$ rpki-client -vvf repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa File: 323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa (raw, json) Hash identifier: GbOOON5SAD6ikmj8Ksu9duAVZzbA37sW5twd8qtTwpA= Subject key identifier: F1:18:48:13:FC:FB:3B:E9:7B:1C:8D:2E:E1:44:98:FD:40:E1:FE:A6 Certificate issuer: /CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Certificate serial: 4935FB7A1544D7D33BB26025DFB630ACC1C502C9 Authority key identifier: 9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa Signing time: Tue 07 Oct 2025 03:00:00 +0000 ROA not before: Tue 07 Oct 2025 02:55:00 +0000 ROA not after: Tue 06 Oct 2026 03:00:00 +0000 asID: 149736 IP address blocks: 2401:48e0:3001::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:35:fb:7a:15:44:d7:d3:3b:b2:60:25:df:b6:30:ac:c1:c5:02:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A499585F4E18B9B36BD842B17BE3925C9A27D43 Validity Not Before: Oct 7 02:55:00 2025 GMT Not After : Oct 6 03:00:00 2026 GMT Subject: CN=F1184813FCFB3BE97B1C8D2EE14498FD40E1FEA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:59:5d:a2:71:14:43:86:49:2e:2a:cc:54: 39:91:c2:50:84:6f:8b:b9:70:76:b9:1d:f5:47:d9: 47:4f:07:88:04:b7:b0:a2:e6:49:89:62:79:4d:6d: a0:56:ef:99:b3:34:39:67:b3:4a:fc:6b:f3:4e:d1: 94:1c:d5:99:84:81:72:d9:97:5f:e3:3e:78:a9:c8: cf:cd:e5:d5:b5:f6:79:55:ed:a1:32:6f:a5:32:fa: 20:2a:f2:cb:38:83:ba:3c:85:3c:9f:ff:a4:eb:d8: 2c:37:48:16:80:f1:4f:b7:23:30:d9:24:3e:28:88: ff:d2:ba:c6:23:7b:16:7f:72:b6:05:2a:1a:ba:45: 25:c6:a3:33:58:d2:56:68:ad:d2:94:a3:ff:9b:08: 54:a8:29:e1:10:6e:67:fc:60:d8:4a:28:f8:84:cd: 58:7d:a6:da:32:ad:4b:2d:6c:d3:71:b4:bd:3c:ba: 8e:e4:91:d6:ff:42:2e:57:0d:8a:ca:e7:e6:7d:7d: 3d:b3:ed:94:b9:66:74:d0:33:49:cc:37:20:fe:80: bc:a7:11:20:da:fc:7b:b1:02:3a:90:9b:0a:0e:ca: d0:2b:95:a3:c5:ae:3e:18:7b:db:a7:9e:25:3e:a5: a2:a9:73:51:d4:b0:a9:74:c7:8b:49:61:38:8d:ff: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:18:48:13:FC:FB:3B:E9:7B:1C:8D:2E:E1:44:98:FD:40:E1:FE:A6 X509v3 Authority Key Identifier: keyid:9A:49:95:85:F4:E1:8B:9B:36:BD:84:2B:17:BE:39:25:C9:A2:7D:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/9A499585F4E18B9B36BD842B17BE3925C9A27D43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A499585F4E18B9B36BD842B17BE3925C9A27D43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/323430313a343865303a333030313a3a2f34382d3438203d3e20313439373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:48e0:3001::/48 Signature Algorithm: sha256WithRSAEncryption 7b:9c:90:06:20:23:88:4a:a4:8b:da:48:6a:09:01:41:2b:0b: b4:10:60:73:05:5d:0a:0d:28:77:64:5c:21:39:b1:d7:f0:fc: 86:b1:6b:61:c7:ad:9e:48:26:80:b5:dc:b4:81:6a:03:3a:23: f0:8a:e8:47:dc:c0:f6:f0:6c:e5:02:d1:e8:77:fa:61:e4:6f: 76:81:d8:73:f0:13:22:2c:fb:d9:57:a1:40:b7:31:fe:1c:ef: d9:0d:2b:9c:c0:fb:18:f8:58:7e:a8:ca:4b:db:ba:db:14:dd: d0:9d:d6:bc:ed:82:48:c3:e7:e4:18:54:07:1e:43:aa:03:9b: 96:07:58:ce:cf:c7:93:52:2b:53:ed:14:67:ae:65:e3:b5:ee: c8:a4:7c:ef:76:bb:67:79:54:ed:f2:4d:ce:b4:31:ab:6b:86: d9:2f:1a:a6:cf:f8:c1:d2:f9:b0:79:9d:51:1c:81:e4:68:9d: c3:2c:23:69:6d:be:a0:20:68:25:10:32:76:c6:d8:b0:ab:04: 79:57:2a:37:84:33:38:11:c0:65:6c:51:51:ec:47:aa:2e:82: 0a:3b:46:89:d4:28:71:9b:76:47:42:98:43:da:ed:c9:5b:f0: 65:1b:ed:3c:2f:fc:ac:1f:19:a4:13:48:63:35:53:b1:c8:d7: 84:09:e6:48 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSTX7ehVE19M7smAl37YwrMHFAskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVD OUEyN0Q0MzAeFw0yNTEwMDcwMjU1MDBaFw0yNjEwMDYwMzAwMDBaMDMxMTAvBgNV BAMTKEYxMTg0ODEzRkNGQjNCRTk3QjFDOEQyRUUxNDQ5OEZENDBFMUZFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUyFldonEUQ4ZJLirMVDmRwlCE b4u5cHa5HfVH2UdPB4gEt7Ci5kmJYnlNbaBW75mzNDlns0r8a/NO0ZQc1ZmEgXLZ l1/jPnipyM/N5dW19nlV7aEyb6Uy+iAq8ss4g7o8hTyf/6Tr2Cw3SBaA8U+3IzDZ JD4oiP/SusYjexZ/crYFKhq6RSXGozNY0lZordKUo/+bCFSoKeEQbmf8YNhKKPiE zVh9ptoyrUstbNNxtL08uo7kkdb/Qi5XDYrK5+Z9fT2z7ZS5ZnTQM0nMNyD+gLyn ESDa/HuxAjqQmwoOytArlaPFrj4Ye9unniU+paKpc1HUsKl0x4tJYTiN/zobAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU8RhIE/z7O+l7HI0u4USY/UDh/qYwHwYDVR0j BBgwFoAUmkmVhfThi5s2vYQrF745JcmifUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YThiNTRlNi0xMDE1LTQ4ZWItOWJiZC01MWMxNmNkNDU0NDUvMC85QTQ5OTU4NUY0 RTE4QjlCMzZCRDg0MkIxN0JFMzkyNUM5QTI3RDQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0OTk1ODVGNEUxOEI5QjM2QkQ4NDJCMTdCRTM5MjVDOUEy N0Q0My5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhOGI1NGU2LTEwMTUtNDhlYi05 YmJkLTUxYzE2Y2Q0NTQ0NS8wLzMyMzQzMDMxM2EzNDM4NjUzMDNhMzMzMDMwMzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzkzNzMzMzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk AUjgMAEwDQYJKoZIhvcNAQELBQADggEBAHuckAYgI4hKpIvaSGoJAUErC7QQYHMF XQoNKHdkXCE5sdfw/Iaxa2HHrZ5IJoC13LSBagM6I/CK6EfcwPbwbOUC0eh3+mHk b3aB2HPwEyIs+9lXoUC3Mf4c79kNK5zA+xj4WH6oykvbutsU3dCd1rztgkjD5+QY VAceQ6oDm5YHWM7Px5NSK1PtFGeuZeO17sikfO92u2d5VO3yTc60MatrhtkvGqbP +MHS+bB5nVEcgeRoncMsI2ltvqAgaCUQMnbG2LCrBHlXKjeEMzgRwGVsUVHsR6ou ggo7RonUKHGbdkdCmEPa7clb8GUb7Twv/KwfGaQTSGM1U7HI14QJ5kg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:17 2025 by rpki-client