$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: eNWwXCWeYF839zYO7rMMIV3xkBiscdjR2fVL1yHTmFI= Subject key identifier: F3:45:4D:81:66:52:39:32:47:37:95:17:4C:43:D4:1E:76:F1:7E:62 Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Certificate serial: 6E8827D49A9D163294C88384EE9725284383DCB2 Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa Signing time: Mon 29 Sep 2025 05:02:57 +0000 ROA not before: Mon 29 Sep 2025 04:57:57 +0000 ROA not after: Mon 28 Sep 2026 05:02:57 +0000 asID: 141968 IP address blocks: 2407:6ac0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:88:27:d4:9a:9d:16:32:94:c8:83:84:ee:97:25:28:43:83:dc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Validity Not Before: Sep 29 04:57:57 2025 GMT Not After : Sep 28 05:02:57 2026 GMT Subject: CN=F3454D8166523932473795174C43D41E76F17E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:86:19:4f:ee:96:31:3f:d8:c1:30:41:fd: 8e:ba:29:92:b0:c5:b9:96:02:f4:0f:fd:3b:9f:2f: 11:6b:fd:d4:77:88:0e:3f:fc:b5:17:19:9c:cf:91: 24:c6:5e:4b:79:d9:a7:cb:ff:28:2b:b7:ac:46:75: b4:c3:8e:ba:8f:2f:05:d0:6c:9b:55:bb:ec:03:ae: b6:36:df:83:22:55:09:97:b6:f0:ea:fc:2b:33:cc: ec:aa:1a:58:ad:25:a4:17:58:b6:78:03:62:74:3b: d7:00:77:63:df:78:05:63:52:99:71:8c:5d:fa:4f: 52:19:22:2b:5c:54:42:5a:82:c9:8a:17:92:c1:b7: 27:a4:b7:92:0f:7e:56:57:b8:f7:bd:2c:89:97:b0: 01:5f:22:be:17:ac:39:d9:54:eb:35:f1:a8:8b:ae: 7c:9e:2d:1f:40:54:87:56:b3:76:b7:49:60:b7:a1: cf:31:dd:5b:f5:e8:0d:f1:8e:6f:94:9b:f4:63:df: 7d:75:9b:93:24:19:c0:0b:90:bd:49:4a:df:64:e0: 36:e8:8c:78:a5:ce:21:fc:c2:de:fb:49:dc:ee:c2: 9e:d2:7a:e2:3b:72:c8:2d:a4:a2:23:2d:ea:5f:ff: b2:cd:0f:27:d3:b8:de:0f:80:46:0c:2c:34:ae:64: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:45:4D:81:66:52:39:32:47:37:95:17:4C:43:D4:1E:76:F1:7E:62 X509v3 Authority Key Identifier: keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a383a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:8::/48 Signature Algorithm: sha256WithRSAEncryption 78:99:39:76:2d:80:e7:aa:a6:48:c0:15:28:33:cf:67:b3:23: 40:4d:ff:9b:6c:14:1b:75:49:30:98:81:9a:c8:48:f0:7d:2a: 0c:97:c7:d5:57:f1:cb:25:a5:84:dc:0f:7f:86:99:50:bf:1c: 9a:59:1d:41:e4:a6:1f:fc:0f:68:7e:a3:11:be:cc:a9:8e:0e: bb:7c:e3:16:71:c9:4c:e1:f6:95:9b:59:e3:b4:b1:73:82:2b: 80:fa:48:b0:f8:ca:e4:eb:72:95:5d:3a:11:a9:c0:58:1d:26: 95:67:2e:a8:7f:ef:55:18:81:ed:a1:0a:9c:4a:21:3c:35:6c: 1a:64:7f:05:48:f6:b8:55:f3:77:e0:9e:44:fc:a5:26:6b:df: 34:9d:95:4c:a7:bb:73:d1:42:ed:dd:9e:09:f2:40:de:ba:70: 9e:b3:b2:cd:d3:12:25:86:f6:bf:dc:52:ba:61:4e:7e:5b:ac: 74:df:86:24:83:cf:69:26:e7:2a:59:87:fd:fa:5d:57:c9:ef: 89:ba:fb:f4:20:80:f9:43:d9:3f:12:06:9e:17:f8:2e:49:66: 0c:f0:20:d5:44:dd:bc:c7:fd:ad:3a:1a:31:d7:0f:b1:27:06: 03:d0:80:1c:96:c0:9b:a3:47:0a:d4:98:d4:1a:52:e0:15:02: 2d:4d:21:79 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUbogn1JqdFjKUyIOE7pclKEOD3LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB NEY2OTM4NzAeFw0yNTA5MjkwNDU3NTdaFw0yNjA5MjgwNTAyNTdaMDMxMTAvBgNV BAMTKEYzNDU0RDgxNjY1MjM5MzI0NzM3OTUxNzRDNDNENDFFNzZGMTdFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xIYZT+6WMT/YwTBB/Y66KZKw xbmWAvQP/TufLxFr/dR3iA4//LUXGZzPkSTGXkt52afL/ygrt6xGdbTDjrqPLwXQ bJtVu+wDrrY234MiVQmXtvDq/CszzOyqGlitJaQXWLZ4A2J0O9cAd2PfeAVjUplx jF36T1IZIitcVEJagsmKF5LBtyekt5IPflZXuPe9LImXsAFfIr4XrDnZVOs18aiL rnyeLR9AVIdWs3a3SWC3oc8x3Vv16A3xjm+Um/Rj3311m5MkGcALkL1JSt9k4Dbo jHilziH8wt77Sdzuwp7SeuI7csgtpKIjLepf/7LNDyfTuN4PgEYMLDSuZJLlAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU80VNgWZSOTJHN5UXTEPUHnbxfmIwHwYDVR0j BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2 OTM4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAgw DQYJKoZIhvcNAQELBQADggEBAHiZOXYtgOeqpkjAFSgzz2ezI0BN/5tsFBt1STCY gZrISPB9KgyXx9VX8cslpYTcD3+GmVC/HJpZHUHkph/8D2h+oxG+zKmODrt84xZx yUzh9pWbWeO0sXOCK4D6SLD4yuTrcpVdOhGpwFgdJpVnLqh/71UYge2hCpxKITw1 bBpkfwVI9rhV83fgnkT8pSZr3zSdlUynu3PRQu3dngnyQN66cJ6zss3TEiWG9r/c UrphTn5brHTfhiSDz2km5ypZh/36XVfJ74m6+/QggPlD2T8SBp4X+C5JZgzwINVE 3bzH/a06GjHXD7EnBgPQgByWwJujRwrUmNQaUuAVAi1NIXk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:47 2025 by rpki-client