$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: 9EBEJwJuO7wI8A3BzEnZjzR46Nh6CXM70yH8l6pTzcA= Subject key identifier: AD:20:88:B4:80:6C:DA:5F:B7:84:D4:46:76:DC:00:3E:7E:8C:28:6C Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 557EC0CF2F43270936C2B94F29C28AE6AE8CA8C1 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa Signing time: Thu 02 Oct 2025 10:00:02 +0000 ROA not before: Thu 02 Oct 2025 09:55:02 +0000 ROA not after: Thu 01 Oct 2026 10:00:02 +0000 asID: 55685 IP address blocks: 2404:e100:3002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7e:c0:cf:2f:43:27:09:36:c2:b9:4f:29:c2:8a:e6:ae:8c:a8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Oct 2 09:55:02 2025 GMT Not After : Oct 1 10:00:02 2026 GMT Subject: CN=AD2088B4806CDA5FB784D44676DC003E7E8C286C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:82:b0:c0:22:52:09:1a:9d:5c:ce:a2:12: fa:29:04:05:84:d3:f2:75:95:c6:dc:4a:d1:48:4f: ce:8c:ce:9d:fa:45:1f:6c:73:9d:5f:84:71:88:5a: d4:ff:af:98:c5:84:bb:23:1e:f2:5d:af:e3:e9:f5: b6:8f:e3:5f:53:67:1a:92:ba:64:1c:ea:86:39:a4: ea:c9:fe:4a:ac:e0:97:bb:13:1d:94:cd:84:a5:ac: 61:b6:75:cf:c4:50:88:c7:8f:7d:a4:47:5b:87:44: cb:5d:5d:57:b0:c2:1f:68:cc:9f:da:c1:24:95:c1: 1f:5d:02:1f:4e:ac:b2:f4:c2:54:84:8a:59:96:01: d0:d5:29:14:21:6e:ec:fe:4d:95:a8:ac:ba:f3:e8: 6d:36:ac:84:24:04:27:f1:cb:75:b6:b6:80:ec:f3: 1b:a9:01:46:30:36:2e:66:6c:64:56:f4:33:b2:be: a1:5d:b8:33:37:8c:2c:a5:67:d9:31:5a:ad:ab:39: 47:5d:83:3b:13:e6:86:7b:79:c2:3c:e0:64:ab:0a: 07:fc:74:07:74:eb:a9:b9:45:ef:9d:d2:8f:23:3a: d3:83:52:ca:46:95:49:6d:26:6e:80:c5:aa:03:3b: bd:36:18:f4:e3:d8:dc:19:1a:cd:63:30:f5:f7:a2: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:20:88:B4:80:6C:DA:5F:B7:84:D4:46:76:DC:00:3E:7E:8C:28:6C X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030323a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:3002::/48 Signature Algorithm: sha256WithRSAEncryption 37:fe:ff:20:d1:c2:a0:3d:a5:c0:b0:56:a5:3f:8f:85:a8:d5: fc:bf:a0:2d:0f:d0:3f:45:8b:d3:6e:ee:9f:9f:26:4c:15:0b: 71:cf:2a:b8:09:9c:91:ea:d6:a8:bf:cf:44:d2:4e:da:40:d5: ac:75:69:00:f2:a7:7d:17:86:ac:1d:c1:c7:c0:c9:16:17:1e: de:4b:2a:12:e6:49:d2:ea:ea:4e:a7:96:14:2a:2c:47:26:fe: ac:e6:48:5e:b3:55:ae:bb:76:b1:14:f7:29:86:45:23:f5:4b: 4e:83:30:28:dc:65:a7:cf:fc:2b:b0:d3:d9:70:2c:86:cf:b8: 70:6a:a9:48:c6:53:d1:4d:fc:87:d8:78:6a:73:d8:98:a3:20: 1a:4b:86:85:e7:9d:6a:dc:93:bc:ae:57:75:d4:9b:28:67:3c: ff:e3:40:e4:61:d1:89:74:21:2e:3c:f0:7b:ad:a6:6f:7a:95: 0f:34:ce:54:c8:a4:4d:61:72:17:53:b4:47:5d:e7:b7:b0:8f: f0:4b:71:1f:f8:98:f0:b6:59:31:89:a9:93:b1:b2:1e:52:b6: 54:42:d0:71:4e:ce:a9:80:aa:b5:67:ec:c0:b8:b4:fb:12:eb: 7e:dc:a4:b1:90:f0:2a:8d:39:a4:a2:e0:ac:0c:80:76:81:be: cb:f8:0a:ce -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVX7Azy9DJwk2wrlPKcKK5q6MqMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTEwMDIwOTU1MDJaFw0yNjEwMDExMDAwMDJaMDMxMTAvBgNV BAMTKEFEMjA4OEI0ODA2Q0RBNUZCNzg0RDQ0Njc2REMwMDNFN0U4QzI4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsoKwwCJSCRqdXM6iEvopBAWE 0/J1lcbcStFIT86Mzp36RR9sc51fhHGIWtT/r5jFhLsjHvJdr+Pp9baP419TZxqS umQc6oY5pOrJ/kqs4Je7Ex2UzYSlrGG2dc/EUIjHj32kR1uHRMtdXVewwh9ozJ/a wSSVwR9dAh9OrLL0wlSEilmWAdDVKRQhbuz+TZWorLrz6G02rIQkBCfxy3W2toDs 8xupAUYwNi5mbGRW9DOyvqFduDM3jCylZ9kxWq2rOUddgzsT5oZ7ecI84GSrCgf8 dAd066m5Re+d0o8jOtODUspGlUltJm6AxaoDO702GPTj2NwZGs1jMPX3oiL9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrSCItIBs2l+3hNRGdtwAPn6MKGwwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzMzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATh ADACMA0GCSqGSIb3DQEBCwUAA4IBAQA3/v8g0cKgPaXAsFalP4+FqNX8v6AtD9A/ RYvTbu6fnyZMFQtxzyq4CZyR6taov89E0k7aQNWsdWkA8qd9F4asHcHHwMkWFx7e SyoS5knS6upOp5YUKixHJv6s5khes1Wuu3axFPcphkUj9UtOgzAo3GWnz/wrsNPZ cCyGz7hwaqlIxlPRTfyH2Hhqc9iYoyAaS4aF551q3JO8rld11JsoZzz/40DkYdGJ dCEuPPB7raZvepUPNM5UyKRNYXIXU7RHXee3sI/wS3Ef+JjwtlkxiamTsbIeUrZU QtBxTs6pgKq1Z+zAuLT7Eut+3KSxkPAqjTmkouCsDIB2gb7L+ArO -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:47 2025 by rpki-client