$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa File: 323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa (raw, json) Hash identifier: vSA2LZxmEu8vSGBuPQxlCFswIfefN/VFEzH511o1QAI= Subject key identifier: E0:B0:D8:E4:95:DC:9A:E4:3E:8E:4B:DC:E1:1C:EE:74:22:0F:2D:45 Certificate issuer: /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Certificate serial: 2FD8A6F1AD9D09C4F06A24996D5C29085422BE60 Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa Signing time: Thu 30 Oct 2025 09:02:24 +0000 ROA not before: Thu 30 Oct 2025 08:57:24 +0000 ROA not after: Thu 29 Oct 2026 09:02:24 +0000 asID: 58495 IP address blocks: 2404:2f80:ff01::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d8:a6:f1:ad:9d:09:c4:f0:6a:24:99:6d:5c:29:08:54:22:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Validity Not Before: Oct 30 08:57:24 2025 GMT Not After : Oct 29 09:02:24 2026 GMT Subject: CN=E0B0D8E495DC9AE43E8E4BDCE11CEE74220F2D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:69:c3:ef:44:17:db:da:a1:49:8a:56:47: 77:45:0e:c0:f7:0f:a2:2f:89:d4:3d:64:a5:38:5a: c6:2a:50:e1:0f:d4:3e:b9:e3:2a:1b:f1:4b:a2:04: b4:a5:b2:a9:c0:2d:91:78:ad:93:ef:52:0c:63:26: f2:1a:0b:89:ae:f5:3e:8e:a4:aa:d1:07:54:83:3d: df:d2:3c:60:db:2b:ff:90:f2:f7:29:44:d0:d0:34: 6d:2d:34:bb:4f:fa:a4:c9:26:ac:7b:87:1f:be:3f: 42:0a:0f:0c:c1:52:26:9a:c8:17:61:14:50:98:ca: c1:60:07:01:14:a8:51:a7:de:a7:9d:87:ac:9f:86: 26:ce:63:67:8f:4d:b2:02:38:82:8d:57:81:6c:b3: c0:54:fc:fd:47:e3:4e:c3:7f:cc:7d:51:14:b5:d7: dc:19:30:f7:c4:e9:b3:9b:22:9c:0e:b4:c6:49:28: d3:7e:bd:b1:b4:9a:43:31:18:1f:f5:a4:12:67:f4: 2c:d9:80:5c:94:96:aa:fd:7b:1e:68:d2:2a:68:7c: 48:2c:c6:36:3e:ff:3a:4a:80:6f:fe:6a:7b:f5:94: d3:96:eb:0e:24:8c:4b:54:a6:42:88:29:5b:aa:b8: 17:63:c6:7e:43:d6:c6:13:ac:f5:25:9e:e8:bd:31: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B0:D8:E4:95:DC:9A:E4:3E:8E:4B:DC:E1:1C:EE:74:22:0F:2D:45 X509v3 Authority Key Identifier: keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:2f80:ff01::/48 Signature Algorithm: sha256WithRSAEncryption 12:3c:6f:2d:6f:8d:11:09:36:ce:5b:10:71:55:99:df:ca:e7: 79:04:e8:a4:66:76:eb:b3:4a:32:ef:fa:d6:e9:ff:7a:49:39: c4:ab:46:50:9a:99:2b:f6:be:3e:90:37:2f:db:dd:7b:ec:4c: c8:e0:25:af:9f:61:14:32:81:72:22:17:58:8f:69:9e:a4:71: 87:e5:7b:51:d0:d1:86:8e:b3:98:7a:26:a5:8c:e5:d5:61:01: c0:ef:b9:7f:d3:2c:05:a5:d7:cd:fd:1f:df:f7:b1:07:22:da: 3e:1d:fe:ca:1e:4c:89:2e:2e:ff:68:db:70:8d:18:88:d1:80: ad:59:1d:5b:4a:a2:41:38:04:13:64:f4:35:8a:4a:f2:09:f0: 4a:34:6d:60:2c:aa:4d:c0:be:66:c3:f9:fc:7a:9e:22:aa:36: b6:47:e0:a7:c0:8f:60:23:8b:a2:fd:55:ea:0a:7f:14:99:d1: 9e:76:a8:82:3c:57:0a:4d:12:e9:ef:c7:15:62:30:20:6c:36: 6a:8e:46:0c:e1:5b:cf:77:87:6c:4d:13:6b:7c:44:fb:c4:2c: 79:a9:f2:0c:6e:a1:b1:57:bc:2e:07:c3:91:2d:e9:8f:1e:a3: ed:5e:77:ef:4e:39:80:1d:cf:a0:3a:60:f7:00:1a:a5:aa:7f: e8:69:79:4d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUL9im8a2dCcTwaiSZbVwpCFQivmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEz QTlDMjVDNjAeFw0yNTEwMzAwODU3MjRaFw0yNjEwMjkwOTAyMjRaMDMxMTAvBgNV BAMTKEUwQjBEOEU0OTVEQzlBRTQzRThFNEJEQ0UxMUNFRTc0MjIwRjJENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCr2nD70QX29qhSYpWR3dFDsD3 D6IvidQ9ZKU4WsYqUOEP1D654yob8UuiBLSlsqnALZF4rZPvUgxjJvIaC4mu9T6O pKrRB1SDPd/SPGDbK/+Q8vcpRNDQNG0tNLtP+qTJJqx7hx++P0IKDwzBUiaayBdh FFCYysFgBwEUqFGn3qedh6yfhibOY2ePTbICOIKNV4Fss8BU/P1H407Df8x9URS1 19wZMPfE6bObIpwOtMZJKNN+vbG0mkMxGB/1pBJn9CzZgFyUlqr9ex5o0ipofEgs xjY+/zpKgG/+anv1lNOW6w4kjEtUpkKIKVuquBdjxn5D1sYTrPUlnui9MSvLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4LDY5JXcmuQ+jkvc4RzudCIPLUUwHwYDVR0j BBgwFoAUblU0q6bvPJjI0M9Dd5XSWjqcJcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjkxNzc3ZS1jZGI0LTQ4OTctYjI4Ny1lNThlNDI0YzE5OWQvMC82RTU1MzRBQkE2 RUYzQzk4QzhEMENGNDM3Nzk1RDI1QTNBOUMyNUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEzQTlD MjVDNi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2OTE3NzdlLWNkYjQtNDg5Ny1i Mjg3LWU1OGU0MjRjMTk5ZC8wLzMyMzQzMDM0M2EzMjY2MzgzMDNhNjY2NjMwMzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM4MzQzOTM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQv gP8BMA0GCSqGSIb3DQEBCwUAA4IBAQASPG8tb40RCTbOWxBxVZnfyud5BOikZnbr s0oy7/rW6f96STnEq0ZQmpkr9r4+kDcv29177EzI4CWvn2EUMoFyIhdYj2mepHGH 5XtR0NGGjrOYeialjOXVYQHA77l/0ywFpdfN/R/f97EHIto+Hf7KHkyJLi7/aNtw jRiI0YCtWR1bSqJBOAQTZPQ1ikryCfBKNG1gLKpNwL5mw/n8ep4iqja2R+CnwI9g I4ui/VXqCn8UmdGedqiCPFcKTRLp78cVYjAgbDZqjkYM4VvPd4dsTRNrfET7xCx5 qfIMbqGxV7wuB8ORLemPHqPtXnfvTjmAHc+gOmD3ABqlqn/oaXlN -----END CERTIFICATE-----Generated at Tue Nov 4 07:42:52 2025 by rpki-client