$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: p71Bd7qt2LnQQfHqP0vxYblXT2UAQT2vozq/b5tT5tQ= Subject key identifier: AC:92:E0:6E:02:E5:AA:09:E8:3A:7A:6C:CA:23:C9:3A:70:66:C3:C9 Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 162C1851CC4BF84E45F39FB1776E737C71C25D94 Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa Signing time: Wed 05 Nov 2025 10:02:57 +0000 ROA not before: Wed 05 Nov 2025 09:57:57 +0000 ROA not after: Wed 04 Nov 2026 10:02:57 +0000 asID: 139972 IP address blocks: 2405:c440:3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 13:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:2c:18:51:cc:4b:f8:4e:45:f3:9f:b1:77:6e:73:7c:71:c2:5d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Nov 5 09:57:57 2025 GMT Not After : Nov 4 10:02:57 2026 GMT Subject: CN=AC92E06E02E5AA09E83A7A6CCA23C93A7066C3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:75:ad:21:17:a8:83:54:67:da:ca:59:46: 7d:85:08:f2:c0:7e:59:82:33:48:54:77:55:9f:7a: f2:cc:98:97:b7:92:a1:66:59:c8:65:64:5e:f5:56: 48:ad:bb:3c:ad:2c:0c:ce:1c:5a:a7:49:39:31:82: 7d:e5:b4:11:77:fa:ff:fe:4b:39:92:c8:a2:15:ac: 83:c9:5e:36:a9:4e:15:20:58:d9:56:04:86:88:77: 27:ca:da:3c:dc:c0:f1:10:7f:9f:3c:12:39:79:28: 8d:24:75:37:6f:fa:b8:44:88:ca:ca:d4:fc:b5:48: b2:47:56:e7:d1:33:b6:2e:f9:b1:5d:24:ec:5a:69: 55:52:c1:05:3d:33:77:94:c7:f1:58:0a:44:65:1c: 5a:c0:d9:e8:5f:57:8d:af:1d:6f:93:b9:12:5d:49: d7:da:8b:94:6e:15:b2:e4:f2:ee:0c:85:40:a5:31: 71:c1:6b:cd:06:40:a1:60:67:58:42:33:d3:0e:70: 93:5e:c2:1a:dc:40:b2:81:23:bf:b2:2f:58:8c:2d: e2:80:2c:4c:6f:96:2f:80:9f:bd:1d:de:95:58:fc: 17:56:31:96:0e:9e:38:0a:77:55:f6:68:87:8f:40: 53:c2:a5:af:33:76:e0:34:3a:c3:8f:a7:9c:a9:9b: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:92:E0:6E:02:E5:AA:09:E8:3A:7A:6C:CA:23:C9:3A:70:66:C3:C9 X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:3::/48 Signature Algorithm: sha256WithRSAEncryption 6e:6d:c4:d7:85:7b:65:fc:65:d0:18:37:5a:33:ef:d3:4c:7e: fd:17:57:8d:7b:79:d7:8a:f2:0e:ca:ab:35:f0:32:68:7f:9b: 76:78:d3:5d:f3:df:48:74:73:c4:5e:3e:9e:e5:fe:10:66:4e: c1:30:82:05:3b:bb:6e:c1:aa:2d:01:bb:ae:4a:0e:3e:f1:ba: 00:25:06:29:d9:84:4f:cb:5b:95:34:99:46:f0:b3:0b:d3:67: 7e:08:9b:4d:f8:0c:97:3f:60:06:0b:64:0e:fb:ce:8d:f4:68: ce:44:0c:36:19:78:f7:18:0c:15:25:a9:34:5a:77:8c:fd:cf: 27:5d:26:df:0c:62:9f:7a:f9:87:3a:f7:bd:19:41:15:c8:b5: 24:ce:05:fb:31:78:f0:31:d0:b5:c7:30:36:d2:13:b7:9e:8d: 9a:d7:cb:2e:4f:e2:fe:39:74:dc:0c:02:a8:54:2b:1d:ea:aa: bb:e8:0b:e2:77:41:fb:71:2a:07:7d:83:46:5a:fc:5e:21:99: 35:01:73:9c:5b:95:8b:a3:9e:6a:94:84:8b:e2:9e:8a:00:e8: b7:cc:02:c2:e4:f4:c4:4a:29:82:54:4e:70:38:64:0d:fd:6d: 55:10:89:3a:c3:97:15:56:ef:ad:f7:b2:b9:56:bc:fe:20:55: 70:8f:e3:83 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUFiwYUcxL+E5F85+xd25zfHHCXZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNTExMDUwOTU3NTdaFw0yNjExMDQxMDAyNTdaMDMxMTAvBgNV BAMTKEFDOTJFMDZFMDJFNUFBMDlFODNBN0E2Q0NBMjNDOTNBNzA2NkMzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDi3WtIReog1Rn2spZRn2FCPLA flmCM0hUd1WfevLMmJe3kqFmWchlZF71VkituzytLAzOHFqnSTkxgn3ltBF3+v/+ SzmSyKIVrIPJXjapThUgWNlWBIaIdyfK2jzcwPEQf588Ejl5KI0kdTdv+rhEiMrK 1Py1SLJHVufRM7Yu+bFdJOxaaVVSwQU9M3eUx/FYCkRlHFrA2ehfV42vHW+TuRJd Sdfai5RuFbLk8u4MhUClMXHBa80GQKFgZ1hCM9MOcJNewhrcQLKBI7+yL1iMLeKA LExvli+An70d3pVY/BdWMZYOnjgKd1X2aIePQFPCpa8zduA0OsOPp5ypm4lhAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUrJLgbgLlqgnoOnpsyiPJOnBmw8kwHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAMw DQYJKoZIhvcNAQELBQADggEBAG5txNeFe2X8ZdAYN1oz79NMfv0XV417edeK8g7K qzXwMmh/m3Z4013z30h0c8RePp7l/hBmTsEwggU7u27Bqi0Bu65KDj7xugAlBinZ hE/LW5U0mUbwswvTZ34Im034DJc/YAYLZA77zo30aM5EDDYZePcYDBUlqTRad4z9 zyddJt8MYp96+Yc6970ZQRXItSTOBfsxePAx0LXHMDbSE7eejZrXyy5P4v45dNwM AqhUKx3qqrvoC+J3QftxKgd9g0Za/F4hmTUBc5xblYujnmqUhIvinooA6LfMAsLk 9MRKKYJUTnA4ZA39bVUQiTrDlxVW7633srlWvP4gVXCP44M= -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:42 2025 by rpki-client