$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa File: 323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (raw, json) Hash identifier: VQoU1wEGqGabAe8YyCH/Xm7KlM9a3C94oAnpQ3yzvdI= Subject key identifier: 97:B0:8D:D7:FE:CA:68:48:A5:E2:16:F8:FB:67:55:80:39:4F:62:8A Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 2068AACE37964F585D569535B86A7C63928D3D4A Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa Signing time: Tue 05 Aug 2025 15:00:00 +0000 ROA not before: Tue 05 Aug 2025 14:55:00 +0000 ROA not after: Tue 04 Aug 2026 15:00:00 +0000 asID: 139949 IP address blocks: 2405:aac0:54::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:68:aa:ce:37:96:4f:58:5d:56:95:35:b8:6a:7c:63:92:8d:3d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Aug 5 14:55:00 2025 GMT Not After : Aug 4 15:00:00 2026 GMT Subject: CN=97B08DD7FECA6848A5E216F8FB675580394F628A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:7b:61:83:df:b6:71:d1:b9:55:1c:5c:32: 5a:2f:fb:3c:d0:97:05:ca:bc:9d:21:47:a0:ab:b1: 19:f7:23:40:c7:99:de:08:3f:df:87:11:ea:49:86: 93:ac:77:86:34:a7:d8:75:cb:68:b6:e7:14:1a:e4: c7:b9:65:18:6e:a4:0f:2d:00:d8:c0:63:3f:0e:ff: 00:f0:e8:b5:ad:8a:be:96:5c:01:83:bd:52:0a:2e: f3:d2:89:e0:9f:c9:7f:0c:bb:ea:9c:3f:25:34:8e: 3f:ab:84:ef:f6:aa:2b:e5:4b:ac:77:c9:34:22:e5: b8:4d:28:38:c3:54:f1:f6:8e:ac:c1:01:4e:38:84: c3:17:9f:d9:40:7a:2e:d8:50:a4:22:29:a2:fa:b1: 42:69:27:41:70:63:02:95:00:f9:98:55:81:51:cb: 46:e7:43:54:75:f8:27:da:27:05:48:a1:25:34:49: 0e:16:d2:24:68:05:99:10:21:b0:d5:c2:62:69:92: eb:71:7a:08:34:3f:5a:66:26:b6:74:42:83:4d:4e: eb:c4:f5:5b:93:6e:d0:78:36:17:c2:70:b6:56:1b: 7b:70:f9:0e:a6:d5:9b:08:27:79:e8:d2:e6:94:b6: 6b:aa:97:c4:5a:c1:89:f0:81:44:6d:b7:fb:58:ce: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B0:8D:D7:FE:CA:68:48:A5:E2:16:F8:FB:67:55:80:39:4F:62:8A X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:aac0:54::/48 Signature Algorithm: sha256WithRSAEncryption da:0e:57:df:cb:60:03:f6:0e:d0:8e:83:49:5f:95:c3:86:99: 3b:93:24:36:ca:6f:f4:2d:f2:ac:b5:c6:ad:76:16:70:cc:56: 10:fa:f2:1a:d5:bd:3a:e7:0a:88:3f:67:9e:2e:79:fd:78:4e: fd:80:83:71:22:d9:1a:5f:f0:d1:65:df:3f:3c:86:37:ec:89: 0e:33:66:1f:48:06:84:d5:7d:8e:60:a4:76:b4:cb:00:b9:08: 8f:11:22:df:07:d6:5b:0c:1c:6f:6b:49:31:85:8d:a1:01:19: a6:da:11:e5:e2:be:e3:b4:ab:2c:3f:d5:64:3c:01:15:1b:f2: ce:8a:63:b1:fa:84:96:db:fd:50:89:ab:4c:5f:87:cd:bd:e8: 7e:93:ef:50:99:1f:1f:ee:c6:77:4b:b2:e1:aa:f5:40:89:7e: 47:4f:9e:19:6a:83:36:dc:b3:0c:6d:90:8a:99:6c:a5:73:9a: 7b:4e:e7:34:93:3a:fa:ef:66:e3:ea:3e:aa:15:57:93:45:43: cb:bd:41:e3:6a:44:df:f9:b2:21:6c:2c:91:47:61:75:fa:9e: 17:6f:50:50:66:93:41:d0:9c:8b:0a:a3:e1:68:a8:1d:c7:e4: c8:c4:98:9b:22:63:f0:cb:89:fd:5e:0b:b2:6f:34:8b:00:bc: a6:a0:58:89 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUIGiqzjeWT1hdVpU1uGp8Y5KNPUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNTA4MDUxNDU1MDBaFw0yNjA4MDQxNTAwMDBaMDMxMTAvBgNV BAMTKDk3QjA4REQ3RkVDQTY4NDhBNUUyMTZGOEZCNjc1NTgwMzk0RjYyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwP3thg9+2cdG5VRxcMlov+zzQ lwXKvJ0hR6CrsRn3I0DHmd4IP9+HEepJhpOsd4Y0p9h1y2i25xQa5Me5ZRhupA8t ANjAYz8O/wDw6LWtir6WXAGDvVIKLvPSieCfyX8Mu+qcPyU0jj+rhO/2qivlS6x3 yTQi5bhNKDjDVPH2jqzBAU44hMMXn9lAei7YUKQiKaL6sUJpJ0FwYwKVAPmYVYFR y0bnQ1R1+CfaJwVIoSU0SQ4W0iRoBZkQIbDVwmJpkutxegg0P1pmJrZ0QoNNTuvE 9VuTbtB4NhfCcLZWG3tw+Q6m1ZsIJ3no0uaUtmuql8RawYnwgURtt/tYzt9VAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUl7CN1/7KaEil4hb4+2dVgDlPYoowHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzUzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA VDANBgkqhkiG9w0BAQsFAAOCAQEA2g5X38tgA/YO0I6DSV+Vw4aZO5MkNspv9C3y rLXGrXYWcMxWEPryGtW9OucKiD9nni55/XhO/YCDcSLZGl/w0WXfPzyGN+yJDjNm H0gGhNV9jmCkdrTLALkIjxEi3wfWWwwcb2tJMYWNoQEZptoR5eK+47SrLD/VZDwB FRvyzopjsfqEltv9UImrTF+Hzb3ofpPvUJkfH+7Gd0uy4ar1QIl+R0+eGWqDNtyz DG2QiplspXOae07nNJM6+u9m4+o+qhVXk0VDy71B42pE3/myIWwskUdhdfqeF29Q UGaTQdCciwqj4WioHcfkyMSYmyJj8MuJ/V4Lsm80iwC8pqBYiQ== -----END CERTIFICATE-----Generated at Sat Oct 25 18:37:47 2025 by rpki-client