$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/323430353a363263303a3a2f33322d3332203d3e20313339343138.roa File: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (raw, json) Hash identifier: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs= Subject key identifier: FD:73:1B:7F:EC:0E:D6:57:0E:3C:8D:69:90:33:DA:CB:2C:6B:C1:F2 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 20D3E61C6FF557481830FEC0106ABAE305F0BD32 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/323430353a363263303a3a2f33322d3332203d3e20313339343138.roa Signing time: Fri 05 Sep 2025 13:01:03 +0000 ROA not before: Fri 05 Sep 2025 12:56:03 +0000 ROA not after: Fri 04 Sep 2026 13:01:03 +0000 asID: 139418 IP address blocks: 2405:62c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 08:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d3:e6:1c:6f:f5:57:48:18:30:fe:c0:10:6a:ba:e3:05:f0:bd:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Sep 5 12:56:03 2025 GMT Not After : Sep 4 13:01:03 2026 GMT Subject: CN=FD731B7FEC0ED6570E3C8D699033DACB2C6BC1F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:58:83:9d:9a:2d:c8:25:7a:e3:1e:4e:5b: 26:13:e8:11:a2:c9:cf:67:b8:72:f8:15:89:c5:99: ab:17:52:94:31:2b:2d:74:17:0a:f3:81:56:8b:06: a9:2f:1f:39:fe:28:38:fa:6b:9d:e5:b8:ca:69:c4: cc:bb:f5:dc:99:7c:58:d6:98:0c:c6:81:12:6d:6a: 4a:ce:28:d1:2a:f1:76:d9:67:f3:83:be:83:b7:7f: 10:15:28:e8:71:87:49:fc:a7:c8:55:d2:d7:1d:aa: ff:83:f3:08:9a:da:c3:6f:d4:66:a3:2a:dd:e3:2e: ba:0b:dc:1a:1c:9c:ee:2c:ab:07:b9:01:10:04:d9: c9:d9:60:02:96:16:38:91:64:2b:be:c6:e5:a7:ef: ad:22:41:5e:fa:38:f9:f7:e3:6b:3b:e0:29:03:a3: a9:51:7c:f9:47:9c:fa:2d:ec:19:af:bd:19:b2:5a: c5:71:87:0e:1b:ac:28:c7:75:53:48:88:de:52:31: 05:5e:89:1a:c0:9b:ef:dc:6a:54:df:46:4e:2e:f2: d8:e3:19:25:dc:d5:fa:a6:fb:9e:70:4d:0d:7b:f0: dd:b2:8a:5d:a5:86:44:bc:aa:8e:90:9f:5a:aa:99: a1:71:97:a9:7f:fb:07:49:a1:5f:31:10:0e:a8:f0: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:73:1B:7F:EC:0E:D6:57:0E:3C:8D:69:90:33:DA:CB:2C:6B:C1:F2 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/323430353a363263303a3a2f33322d3332203d3e20313339343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:62c0::/32 Signature Algorithm: sha256WithRSAEncryption 84:d8:6d:7b:f0:12:dd:86:9f:d6:23:4a:eb:5c:71:6f:98:dd: c3:b8:61:57:9f:ef:62:06:bc:56:e7:60:4b:7e:ea:e5:dd:54: 0e:b9:0d:56:18:fe:03:fe:29:7a:cd:d2:36:6c:d3:fc:49:df: 63:f3:d3:e4:94:b1:a7:0e:36:9a:db:16:5c:47:29:ce:ee:e9: f8:80:19:9b:e5:9b:e3:c4:b3:d7:cb:b4:62:7a:35:f9:5d:29: aa:76:75:dd:85:7b:4d:b1:db:82:14:49:ff:c1:0e:25:9e:47: 8d:fa:e2:25:39:38:14:33:28:90:e6:2b:92:01:56:59:58:fe: 68:58:b5:e6:a7:1f:1f:c8:65:7a:5d:de:90:76:f6:12:22:79: f9:c4:c6:de:39:df:43:11:09:e1:a5:68:61:a2:96:00:2e:88: b2:c3:2a:95:34:e5:74:08:7d:43:34:c9:ca:ea:e0:86:b9:f2: af:20:bb:61:4a:2d:2b:0f:f7:fc:56:30:41:c3:db:c1:e2:b7: 77:09:ad:cc:60:ab:93:cd:62:90:d6:46:f2:38:7d:55:02:bb: d6:27:2b:d3:03:a5:9b:69:50:3d:c2:11:3e:2c:e5:64:49:95: eb:e3:1e:26:1f:a7:e9:59:a5:46:d4:41:f5:b9:2f:ca:3d:73: 1e:15:de:5c -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUINPmHG/1V0gYMP7AEGq64wXwvTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTA5MDUxMjU2MDNaFw0yNjA5MDQxMzAxMDNaMDMxMTAvBgNV BAMTKEZENzMxQjdGRUMwRUQ2NTcwRTNDOEQ2OTkwMzNEQUNCMkM2QkMxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuViDnZotyCV64x5OWyYT6BGi yc9nuHL4FYnFmasXUpQxKy10FwrzgVaLBqkvHzn+KDj6a53luMppxMy79dyZfFjW mAzGgRJtakrOKNEq8XbZZ/ODvoO3fxAVKOhxh0n8p8hV0tcdqv+D8wia2sNv1Gaj Kt3jLroL3BocnO4sqwe5ARAE2cnZYAKWFjiRZCu+xuWn760iQV76OPn342s74CkD o6lRfPlHnPot7BmvvRmyWsVxhw4brCjHdVNIiN5SMQVeiRrAm+/calTfRk4u8tjj GSXc1fqm+55wTQ178N2yil2lhkS8qo6Qn1qqmaFxl6l/+wdJoV8xEA6o8NR/AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU/XMbf+wO1lcOPI1pkDPayyxrwfIwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkNTk4ZTk5LWU5ZmYtNGFiZS1i MDhlLTIyNmZkZDA3ZjlhZS8wLzMyMzQzMDM1M2EzNjMyNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzOTM0MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFYsAwDQYJKoZI hvcNAQELBQADggEBAITYbXvwEt2Gn9YjSutccW+Y3cO4YVef72IGvFbnYEt+6uXd VA65DVYY/gP+KXrN0jZs0/xJ32Pz0+SUsacONprbFlxHKc7u6fiAGZvlm+PEs9fL tGJ6NfldKap2dd2Fe02x24IUSf/BDiWeR4364iU5OBQzKJDmK5IBVllY/mhYtean Hx/IZXpd3pB29hIiefnExt4530MRCeGlaGGilgAuiLLDKpU05XQIfUM0ycrq4Ia5 8q8gu2FKLSsP9/xWMEHD28Hit3cJrcxgq5PNYpDWRvI4fVUCu9YnK9MDpZtpUD3C ET4s5WRJlevjHiYfp+lZpUbUQfW5L8o9cx4V3lw= -----END CERTIFICATE-----Generated at Tue Sep 9 08:02:24 2025 by rpki-client