$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: I2eiOUdkxERRPdxE29u08vFZEYyI2QBSXyGl2v2XsAU= Subject key identifier: 6A:2A:13:8A:93:06:98:9E:11:7F:B0:45:6B:1A:A0:4F:9B:A7:87:EB Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 07ED2425B5FD5704B677DEFABF5214EB070B16B1 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa Signing time: Tue 23 Sep 2025 12:00:00 +0000 ROA not before: Tue 23 Sep 2025 11:55:00 +0000 ROA not after: Tue 22 Sep 2026 12:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:fe::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ed:24:25:b5:fd:57:04:b6:77:de:fa:bf:52:14:eb:07:0b:16:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Sep 23 11:55:00 2025 GMT Not After : Sep 22 12:00:00 2026 GMT Subject: CN=6A2A138A9306989E117FB0456B1AA04F9BA787EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:60:a8:2e:1b:c9:52:79:8c:4a:10:15:ed: 8c:81:1e:4b:3b:83:a7:ab:cf:c9:21:6e:0e:31:6f: 06:2b:80:ab:90:71:dd:07:f2:76:5b:1c:b9:4b:fd: 42:16:da:ff:76:44:68:67:ee:c9:7a:fb:7d:ce:ed: 5f:a0:92:5d:33:18:64:e9:bc:86:11:e5:e0:2e:ea: f0:10:4d:91:dd:5f:5e:99:e5:8a:fc:22:a5:d0:1b: 78:cd:29:d9:d6:5b:9c:86:3d:b9:17:b3:e7:3c:8c: da:1d:03:d4:2c:40:d1:08:34:eb:88:4c:13:cb:f0: bd:ee:13:5a:b9:9d:bf:88:20:08:d5:bb:42:54:06: 10:9d:c5:a0:77:ea:8f:73:c7:57:c9:2f:24:a2:f0: a3:6b:31:50:5b:e2:0c:5e:eb:36:40:c7:45:b9:11: dd:49:92:2e:12:da:51:6f:19:fd:ba:3e:a4:99:f1: dc:08:77:03:d3:1f:ed:ac:fb:10:22:5f:c0:05:1b: 10:9e:b1:d4:e3:e4:5e:87:1e:56:48:ce:88:05:f3: cf:ba:79:4e:bd:f4:b6:14:c0:da:87:27:73:f9:61: 82:e0:47:ee:cb:e8:d9:85:59:6f:f4:e6:23:45:54: c8:13:ab:8e:b5:4c:ee:21:97:04:03:fe:6a:81:26: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2A:13:8A:93:06:98:9E:11:7F:B0:45:6B:1A:A0:4F:9B:A7:87:EB X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:fe::/48 Signature Algorithm: sha256WithRSAEncryption 59:da:72:df:d3:41:45:7c:a1:4d:59:c2:e2:40:22:bc:1a:32: 4a:dc:e0:d3:a2:b0:24:71:b0:53:4c:bb:75:f1:e2:73:56:7e: 08:ac:65:e5:ff:45:ee:5b:f2:b5:ef:77:f2:b9:ed:e6:d3:f8: a6:84:68:1e:66:da:33:d8:cf:9f:94:20:e7:5b:4b:15:9c:5b: 9c:97:eb:fd:fa:f8:74:7d:a5:06:9a:4d:7a:16:08:66:6b:ca: 69:3a:d0:7b:70:03:ba:4c:d5:e0:36:64:70:5d:08:2a:73:de: 69:84:36:ef:36:9d:35:17:85:45:a5:05:61:eb:14:4d:1c:57: ce:7d:b3:10:77:7c:dd:59:90:9b:d6:a5:a9:a2:13:fd:30:00: 7b:4d:19:c1:aa:a3:b4:c9:02:66:d6:31:a7:a0:54:12:30:ca: 25:3e:63:fd:1f:e2:8d:89:ae:b5:f1:67:3a:d6:68:81:b3:2d: 88:93:f4:79:b8:95:65:85:35:3c:43:80:79:44:21:e9:27:89: 40:d9:a2:87:bc:eb:09:49:53:0a:c3:ba:e3:48:85:52:f3:76: 8f:72:b0:09:7b:04:d8:6f:e8:f0:e7:4a:73:4c:82:61:97:30: 06:99:14:35:19:51:82:7b:0e:ff:cc:fe:02:c9:63:f5:2c:82: 2f:ab:df:77 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUB+0kJbX9VwS2d976v1IU6wcLFrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNTA5MjMxMTU1MDBaFw0yNjA5MjIxMjAwMDBaMDMxMTAvBgNV BAMTKDZBMkExMzhBOTMwNjk4OUUxMTdGQjA0NTZCMUFBMDRGOUJBNzg3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fWCoLhvJUnmMShAV7YyBHks7 g6erz8khbg4xbwYrgKuQcd0H8nZbHLlL/UIW2v92RGhn7sl6+33O7V+gkl0zGGTp vIYR5eAu6vAQTZHdX16Z5Yr8IqXQG3jNKdnWW5yGPbkXs+c8jNodA9QsQNEINOuI TBPL8L3uE1q5nb+IIAjVu0JUBhCdxaB36o9zx1fJLySi8KNrMVBb4gxe6zZAx0W5 Ed1Jki4S2lFvGf26PqSZ8dwIdwPTH+2s+xAiX8AFGxCesdTj5F6HHlZIzogF88+6 eU699LYUwNqHJ3P5YYLgR+7L6NmFWW/05iNFVMgTq461TO4hlwQD/mqBJqM5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUaioTipMGmJ4Rf7BFaxqgT5unh+swHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhNjY2NTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA /jANBgkqhkiG9w0BAQsFAAOCAQEAWdpy39NBRXyhTVnC4kAivBoyStzg06KwJHGw U0y7dfHic1Z+CKxl5f9F7lvyte938rnt5tP4poRoHmbaM9jPn5Qg51tLFZxbnJfr /fr4dH2lBppNehYIZmvKaTrQe3ADukzV4DZkcF0IKnPeaYQ27zadNReFRaUFYesU TRxXzn2zEHd83VmQm9alqaIT/TAAe00ZwaqjtMkCZtYxp6BUEjDKJT5j/R/ijYmu tfFnOtZogbMtiJP0ebiVZYU1PEOAeUQh6SeJQNmih7zrCUlTCsO640iFUvN2j3Kw CXsE2G/o8OdKc0yCYZcwBpkUNRlRgnsO/8z+Aslj9SyCL6vfdw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:04 2025 by rpki-client