$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: rPi35F8PvvKHwsT9xbH5vOghPHmWhiGoUJPmzISRw/g= Subject key identifier: 0A:6C:69:4F:4D:6F:13:36:14:42:6F:29:B0:AB:FC:68:E3:C6:11:81 Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 1BD9D1AFC3B5DC4A0679EAA77CAF644F5C682F04 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa Signing time: Thu 08 May 2025 06:31:50 +0000 ROA not before: Thu 08 May 2025 06:26:50 +0000 ROA not after: Thu 07 May 2026 06:31:50 +0000 asID: 139949 IP address blocks: 2405:aac0:500::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d9:d1:af:c3:b5:dc:4a:06:79:ea:a7:7c:af:64:4f:5c:68:2f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: May 8 06:26:50 2025 GMT Not After : May 7 06:31:50 2026 GMT Subject: CN=0A6C694F4D6F133614426F29B0ABFC68E3C61181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:68:bb:5b:02:c8:11:7e:ee:04:6a:a5:93: e9:3b:f5:f2:98:24:27:a3:c8:f3:4d:3c:1f:09:cd: 1e:8b:e0:02:83:d0:4c:87:1e:7e:20:64:7e:0b:82: 75:10:76:a8:40:b4:ad:cf:8e:6c:06:6c:8e:8a:8b: e0:6f:81:b5:9a:1d:48:d2:71:18:a5:24:fb:2c:5e: b6:31:94:c0:8f:81:97:51:bf:c8:c5:e1:16:7e:09: 4b:17:da:5c:d6:f7:3a:24:29:b1:6e:a0:5c:de:6f: 89:29:c5:68:b0:59:35:10:1e:0a:1b:e7:e0:f0:3c: d3:69:bf:af:d6:23:ed:41:91:d8:51:fb:b9:97:e7: 62:a9:0b:3d:6f:ac:af:08:8b:07:ac:c4:d6:8e:a5: 5d:8a:f9:f2:fd:74:ed:d2:85:c6:c2:71:41:77:59: 75:68:38:cb:bc:e8:ee:c9:1e:f9:37:86:dd:1b:bc: 61:a6:10:49:f7:3f:14:b3:93:04:f5:33:99:fc:1d: 6f:a6:0d:a6:48:5d:fb:c6:30:47:72:be:aa:e5:10: f1:8c:b2:28:2c:92:d7:e1:a9:af:9b:43:6b:6d:68: d5:4f:08:7e:0a:93:11:5b:b6:9d:94:5d:75:93:ca: aa:b1:e5:af:cc:6f:58:b1:a2:d3:cc:8b:f8:4a:c7: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6C:69:4F:4D:6F:13:36:14:42:6F:29:B0:AB:FC:68:E3:C6:11:81 X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3530303a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:500::/48 Signature Algorithm: sha256WithRSAEncryption d5:11:c1:23:03:64:eb:1b:3f:b8:e2:3f:f8:a8:52:46:e4:68: e0:1d:f6:0c:23:f7:99:5e:47:a2:cf:3f:8c:8e:bd:40:4b:7e: 23:3f:16:9b:df:58:54:a9:b7:9a:eb:53:58:b9:80:5a:9d:77: f1:82:4e:27:7f:59:0b:20:5a:7f:ab:25:9e:d6:b8:9f:38:06: 86:01:e3:93:dc:24:a8:a3:9f:d2:37:45:42:30:ee:10:10:79: 98:23:bc:e2:26:d0:ee:3b:d4:63:2c:41:2e:7f:84:5f:be:09: d7:c6:ff:08:bf:a3:8f:a3:3d:79:57:15:29:8b:d1:af:52:10: c8:a6:44:40:0c:3c:91:eb:f4:c4:69:a9:cc:35:6d:c4:cf:3b: 5b:db:ee:ca:4f:1b:41:20:db:4f:d9:f6:84:9a:52:32:0a:4a: 24:7d:2c:f8:29:6a:cd:fb:69:f5:af:cb:e1:d8:41:e3:65:88: 4d:c4:3b:8d:08:a3:6e:ff:6d:ee:e4:bf:30:ab:c6:9c:41:f6: d3:69:3b:c2:36:95:8d:6e:a3:32:b9:03:fe:04:8f:93:17:a7: 2b:fb:63:44:87:b0:4c:a8:8f:cd:d3:39:eb:5c:1f:c2:af:23: 62:5e:bf:c1:f6:68:dd:03:24:38:41:f0:ec:d1:a1:b4:49:b9: 89:fa:ec:29 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUG9nRr8O13EoGeeqnfK9kT1xoLwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNTA1MDgwNjI2NTBaFw0yNjA1MDcwNjMxNTBaMDMxMTAvBgNV BAMTKDBBNkM2OTRGNEQ2RjEzMzYxNDQyNkYyOUIwQUJGQzY4RTNDNjExODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoWi7WwLIEX7uBGqlk+k79fKY JCejyPNNPB8JzR6L4AKD0EyHHn4gZH4LgnUQdqhAtK3PjmwGbI6Ki+BvgbWaHUjS cRilJPssXrYxlMCPgZdRv8jF4RZ+CUsX2lzW9zokKbFuoFzeb4kpxWiwWTUQHgob 5+DwPNNpv6/WI+1BkdhR+7mX52KpCz1vrK8IiwesxNaOpV2K+fL9dO3ShcbCcUF3 WXVoOMu86O7JHvk3ht0bvGGmEEn3PxSzkwT1M5n8HW+mDaZIXfvGMEdyvqrlEPGM sigsktfhqa+bQ2ttaNVPCH4KkxFbtp2UXXWTyqqx5a/Mb1ixotPMi/hKx+X7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCmxpT01vEzYUQm8psKv8aOPGEYEwHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzUzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWq wAUAMA0GCSqGSIb3DQEBCwUAA4IBAQDVEcEjA2TrGz+44j/4qFJG5GjgHfYMI/eZ Xkeizz+Mjr1AS34jPxab31hUqbea61NYuYBanXfxgk4nf1kLIFp/qyWe1rifOAaG AeOT3CSoo5/SN0VCMO4QEHmYI7ziJtDuO9RjLEEuf4RfvgnXxv8Iv6OPoz15VxUp i9GvUhDIpkRADDyR6/TEaanMNW3Ezztb2+7KTxtBINtP2faEmlIyCkokfSz4KWrN +2n1r8vh2EHjZYhNxDuNCKNu/23u5L8wq8acQfbTaTvCNpWNbqMyuQP+BI+TF6cr +2NEh7BMqI/N0znrXB/CryNiXr/B9mjdAyQ4QfDs0aG0SbmJ+uwp -----END CERTIFICATE-----Generated at Sat Oct 25 18:36:12 2025 by rpki-client