$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: LEdRdQuYCJyzlsIe+3x0MNJSDpdzqahVYeUxDiUW8S0= Subject key identifier: 8A:CA:34:33:3C:8A:53:CA:EF:A0:3E:FE:63:FF:C3:E8:C2:4B:96:3E Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 6DF9ECC548E7BB7846429A0BCF0F9913C8A05FC0 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa Signing time: Sat 11 Oct 2025 04:00:00 +0000 ROA not before: Sat 11 Oct 2025 03:55:00 +0000 ROA not after: Sat 10 Oct 2026 04:00:00 +0000 asID: 58552 IP address blocks: 2404:fd00:fac3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f9:ec:c5:48:e7:bb:78:46:42:9a:0b:cf:0f:99:13:c8:a0:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Oct 11 03:55:00 2025 GMT Not After : Oct 10 04:00:00 2026 GMT Subject: CN=8ACA34333C8A53CAEFA03EFE63FFC3E8C24B963E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:93:ee:89:69:f8:3a:6a:a0:e8:aa:c7:4f: 2f:83:26:ce:ca:c3:5b:58:c8:05:e5:13:9a:e2:d6: fe:38:6b:3d:b8:a0:ca:24:7e:2d:16:b4:8d:75:db: fc:58:91:0e:b9:70:84:af:ad:f1:45:33:a3:6e:2e: 15:4e:a1:e2:13:95:77:d1:33:d2:3a:1b:c0:a1:2b: 58:b1:db:b4:1a:7d:ae:13:ee:40:80:51:c6:34:10: 20:79:85:d4:8a:42:37:23:9c:7e:da:21:f2:13:1d: 34:2f:66:9a:27:0e:35:e5:d7:cb:53:28:74:c0:f1: 18:ff:ee:39:a7:5d:87:45:45:f0:46:b9:59:31:6b: 2b:3a:6a:91:c2:73:ce:5e:9e:48:6c:01:28:9a:22: 38:f7:8f:d4:70:d8:60:b6:73:99:b8:75:a5:60:42: eb:6f:a0:72:73:24:19:c1:de:83:7c:84:6d:f8:09: 48:bc:e2:50:41:f9:8f:e8:b9:a3:40:09:c9:ee:43: af:ce:80:50:72:b9:9a:66:a7:64:ef:bd:29:00:e1: 05:3f:82:e1:43:a8:30:93:03:e9:59:51:7c:69:98: d2:f7:07:7e:31:5c:c3:7f:0b:b3:10:22:5e:3c:3b: 4b:c9:85:e3:98:0e:58:e1:66:5d:55:95:f4:5f:b6: 41:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CA:34:33:3C:8A:53:CA:EF:A0:3E:FE:63:FF:C3:E8:C2:4B:96:3E X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163333a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:fac3::/48 Signature Algorithm: sha256WithRSAEncryption 96:67:2b:5f:44:6b:29:b4:23:80:0b:43:84:5d:8b:fa:88:8e: 40:9e:cf:3c:13:62:e8:1c:a3:40:64:0b:ee:91:f5:71:19:22: 0e:97:49:a4:70:3f:87:09:ba:2a:ab:12:f6:85:bb:84:4d:e8: ff:60:67:80:8f:3a:74:63:7b:21:e2:8b:51:26:ae:67:78:05: 03:93:bc:aa:80:b1:dc:62:ae:af:81:9d:60:e8:68:7a:87:1a: bd:3a:78:2b:fc:4f:42:a2:e1:4b:4c:3e:5a:51:94:4f:72:80: c7:d7:9a:f4:e5:b6:67:6f:55:c8:a8:52:cf:83:19:22:99:eb: 08:69:0d:b6:79:41:d7:74:de:97:ca:89:b9:92:8e:cf:df:db: 96:cb:90:0f:1c:ec:b9:3d:ac:55:5b:90:35:b8:61:3b:53:ba: 4b:02:2e:55:c4:87:9f:c0:53:89:56:3a:d2:f5:04:9f:bf:36: d0:d8:64:ad:17:5f:fd:a5:69:75:92:0d:77:cf:24:e0:26:6b: ab:a9:44:7d:f3:c4:94:0f:c4:ca:87:23:a8:54:fb:dd:2a:32: a8:fd:e5:7e:87:34:4f:89:4d:fa:b6:55:cb:a7:d1:eb:0e:cd: 70:d2:60:aa:58:62:28:c5:0a:40:b1:9c:ae:c9:2f:a8:5e:51: 04:67:e8:f2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbfnsxUjnu3hGQpoLzw+ZE8igX8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTEwMTEwMzU1MDBaFw0yNjEwMTAwNDAwMDBaMDMxMTAvBgNV BAMTKDhBQ0EzNDMzM0M4QTUzQ0FFRkEwM0VGRTYzRkZDM0U4QzI0Qjk2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hpPuiWn4Omqg6KrHTy+DJs7K w1tYyAXlE5ri1v44az24oMokfi0WtI112/xYkQ65cISvrfFFM6NuLhVOoeITlXfR M9I6G8ChK1ix27Qafa4T7kCAUcY0ECB5hdSKQjcjnH7aIfITHTQvZponDjXl18tT KHTA8Rj/7jmnXYdFRfBGuVkxays6apHCc85enkhsASiaIjj3j9Rw2GC2c5m4daVg QutvoHJzJBnB3oN8hG34CUi84lBB+Y/ouaNACcnuQ6/OgFByuZpmp2TvvSkA4QU/ guFDqDCTA+lZUXxpmNL3B34xXMN/C7MQIl48O0vJheOYDljhZl1VlfRftkHPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUiso0MzyKU8rvoD7+Y//D6MJLlj4wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhNjY2MTYzMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM4MzUzNTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAT9 APrDMA0GCSqGSIb3DQEBCwUAA4IBAQCWZytfRGsptCOAC0OEXYv6iI5Ans88E2Lo HKNAZAvukfVxGSIOl0mkcD+HCboqqxL2hbuETej/YGeAjzp0Y3sh4otRJq5neAUD k7yqgLHcYq6vgZ1g6Gh6hxq9Ongr/E9CouFLTD5aUZRPcoDH15r05bZnb1XIqFLP gxkimesIaQ22eUHXdN6Xyom5ko7P39uWy5APHOy5PaxVW5A1uGE7U7pLAi5VxIef wFOJVjrS9QSfvzbQ2GStF1/9pWl1kg13zyTgJmurqUR988SUD8TKhyOoVPvdKjKo /eV+hzRPiU36tlXLp9HrDs1w0mCqWGIoxQpAsZyuyS+oXlEEZ+jy -----END CERTIFICATE-----Generated at Tue Oct 21 02:01:02 2025 by rpki-client