$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa File: 323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa (raw, json) Hash identifier: HtxpT9j9HUVf1XU6+MYdbXN0P6MxWMwlbq0q1yAv9Sg= Subject key identifier: 2B:04:6C:08:98:D4:BB:F5:AE:A8:21:D3:9D:8F:5B:22:A2:9F:74:88 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 0D88ACE1BA5A60BF7EB4FCB7EF9D6C6F3CCC9F Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa Signing time: Tue 26 Aug 2025 07:02:06 +0000 ROA not before: Tue 26 Aug 2025 06:57:06 +0000 ROA not after: Tue 25 Aug 2026 07:02:06 +0000 asID: 55685 IP address blocks: 2404:e100:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:88:ac:e1:ba:5a:60:bf:7e:b4:fc:b7:ef:9d:6c:6f:3c:cc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Aug 26 06:57:06 2025 GMT Not After : Aug 25 07:02:06 2026 GMT Subject: CN=2B046C0898D4BBF5AEA821D39D8F5B22A29F7488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5e:51:b5:07:61:df:54:7b:cc:f0:5b:89:04: c8:00:5f:29:ed:22:1b:0b:3a:d5:44:b7:b4:23:26: f6:3d:36:d8:d7:01:cd:12:7f:6e:58:b2:8e:57:87: c2:a7:84:30:d3:13:4b:37:4d:de:8c:a1:c0:e0:ac: af:79:6c:6c:5d:45:f5:16:80:12:3a:0e:5b:ef:22: a1:cf:19:9a:fc:cc:b8:44:f6:9c:df:c9:15:ca:23: d8:0a:bc:af:dd:8b:b7:a5:34:34:5c:4e:02:1e:d5: c0:ba:7f:68:21:d4:e3:f3:cf:d3:37:cd:a0:ba:84: 8b:09:df:9b:40:05:f3:3d:12:92:89:d1:0b:bd:27: c3:17:33:d7:97:29:30:b8:53:26:56:66:4f:ec:f0: 9f:85:8e:99:0a:79:dd:84:95:f2:29:d1:3b:9f:f9: de:d9:25:49:d3:0d:65:4e:77:a6:5e:f5:f1:f5:0c: f2:6a:d6:82:3a:ea:c1:b5:9d:e7:4a:19:fd:0a:62: 2a:18:0b:6c:d1:15:35:4d:2a:97:46:1a:1c:40:97: 59:88:cd:0b:40:3d:6c:80:a8:00:79:f3:ec:d5:5d: b8:66:bf:79:fe:8c:00:f2:2d:40:5e:1b:00:db:82: 3e:dd:a4:1f:2d:a4:07:39:ed:a6:36:86:1d:2c:88: 71:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:6C:08:98:D4:BB:F5:AE:A8:21:D3:9D:8F:5B:22:A2:9F:74:88 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a353030303a3a2f34382d3438203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:5000::/48 Signature Algorithm: sha256WithRSAEncryption 00:42:1f:00:7b:31:1f:e9:aa:61:e0:ae:33:89:1e:8f:e4:da: 86:a0:ee:be:e3:d0:c9:af:6d:bd:8c:22:95:9e:cf:32:e8:5b: c4:cd:d6:83:64:81:b4:e4:ee:fc:8e:a4:fe:cf:94:31:f8:e5: c1:21:c6:30:60:29:03:22:54:c8:6c:8d:da:c1:1e:a6:1e:4a: c4:e7:1d:a9:e6:bd:84:d8:37:f3:73:ae:70:0e:c0:a0:cd:c9: 01:be:19:51:d7:0a:cf:06:25:f5:54:be:8f:b2:4f:8c:d6:64: bf:2f:19:98:2d:82:73:55:e2:57:f4:f6:b0:61:56:9e:04:78: cb:0b:93:9f:7a:17:35:9f:e4:64:6b:8f:6b:98:0a:9a:0b:17: 4d:ed:77:85:a6:dc:eb:12:e9:b2:b2:0c:65:cf:26:d6:1e:e0: 7b:09:e3:51:78:66:77:93:3b:61:51:c8:7d:6a:e1:dd:4b:79: e7:73:b9:13:b9:fc:da:5d:e1:53:2a:9f:90:36:35:76:04:f7: 81:4c:db:bc:99:82:aa:83:49:fc:9f:7c:5a:7d:56:93:bc:33: 6e:bc:d7:ed:00:8f:cf:6e:45:ef:1d:5d:f1:59:4e:7e:a5:1b: 9b:02:08:c5:c1:be:e9:4f:3d:6f:93:d4:1a:03:19:b5:3f:6e: a6:67:61:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgITDYis4bpaYL9+tPy3751sbzzMnzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCNkYwMTMxNTEwRTYyRjczRTVGMjkyNDZGOUM4RjY5MTgx MUE3MDREMB4XDTI1MDgyNjA2NTcwNloXDTI2MDgyNTA3MDIwNlowMzExMC8GA1UE AxMoMkIwNDZDMDg5OEQ0QkJGNUFFQTgyMUQzOUQ4RjVCMjJBMjlGNzQ4ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPReUbUHYd9Ue8zwW4kEyABfKe0i Gws61US3tCMm9j022NcBzRJ/bliyjleHwqeEMNMTSzdN3oyhwOCsr3lsbF1F9RaA EjoOW+8ioc8ZmvzMuET2nN/JFcoj2Aq8r92Lt6U0NFxOAh7VwLp/aCHU4/PP0zfN oLqEiwnfm0AF8z0SkonRC70nwxcz15cpMLhTJlZmT+zwn4WOmQp53YSV8inRO5/5 3tklSdMNZU53pl718fUM8mrWgjrqwbWd50oZ/QpiKhgLbNEVNU0ql0YaHECXWYjN C0A9bICoAHnz7NVduGa/ef6MAPItQF4bANuCPt2kHy2kBzntpjaGHSyIcZ8CAwEA AaOCAj0wggI5MB0GA1UdDgQWBBQrBGwImNS79a6oIdOdj1siop90iDAfBgNVHSME GDAWgBS28BMVEOYvc+Xykkb5yPaRgRpwTTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1 ZDhkYWI0LThiYjYtNGVkMC04ZGFiLTVhNDA2MTY3Yjk5ZC8wL0I2RjAxMzE1MTBF NjJGNzNFNUYyOTI0NkY5QzhGNjkxODExQTcwNEQuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9CNkYwMTMxNTEwRTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3 MDRELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkOGRhYjQtOGJiNi00ZWQwLThk YWItNWE0MDYxNjdiOTlkLzAvMzIzNDMwMzQzYTY1MzEzMDMwM2EzNTMwMzAzMDNh M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNjM4MzUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBOEA UAAwDQYJKoZIhvcNAQELBQADggEBAABCHwB7MR/pqmHgrjOJHo/k2oag7r7j0Mmv bb2MIpWezzLoW8TN1oNkgbTk7vyOpP7PlDH45cEhxjBgKQMiVMhsjdrBHqYeSsTn HanmvYTYN/NzrnAOwKDNyQG+GVHXCs8GJfVUvo+yT4zWZL8vGZgtgnNV4lf09rBh Vp4EeMsLk596FzWf5GRrj2uYCpoLF03td4Wm3OsS6bKyDGXPJtYe4HsJ41F4ZneT O2FRyH1q4d1LeedzuRO5/Npd4VMqn5A2NXYE94FM27yZgqqDSfyffFp9VpO8M268 1+0Aj89uRe8dXfFZTn6lG5sCCMXBvulPPW+T1BoDGbU/bqZnYQI= -----END CERTIFICATE-----Generated at Mon Sep 8 10:46:27 2025 by rpki-client