$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3a2f34382d3438203d3e20313339343137.roa File: 323430343a636163303a3a2f34382d3438203d3e20313339343137.roa (raw, json) Hash identifier: e4FelqGd8iSRDSYch9869PAfm5c/LDLNH50WEwKvgAs= Subject key identifier: D8:B0:2A:C3:80:7C:22:EE:62:FB:12:F1:2D:67:A8:69:E8:BA:85:DF Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 35503293F9311F02E4AF4F376E0DFB1C61983E86 Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3a2f34382d3438203d3e20313339343137.roa Signing time: Fri 12 Sep 2025 04:02:24 +0000 ROA not before: Fri 12 Sep 2025 03:57:24 +0000 ROA not after: Fri 11 Sep 2026 04:02:24 +0000 asID: 139417 IP address blocks: 2404:cac0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:50:32:93:f9:31:1f:02:e4:af:4f:37:6e:0d:fb:1c:61:98:3e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Sep 12 03:57:24 2025 GMT Not After : Sep 11 04:02:24 2026 GMT Subject: CN=D8B02AC3807C22EE62FB12F12D67A869E8BA85DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:b1:ca:66:1e:54:7a:b2:a7:3a:ff:e9:5e: a6:9c:37:d2:58:81:02:f7:e1:f5:5a:bd:74:cb:f1: 29:12:04:48:62:d3:f2:f7:83:e2:79:98:47:94:36: ef:c9:68:89:d5:52:0e:c2:e7:e9:25:82:91:e6:27: be:85:4f:10:e9:f1:57:5f:3c:08:36:40:ec:58:29: 99:27:0d:7b:03:89:bf:7b:c5:fd:f8:9d:e7:f7:07: 6d:f5:e5:9d:a5:a2:eb:60:d4:dd:d8:42:cd:6f:85: 48:82:95:fb:b6:01:de:35:ff:d4:67:88:db:99:94: 00:a8:db:f0:07:c2:db:2d:13:01:c3:c6:3a:a0:dd: 33:1b:5b:cc:35:b9:1d:0f:69:51:30:b5:5c:ce:06: 44:b6:61:d5:59:da:90:d0:f2:3e:1e:1b:e2:70:50: d1:11:8b:72:66:e9:d2:3a:73:d7:93:8b:fb:37:41: 2b:17:2d:9d:41:36:a7:a0:12:50:52:8c:49:0e:c9: 91:6e:21:51:ed:bf:d3:e4:a3:5d:9a:78:18:78:9f: de:3b:4f:11:5b:15:ff:03:1b:98:a0:5c:5f:e5:12: ff:fe:63:ac:31:12:a7:b6:50:3e:a6:fb:18:b3:c5: 99:82:75:47:16:2d:77:1e:9e:d1:bc:7f:ab:ef:03: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B0:2A:C3:80:7C:22:EE:62:FB:12:F1:2D:67:A8:69:E8:BA:85:DF X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3a2f34382d3438203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cac0::/48 Signature Algorithm: sha256WithRSAEncryption a1:3b:d8:a9:e3:e4:fa:35:64:bf:33:15:f2:31:1c:51:f1:a8: c0:b2:24:69:1f:a0:f9:64:0f:7c:31:78:8a:25:82:2d:da:48: 65:cd:f5:1e:b5:42:fa:55:85:a8:d9:43:ce:80:03:f7:49:e4: 0a:cd:e3:a4:85:52:6f:44:53:41:7b:8c:a5:a3:8e:e1:8d:01: dd:b1:2f:56:a5:df:ee:5f:49:6d:70:55:88:2c:6c:4f:5c:bf: e9:6a:e5:dc:c3:d0:c8:a1:ca:e4:17:bc:cf:0c:5f:67:e2:90: 42:72:26:1f:7f:be:66:2c:b7:fc:1e:77:e2:2b:06:5d:66:da: 36:3b:a4:86:e4:03:d4:7c:0d:1a:c4:fb:32:c5:7b:f1:98:78: e7:bb:d3:2b:67:1f:9c:e0:62:c3:03:24:a7:8c:77:0d:40:c0: a7:e4:48:1d:33:db:70:fc:cf:8e:81:0b:6f:bb:79:b5:c3:7a: 91:b8:b0:f0:3f:23:b9:6f:c9:19:89:97:89:21:09:d9:a7:fa: 6e:9a:4e:f4:08:3c:b3:34:83:06:8c:01:c3:b9:b9:36:68:28: 0d:72:2d:6c:24:6f:50:d5:7c:23:29:8f:06:d6:b4:ad:b8:42: 25:1d:c4:44:fc:e3:84:22:f8:19:9c:53:ee:51:c5:66:3a:b2: c4:f2:55:95 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUNVAyk/kxHwLkr083bg37HGGYPoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNTA5MTIwMzU3MjRaFw0yNjA5MTEwNDAyMjRaMDMxMTAvBgNV BAMTKEQ4QjAyQUMzODA3QzIyRUU2MkZCMTJGMTJENjdBODY5RThCQTg1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEe7HKZh5UerKnOv/pXqacN9JY gQL34fVavXTL8SkSBEhi0/L3g+J5mEeUNu/JaInVUg7C5+klgpHmJ76FTxDp8Vdf PAg2QOxYKZknDXsDib97xf34nef3B2315Z2loutg1N3YQs1vhUiClfu2Ad41/9Rn iNuZlACo2/AHwtstEwHDxjqg3TMbW8w1uR0PaVEwtVzOBkS2YdVZ2pDQ8j4eG+Jw UNERi3Jm6dI6c9eTi/s3QSsXLZ1BNqegElBSjEkOyZFuIVHtv9Pko12aeBh4n947 TxFbFf8DG5igXF/lEv/+Y6wxEqe2UD6m+xizxZmCdUcWLXcentG8f6vvA4dDAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQU2LAqw4B8Iu5i+xLxLWeoaei6hd8wHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMxMzMzOTM0MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEysAAADANBgkq hkiG9w0BAQsFAAOCAQEAoTvYqePk+jVkvzMV8jEcUfGowLIkaR+g+WQPfDF4iiWC LdpIZc31HrVC+lWFqNlDzoAD90nkCs3jpIVSb0RTQXuMpaOO4Y0B3bEvVqXf7l9J bXBViCxsT1y/6Wrl3MPQyKHK5Be8zwxfZ+KQQnImH3++Ziy3/B534isGXWbaNjuk huQD1HwNGsT7MsV78Zh457vTK2cfnOBiwwMkp4x3DUDAp+RIHTPbcPzPjoELb7t5 tcN6kbiw8D8juW/JGYmXiSEJ2af6bppO9Ag8szSDBowBw7m5NmgoDXItbCRvUNV8 IymPBta0rbhCJR3ERPzjhCL4GZxT7lHFZjqyxPJVlQ== -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:31 2025 by rpki-client