$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: XBXmimObXH3AIHvu7KCCeuJLi5FBjnBqRwUU2C8xUWI= Subject key identifier: 3C:8F:3F:1D:6A:6E:FF:21:E2:EC:8C:B4:06:5F:1B:A2:1E:B9:C1:CE Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 793830FD34505CA8E440BDF9FE66751BE070EC90 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 22 Oct 2025 15:00:02 +0000 ROA not before: Wed 22 Oct 2025 14:55:02 +0000 ROA not after: Wed 21 Oct 2026 15:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:1006::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:38:30:fd:34:50:5c:a8:e4:40:bd:f9:fe:66:75:1b:e0:70:ec:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Oct 22 14:55:02 2025 GMT Not After : Oct 21 15:00:02 2026 GMT Subject: CN=3C8F3F1D6A6EFF21E2EC8CB4065F1BA21EB9C1CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:06:32:12:93:c7:0a:6d:bc:70:26:3d:90: 51:e9:72:35:b6:81:b9:8b:9a:57:a9:57:fc:8f:da: 55:f6:de:27:5c:b5:3a:52:86:a8:13:22:d4:91:53: 5c:64:8a:ac:8d:d0:31:9b:0f:00:fc:01:5e:cb:13: b5:20:9f:39:c3:a7:73:71:6c:44:1a:a1:4e:de:b5: 5f:e1:af:ca:04:e5:26:ec:47:a2:f3:95:11:68:e9: 51:9e:59:4e:2d:74:d5:4e:35:d2:50:06:97:22:8b: e7:29:55:cb:1a:8a:13:c8:a2:e6:ca:0c:dd:74:54: a4:42:12:76:c4:e2:4a:4b:67:46:f6:16:de:33:a1: f4:2f:89:f8:94:27:5c:0a:93:2f:a0:51:8e:d6:f9: e0:26:68:44:94:19:5d:63:7b:68:62:11:36:98:a5: e6:c4:1c:db:8f:85:e1:12:3e:24:09:be:cc:ff:06: 61:f0:c4:01:56:38:0b:f0:27:70:89:0d:5c:18:8e: 69:3c:50:d9:80:78:3a:12:18:83:ef:3a:79:0e:be: 9a:5a:71:30:3f:a8:8c:2e:2e:ae:81:10:06:b2:16: 64:f4:4f:5b:17:72:a9:db:09:32:00:a7:31:87:55: e3:21:61:f5:ac:39:cc:b4:2d:dd:a0:fe:8b:d6:4c: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8F:3F:1D:6A:6E:FF:21:E2:EC:8C:B4:06:5F:1B:A2:1E:B9:C1:CE X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030363a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1006::/48 Signature Algorithm: sha256WithRSAEncryption c8:11:60:19:f5:5b:ae:84:11:dc:96:4a:b5:61:7b:58:58:a9: 2a:09:ac:f4:91:e8:54:fe:0d:c1:72:f4:95:05:65:6b:f9:8a: df:5f:6c:a2:bc:f9:ca:ac:23:f3:64:fc:b3:f0:ce:58:18:8d: b1:f0:05:2f:6e:d6:11:3a:39:81:cc:19:e1:af:74:0f:d4:a2: c3:04:3e:ad:05:99:2a:9b:36:b6:e7:2b:3c:8f:43:8a:1b:f9: a8:05:8e:98:b1:83:b9:72:38:e2:96:b3:20:36:f9:77:9e:ff: b6:5a:b8:7a:40:21:09:7b:d7:08:81:15:49:40:bd:b2:26:8c: ed:94:ca:3f:2d:40:13:6d:38:99:74:25:c3:49:ae:c1:2b:2c: 28:43:4e:97:30:36:04:c1:c0:e2:c9:da:32:14:3e:cf:0d:59: 28:00:d7:0a:68:0f:82:67:c7:78:da:3e:4a:4a:d2:c8:ee:e1: 91:06:2d:6d:53:ed:39:8b:c9:58:71:99:f0:06:ee:b6:a5:a0: 37:68:b0:b1:1c:a4:b2:58:77:80:fe:92:96:d1:0c:15:dc:be: 7f:b2:8a:0e:4c:76:3c:bd:b3:a5:2b:59:4f:80:41:7d:a4:33: 54:f3:f7:8a:f4:0f:1a:aa:58:f3:2c:ed:96:1c:f5:e1:3e:67: 4e:5f:43:97 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeTgw/TRQXKjkQL35/mZ1G+Bw7JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTEwMjIxNDU1MDJaFw0yNjEwMjExNTAwMDJaMDMxMTAvBgNV BAMTKDNDOEYzRjFENkE2RUZGMjFFMkVDOENCNDA2NUYxQkEyMUVCOUMxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfQYyEpPHCm28cCY9kFHpcjW2 gbmLmlepV/yP2lX23idctTpShqgTItSRU1xkiqyN0DGbDwD8AV7LE7UgnznDp3Nx bEQaoU7etV/hr8oE5SbsR6LzlRFo6VGeWU4tdNVONdJQBpcii+cpVcsaihPIoubK DN10VKRCEnbE4kpLZ0b2Ft4zofQvifiUJ1wKky+gUY7W+eAmaESUGV1je2hiETaY pebEHNuPheESPiQJvsz/BmHwxAFWOAvwJ3CJDVwYjmk8UNmAeDoSGIPvOnkOvppa cTA/qIwuLq6BEAayFmT0T1sXcqnbCTIApzGHVeMhYfWsOcy0Ld2g/ovWTJAxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUPI8/HWpu/yHi7Iy0Bl8boh65wc4wHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAGMA0GCSqGSIb3DQEBCwUAA4IBAQDIEWAZ9VuuhBHclkq1YXtYWKkqCaz0kehU /g3BcvSVBWVr+YrfX2yivPnKrCPzZPyz8M5YGI2x8AUvbtYROjmBzBnhr3QP1KLD BD6tBZkqmza25ys8j0OKG/moBY6YsYO5cjjilrMgNvl3nv+2Wrh6QCEJe9cIgRVJ QL2yJoztlMo/LUATbTiZdCXDSa7BKywoQ06XMDYEwcDiydoyFD7PDVkoANcKaA+C Z8d42j5KStLI7uGRBi1tU+05i8lYcZnwBu62paA3aLCxHKSyWHeA/pKW0QwV3L5/ sooOTHY8vbOlK1lPgEF9pDNU8/eK9A8aqljzLO2WHPXhPmdOX0OX -----END CERTIFICATE-----Generated at Tue Nov 4 07:44:20 2025 by rpki-client