$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: XdrOXi0YHmozyUTdGdPDs01p4K3dMOugfnd624Z663A= Subject key identifier: 4A:80:0E:2B:44:6A:95:04:5A:EB:9B:19:B1:DA:05:26:5D:FB:45:03 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 35379708D7EF69D98DC8CFCAF7B0ADE2131DDF57 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 22 Oct 2025 15:00:02 +0000 ROA not before: Wed 22 Oct 2025 14:55:02 +0000 ROA not after: Wed 21 Oct 2026 15:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:37:97:08:d7:ef:69:d9:8d:c8:cf:ca:f7:b0:ad:e2:13:1d:df:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Oct 22 14:55:02 2025 GMT Not After : Oct 21 15:00:02 2026 GMT Subject: CN=4A800E2B446A95045AEB9B19B1DA05265DFB4503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:dd:fd:02:d2:51:6d:00:77:64:a3:dd:59: 68:f9:86:ee:cd:52:c0:7a:ae:1c:ca:95:cf:72:f9: 28:f0:b1:f6:cb:f1:9e:f3:0e:05:30:51:75:07:e8: 9e:c3:0b:5d:30:38:93:bb:7a:7d:53:de:bf:4e:eb: 9a:91:b9:a0:89:ae:1b:3a:20:48:cd:ae:22:c6:60: 5d:3c:69:35:04:09:eb:c9:1e:2c:94:61:bd:29:79: 55:3a:79:0b:a6:ea:0e:d2:10:55:ba:a8:70:19:51: 7b:5d:a0:57:ec:c5:3d:53:a5:25:64:83:21:ea:6b: bb:fd:1e:8e:41:5f:9a:a4:af:03:4f:8d:ca:c1:ec: e3:18:4f:5d:f4:4d:65:c7:d4:0c:da:01:9c:5b:d1: 3a:17:4f:df:76:6c:a4:14:04:db:7f:a0:ab:65:59: 42:bf:38:b6:18:36:7f:b2:95:2b:44:90:5b:2c:6c: cc:7f:69:27:65:f9:eb:07:7b:a1:36:59:ae:a8:30: 38:a0:a2:d7:fa:a8:c8:dc:ff:e0:52:c6:06:45:2b: df:60:7c:3b:f3:7b:86:04:0b:63:29:e5:5c:24:e7: d4:c7:c3:bd:6a:6f:7e:02:16:d0:ed:a5:b1:f0:11: 2d:0b:32:4d:65:2e:74:d5:f5:85:d9:18:ea:e9:ba: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:80:0E:2B:44:6A:95:04:5A:EB:9B:19:B1:DA:05:26:5D:FB:45:03 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030353a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1005::/48 Signature Algorithm: sha256WithRSAEncryption 97:9f:90:9f:c7:cf:c1:1c:c2:8e:c2:07:24:08:5a:28:f2:97: 41:50:14:97:89:71:fa:c6:9e:17:93:39:86:f2:f9:e4:72:43: 35:89:f4:a6:bf:8d:b6:b9:21:04:31:34:e4:81:a3:87:11:ca: 37:a7:e4:e5:9b:b9:bd:1a:ab:a1:ff:ba:60:78:34:d4:fc:a6: cd:64:ea:37:91:11:42:3b:d2:78:fc:8f:02:f1:40:c4:24:53: 99:8e:f2:38:dc:09:b1:64:1b:21:e7:8f:27:75:f4:7e:46:7c: db:d3:87:37:e2:e6:96:ce:72:76:58:9c:6f:bf:9d:fd:b5:5c: 4f:03:72:de:37:62:81:53:e4:03:ea:47:6b:f1:86:94:00:e3: ba:32:e6:97:b4:a3:af:7f:e6:28:4d:e0:81:75:c8:21:0b:85: 30:3a:df:27:93:40:d9:a1:e0:f2:7c:d0:da:fe:10:c5:1f:9f: 6c:ca:26:e5:d3:dd:96:2e:df:51:bc:39:cb:35:66:13:63:48: 85:ee:58:79:8c:67:cf:54:f9:98:d6:14:c4:f4:7c:74:10:12: 45:d3:e1:1a:e0:38:bc:3b:5f:63:80:6d:8a:bd:d9:4d:a6:f8: 77:d1:e4:62:02:b0:96:d3:8e:49:c7:d3:5b:61:6b:95:f5:6c: 46:5f:bb:64 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNTeXCNfvadmNyM/K97Ct4hMd31cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTEwMjIxNDU1MDJaFw0yNjEwMjExNTAwMDJaMDMxMTAvBgNV BAMTKDRBODAwRTJCNDQ2QTk1MDQ1QUVCOUIxOUIxREEwNTI2NURGQjQ1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObt39AtJRbQB3ZKPdWWj5hu7N UsB6rhzKlc9y+SjwsfbL8Z7zDgUwUXUH6J7DC10wOJO7en1T3r9O65qRuaCJrhs6 IEjNriLGYF08aTUECevJHiyUYb0peVU6eQum6g7SEFW6qHAZUXtdoFfsxT1TpSVk gyHqa7v9Ho5BX5qkrwNPjcrB7OMYT130TWXH1AzaAZxb0ToXT992bKQUBNt/oKtl WUK/OLYYNn+ylStEkFssbMx/aSdl+esHe6E2Wa6oMDigotf6qMjc/+BSxgZFK99g fDvze4YEC2Mp5Vwk59THw71qb34CFtDtpbHwES0LMk1lLnTV9YXZGOrpupspAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSoAOK0RqlQRa65sZsdoFJl37RQMwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAFMA0GCSqGSIb3DQEBCwUAA4IBAQCXn5Cfx8/BHMKOwgckCFoo8pdBUBSXiXH6 xp4XkzmG8vnkckM1ifSmv422uSEEMTTkgaOHEco3p+Tlm7m9Gquh/7pgeDTU/KbN ZOo3kRFCO9J4/I8C8UDEJFOZjvI43AmxZBsh548ndfR+Rnzb04c34uaWznJ2WJxv v539tVxPA3LeN2KBU+QD6kdr8YaUAOO6MuaXtKOvf+YoTeCBdcghC4UwOt8nk0DZ oeDyfNDa/hDFH59syibl092WLt9RvDnLNWYTY0iF7lh5jGfPVPmY1hTE9Hx0EBJF 0+Ea4Di8O19jgG2KvdlNpvh30eRiArCW045Jx9NbYWuV9WxGX7tk -----END CERTIFICATE-----Generated at Tue Nov 4 07:44:22 2025 by rpki-client