$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: +dxIMO0Tn42ygntCCJOmn6LknAUePGMZLcPz6uSg3Q4= Subject key identifier: E5:53:38:43:B9:FB:09:08:4D:6A:BC:D5:16:A0:0F:20:D3:D7:41:24 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 4EA7479A6DDAEC3586E42E7B58E5099DDE767DB6 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 22 Oct 2025 17:00:02 +0000 ROA not before: Wed 22 Oct 2025 16:55:02 +0000 ROA not after: Wed 21 Oct 2026 17:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:100d::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a7:47:9a:6d:da:ec:35:86:e4:2e:7b:58:e5:09:9d:de:76:7d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Oct 22 16:55:02 2025 GMT Not After : Oct 21 17:00:02 2026 GMT Subject: CN=E5533843B9FB09084D6ABCD516A00F20D3D74124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:39:98:8b:b7:81:00:51:3a:fa:11:6f:ba: 9d:57:0a:77:57:72:3d:61:72:a1:9a:48:2b:a6:6a: 34:16:fe:af:7d:29:af:aa:38:92:3f:bc:59:52:54: ee:7b:80:c5:4d:de:4d:c0:74:32:c1:a9:63:21:6b: d8:53:91:a1:39:e4:cc:5d:48:0c:de:6e:f6:6a:95: 8d:ea:50:88:6f:c5:8a:aa:c8:ff:d9:cb:82:86:a4: 18:58:9b:43:85:28:d1:8e:31:9e:7f:f0:56:80:ae: 18:01:40:c6:df:7b:e1:61:bf:f5:2d:31:80:2b:bc: 7c:84:ce:db:b6:07:84:0c:9c:e1:39:23:6a:82:c3: c7:15:05:63:d7:36:9f:af:59:65:df:60:35:08:fc: 93:de:75:d5:b7:74:b7:bd:b8:78:6a:86:1f:bb:f4: 7b:c4:bf:c4:60:43:0d:6d:13:9b:7d:c6:de:b4:a0: cf:79:81:7d:52:73:f9:79:75:54:31:d4:ee:ca:fb: 14:95:b2:cf:9b:e2:80:42:70:58:0a:4c:84:03:e8: 08:43:1c:8e:31:18:b8:97:14:3a:52:8e:e1:a1:4d: 30:c8:85:77:0c:c4:e4:c5:22:a2:91:77:54:eb:46: 01:28:42:2f:95:36:1c:f7:35:62:61:78:78:b5:e4: c3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:53:38:43:B9:FB:09:08:4D:6A:BC:D5:16:A0:0F:20:D3:D7:41:24 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030643a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:100d::/48 Signature Algorithm: sha256WithRSAEncryption 8f:a4:6a:74:d8:23:9b:59:e8:a3:98:ea:42:dc:74:d6:13:fe: bb:c1:c9:46:b3:bf:a9:cb:1a:23:59:aa:92:52:3d:53:6f:4d: ea:fa:0b:2d:60:84:8c:6b:07:c5:47:77:40:17:d3:97:3d:0e: 0e:c1:e1:b3:c2:e2:02:5a:07:d7:5a:01:88:78:18:ee:37:3a: 51:de:87:4b:1d:60:04:08:c0:cf:e2:43:65:2a:f8:8f:a0:c1: 75:ce:d4:37:0a:61:3b:1c:9e:a2:85:93:ec:0f:44:99:d0:85: 06:8d:7e:90:55:46:41:13:ba:f1:15:68:b8:cb:96:59:9f:f4: 9e:c1:ac:17:5c:2c:d8:b5:b2:7d:82:67:34:5f:35:c6:cc:d7: dc:8b:54:1c:90:39:e4:40:27:20:23:c0:35:a5:d8:d1:6f:6f: 17:e6:25:98:e7:96:00:3a:49:99:b5:c0:9e:ba:4b:66:6a:42: a8:06:e8:e1:67:1b:22:9e:0d:24:23:0a:4d:4f:9a:a2:fb:95: 82:c8:84:6b:ca:5e:40:99:8a:02:f5:f6:a8:d3:10:bf:b2:39: d5:4f:48:ff:9c:42:83:6b:ad:ff:a3:59:29:58:8b:2d:63:5b: fd:eb:59:d2:68:41:58:96:da:8d:4e:0c:11:d5:53:57:61:f0: 33:e7:c0:62 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTqdHmm3a7DWG5C57WOUJnd52fbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTEwMjIxNjU1MDJaFw0yNjEwMjExNzAwMDJaMDMxMTAvBgNV BAMTKEU1NTMzODQzQjlGQjA5MDg0RDZBQkNENTE2QTAwRjIwRDNENzQxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUTmYi7eBAFE6+hFvup1XCndX cj1hcqGaSCumajQW/q99Ka+qOJI/vFlSVO57gMVN3k3AdDLBqWMha9hTkaE55Mxd SAzebvZqlY3qUIhvxYqqyP/Zy4KGpBhYm0OFKNGOMZ5/8FaArhgBQMbfe+Fhv/Ut MYArvHyEztu2B4QMnOE5I2qCw8cVBWPXNp+vWWXfYDUI/JPeddW3dLe9uHhqhh+7 9HvEv8RgQw1tE5t9xt60oM95gX1Sc/l5dVQx1O7K+xSVss+b4oBCcFgKTIQD6AhD HI4xGLiXFDpSjuGhTTDIhXcMxOTFIqKRd1TrRgEoQi+VNhz3NWJheHi15MPxAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU5VM4Q7n7CQhNarzVFqAPINPXQSQwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzQzMDM1M2E2MTM1MzQzMDNhMzEzMDMwNjQz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWl QBANMA0GCSqGSIb3DQEBCwUAA4IBAQCPpGp02CObWeijmOpC3HTWE/67wclGs7+p yxojWaqSUj1Tb03q+gstYISMawfFR3dAF9OXPQ4OweGzwuICWgfXWgGIeBjuNzpR 3odLHWAECMDP4kNlKviPoMF1ztQ3CmE7HJ6ihZPsD0SZ0IUGjX6QVUZBE7rxFWi4 y5ZZn/SewawXXCzYtbJ9gmc0XzXGzNfci1QckDnkQCcgI8A1pdjRb28X5iWY55YA OkmZtcCeuktmakKoBujhZxsing0kIwpNT5qi+5WCyIRryl5AmYoC9fao0xC/sjnV T0j/nEKDa63/o1kpWIstY1v961nSaEFYltqNTgwR1VNXYfAz58Bi -----END CERTIFICATE-----Generated at Tue Nov 4 07:44:24 2025 by rpki-client