$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa File: 323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa (raw, json) Hash identifier: pHmexhHLDRqlAgQo/1FWyhBno1FraBMJGJzKhV4E5s4= Subject key identifier: 72:46:2F:F4:64:2F:95:EE:78:C0:5E:E9:24:26:DA:38:2F:C8:A0:6A Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 539F2F1600A1F0791C129EE5D8637C51B00A89 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa Signing time: Wed 22 Oct 2025 16:00:02 +0000 ROA not before: Wed 22 Oct 2025 15:55:02 +0000 ROA not after: Wed 21 Oct 2026 16:00:02 +0000 asID: 38156 IP address blocks: 2405:a540:100e::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9f:2f:16:00:a1:f0:79:1c:12:9e:e5:d8:63:7c:51:b0:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Oct 22 15:55:02 2025 GMT Not After : Oct 21 16:00:02 2026 GMT Subject: CN=72462FF4642F95EE78C05EE92426DA382FC8A06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:f1:c6:e5:47:8a:ce:00:be:90:f0:1e:ef: b5:8b:54:21:31:e0:9f:3b:2c:85:86:12:1c:97:cb: d6:5e:8a:02:92:a4:21:ea:a7:81:f2:72:52:ba:ee: d2:62:00:60:8e:c5:f2:7d:08:8d:4f:16:c6:f3:e6: c3:d8:e8:15:88:0f:a1:32:30:c9:21:85:f7:11:ce: 87:d0:39:c3:88:45:d3:05:ac:af:22:c7:f5:b2:dc: f9:8a:f3:87:ed:26:b4:8b:0c:1b:15:9a:cf:73:1e: 36:f6:ec:79:f2:3d:26:7e:ae:e3:ea:cb:1a:89:bb: c9:3c:00:84:07:ec:98:1a:15:f1:99:fe:87:39:e5: 12:4d:06:81:e7:6d:4c:89:1a:ac:77:0b:1f:96:9c: 24:f2:3e:b1:57:8c:67:61:15:65:85:e1:1c:f1:f5: ab:ab:f8:5d:16:ce:f4:27:d9:2f:d3:5c:db:47:9e: 10:03:46:e8:01:0a:01:dc:6e:a0:26:2d:45:b0:be: dc:a0:86:bd:2f:fc:30:40:4c:5a:5c:7e:7a:9f:af: b0:c2:03:80:e3:24:10:45:aa:44:54:e9:eb:4d:df: 73:9b:3a:58:48:0e:ba:3c:c2:0b:fc:4d:01:6f:3d: 84:97:7a:57:86:cc:2b:7f:7f:d9:40:20:af:a6:69: a5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:46:2F:F4:64:2F:95:EE:78:C0:5E:E9:24:26:DA:38:2F:C8:A0:6A X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313030653a3a2f34382d3438203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a540:100e::/48 Signature Algorithm: sha256WithRSAEncryption 58:7b:d9:0a:b5:76:7c:48:09:72:9c:2c:9c:9f:ee:a9:e2:b2: 71:74:12:b2:3c:34:f1:c4:6f:8e:e4:1a:6b:96:84:82:75:36: 45:53:ea:f0:3b:36:99:b2:24:d8:53:98:21:a3:c1:de:14:06: 2f:39:63:26:7c:77:71:80:71:71:20:63:b2:36:c2:0b:43:8a: f7:74:9b:50:65:be:eb:2b:24:f9:ad:b3:ae:0c:2f:59:7c:a9: fd:f4:f4:b9:36:29:60:11:ae:ac:e2:7b:b7:02:e1:dc:d6:2c: 8b:1d:01:d5:b5:11:be:f2:7e:91:54:e5:6c:94:4e:c0:b4:7a: 24:41:2a:0a:8d:e1:fd:94:96:49:f4:1d:30:6f:2e:0d:46:b0: 55:76:1a:80:0f:07:11:cc:da:67:af:2f:c8:ff:bb:f8:53:58: b4:37:e5:00:d5:06:f1:3a:5d:1b:72:77:86:5b:4c:f6:bc:f3: 2e:97:29:b4:5b:27:cb:01:33:8e:49:f2:70:d5:35:5b:c9:c8: 42:ec:5f:5d:89:df:76:8d:62:3f:46:9f:33:3f:62:0e:be:13: 1b:ad:b1:ab:96:85:83:75:d5:07:4d:8d:30:76:40:68:88:c9: 58:39:74:a4:27:75:c0:fc:7b:d4:2b:e9:05:41:03:8a:f2:44: cd:83:a8:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgITU58vFgCh8HkcEp7l2GN8UbAKiTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1QkQwRkQwMEVCOEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZB NEQ1OEM0MB4XDTI1MTAyMjE1NTUwMloXDTI2MTAyMTE2MDAwMlowMzExMC8GA1UE AxMoNzI0NjJGRjQ2NDJGOTVFRTc4QzA1RUU5MjQyNkRBMzgyRkM4QTA2QTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqY8cblR4rOAL6Q8B7vtYtUITHg nzsshYYSHJfL1l6KApKkIeqngfJyUrru0mIAYI7F8n0IjU8WxvPmw9joFYgPoTIw ySGF9xHOh9A5w4hF0wWsryLH9bLc+Yrzh+0mtIsMGxWaz3MeNvbsefI9Jn6u4+rL Gom7yTwAhAfsmBoV8Zn+hznlEk0GgedtTIkarHcLH5acJPI+sVeMZ2EVZYXhHPH1 q6v4XRbO9CfZL9Nc20eeEANG6AEKAdxuoCYtRbC+3KCGvS/8MEBMWlx+ep+vsMID gOMkEEWqRFTp603fc5s6WEgOujzCC/xNAW89hJd6V4bMK39/2UAgr6ZppVMCAwEA AaOCAj0wggI5MB0GA1UdDgQWBBRyRi/0ZC+V7njAXukkJto4L8igajAfBgNVHSME GDAWgBRb0P0A64rM9Qkp9rD1bHUAak1YxDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1 ZDNkMjJhLTMzOGItNDMwMi05M2Y0LWMwMjFlYTZhZDU0OC8wLzVCRDBGRDAwRUI4 QUNDRjUwOTI5RjZCMEY1NkM3NTAwNkE0RDU4QzQuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi81QkQwRkQwMEVCOEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1 OEM0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVkM2QyMmEtMzM4Yi00MzAyLTkz ZjQtYzAyMWVhNmFkNTQ4LzAvMzIzNDMwMzUzYTYxMzUzNDMwM2EzMTMwMzA2NTNh M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzgzMTM1MzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBaVA EA4wDQYJKoZIhvcNAQELBQADggEBAFh72Qq1dnxICXKcLJyf7qnisnF0ErI8NPHE b47kGmuWhIJ1NkVT6vA7NpmyJNhTmCGjwd4UBi85YyZ8d3GAcXEgY7I2wgtDivd0 m1BlvusrJPmts64ML1l8qf309Lk2KWARrqzie7cC4dzWLIsdAdW1Eb7yfpFU5WyU TsC0eiRBKgqN4f2Ulkn0HTBvLg1GsFV2GoAPBxHM2mevL8j/u/hTWLQ35QDVBvE6 XRtyd4ZbTPa88y6XKbRbJ8sBM45J8nDVNVvJyELsX12J33aNYj9GnzM/Yg6+Exut sauWhYN11QdNjTB2QGiIyVg5dKQndcD8e9Qr6QVBA4ryRM2DqPs= -----END CERTIFICATE-----Generated at Tue Nov 4 07:44:23 2025 by rpki-client