$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32363a3a2f34382d3438203d3e203536323436.roa File: 323430343a666430303a32363a3a2f34382d3438203d3e203536323436.roa (raw, json) Hash identifier: GRsYI0SanBr54xKRzSbHbM3E2Yr2/GaH4F6stWwe68c= Subject key identifier: C9:D6:B6:93:2E:F7:35:A7:E1:9B:9B:26:F3:9F:12:DC:D9:50:82:D7 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 6B601DF0A7BC944D35017CF95C7F314D7BE54DDE Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32363a3a2f34382d3438203d3e203536323436.roa Signing time: Fri 06 Jun 2025 04:00:00 +0000 ROA not before: Fri 06 Jun 2025 03:55:00 +0000 ROA not after: Fri 05 Jun 2026 04:00:00 +0000 asID: 56246 IP address blocks: 2404:fd00:26::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:60:1d:f0:a7:bc:94:4d:35:01:7c:f9:5c:7f:31:4d:7b:e5:4d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jun 6 03:55:00 2025 GMT Not After : Jun 5 04:00:00 2026 GMT Subject: CN=C9D6B6932EF735A7E19B9B26F39F12DCD95082D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:11:a8:86:15:04:25:f3:78:02:3a:97:95: 56:1d:ac:fb:60:aa:f3:33:35:ba:40:a8:0a:46:38: d0:c6:66:a2:08:d6:99:a0:c1:48:e4:ed:ef:32:8b: ab:2e:b8:e1:cc:2f:9b:17:32:fe:5b:ef:8f:70:d4: b5:e4:16:8e:2b:70:54:e1:1c:4d:99:2f:a9:2f:b8: d9:bd:34:f1:f1:d0:5e:2e:3c:3f:cd:c4:b3:dc:fa: 57:73:cb:1e:1f:05:ba:4e:33:f5:f8:37:ec:31:59: 71:36:e3:81:7c:2a:c3:0e:87:e7:e4:d3:c9:66:e3: fc:93:d6:9e:f3:0e:ab:bc:aa:34:98:94:27:ec:93: 8a:5b:02:c6:20:97:3b:92:3f:75:fe:b6:7f:31:73: 8d:ac:89:7b:28:36:e0:a9:24:e7:71:ca:b1:e6:24: 0d:e5:20:a0:ba:c9:29:5a:36:61:41:85:e5:23:6b: ec:e7:0e:30:e2:10:bf:a9:18:67:de:a1:94:0a:1b: 34:b1:b9:6d:5c:80:b3:d0:b8:02:b3:60:e2:2e:cd: 29:1d:3f:38:ea:5d:4f:7a:5d:e3:1c:42:e4:69:1c: 5f:95:02:c3:37:39:17:ad:1b:a5:88:15:29:5b:2c: 7b:a6:de:6b:f3:2b:d6:cf:43:4c:6f:b3:11:b0:a1: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D6:B6:93:2E:F7:35:A7:E1:9B:9B:26:F3:9F:12:DC:D9:50:82:D7 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a32363a3a2f34382d3438203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:26::/48 Signature Algorithm: sha256WithRSAEncryption ac:43:96:f0:b2:1f:9a:cc:d3:13:0d:d9:c0:fe:3b:9d:d8:d2: fe:cd:bc:9b:f1:e5:8b:bf:9e:e9:17:b2:db:de:e3:3e:32:4e: ab:72:08:52:6d:bb:14:9a:44:93:44:b5:e3:47:61:ec:4a:99: 1f:15:95:4e:0d:a0:96:6b:61:00:76:7e:5d:91:24:32:35:fc: 18:58:3b:5c:d6:e3:1e:b0:65:d0:14:7e:6a:53:3c:5d:b7:1f: 34:c6:50:60:ac:d7:8f:80:db:8e:e3:c2:b9:07:55:07:5d:40: f3:bb:32:9e:01:f3:bf:93:9a:b9:b4:75:d4:fe:b8:64:b2:a6: 2d:99:cc:fc:23:4d:b3:31:fa:5d:45:71:67:76:dd:24:45:a8: 9d:27:c5:41:33:38:bb:fb:e4:ee:5b:8b:af:03:f3:88:95:04: 8e:3b:24:cb:1e:7d:39:75:f8:22:87:80:68:5a:e7:30:af:14: e7:09:88:6c:bd:39:9e:83:66:06:4b:94:5e:27:75:02:3f:e3: ec:65:7c:90:12:95:23:1e:bf:79:02:20:f7:93:8f:2b:33:a6: 75:48:18:30:c1:3e:47:e7:33:80:ad:38:09:7b:f5:a8:4b:ba: 6c:78:f7:c6:03:06:c4:e7:42:d1:df:2a:aa:48:63:f7:5d:dd: ff:20:6a:fb -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUa2Ad8Ke8lE01AXz5XH8xTXvlTd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTA2MDYwMzU1MDBaFw0yNjA2MDUwNDAwMDBaMDMxMTAvBgNV BAMTKEM5RDZCNjkzMkVGNzM1QTdFMTlCOUIyNkYzOUYxMkRDRDk1MDgyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FRGohhUEJfN4AjqXlVYdrPtg qvMzNbpAqApGONDGZqII1pmgwUjk7e8yi6suuOHML5sXMv5b749w1LXkFo4rcFTh HE2ZL6kvuNm9NPHx0F4uPD/NxLPc+ldzyx4fBbpOM/X4N+wxWXE244F8KsMOh+fk 08lm4/yT1p7zDqu8qjSYlCfsk4pbAsYglzuSP3X+tn8xc42siXsoNuCpJOdxyrHm JA3lIKC6ySlaNmFBheUja+znDjDiEL+pGGfeoZQKGzSxuW1cgLPQuAKzYOIuzSkd PzjqXU96XeMcQuRpHF+VAsM3ORetG6WIFSlbLHum3mvzK9bPQ0xvsxGwoZPHAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUyda2ky73Nafhm5sm858S3NlQgtcwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzIzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzYzMjM0MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AACYw DQYJKoZIhvcNAQELBQADggEBAKxDlvCyH5rM0xMN2cD+O53Y0v7NvJvx5Yu/nukX stve4z4yTqtyCFJtuxSaRJNEteNHYexKmR8VlU4NoJZrYQB2fl2RJDI1/BhYO1zW 4x6wZdAUfmpTPF23HzTGUGCs14+A247jwrkHVQddQPO7Mp4B87+Tmrm0ddT+uGSy pi2ZzPwjTbMx+l1FcWd23SRFqJ0nxUEzOLv75O5bi68D84iVBI47JMsefTl1+CKH gGha5zCvFOcJiGy9OZ6DZgZLlF4ndQI/4+xlfJASlSMev3kCIPeTjyszpnVIGDDB PkfnM4CtOAl79ahLumx498YDBsTnQtHfKqpIY/dd3f8gavs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:14:46 2025 by rpki-client