$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa File: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (raw, json) Hash identifier: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI= Subject key identifier: 59:37:46:EC:B8:0E:A4:B9:B1:9B:EE:8E:23:8E:3E:87:93:F5:08:10 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 44751372548CF7C6F27ABCD83DB67DFE5373B465 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa Signing time: Wed 10 Sep 2025 08:00:02 +0000 ROA not before: Wed 10 Sep 2025 07:55:02 +0000 ROA not after: Wed 09 Sep 2026 08:00:02 +0000 asID: 153122 IP address blocks: 2001:df4:5540::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:75:13:72:54:8c:f7:c6:f2:7a:bc:d8:3d:b6:7d:fe:53:73:b4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Sep 10 07:55:02 2025 GMT Not After : Sep 9 08:00:02 2026 GMT Subject: CN=593746ECB80EA4B9B19BEE8E238E3E8793F50810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:20:08:91:5f:38:24:36:d0:3c:43:4e:49:34: 33:36:9b:5d:76:0f:dc:cb:4c:7d:a3:35:7c:68:57: f3:27:22:e8:8d:89:c7:ec:e1:20:17:3b:85:45:68: 6e:b9:82:e3:b6:43:1a:c2:6a:b2:4f:34:89:1d:c9: 3a:cc:22:5b:84:3b:48:23:73:6d:05:d5:1c:bb:c9: 73:84:ea:2f:52:8a:dd:61:cd:10:fc:e4:15:78:72: 17:20:7c:93:07:d5:4a:d4:74:52:84:83:4c:64:41: a9:a4:18:83:ae:8f:79:79:84:7e:8a:dc:54:a5:4a: c2:7a:37:8d:d6:4a:cb:dc:b4:48:7e:69:12:02:6d: 4b:1b:bc:85:3c:1b:fa:7d:dc:76:fb:dc:74:7c:3e: 77:5e:55:eb:42:69:b5:09:76:6f:db:f4:56:33:e0: ee:f8:60:98:db:96:78:7a:19:60:ae:7b:56:6e:19: 94:b7:0b:30:97:dd:62:f5:ab:32:a9:29:34:ad:35: 78:b2:68:4d:a9:91:7e:8d:d1:f0:65:b4:55:be:a9: 07:09:9a:64:31:32:66:d9:10:8e:e0:e9:a1:4b:ac: 15:29:f8:86:71:d8:ac:3c:3a:9f:b9:d0:4f:44:ab: 48:fd:44:ae:ad:9b:fe:74:98:82:a7:22:66:9f:34: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:37:46:EC:B8:0E:A4:B9:B1:9B:EE:8E:23:8E:3E:87:93:F5:08:10 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:5540::/48 Signature Algorithm: sha256WithRSAEncryption cf:6a:e9:bf:9c:4e:10:1f:ac:25:f5:96:63:1e:18:42:cd:89: e2:ca:3c:3e:a3:30:63:39:d6:17:81:cd:c6:25:c4:72:2e:57: 71:6c:96:12:d0:b8:2a:97:b2:4d:e9:1c:7f:73:7a:77:20:f6: e9:6f:67:82:14:04:b4:fe:85:8d:12:cf:02:15:2a:91:e3:b2: 80:48:68:e1:54:27:20:f7:6a:67:d8:d9:c9:2a:f4:7b:eb:98: 73:ee:13:ac:73:ad:f3:5a:78:96:b6:d8:0d:ad:86:12:eb:4d: e6:97:80:31:04:26:ae:7f:03:48:34:d8:d0:70:1d:a2:75:6c: 3c:60:c6:ba:34:c9:07:45:09:85:d2:4a:25:a6:7f:42:cc:1b: 19:1e:ac:f1:cb:25:6c:8d:17:43:86:5c:5d:7a:a8:30:1b:07: 40:9d:d1:e1:db:a3:ab:d0:64:35:2e:4d:67:aa:db:43:84:be: 2d:29:33:6c:91:de:0e:c2:2f:ad:07:6a:1d:4f:fa:94:17:b2: 39:c7:70:7a:75:ab:f7:e7:4f:1f:01:7b:7a:5e:4c:e6:7a:bc: 3c:10:c5:b5:94:05:87:10:b4:c0:d9:df:1a:e7:63:8e:7b:be: 20:6e:dd:22:06:11:79:ee:09:27:b7:f5:90:24:e2:56:20:0c: a5:ee:39:67 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIURHUTclSM98byerzYPbZ9/lNztGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA5MTAwNzU1MDJaFw0yNjA5MDkwODAwMDJaMDMxMTAvBgNV BAMTKDU5Mzc0NkVDQjgwRUE0QjlCMTlCRUU4RTIzOEUzRTg3OTNGNTA4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcIAiRXzgkNtA8Q05JNDM2m112 D9zLTH2jNXxoV/MnIuiNicfs4SAXO4VFaG65guO2QxrCarJPNIkdyTrMIluEO0gj c20F1Ry7yXOE6i9Sit1hzRD85BV4chcgfJMH1UrUdFKEg0xkQamkGIOuj3l5hH6K 3FSlSsJ6N43WSsvctEh+aRICbUsbvIU8G/p93Hb73HR8PndeVetCabUJdm/b9FYz 4O74YJjblnh6GWCue1ZuGZS3CzCX3WL1qzKpKTStNXiyaE2pkX6N0fBltFW+qQcJ mmQxMmbZEI7g6aFLrBUp+IZx2Kw8Op+50E9Eq0j9RK6tm/50mIKnImafNDmXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWTdG7LgOpLmxm+6OI44+h5P1CBAwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjJmNjQ5LTk5NjgtNDk1ZC1i ZGYxLTdkNzYyNTZkYWFkNS8xLzMyMzAzMDMxM2E2NDY2MzQzYTM1MzUzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzMjMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9FVAMA0GCSqGSIb3DQEBCwUAA4IBAQDPaum/nE4QH6wl9ZZjHhhCzYniyjw+ozBj OdYXgc3GJcRyLldxbJYS0Lgql7JN6Rx/c3p3IPbpb2eCFAS0/oWNEs8CFSqR47KA SGjhVCcg92pn2NnJKvR765hz7hOsc63zWniWttgNrYYS603ml4AxBCaufwNINNjQ cB2idWw8YMa6NMkHRQmF0kolpn9CzBsZHqzxyyVsjRdDhlxdeqgwGwdAndHh26Or 0GQ1Lk1nqttDhL4tKTNskd4Owi+tB2odT/qUF7I5x3B6dav3508fAXt6Xkzmerw8 EMW1lAWHELTA2d8a52OOe74gbt0iBhF57gknt/WQJOJWIAyl7jln -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:30 2025 by rpki-client