$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa File: 323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa (raw, json) Hash identifier: yNpbjX6gTD89ln+i99OQ8YcqMnJleD0jKIxU7l3uW2g= Subject key identifier: 13:1A:0B:D5:D5:39:AC:11:C9:40:8A:67:D8:AB:A1:27:91:6B:02:FC Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Certificate serial: 600DD84F460017948D8E9CE312091AA372002DF0 Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa Signing time: Mon 29 Sep 2025 05:02:58 +0000 ROA not before: Mon 29 Sep 2025 04:57:58 +0000 ROA not after: Mon 28 Sep 2026 05:02:58 +0000 asID: 141968 IP address blocks: 2407:6ac0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0d:d8:4f:46:00:17:94:8d:8e:9c:e3:12:09:1a:a3:72:00:2d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Validity Not Before: Sep 29 04:57:58 2025 GMT Not After : Sep 28 05:02:58 2026 GMT Subject: CN=131A0BD5D539AC11C9408A67D8ABA127916B02FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:86:e2:a2:43:2d:2e:c1:3b:cd:26:00:28: 98:56:eb:b3:6f:fb:d5:29:b4:e3:c8:7d:55:4e:5c: 11:bc:16:33:91:29:a2:e4:89:8e:39:fd:32:50:cd: 4d:84:ea:54:bb:d9:de:5f:b4:33:0e:ed:53:f0:92: c4:cf:30:d7:e3:50:f5:4c:a8:99:0a:ac:24:8c:3a: 18:a9:f4:38:39:85:35:eb:24:a0:b7:be:a2:3e:33: a2:ed:3a:8c:b9:89:13:4a:9f:b4:96:78:0e:fb:fd: 22:32:cd:e6:86:eb:d2:51:63:17:86:d7:ad:de:b2: 7a:df:0d:45:27:84:66:24:61:ad:fe:7f:9b:2c:ad: b9:4c:c9:2c:e1:59:ca:92:0f:5b:81:8e:a2:a1:01: 79:c7:62:de:15:c2:e5:ce:f8:10:2b:67:8b:b0:8e: de:4b:6e:54:04:64:a8:09:93:50:a8:c7:4b:04:10: f3:23:cf:4d:d8:33:07:18:8c:37:45:6c:8a:d6:5d: 70:6e:60:6d:d5:72:0d:2a:14:69:7b:ca:36:46:95: 68:3a:4a:ea:f5:0e:7e:a5:d2:6c:f8:03:7f:e9:1e: af:84:e6:d5:34:42:01:09:6b:aa:e7:0c:64:a5:f2: d0:7d:1e:a7:ba:8c:89:15:78:09:87:60:c0:3f:29: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1A:0B:D5:D5:39:AC:11:C9:40:8A:67:D8:AB:A1:27:91:6B:02:FC X509v3 Authority Key Identifier: keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/323430373a366163303a393a3a2f34382d3438203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6ac0:9::/48 Signature Algorithm: sha256WithRSAEncryption 54:28:f7:26:7b:86:24:35:a6:63:40:c2:4a:af:af:fe:43:2c: b5:ba:2a:c2:f1:f0:ae:f7:36:78:b4:52:1d:63:e9:33:2d:2e: ba:ba:6b:5d:ff:d4:ee:a7:ca:41:bd:2b:dd:f3:97:59:78:89: c4:b8:fc:ca:6f:49:3f:f5:22:8d:02:c7:db:ad:cb:94:af:37: de:18:cb:f5:ca:18:d4:90:88:a5:5e:92:c1:8d:72:ec:fe:8e: 53:02:ef:f6:bc:c3:b9:0d:ce:2e:4a:af:6a:34:23:39:41:56: 4a:39:44:31:92:50:d3:71:ab:c3:ef:90:5b:d4:02:32:c9:94: 7f:bf:57:ad:39:1d:a6:8c:b0:80:fd:08:f5:71:57:41:95:8a: 66:65:9a:55:e9:c1:02:f5:c7:b6:f6:9f:a5:1d:16:31:4b:bd: d8:23:10:c4:ff:6f:cd:02:51:5e:ba:0d:48:00:2e:a3:13:90: c4:4a:34:44:98:e4:52:0f:1e:7c:5e:a6:93:ea:f1:dc:90:06: 82:86:27:79:94:fd:52:1c:32:83:79:c4:08:7d:d8:dc:40:cf: eb:86:8a:62:de:07:62:4a:28:bd:71:8b:78:f9:7c:12:0d:06: 89:73:97:a4:55:82:41:ae:c7:dd:36:c1:e4:c9:25:97:6d:59: c1:de:1c:e4 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYA3YT0YAF5SNjpzjEgkao3IALfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB NEY2OTM4NzAeFw0yNTA5MjkwNDU3NThaFw0yNjA5MjgwNTAyNThaMDMxMTAvBgNV BAMTKDEzMUEwQkQ1RDUzOUFDMTFDOTQwOEE2N0Q4QUJBMTI3OTE2QjAyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZV4biokMtLsE7zSYAKJhW67Nv +9UptOPIfVVOXBG8FjORKaLkiY45/TJQzU2E6lS72d5ftDMO7VPwksTPMNfjUPVM qJkKrCSMOhip9Dg5hTXrJKC3vqI+M6LtOoy5iRNKn7SWeA77/SIyzeaG69JRYxeG 163esnrfDUUnhGYkYa3+f5ssrblMySzhWcqSD1uBjqKhAXnHYt4VwuXO+BArZ4uw jt5LblQEZKgJk1Cox0sEEPMjz03YMwcYjDdFbIrWXXBuYG3Vcg0qFGl7yjZGlWg6 Sur1Dn6l0mz4A3/pHq+E5tU0QgEJa6rnDGSl8tB9Hqe6jIkVeAmHYMA/KTaRAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUExoL1dU5rBHJQIpn2KuhJ5FrAvwwHwYDVR0j BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2 OTM4Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMyMzQzMDM3M2EzNjYxNjMzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzOTM2Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkB2rAAAkw DQYJKoZIhvcNAQELBQADggEBAFQo9yZ7hiQ1pmNAwkqvr/5DLLW6KsLx8K73Nni0 Uh1j6TMtLrq6a13/1O6nykG9K93zl1l4icS4/MpvST/1Io0Cx9uty5SvN94Yy/XK GNSQiKVeksGNcuz+jlMC7/a8w7kNzi5Kr2o0IzlBVko5RDGSUNNxq8PvkFvUAjLJ lH+/V605HaaMsID9CPVxV0GVimZlmlXpwQL1x7b2n6UdFjFLvdgjEMT/b80CUV66 DUgALqMTkMRKNESY5FIPHnxeppPq8dyQBoKGJ3mU/VIcMoN5xAh92NxAz+uGimLe B2JKKL1xi3j5fBINBolzl6RVgkGux902weTJJZdtWcHeHOQ= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:01 2025 by rpki-client