$ rpki-client -vvf repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233302e302f32342d3234203d3e203139393035.roa File: 3132302e32392e3233302e302f32342d3234203d3e203139393035.roa (raw, json) Hash identifier: eJhmyhXXadCdmI4sMr9QqAto/qcSNuimAa2ijC8e73Y= Subject key identifier: F7:A7:2C:58:6E:2C:67:BD:5C:83:B6:3C:9E:00:5C:24:1F:D5:F0:C3 Certificate issuer: /CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Certificate serial: 34AB3A3B4E511CB354E07C20E05541ECFEDDDB8D Authority key identifier: 3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233302e302f32342d3234203d3e203139393035.roa Signing time: Sat 06 Sep 2025 14:18:07 +0000 ROA not before: Sat 06 Sep 2025 14:13:07 +0000 ROA not after: Sat 05 Sep 2026 14:18:07 +0000 asID: 19905 IP address blocks: 120.29.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ab:3a:3b:4e:51:1c:b3:54:e0:7c:20:e0:55:41:ec:fe:dd:db:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E66628C03CAB8C6D6FCDEDBE0700557A35B0251 Validity Not Before: Sep 6 14:13:07 2025 GMT Not After : Sep 5 14:18:07 2026 GMT Subject: CN=F7A72C586E2C67BD5C83B63C9E005C241FD5F0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:e9:2d:aa:11:0e:91:e7:94:50:c3:fe:75: af:08:59:9b:47:55:ba:75:21:8b:28:b0:1e:6f:94: c2:72:b5:58:76:30:58:af:e4:a4:20:87:dd:1f:91: 6f:d7:61:1f:24:5a:e4:4b:73:90:2b:43:22:66:4a: b0:3e:d3:18:7f:0b:2c:d1:fb:7d:9a:f9:4b:17:83: 9e:2f:f0:96:83:e3:1e:af:c0:aa:f0:de:da:70:1d: b3:64:ec:0f:eb:d3:5a:23:44:20:f6:5d:91:74:0b: 99:e9:7e:bc:da:2d:6e:53:4e:4e:f3:99:05:c4:70: 48:a7:69:98:f5:99:85:a5:59:bd:42:1d:5d:75:57: 7f:4b:be:d2:1c:e3:28:cc:78:57:21:d3:c9:a2:ef: 59:7c:57:7d:b5:09:c0:b5:aa:f9:71:25:fd:d3:c2: 2e:40:75:af:78:a4:3e:23:a5:62:bb:e6:0d:c8:50: 7a:07:48:aa:d4:52:de:aa:67:c0:4f:75:5a:9c:3f: 04:49:64:d6:82:54:83:ab:0d:b5:3d:d3:8f:a0:85: 4d:05:f7:f4:42:44:44:4f:b8:b5:60:47:59:c9:ac: 19:f7:3e:06:b4:2b:27:52:71:59:b9:20:c0:c6:47: 2f:dd:54:dc:88:3e:75:d2:fe:2a:a3:b2:3e:55:02: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A7:2C:58:6E:2C:67:BD:5C:83:B6:3C:9E:00:5C:24:1F:D5:F0:C3 X509v3 Authority Key Identifier: keyid:3E:66:62:8C:03:CA:B8:C6:D6:FC:DE:DB:E0:70:05:57:A3:5B:02:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E66628C03CAB8C6D6FCDEDBE0700557A35B0251.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221c9cad-c3b9-45a0-beb6-bce48e2b2272/0/3132302e32392e3233302e302f32342d3234203d3e203139393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.29.230.0/24 Signature Algorithm: sha256WithRSAEncryption b2:b8:55:51:be:04:89:eb:8a:ff:f0:cc:7e:a8:a3:af:67:38: 42:a7:1b:a4:38:8a:0b:61:31:e6:7c:13:50:14:59:be:b3:39: e4:82:1c:f9:2c:ac:72:99:14:35:be:47:ea:15:3f:ea:8a:65: 21:2e:3c:28:0f:7f:34:6a:5b:53:e4:0f:bb:a3:cf:84:4d:89: 6e:60:a3:7a:54:12:2f:6e:47:d4:89:41:ff:9e:68:8f:95:3d: b1:54:b1:3a:92:33:2a:82:17:57:b0:60:b9:b9:a6:22:71:8d: 69:51:7b:b1:9e:0c:19:76:ed:87:7d:bc:32:6f:18:26:80:f2: 99:5f:09:13:03:97:f0:e1:20:2d:ce:bb:13:a8:1f:10:9e:eb: ab:3c:78:4c:0e:4f:f2:63:b5:30:00:9e:4e:9d:9c:9a:33:c9: 78:26:1b:ad:7c:19:45:0a:b3:dc:d5:7c:ac:16:6f:57:09:a4: 43:31:aa:e8:64:0e:e2:49:e2:12:42:51:c0:49:90:d6:0e:82: 98:80:d7:6b:f5:6b:2b:0a:8a:96:a7:6d:c8:cd:b1:2c:bf:4c: 21:81:b0:6c:5a:29:47:a3:34:ff:99:b4:61:3c:8b:df:fe:87: 22:54:ca:d8:8d:f7:b3:9c:d8:b8:b1:03:7e:5b:68:1f:ef:92: 5a:24:b3:55 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNKs6O05RHLNU4Hwg4FVB7P7d240wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdB MzVCMDI1MTAeFw0yNTA5MDYxNDEzMDdaFw0yNjA5MDUxNDE4MDdaMDMxMTAvBgNV BAMTKEY3QTcyQzU4NkUyQzY3QkQ1QzgzQjYzQzlFMDA1QzI0MUZENUYwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9OktqhEOkeeUUMP+da8IWZtH Vbp1IYsosB5vlMJytVh2MFiv5KQgh90fkW/XYR8kWuRLc5ArQyJmSrA+0xh/CyzR +32a+UsXg54v8JaD4x6vwKrw3tpwHbNk7A/r01ojRCD2XZF0C5npfrzaLW5TTk7z mQXEcEinaZj1mYWlWb1CHV11V39LvtIc4yjMeFch08mi71l8V321CcC1qvlxJf3T wi5Ada94pD4jpWK75g3IUHoHSKrUUt6qZ8BPdVqcPwRJZNaCVIOrDbU904+ghU0F 9/RCRERPuLVgR1nJrBn3Pga0KydScVm5IMDGRy/dVNyIPnXS/iqjsj5VAgAXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU96csWG4sZ71cg7Y8ngBcJB/V8MMwHwYDVR0j BBgwFoAUPmZijAPKuMbW/N7b4HAFV6NbAlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjFjOWNhZC1jM2I5LTQ1YTAtYmViNi1iY2U0OGUyYjIyNzIvMC8zRTY2NjI4QzAz Q0FCOEM2RDZGQ0RFREJFMDcwMDU1N0EzNUIwMjUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2NjYyOEMwM0NBQjhDNkQ2RkNERURCRTA3MDA1NTdBMzVC MDI1MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyMWM5Y2FkLWMzYjktNDVhMC1i ZWI2LWJjZTQ4ZTJiMjI3Mi8wLzMxMzIzMDJlMzIzOTJlMzIzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHgd5jANBgkqhkiG 9w0BAQsFAAOCAQEAsrhVUb4EieuK//DMfqijr2c4QqcbpDiKC2Ex5nwTUBRZvrM5 5IIc+SyscpkUNb5H6hU/6oplIS48KA9/NGpbU+QPu6PPhE2JbmCjelQSL25H1IlB /55oj5U9sVSxOpIzKoIXV7BgubmmInGNaVF7sZ4MGXbth328Mm8YJoDymV8JEwOX 8OEgLc67E6gfEJ7rqzx4TA5P8mO1MACeTp2cmjPJeCYbrXwZRQqz3NV8rBZvVwmk QzGq6GQO4kniEkJRwEmQ1g6CmIDXa/VrKwqKlqdtyM2xLL9MIYGwbFopR6M0/5m0 YTyL3/6HIlTK2I33s5zYuLEDfltoH++SWiSzVQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:55:10 2025 by rpki-client