$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/323430343a3763303a3a2f33322d3332203d3e20313338313039.roa File: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (raw, json) Hash identifier: Pf0ONhthfsPXInuvTqJNg8gHQzNEqbW2IadA0wGv3Pw= Subject key identifier: AF:26:D7:1F:37:97:AD:1C:8D:E3:E2:B9:32:1A:6B:F0:8A:68:B1:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 6D0A2339B79EE52099FF79ABAF8CD7B04EF42A3A Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/323430343a3763303a3a2f33322d3332203d3e20313338313039.roa Signing time: Sat 11 Oct 2025 06:00:00 +0000 ROA not before: Sat 11 Oct 2025 05:55:00 +0000 ROA not after: Sat 10 Oct 2026 06:00:00 +0000 asID: 138109 IP address blocks: 2404:7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0a:23:39:b7:9e:e5:20:99:ff:79:ab:af:8c:d7:b0:4e:f4:2a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Oct 11 05:55:00 2025 GMT Not After : Oct 10 06:00:00 2026 GMT Subject: CN=AF26D71F3797AD1C8DE3E2B9321A6BF08A68B19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:0b:cd:8a:0e:02:6c:58:a3:65:90:c5:23: 54:9e:66:6b:f3:3b:8c:c5:75:ea:d0:8a:c6:3d:33: 32:61:1c:3a:25:92:9d:db:3a:1c:38:c0:85:a0:b8: 30:d9:9a:90:9d:93:8e:d0:90:27:fd:ff:7f:37:31: 33:18:67:83:c7:23:97:3e:b3:7d:40:07:05:97:b8: 40:fc:91:1c:69:0e:01:6c:8a:c9:44:8b:3e:78:c3: 7b:9b:a1:8a:2c:e1:9c:04:8a:16:8d:dc:83:d2:4e: 0d:e0:86:1a:4f:eb:61:25:43:8f:4f:bb:34:b7:3a: 81:15:9c:7b:e4:03:f0:65:54:db:76:4e:37:10:dd: 54:96:81:aa:45:e8:e6:5f:ac:93:f6:30:bb:5f:50: fd:4a:09:45:58:10:d4:1d:6d:04:f1:81:61:12:1a: 18:c0:3d:10:cc:59:9e:56:40:b7:ca:1a:cd:05:7e: b9:0e:8f:f6:17:27:41:5f:a1:1c:ea:17:be:62:fc: 06:ea:56:85:e4:cf:6e:43:c9:10:81:c8:e7:03:05: cd:61:9b:2c:b4:88:00:2a:04:34:25:62:40:51:df: 81:5e:88:bf:5d:33:97:eb:b4:51:78:6f:3d:5a:32: 2b:5f:24:75:cb:85:17:8c:bd:c6:6e:64:fd:8c:39: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:26:D7:1F:37:97:AD:1C:8D:E3:E2:B9:32:1A:6B:F0:8A:68:B1:9C X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/323430343a3763303a3a2f33322d3332203d3e20313338313039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7c0::/32 Signature Algorithm: sha256WithRSAEncryption 9d:a6:4e:9a:bb:59:18:8e:e8:2a:d7:3e:5d:3a:74:a1:a7:22: 99:29:0b:61:5e:fd:09:c1:39:b3:83:a2:28:d3:5e:bd:c0:2b: c4:44:07:60:5d:85:bc:38:d6:c6:a3:c2:16:46:cc:ce:6f:32: 43:1c:bc:14:d4:fd:09:84:d5:a5:08:87:45:cc:a2:e6:19:5e: 0a:58:01:33:9d:2d:cf:41:85:48:d4:cf:63:40:84:0f:fd:2d: 9a:fb:69:61:c3:9d:5b:54:cc:aa:2e:24:de:60:c4:8a:46:ff: d1:7e:22:76:2b:a1:02:f7:38:98:7a:e9:58:64:30:4c:e1:21: 0d:c4:45:5d:da:06:ca:01:15:97:6b:fa:be:3c:d9:d2:7d:71: 9e:a6:1c:94:55:16:a9:11:a7:90:a0:e6:ec:e5:ea:a0:06:c8: d6:f8:26:f9:b1:21:46:68:e1:7b:55:f1:9a:0b:41:5c:f3:46: 72:90:89:2f:59:81:8b:a2:d4:23:7d:dd:ca:27:81:cc:39:e9: dd:81:fb:26:a2:85:be:1c:c0:f0:40:84:35:1b:16:03:3b:eb: 99:e0:db:f0:0d:3a:e7:b6:5e:06:4c:c8:16:55:68:3f:24:23: 2f:87:55:c0:74:0a:3b:29:2f:78:d2:10:2b:e7:14:8a:bf:a8: ab:a1:58:a3 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUbQojObee5SCZ/3mrr4zXsE70KjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTEwMTEwNTU1MDBaFw0yNjEwMTAwNjAwMDBaMDMxMTAvBgNV BAMTKEFGMjZENzFGMzc5N0FEMUM4REUzRTJCOTMyMUE2QkYwOEE2OEIxOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqwvNig4CbFijZZDFI1SeZmvz O4zFderQisY9MzJhHDolkp3bOhw4wIWguDDZmpCdk47QkCf9/383MTMYZ4PHI5c+ s31ABwWXuED8kRxpDgFsislEiz54w3uboYos4ZwEihaN3IPSTg3ghhpP62ElQ49P uzS3OoEVnHvkA/BlVNt2TjcQ3VSWgapF6OZfrJP2MLtfUP1KCUVYENQdbQTxgWES GhjAPRDMWZ5WQLfKGs0FfrkOj/YXJ0FfoRzqF75i/AbqVoXkz25DyRCByOcDBc1h myy0iAAqBDQlYkBR34FeiL9dM5frtFF4bz1aMitfJHXLhReMvcZuZP2MOTq9AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUrybXHzeXrRyN4+K5Mhpr8IposZwwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0YjRmYjg4LThmNDItNDdmMi1i ZTgwLTA5ZTQzNTYwZGRkZi8wLzMyMzQzMDM0M2EzNzYzMzAzYTNhMmYzMzMyMmQz MzMyMjAzZDNlMjAzMTMzMzgzMTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBAfAMA0GCSqGSIb3 DQEBCwUAA4IBAQCdpk6au1kYjugq1z5dOnShpyKZKQthXv0JwTmzg6Io0169wCvE RAdgXYW8ONbGo8IWRszObzJDHLwU1P0JhNWlCIdFzKLmGV4KWAEznS3PQYVI1M9j QIQP/S2a+2lhw51bVMyqLiTeYMSKRv/RfiJ2K6EC9ziYeulYZDBM4SENxEVd2gbK ARWXa/q+PNnSfXGephyUVRapEaeQoObs5eqgBsjW+Cb5sSFGaOF7VfGaC0Fc80Zy kIkvWYGLotQjfd3KJ4HMOendgfsmooW+HMDwQIQ1GxYDO+uZ4NvwDTrntl4GTMgW VWg/JCMvh1XAdAo7KS940hAr5xSKv6iroVij -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:37 2025 by rpki-client