$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: RSMkgkbZL4J3AjFFRuXF01xRgKPhd/9MO1mI7DC0lXE= Subject key identifier: DE:2D:80:A5:70:BB:09:14:ED:ED:E9:58:7D:F9:A9:D8:A1:F6:13:23 Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Certificate serial: 31B98F9D8AA6655DDDA2A040FBE90664DB44A5D5 Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa Signing time: Mon 29 Sep 2025 05:02:57 +0000 ROA not before: Mon 29 Sep 2025 04:57:57 +0000 ROA not after: Mon 28 Sep 2026 05:02:57 +0000 asID: 141968 IP address blocks: 2407:6ac0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b9:8f:9d:8a:a6:65:5d:dd:a2:a0:40:fb:e9:06:64:db:44:a5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Validity Not Before: Sep 29 04:57:57 2025 GMT Not After : Sep 28 05:02:57 2026 GMT Subject: CN=DE2D80A570BB0914EDEDE9587DF9A9D8A1F61323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:7a:97:36:d3:ec:3a:8b:b0:44:cb:5e:a5: e8:b0:4e:4b:f2:2d:94:dd:a4:f2:67:f7:a6:81:c5: a5:45:38:08:ca:45:87:52:92:15:8e:d5:0a:82:74: 81:27:00:ef:a5:65:56:77:a6:9b:8d:ae:4b:1e:db: da:de:17:4e:b8:e4:bb:71:8b:7b:af:fa:d0:0c:67: 3a:d3:c6:59:b3:1c:0b:c4:b9:47:c5:f6:ab:97:f4: dc:11:1b:af:a5:82:86:7d:4b:08:c4:47:74:6d:e9: 83:f2:f7:22:79:a0:89:79:cd:94:3f:8b:b3:25:93: da:43:3c:a4:2c:c9:36:41:aa:fd:4b:28:9b:88:c6: c9:6f:ff:ec:5d:11:f2:e3:fb:59:12:ad:57:60:ad: be:7d:e3:ae:8d:b7:a9:8e:ca:f6:00:64:d8:8b:fe: 8b:05:f0:98:12:5f:d0:ba:f3:6f:4f:a3:fb:9e:1b: 8f:8d:ec:fc:07:f1:81:63:31:23:c4:60:cc:7e:3f: 68:86:b8:d9:ac:81:80:28:38:b2:04:f0:26:c1:8b: 04:6a:f6:fc:73:0b:a7:af:d1:91:de:59:78:ca:0c: 85:16:51:51:de:d9:7f:07:fb:5c:4a:40:0c:e4:23: 3d:21:7b:80:0a:24:b0:09:ef:90:a9:50:1d:e7:00: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2D:80:A5:70:BB:09:14:ED:ED:E9:58:7D:F9:A9:D8:A1:F6:13:23 X509v3 Authority Key Identifier: keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a31303a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:10::/48 Signature Algorithm: sha256WithRSAEncryption b1:5b:11:5c:4c:93:0c:8d:48:d6:64:8b:b0:c9:53:55:35:18: 69:d0:b9:af:06:f0:5d:fd:4a:1b:7f:01:e8:89:95:d6:7e:d8: b1:63:f7:d6:9b:97:1d:4e:ee:2a:6e:c2:b6:95:60:45:5c:94: 7e:d4:18:a5:cd:a6:24:e1:60:5a:9d:e4:17:31:d0:99:46:02: 3f:a7:f0:af:cb:ac:ec:e6:b9:f7:14:f9:04:a3:d5:ba:ab:f0: dd:1a:cf:96:41:ef:70:91:b7:e1:59:27:f0:25:36:f5:50:a8: 66:eb:93:e3:56:7a:c4:52:d3:7a:86:52:69:49:0e:7a:8f:28: 31:df:43:c4:41:49:ca:c0:43:54:b2:3e:5b:46:14:a3:4d:ce: 24:fe:77:14:2b:ed:c9:26:b8:e4:b9:ad:99:dc:ab:7b:0e:12: fa:df:ce:d1:39:58:11:72:a3:94:c0:54:c6:30:cc:8b:23:ca: 4f:a9:c0:49:a8:ce:aa:99:56:79:05:63:c0:15:38:51:5a:31: de:87:8e:56:0a:68:99:5d:29:68:05:81:2f:6a:60:1e:0c:65: a9:2e:ae:85:f2:09:dc:93:ee:41:fe:da:29:57:cd:ba:4c:38: 9e:00:4a:7f:49:fe:12:8e:ca:eb:76:2a:06:1d:dd:4a:3d:e9: bf:db:12:bd -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUMbmPnYqmZV3doqBA++kGZNtEpdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB NEY2OTM4NzAeFw0yNTA5MjkwNDU3NTdaFw0yNjA5MjgwNTAyNTdaMDMxMTAvBgNV BAMTKERFMkQ4MEE1NzBCQjA5MTRFREVERTk1ODdERjlBOUQ4QTFGNjEzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEynqXNtPsOouwRMtepeiwTkvy LZTdpPJn96aBxaVFOAjKRYdSkhWO1QqCdIEnAO+lZVZ3ppuNrkse29reF0645Ltx i3uv+tAMZzrTxlmzHAvEuUfF9quX9NwRG6+lgoZ9SwjER3Rt6YPy9yJ5oIl5zZQ/ i7Mlk9pDPKQsyTZBqv1LKJuIxslv/+xdEfLj+1kSrVdgrb59466Nt6mOyvYAZNiL /osF8JgSX9C6829Po/ueG4+N7PwH8YFjMSPEYMx+P2iGuNmsgYAoOLIE8CbBiwRq 9vxzC6ev0ZHeWXjKDIUWUVHe2X8H+1xKQAzkIz0he4AKJLAJ75CpUB3nAB+fAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU3i2ApXC7CRTt7elYffmp2KH2EyMwHwYDVR0j BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2 OTM4Ny5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMTM5MzYzOC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQHasAA EDANBgkqhkiG9w0BAQsFAAOCAQEAsVsRXEyTDI1I1mSLsMlTVTUYadC5rwbwXf1K G38B6ImV1n7YsWP31puXHU7uKm7CtpVgRVyUftQYpc2mJOFgWp3kFzHQmUYCP6fw r8us7Oa59xT5BKPVuqvw3RrPlkHvcJG34Vkn8CU29VCoZuuT41Z6xFLTeoZSaUkO eo8oMd9DxEFJysBDVLI+W0YUo03OJP53FCvtySa45Lmtmdyrew4S+t/O0TlYEXKj lMBUxjDMiyPKT6nASajOqplWeQVjwBU4UVox3oeOVgpomV0paAWBL2pgHgxlqS6u hfIJ3JPuQf7aKVfNukw4ngBKf0n+Eo7K63YqBh3dSj3pv9sSvQ== -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:31 2025 by rpki-client