$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa File: 323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa (raw, json) Hash identifier: RfB5Bc/1Kx8Z2GW8VP5Y8mOwfCQrXQkcjcDc/a780Z4= Subject key identifier: CF:C5:BF:FA:5D:1E:19:9A:9A:72:06:78:B2:44:0E:2E:98:F9:C3:F8 Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Certificate serial: 68B5626A288A9E4A6426C77C659971E68F279A3C Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa Signing time: Sat 13 Sep 2025 12:00:02 +0000 ROA not before: Sat 13 Sep 2025 11:55:02 +0000 ROA not after: Sat 12 Sep 2026 12:00:02 +0000 asID: 58401 IP address blocks: 2400:9c80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b5:62:6a:28:8a:9e:4a:64:26:c7:7c:65:99:71:e6:8f:27:9a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Validity Not Before: Sep 13 11:55:02 2025 GMT Not After : Sep 12 12:00:02 2026 GMT Subject: CN=CFC5BFFA5D1E199A9A720678B2440E2E98F9C3F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ac:25:06:a1:ee:c6:c8:ee:cd:6f:01:78:ae: ba:d8:77:3c:f2:3c:a6:bf:ff:e9:95:92:23:0a:16: 9d:dc:0b:07:a7:c4:35:35:92:c2:42:1f:32:02:26: bb:18:c5:23:96:76:6a:e0:f6:d7:af:e1:ad:05:7f: 0e:90:5b:14:ad:f1:6b:67:38:59:3f:1d:e5:5e:04: 87:88:47:ad:de:15:58:42:1b:dc:fd:ee:f3:7d:9d: 40:55:20:4c:f2:c1:89:8c:e0:d6:ab:50:bb:4d:8a: d6:26:5e:3d:ac:03:0a:01:c1:0d:b9:40:26:24:8a: 0c:40:e9:21:3e:9d:35:36:11:58:e9:b8:b0:eb:ca: ea:e6:96:97:d5:c6:74:cb:5f:f2:34:5a:66:9b:03: d4:c7:5f:21:ba:20:25:54:12:32:81:73:af:f1:a7: ea:5d:e3:b5:d3:b5:1d:8f:99:86:77:07:09:7f:7e: 9d:d0:7e:41:d5:a6:9c:74:c7:86:c1:4e:fe:20:44: 93:67:89:a1:e3:b6:3a:3f:a6:d5:82:03:a9:f5:bc: 29:72:e4:0d:ec:1f:06:de:8d:3d:5b:65:19:9a:f7: e7:9e:db:2d:c2:a5:d5:65:42:07:c8:59:ea:4d:f3: 9d:dc:a0:b6:ab:88:e4:6c:7b:97:d6:9d:cc:2d:e4: 01:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C5:BF:FA:5D:1E:19:9A:9A:72:06:78:B2:44:0E:2E:98:F9:C3:F8 X509v3 Authority Key Identifier: keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a313a3a2f34382d3438203d3e203538343031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9c80:1::/48 Signature Algorithm: sha256WithRSAEncryption 54:69:77:fe:bb:f2:76:8e:ef:75:cb:62:a6:0b:ed:9d:9a:7d: 25:d4:ee:a6:db:84:20:93:8c:49:04:af:47:52:b5:03:79:42: ae:65:93:d1:83:c0:eb:4a:a4:cc:57:55:db:5b:35:e1:ca:ee: 42:7f:b3:ba:9e:56:0f:6a:54:61:d8:30:51:70:11:d7:fd:84: c1:dc:b7:28:69:82:ee:d1:c2:c1:65:34:ba:ef:76:03:46:65: 2f:22:f0:bd:51:3e:d2:ff:66:9e:7f:93:cc:c3:c1:da:9c:ba: 6f:f4:2d:9a:75:ce:dd:d5:19:8c:11:55:15:42:e0:ab:77:95: 5e:8a:a7:4c:ac:5a:8c:8a:c1:62:8f:db:42:3b:9b:af:e5:10: d4:57:6e:97:34:1e:d1:7a:33:39:5a:a2:19:14:0a:ea:c2:a9: ad:46:9d:24:a3:c4:3b:c8:66:5a:0f:06:e8:51:ec:e6:f8:ab: e2:97:bf:24:13:de:16:77:d9:b5:2d:c4:98:d8:82:7c:cf:49: 0b:ba:87:05:94:69:80:27:cb:5d:de:51:4a:db:99:5a:6d:3d: 42:7c:24:0f:de:02:1b:68:04:3d:c4:74:eb:9f:7c:bc:e1:7f: dd:bb:76:8c:93:df:0d:ca:82:1a:c1:1d:31:36:20:32:f4:f5: d8:37:c5:4b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUaLViaiiKnkpkJsd8ZZlx5o8nmjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1 N0NFQUQ4QzAeFw0yNTA5MTMxMTU1MDJaFw0yNjA5MTIxMjAwMDJaMDMxMTAvBgNV BAMTKENGQzVCRkZBNUQxRTE5OUE5QTcyMDY3OEIyNDQwRTJFOThGOUMzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDerCUGoe7GyO7NbwF4rrrYdzzy PKa//+mVkiMKFp3cCwenxDU1ksJCHzICJrsYxSOWdmrg9tev4a0Ffw6QWxSt8Wtn OFk/HeVeBIeIR63eFVhCG9z97vN9nUBVIEzywYmM4NarULtNitYmXj2sAwoBwQ25 QCYkigxA6SE+nTU2EVjpuLDryurmlpfVxnTLX/I0WmabA9THXyG6ICVUEjKBc6/x p+pd47XTtR2PmYZ3Bwl/fp3QfkHVppx0x4bBTv4gRJNniaHjtjo/ptWCA6n1vCly 5A3sHwbejT1bZRma9+ee2y3CpdVlQgfIWepN853coLariORse5fWncwt5AFZAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUz8W/+l0eGZqacgZ4skQOLpj5w/gwHwYDVR0j BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF QUQ4Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i ODllLTA0MWJmOTExMGFmOC8wLzMyMzQzMDMwM2EzOTYzMzgzMDNhMzEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzNTM4MzQzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJACcgAABMA0G CSqGSIb3DQEBCwUAA4IBAQBUaXf+u/J2ju91y2KmC+2dmn0l1O6m24Qgk4xJBK9H UrUDeUKuZZPRg8DrSqTMV1XbWzXhyu5Cf7O6nlYPalRh2DBRcBHX/YTB3LcoaYLu 0cLBZTS673YDRmUvIvC9UT7S/2aef5PMw8HanLpv9C2adc7d1RmMEVUVQuCrd5Ve iqdMrFqMisFij9tCO5uv5RDUV26XNB7RejM5WqIZFArqwqmtRp0ko8Q7yGZaDwbo Uezm+Kvil78kE94Wd9m1LcSY2IJ8z0kLuocFlGmAJ8td3lFK25labT1CfCQP3gIb aAQ9xHTrn3y84X/du3aMk98NyoIawR0xNiAy9PXYN8VL -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:49 2025 by rpki-client