$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: FqWg9EDXLMZmoiaMQLq7+Fw4HIp+bYI5upAnVbEm6yU= Subject key identifier: 63:22:9A:61:29:FC:09:48:5E:5C:F9:8D:B7:2F:C9:0B:E7:1F:03:7B Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 0F24A394B1D3D0F81BE22C3F71B11E02E90BC2B8 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa Signing time: Tue 14 Oct 2025 05:01:08 +0000 ROA not before: Tue 14 Oct 2025 04:56:08 +0000 ROA not after: Tue 13 Oct 2026 05:01:08 +0000 asID: 55685 IP address blocks: 2404:e100:b::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:24:a3:94:b1:d3:d0:f8:1b:e2:2c:3f:71:b1:1e:02:e9:0b:c2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Oct 14 04:56:08 2025 GMT Not After : Oct 13 05:01:08 2026 GMT Subject: CN=63229A6129FC09485E5CF98DB72FC90BE71F037B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:1a:1e:b8:d4:4b:e2:a8:06:0c:63:f4:94:d5: 5e:aa:cc:25:d5:5d:34:24:a0:fe:8f:a4:cf:f8:c8: a4:f7:b9:06:29:13:f4:ed:1f:9f:8c:ad:f6:99:45: 16:9a:10:30:68:1c:0d:af:c6:2c:c8:e9:a6:d1:11: 19:89:36:76:86:a2:58:c2:86:2e:dd:9b:14:13:a3: 02:eb:54:d2:4d:12:ec:20:17:29:76:6e:4f:e1:22: f4:1a:35:33:3d:da:2b:57:68:fc:1b:b4:3a:b4:cd: bb:d8:e4:63:cd:97:9c:7c:30:b8:e2:6d:6f:a8:ed: 33:ff:99:f8:82:6c:d0:fc:e8:1b:d4:89:87:e6:02: c9:f5:4a:db:1e:7b:39:20:77:7c:b9:87:c1:a6:05: b9:f9:ba:36:d7:b7:65:e7:0c:99:58:fb:d0:04:88: aa:9f:6b:68:d5:d4:98:27:e1:a0:f1:98:8a:a6:ab: 2f:62:7b:0c:f5:d1:57:d9:c7:8c:aa:dd:13:21:13: 5c:cd:b4:03:43:92:13:9b:86:fb:69:12:e1:2e:fb: 3a:90:1f:ff:41:3c:64:ea:d6:26:90:85:00:14:07: 9d:20:0a:f5:50:97:ab:43:4c:e8:66:b3:d7:7f:79: a3:18:59:ad:fe:ff:5b:f0:af:18:46:c8:44:d6:10: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:22:9A:61:29:FC:09:48:5E:5C:F9:8D:B7:2F:C9:0B:E7:1F:03:7B X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a623a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:b::/48 Signature Algorithm: sha256WithRSAEncryption 13:38:a7:a1:b5:e2:03:11:65:80:67:eb:62:ac:9c:49:9c:74: 20:cd:b3:07:02:16:d6:ec:5a:bb:9e:a9:90:c0:72:72:9e:b2: f8:3a:ee:f4:80:17:9f:c4:9d:ec:7b:e7:ae:28:53:d7:dc:64: 0e:27:5a:8b:2a:af:0b:03:54:13:47:0d:eb:c1:e8:b5:34:2c: 04:27:3b:39:67:42:0b:ba:61:47:8d:b7:91:7e:53:c5:fc:31: 6d:32:88:c9:d5:c4:a7:67:39:58:4b:3b:56:7b:12:59:5b:b5: d2:29:21:99:48:6f:d3:bd:bd:ad:72:28:bf:4e:0b:e1:73:b1: 15:18:a0:c2:80:fe:bf:24:2f:55:da:9a:97:50:c6:d5:2d:a6: 75:5f:ee:34:bc:8c:21:ca:df:aa:38:29:3b:fd:d1:87:2d:95: 00:f7:67:d1:25:fb:10:61:37:51:a9:03:2b:53:9c:dc:01:3a: 1e:77:0c:7a:37:76:b7:85:39:58:21:30:5b:66:1f:48:89:26: ea:cf:ae:83:25:ca:9f:10:56:68:5e:ec:3a:6c:e0:73:61:be: 0c:ab:95:ce:8f:c8:73:d5:96:36:1e:19:66:f5:c2:2c:d1:27: 46:2c:96:23:1c:8c:97:6e:2d:4e:e5:7e:c9:f0:fb:fa:3d:cd: ad:f7:36:e2 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUDySjlLHT0Pgb4iw/cbEeAukLwrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTEwMTQwNDU2MDhaFw0yNjEwMTMwNTAxMDhaMDMxMTAvBgNV BAMTKDYzMjI5QTYxMjlGQzA5NDg1RTVDRjk4REI3MkZDOTBCRTcxRjAzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6Gh641EviqAYMY/SU1V6qzCXV XTQkoP6PpM/4yKT3uQYpE/TtH5+MrfaZRRaaEDBoHA2vxizI6abRERmJNnaGoljC hi7dmxQTowLrVNJNEuwgFyl2bk/hIvQaNTM92itXaPwbtDq0zbvY5GPNl5x8MLji bW+o7TP/mfiCbND86BvUiYfmAsn1Stseezkgd3y5h8GmBbn5ujbXt2XnDJlY+9AE iKqfa2jV1Jgn4aDxmIqmqy9iewz10VfZx4yq3RMhE1zNtANDkhObhvtpEuEu+zqQ H/9BPGTq1iaQhQAUB50gCvVQl6tDTOhms9d/eaMYWa3+/1vwrxhGyETWEPGpAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUYyKaYSn8CUheXPmNty/JC+cfA3swHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhNjIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAThAAALMA0G CSqGSIb3DQEBCwUAA4IBAQATOKehteIDEWWAZ+tirJxJnHQgzbMHAhbW7Fq7nqmQ wHJynrL4Ou70gBefxJ3se+euKFPX3GQOJ1qLKq8LA1QTRw3rwei1NCwEJzs5Z0IL umFHjbeRflPF/DFtMojJ1cSnZzlYSztWexJZW7XSKSGZSG/Tvb2tcii/Tgvhc7EV GKDCgP6/JC9V2pqXUMbVLaZ1X+40vIwhyt+qOCk7/dGHLZUA92fRJfsQYTdRqQMr U5zcAToedwx6N3a3hTlYITBbZh9IiSbqz66DJcqfEFZoXuw6bOBzYb4Mq5XOj8hz 1ZY2Hhlm9cIs0SdGLJYjHIyXbi1O5X7J8Pv6Pc2t9zbi -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:11 2025 by rpki-client