$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: VPM7bSxOSEzSq4/IcbWCeEM3zsKgq1eOgYzocbwY+zs= Subject key identifier: 10:1B:0C:A1:84:8A:62:92:A3:98:B2:FA:3A:F2:CC:EB:16:B7:BE:AF Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 4154AFA9B9A17E87DFEC13CE737DDEE8D392D248 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 22 Oct 2025 11:02:25 +0000 ROA not before: Wed 22 Oct 2025 10:57:25 +0000 ROA not after: Wed 21 Oct 2026 11:02:25 +0000 asID: 38156 IP address blocks: 2405:a540:1009::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:54:af:a9:b9:a1:7e:87:df:ec:13:ce:73:7d:de:e8:d3:92:d2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Oct 22 10:57:25 2025 GMT Not After : Oct 21 11:02:25 2026 GMT Subject: CN=101B0CA1848A6292A398B2FA3AF2CCEB16B7BEAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:9f:a6:2f:21:80:7e:5e:df:85:51:c3:99: 29:0e:aa:eb:92:d2:fc:61:d6:d8:74:8d:42:94:22: d5:3d:9c:ca:c4:18:a7:6a:05:7c:da:5a:ed:a2:71: 19:a6:ed:5f:5b:76:0c:0c:e9:bc:0e:3c:20:3f:31: f3:d9:5f:2f:a0:3b:e4:18:bd:f7:64:52:e3:04:9d: ea:49:d4:59:fb:69:77:19:00:80:5d:6e:a7:61:a0: bb:bb:28:17:69:ee:79:57:fd:89:22:61:0d:b6:29: 20:af:2b:3c:33:da:ce:d5:36:c3:d2:e5:ba:4c:ea: 6c:1f:00:0c:ee:29:4f:21:43:ea:e0:3e:a6:16:78: a5:76:03:ec:8d:25:49:22:63:16:90:a3:4e:70:e7: 27:a5:68:2b:75:d3:ce:ab:29:33:e7:71:65:f7:12: e6:bd:4e:a7:84:5c:ef:fc:2b:71:5e:e7:9d:ad:63: f2:ab:68:8c:d8:15:73:f1:3c:dd:22:e0:49:0e:61: 22:b5:52:75:5e:a3:08:fb:c0:4f:bb:07:f7:48:97: 37:b9:87:fe:4c:c3:c5:fd:0c:96:94:b2:24:75:69: 80:30:22:da:1c:ed:6d:ba:6b:4d:5d:e3:89:43:3c: a0:68:d2:42:b5:b8:2a:0e:21:7a:a6:60:5d:e2:fc: 3f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1B:0C:A1:84:8A:62:92:A3:98:B2:FA:3A:F2:CC:EB:16:B7:BE:AF X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030393a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:1009::/48 Signature Algorithm: sha256WithRSAEncryption 82:22:cf:87:83:35:16:78:af:3d:2d:8e:fd:78:b7:b2:e4:3f: 8c:46:aa:b4:67:70:c7:5c:2e:8a:ae:15:5e:5c:1f:e6:6f:71: 94:24:82:fc:da:f2:b7:a8:33:58:9f:ec:57:20:57:b3:0b:09: 8c:26:17:fb:5f:70:9d:f7:2d:68:f3:09:c5:03:99:73:4a:c9: 98:ab:7c:bb:b9:e2:44:dd:a4:7e:fb:18:91:38:b5:f9:7e:31: 02:32:27:57:86:71:ae:0b:6d:ea:57:df:d8:e3:31:8d:d7:63: ff:a5:15:8a:92:9e:c2:8b:a3:6b:73:f0:bc:68:70:83:c4:04: 6f:48:c1:3e:b4:da:1d:f2:c8:e6:13:02:94:0f:8f:68:e7:74: d1:c1:04:0e:e6:40:58:2c:35:6b:67:2d:44:18:4c:b8:f6:00: 1b:a2:bb:66:8e:fb:c5:dc:b9:e0:25:dd:3f:bb:ef:eb:e8:9b: 82:c4:97:8f:33:09:47:8c:30:85:75:4c:be:cc:9d:00:72:2d: 24:37:03:d0:70:2f:7a:dd:62:dc:28:8e:49:5a:21:04:cf:69: 21:e1:d3:97:44:90:46:1b:5e:dd:9a:c9:ea:7c:64:a3:e0:d0: 78:a2:ab:ce:71:47:13:04:26:98:fa:a4:c4:7f:6f:21:1b:38: 1a:c0:57:ee -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQVSvqbmhfoff7BPOc33e6NOS0kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTEwMjIxMDU3MjVaFw0yNjEwMjExMTAyMjVaMDMxMTAvBgNV BAMTKDEwMUIwQ0ExODQ4QTYyOTJBMzk4QjJGQTNBRjJDQ0VCMTZCN0JFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hZ+mLyGAfl7fhVHDmSkOquuS 0vxh1th0jUKUItU9nMrEGKdqBXzaWu2icRmm7V9bdgwM6bwOPCA/MfPZXy+gO+QY vfdkUuMEnepJ1Fn7aXcZAIBdbqdhoLu7KBdp7nlX/YkiYQ22KSCvKzwz2s7VNsPS 5bpM6mwfAAzuKU8hQ+rgPqYWeKV2A+yNJUkiYxaQo05w5yelaCt1086rKTPncWX3 Eua9TqeEXO/8K3Fe552tY/KraIzYFXPxPN0i4EkOYSK1UnVeowj7wE+7B/dIlze5 h/5Mw8X9DJaUsiR1aYAwItoc7W26a01d44lDPKBo0kK1uCoOIXqmYF3i/D8RAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUEBsMoYSKYpKjmLL6OvLM6xa3vq8wHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwMzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAJMA0GCSqGSIb3DQEBCwUAA4IBAQCCIs+HgzUWeK89LY79eLey5D+MRqq0Z3DH XC6KrhVeXB/mb3GUJIL82vK3qDNYn+xXIFezCwmMJhf7X3Cd9y1o8wnFA5lzSsmY q3y7ueJE3aR++xiROLX5fjECMidXhnGuC23qV9/Y4zGN12P/pRWKkp7Ci6Nrc/C8 aHCDxARvSME+tNod8sjmEwKUD49o53TRwQQO5kBYLDVrZy1EGEy49gAbortmjvvF 3LngJd0/u+/r6JuCxJePMwlHjDCFdUy+zJ0Aci0kNwPQcC963WLcKI5JWiEEz2kh 4dOXRJBGG17dmsnqfGSj4NB4oqvOcUcTBCaY+qTEf28hGzgawFfu -----END CERTIFICATE-----Generated at Tue Nov 4 07:44:19 2025 by rpki-client