ef:36:3e:37:4e:c2:3f:07:fe: 5a:8f:99:85:00:46:78:5e:cf:2b:a5:6e:b4:44:f9: 1e:bb:44:1b:87:b7:41:db:3a:9c:63:dd:6a:4a:db: 81:00:d0:3d:47:5c:fb:17:88:a8:c7:06:76:f3:c9: d0:a7:9e:6f:90:a1:dd:df:ba:e6:96:b5:9e:4c:28: 0c:76:e6:df:1a:b6:fb:0f:84:51:26:6a:49:20:75: 5d:2e:b2:d1:e0:a5:70:a1:39:96:6a:43:69:9d:65: 48:c7:81:da:0f:9e:5a:26:d0:d9:7b:bc:fa:c6:fc: f0:56:d9:6e:dc:7a:c2:00:ac:c9:38:1f:1b:11:10: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FF:36:8B:B7:7A:97:2E:AF:85:00:22:52:74:F0:CB:2E:16:D5:DB X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df5:c80::/48 Signature Algorithm: sha256WithRSAEncryption 17:42:c6:f2:6a:9a:d3:3d:df:e7:99:1f:71:f3:55:47:f1:9b: 54:6a:13:36:73:a5:ff:c7:08:5e:75:a0:f0:31:a7:0f:d9:d7: bb:ae:e3:9a:43:f4:43:42:48:3d:81:82:7b:f0:56:8b:87:e0: 17:25:0b:6d:51:e4:4e:4b:61:4c:5f:f4:44:97:94:6c:e0:67: 95:2d:97:11:e8:7c:ca:ac:58:13:8d:cf:c9:6a:4d:69:08:72: 49:01:a1:0b:c9:19:a7:46:aa:7e:42:75:49:02:5b:10:af:07: 60:90:96:07:ce:99:6d:38:9f:7b:6b:b4:a9:9f:3b:4b:a7:c2: 08:1a:56:4c:9b:1b:5e:19:7b:e8:b5:89:6b:9f:d1:23:74:11: 74:c5:8b:f0:ea:2f:bb:18:38:10:20:96:5d:2e:43:bc:ff:5d: 87:ff:d4:0d:9e:e5:45:83:98:51:5d:cb:26:55:a2:62:46:95: 78:02:0c:fe:ed:fc:40:ad:8c:fe:1e:a5:b1:8b:45:74:42:65: d6:c4:1c:e2:6a:2e:2a:e9:f0:b8:b9:3b:88:fa:d6:23:3d:80: a9:53:7e:01:c5:99:c8:22:7a:85:9e:ee:02:20:56:10:1f:fb: 9f:21:8b:0c:74:69:0a:96:8c:98:b3:db:8c:cb:c5:3f:7e:18: 6a:38:fa:77 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUHoYQ1STNX2h6Z2QJ7obDyoLHvdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTEwMjkxMDU3MjRaFw0yNjEwMjgxMTAyMjRaMDMxMTAvBgNV BAMTKDEwRkYzNjhCQjc3QTk3MkVBRjg1MDAyMjUyNzRGMENCMkUxNkQ1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUJmf8a8noP3W7V6EhqxCuC3l TbgJT2cJi95wHJIKcYrfT7o3pOIvO0qKy4Mj99svBycoyQfMwxtf+UJppuT5ey17 c9bv4cbC7QC+9M0xKSw/+mYf+uwyz/KdSZ7TXpm+i/WVJxdZUdV8PQSsDE0CMc1u ljNhcBKXmRNRUO82PjdOwj8H/lqPmYUARnhezyulbrRE+R67RBuHt0HbOpxj3WpK 24EA0D1HXPsXiKjHBnbzydCnnm+Qod3fuuaWtZ5MKAx25t8atvsPhFEmakkgdV0u stHgpXChOZZqQ2mdZUjHgdoPnlom0Nl7vPrG/PBW2W7cesIArMk4HxsREOzXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUEP82i7d6ly6vhQAiUnTwyy4W1dswHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwMWI3OWFjLTMzNTEtNDcwNS04 YzNkLTYwMmFkY2Q3OWJiNy8wLzMyMzAzMDMxM2E2NDY2MzUzYTYzMzgzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTMxMzAzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfUM gDANBgkqhkiG9w0BAQsFAAOCAQEAF0LG8mqa0z3f55kfcfNVR/GbVGoTNnOl/8cI XnWg8DGnD9nXu67jmkP0Q0JIPYGCe/BWi4fgFyULbVHkTkthTF/0RJeUbOBnlS2X Eeh8yqxYE43PyWpNaQhySQGhC8kZp0aqfkJ1SQJbEK8HYJCWB86ZbTife2u0qZ87 S6fCCBpWTJsbXhl76LWJa5/RI3QRdMWL8Oovuxg4ECCWXS5DvP9dh//UDZ7lRYOY UV3LJlWiYkaVeAIM/u38QK2M/h6lsYtFdEJl1sQc4mouKunwuLk7iPrWIz2AqVN+ AcWZyCJ6hZ7uAiBWEB/7nyGLDHRpCpaMmLPbjMvFP34Yajj6dw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:57:44 2025 by rpki-client