$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: YtWm5fGqM435Y5TUGI1B66GarvIjfoafx1YzOT5rF14= Subject key identifier: 57:9D:5E:AD:E5:9F:DB:DE:51:2F:CF:8E:6A:D8:5A:ED:42:14:F7:DE Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 4785ED36327B1D21D8CC4EAC1DC9A63A8ACC2087 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 22 Oct 2025 16:00:02 +0000 ROA not before: Wed 22 Oct 2025 15:55:02 +0000 ROA not after: Wed 21 Oct 2026 16:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:100c::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:85:ed:36:32:7b:1d:21:d8:cc:4e:ac:1d:c9:a6:3a:8a:cc:20:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Oct 22 15:55:02 2025 GMT Not After : Oct 21 16:00:02 2026 GMT Subject: CN=579D5EADE59FDBDE512FCF8E6AD85AED4214F7DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:fa:ff:86:37:2d:ef:6e:19:01:52:a0:ce: fd:7a:fa:f7:3d:80:80:39:13:fb:2d:2d:95:82:9f: f6:f6:ff:8e:b6:08:d3:02:fd:cc:d0:f7:0f:a6:1e: 0a:da:2a:87:82:38:a2:be:51:5d:6c:3a:7e:a9:a2: e8:63:10:ea:f3:5b:31:57:3c:a1:2c:33:36:58:6f: b5:d2:b6:9b:33:6d:fd:50:e2:0c:1a:19:49:df:64: e2:72:d6:b0:75:aa:83:ab:2d:40:d8:9d:e1:28:34: ae:f2:f0:43:24:d5:32:ae:ee:51:07:91:64:50:c4: d8:86:b6:5a:8c:74:d4:28:9c:00:4c:0b:92:be:ce: 01:d3:93:f0:79:0f:ea:e7:05:38:32:8a:4d:ee:3d: 44:08:3f:8e:59:5a:89:d1:0e:1b:f8:04:57:79:36: 42:a8:ad:ee:ff:3d:f6:d1:bd:91:7b:fc:f1:85:f1: 7f:4a:7c:a1:91:91:30:99:8b:a1:61:69:85:fe:af: 81:20:c9:ca:ba:f9:6f:61:9e:7e:ac:da:2d:b0:88: 0e:21:aa:d0:b9:cc:84:05:8c:73:31:72:71:3f:01: 92:24:3a:a8:1a:19:ef:ed:66:9c:13:9c:36:78:cf: db:f6:0a:92:95:36:18:e3:cf:c5:17:1c:49:7e:5e: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9D:5E:AD:E5:9F:DB:DE:51:2F:CF:8E:6A:D8:5A:ED:42:14:F7:DE X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030633a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:100c::/48 Signature Algorithm: sha256WithRSAEncryption 02:fb:70:5d:0c:f0:4c:c9:4d:43:58:88:c4:32:85:8c:d1:9f: bf:da:28:10:7a:37:2a:8b:f3:6f:b9:ed:a5:bb:bd:07:55:88: 63:e7:1c:76:f4:32:59:21:34:44:cc:0f:21:58:1d:87:4c:0a: 4f:37:79:b0:a2:73:ae:3f:45:c3:3a:96:cc:d6:ba:f2:32:bb: fc:a6:0d:d3:fc:03:30:df:cd:aa:29:47:49:6c:43:fa:f3:f2: 81:91:59:71:c5:0b:ed:9e:73:c5:b6:ce:ff:85:15:17:58:97: 51:4b:0e:e3:3b:5d:f5:f9:3e:76:31:df:4e:e3:c5:5e:eb:95: 2b:fe:57:0c:63:b1:52:c4:b4:20:f6:95:0d:b1:c8:78:68:74: 99:32:0f:ea:f0:fe:28:a7:da:25:fc:f3:a9:91:61:f1:45:d3: 26:7a:ef:b8:f4:a4:d9:99:ca:c7:3a:bc:f6:da:f6:03:ac:7a: 16:56:d0:d1:af:02:01:96:d4:1a:63:92:0c:f6:57:82:5e:c4: 75:02:fa:7d:4c:10:e9:6e:1d:53:19:df:83:91:83:64:85:11: 61:61:b8:83:12:09:ab:3e:49:59:88:e0:36:86:ef:e2:38:f9: 63:1a:ee:e5:9d:e8:ec:8e:4c:3c:14:04:0b:d0:0b:bf:67:ee: b3:2d:67:a7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUR4XtNjJ7HSHYzE6sHcmmOorMIIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTEwMjIxNTU1MDJaFw0yNjEwMjExNjAwMDJaMDMxMTAvBgNV BAMTKDU3OUQ1RUFERTU5RkRCREU1MTJGQ0Y4RTZBRDg1QUVENDIxNEY3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymvr/hjct724ZAVKgzv16+vc9 gIA5E/stLZWCn/b2/462CNMC/czQ9w+mHgraKoeCOKK+UV1sOn6pouhjEOrzWzFX PKEsMzZYb7XStpszbf1Q4gwaGUnfZOJy1rB1qoOrLUDYneEoNK7y8EMk1TKu7lEH kWRQxNiGtlqMdNQonABMC5K+zgHTk/B5D+rnBTgyik3uPUQIP45ZWonRDhv4BFd5 NkKore7/PfbRvZF7/PGF8X9KfKGRkTCZi6FhaYX+r4Egycq6+W9hnn6s2i2wiA4h qtC5zIQFjHMxcnE/AZIkOqgaGe/tZpwTnDZ4z9v2CpKVNhjjz8UXHEl+XkujAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUV51ereWf295RL8+Oatha7UIU994wHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwNjMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBAMMA0GCSqGSIb3DQEBCwUAA4IBAQAC+3BdDPBMyU1DWIjEMoWM0Z+/2igQejcq i/Nvue2lu70HVYhj5xx29DJZITREzA8hWB2HTApPN3mwonOuP0XDOpbM1rryMrv8 pg3T/AMw382qKUdJbEP68/KBkVlxxQvtnnPFts7/hRUXWJdRSw7jO131+T52Md9O 48Ve65Ur/lcMY7FSxLQg9pUNsch4aHSZMg/q8P4op9ol/POpkWHxRdMmeu+49KTZ mcrHOrz22vYDrHoWVtDRrwIBltQaY5IM9leCXsR1Avp9TBDpbh1TGd+DkYNkhRFh YbiDEgmrPklZiOA2hu/iOPljGu7lnejsjkw8FAQL0Au/Z+6zLWen -----END CERTIFICATE-----Generated at Tue Nov 4 07:44:25 2025 by rpki-client