$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203338373834.roa File: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (raw, json) Hash identifier: G8PV7882jIzL7DpesLHcinlC2gFpMWki9wF55ivTArc= Subject key identifier: A8:58:4A:C4:E4:ED:09:19:6A:E9:0B:AD:1C:B6:4E:28:3D:3A:F3:2F Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 19F973E2682F28C6E113442ED787EA3383BA9CDB Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203338373834.roa Signing time: Wed 29 Oct 2025 11:00:01 +0000 ROA not before: Wed 29 Oct 2025 10:55:01 +0000 ROA not after: Wed 28 Oct 2026 11:00:01 +0000 asID: 38784 IP address blocks: 2401:8240::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f9:73:e2:68:2f:28:c6:e1:13:44:2e:d7:87:ea:33:83:ba:9c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Oct 29 10:55:01 2025 GMT Not After : Oct 28 11:00:01 2026 GMT Subject: CN=A8584AC4E4ED09196AE90BAD1CB64E283D3AF32F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:81:1a:01:26:a2:14:eb:3d:ae:81:2b:22: bf:6c:81:4d:5e:91:5f:e3:fa:08:ea:34:8d:64:ce: e9:16:a7:24:fd:7d:1e:9f:b6:35:9c:42:c4:d7:31: c0:c3:19:16:6e:e1:d4:67:29:36:6b:a6:ed:c0:7c: 93:6e:f2:f3:75:5c:19:f6:ff:26:a0:ea:1e:81:bf: b5:17:d5:da:07:b4:2e:b2:66:b4:2f:fa:57:93:99: 4b:7c:b1:a2:09:7b:4e:fc:b6:a9:ba:ed:ba:1e:59: 43:bf:ad:d5:c7:52:bc:73:6b:86:9c:f4:16:35:c4: bf:8e:23:3f:00:4a:31:ef:c4:f4:17:a6:50:19:c9: 18:eb:96:ad:45:9c:17:7f:b2:a8:2c:3a:b1:a7:d1: 92:cb:3c:35:34:02:32:e1:80:18:92:d2:46:31:97: 9a:71:98:17:c1:a6:93:ff:92:ea:82:0a:c7:2c:f6: 22:d3:9c:d2:9a:d6:37:67:15:65:1c:24:43:f6:d8: 3c:26:23:0f:68:53:93:69:8a:f6:46:d7:a1:2a:f9: e0:c3:9a:d5:a3:98:97:93:1f:3d:3b:0b:fc:c0:f3: 82:e0:68:e0:49:4a:01:66:65:40:ec:ec:38:bc:2a: 53:2d:56:f6:4a:bc:13:d3:38:95:5b:9b:aa:47:c8: c2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:58:4A:C4:E4:ED:09:19:6A:E9:0B:AD:1C:B6:4E:28:3D:3A:F3:2F X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/323430313a383234303a3a2f33322d3438203d3e203338373834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8240::/32 Signature Algorithm: sha256WithRSAEncryption 4e:68:3c:16:1b:fc:c0:ef:e8:0d:1d:87:7b:3f:95:b6:de:bb: 0b:9e:91:06:ce:e2:da:e4:3c:72:31:82:c2:6b:27:6f:eb:39: d2:52:35:b9:1f:97:1f:65:2c:9c:c9:72:8d:ee:88:8f:d8:02: 47:9d:62:99:7e:c8:02:a7:14:a0:44:ea:f6:b6:ca:ff:77:f7: b9:11:84:b9:f5:41:dc:35:be:b3:72:da:08:45:fd:12:d7:48: 1d:b1:e1:c1:b6:55:37:a9:53:03:41:ca:de:1b:3a:ab:99:dc: 1c:1c:db:38:db:62:6c:07:aa:a4:b9:0c:a4:4c:13:e8:1d:a8: 93:da:60:b7:16:ac:fa:d3:5f:17:6d:8b:08:26:b5:e3:f2:50: 9c:95:b2:d1:6e:f3:26:12:32:f7:74:60:c5:ab:aa:71:b0:41: 75:02:b1:28:b3:c5:4f:ec:15:c4:52:10:a1:b2:7e:c3:f9:a8: a5:7f:85:96:a2:97:c6:58:2f:eb:69:25:d4:2f:a6:e2:97:aa: 7b:cb:51:b8:68:5d:54:ff:74:61:76:27:42:42:27:bc:c4:80: d1:3a:0f:16:1b:33:79:e8:52:3d:31:f1:26:ce:11:5c:94:2c: 29:49:24:77:a8:9f:25:6d:42:de:89:9a:18:02:a6:c9:61:da: 79:57:a6:94 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUGflz4mgvKMbhE0Qu14fqM4O6nNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTEwMjkxMDU1MDFaFw0yNjEwMjgxMTAwMDFaMDMxMTAvBgNV BAMTKEE4NTg0QUM0RTRFRDA5MTk2QUU5MEJBRDFDQjY0RTI4M0QzQUYzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRIEaASaiFOs9roErIr9sgU1e kV/j+gjqNI1kzukWpyT9fR6ftjWcQsTXMcDDGRZu4dRnKTZrpu3AfJNu8vN1XBn2 /yag6h6Bv7UX1doHtC6yZrQv+leTmUt8saIJe078tqm67boeWUO/rdXHUrxza4ac 9BY1xL+OIz8ASjHvxPQXplAZyRjrlq1FnBd/sqgsOrGn0ZLLPDU0AjLhgBiS0kYx l5pxmBfBppP/kuqCCscs9iLTnNKa1jdnFWUcJEP22DwmIw9oU5NpivZG16Eq+eDD mtWjmJeTHz07C/zA84LgaOBJSgFmZUDs7Di8KlMtVvZKvBPTOJVbm6pHyMJ5AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUqFhKxOTtCRlq6QutHLZOKD068y8wHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0NTQ3MTA0LTkzOWUtNDBlMy04 ZmM4LTQyNTIyNjQyMDQ0Yi8wLzMyMzQzMDMxM2EzODMyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMzMzgzNzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAYJAMA0GCSqGSIb3 DQEBCwUAA4IBAQBOaDwWG/zA7+gNHYd7P5W23rsLnpEGzuLa5DxyMYLCaydv6znS UjW5H5cfZSycyXKN7oiP2AJHnWKZfsgCpxSgROr2tsr/d/e5EYS59UHcNb6zctoI Rf0S10gdseHBtlU3qVMDQcreGzqrmdwcHNs422JsB6qkuQykTBPoHaiT2mC3Fqz6 018XbYsIJrXj8lCclbLRbvMmEjL3dGDFq6pxsEF1ArEos8VP7BXEUhChsn7D+ail f4WWopfGWC/raSXUL6bil6p7y1G4aF1U/3RhdidCQie8xIDROg8WGzN56FI9MfEm zhFclCwpSSR3qJ8lbULeiZoYAqbJYdp5V6aU -----END CERTIFICATE-----Generated at Wed Nov 5 15:12:53 2025 by rpki-client