$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: yEBIywXimpkaV6kkZf88ktJaXacXrWtJ0Gm2cewbi/o= Subject key identifier: 0E:08:07:34:06:1F:88:9A:97:5C:EF:B7:50:FB:CD:5C:5C:0D:1E:DA Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Certificate serial: 5AFCA7EB640690DA1EF5FCF85F703A8A0F219317 Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa Signing time: Mon 29 Sep 2025 05:02:57 +0000 ROA not before: Mon 29 Sep 2025 04:57:57 +0000 ROA not after: Mon 28 Sep 2026 05:02:57 +0000 asID: 141968 IP address blocks: 2407:6ac0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fc:a7:eb:64:06:90:da:1e:f5:fc:f8:5f:70:3a:8a:0f:21:93:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Validity Not Before: Sep 29 04:57:57 2025 GMT Not After : Sep 28 05:02:57 2026 GMT Subject: CN=0E080734061F889A975CEFB750FBCD5C5C0D1EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:59:62:96:ae:22:35:24:7a:30:30:3f:8e: 4b:ca:9c:59:fb:32:fb:84:52:95:e8:25:34:97:db: 57:53:93:43:60:0b:59:3f:fa:ff:b1:2e:7a:43:cf: 5b:74:0a:85:df:1b:21:52:2f:97:2a:fb:1c:88:3b: eb:39:ef:7f:b5:86:16:3d:6f:f0:22:9d:4b:67:cb: 55:bf:a5:35:11:c5:34:3c:40:46:38:f5:fa:6b:77: 99:55:63:af:de:54:99:f0:96:60:48:3b:ee:1e:73: 57:7c:f9:a0:31:93:37:bd:b0:51:d2:f2:45:20:aa: a6:1d:0f:7d:05:c9:58:aa:57:20:7c:5f:c3:70:b9: 2a:69:30:0f:b1:27:7d:d8:cc:f3:02:4e:b9:85:1b: 63:b8:4f:2b:44:49:35:80:c8:13:a9:df:9a:4a:35: d8:f4:8e:f1:cd:ba:0d:62:72:a0:81:3d:1e:25:22: fc:04:f3:3d:85:4f:15:e2:3d:59:e1:fd:e8:4e:0b: 2c:c3:33:d8:e3:d0:08:cd:18:84:b8:6b:dd:11:25: 3a:28:ca:a1:d3:b8:3e:0d:a9:fa:b3:1c:05:0f:b8: 40:85:2b:5e:ad:f8:27:96:79:2c:81:08:67:02:c3: 21:dc:57:9f:0f:10:f1:05:2c:06:b4:09:20:36:f9: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:08:07:34:06:1F:88:9A:97:5C:EF:B7:50:FB:CD:5C:5C:0D:1E:DA X509v3 Authority Key Identifier: keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a323a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:2::/48 Signature Algorithm: sha256WithRSAEncryption 10:d3:b4:70:d4:83:f1:6a:cc:d8:88:f0:b6:55:be:a5:53:7e: ec:d4:b2:b8:26:35:97:dd:ec:bd:af:98:35:f1:62:8b:91:06: 4b:73:57:0b:3c:9c:11:e7:18:c8:96:6d:c6:e3:fb:5c:76:87: 92:89:64:21:92:ee:15:b7:83:64:bd:ae:d4:a6:86:55:8a:2b: fb:b3:8e:fa:c2:17:57:43:22:8c:fa:60:2c:21:c1:14:c5:f6: f1:fc:fd:bc:65:7a:85:1f:3c:8f:08:87:41:11:de:67:3c:44: 21:2f:13:2b:58:b5:a7:d8:42:cb:63:48:e8:84:0d:da:93:17: 33:e0:b7:f0:38:d3:c4:73:dc:11:e4:5c:46:26:22:82:fc:8f: af:68:7a:38:71:3a:b2:af:b6:f0:39:5d:b3:6a:eb:6e:aa:cc: c7:5d:33:27:5f:eb:c1:d0:1a:63:14:c2:71:cd:e2:79:00:34: d6:64:a6:7f:bb:1b:14:3e:bd:a7:5d:a3:3c:37:ff:16:e9:58: b4:62:66:b7:91:f6:81:d0:84:75:07:64:ca:ff:e8:56:d0:3b: 0a:98:4f:15:bf:c3:99:df:d3:9c:b4:92:97:44:a9:67:e7:03: 8d:ad:e8:08:0a:11:e5:9f:ee:7b:89:b5:49:0e:0b:e6:bb:00: 2c:5b:d5:54 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWvyn62QGkNoe9fz4X3A6ig8hkxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB NEY2OTM4NzAeFw0yNTA5MjkwNDU3NTdaFw0yNjA5MjgwNTAyNTdaMDMxMTAvBgNV BAMTKDBFMDgwNzM0MDYxRjg4OUE5NzVDRUZCNzUwRkJDRDVDNUMwRDFFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeellilq4iNSR6MDA/jkvKnFn7 MvuEUpXoJTSX21dTk0NgC1k/+v+xLnpDz1t0CoXfGyFSL5cq+xyIO+s573+1hhY9 b/AinUtny1W/pTURxTQ8QEY49fprd5lVY6/eVJnwlmBIO+4ec1d8+aAxkze9sFHS 8kUgqqYdD30FyViqVyB8X8NwuSppMA+xJ33YzPMCTrmFG2O4TytESTWAyBOp35pK Ndj0jvHNug1icqCBPR4lIvwE8z2FTxXiPVnh/ehOCyzDM9jj0AjNGIS4a90RJToo yqHTuD4NqfqzHAUPuECFK16t+CeWeSyBCGcCwyHcV58PEPEFLAa0CSA2+f2dAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUDggHNAYfiJqXXO+3UPvNXFwNHtowHwYDVR0j BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2 OTM4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzIzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAIw DQYJKoZIhvcNAQELBQADggEBABDTtHDUg/FqzNiI8LZVvqVTfuzUsrgmNZfd7L2v mDXxYouRBktzVws8nBHnGMiWbcbj+1x2h5KJZCGS7hW3g2S9rtSmhlWKK/uzjvrC F1dDIoz6YCwhwRTF9vH8/bxleoUfPI8Ih0ER3mc8RCEvEytYtafYQstjSOiEDdqT FzPgt/A408Rz3BHkXEYmIoL8j69oejhxOrKvtvA5XbNq626qzMddMydf68HQGmMU wnHN4nkANNZkpn+7GxQ+vaddozw3/xbpWLRiZreR9oHQhHUHZMr/6FbQOwqYTxW/ w5nf05y0kpdEqWfnA42t6AgKEeWf7nuJtUkOC+a7ACxb1VQ= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:35 2025 by rpki-client