$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa File: 3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa (raw, json) Hash identifier: s40PNuPdNfcWQatEkq0oOjj78y3YVxe60B1MhUs2hPU= Subject key identifier: AD:26:1B:9E:ED:EB:8D:C9:BC:33:4F:46:C1:39:D0:8C:25:A8:B3:20 Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F Certificate serial: A332408E6E2FAE01841B50EAE258F275A7C9B4 Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa Signing time: Sun 14 Sep 2025 22:00:02 +0000 ROA not before: Sun 14 Sep 2025 21:55:02 +0000 ROA not after: Sun 13 Sep 2026 22:00:02 +0000 asID: 202673 IP address blocks: 122.128.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a3:32:40:8e:6e:2f:ae:01:84:1b:50:ea:e2:58:f2:75:a7:c9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00EE953FD699788668C724460F4D8D420238194F Validity Not Before: Sep 14 21:55:02 2025 GMT Not After : Sep 13 22:00:02 2026 GMT Subject: CN=AD261B9EEDEB8DC9BC334F46C139D08C25A8B320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:97:aa:e2:db:6b:40:6e:c0:a9:23:9d:68:80: 39:0d:88:89:39:ae:6c:61:bb:8e:74:c9:dd:81:84: a0:88:62:6e:54:9a:8b:6e:c8:24:7d:26:01:19:b7: e2:dc:ef:19:bb:39:2d:2f:93:4b:38:f7:ed:b1:dd: 58:4a:6c:cd:16:10:e8:ca:5d:40:34:3a:f9:e1:42: bd:84:d0:84:db:df:58:02:11:8a:48:a4:9f:c9:6a: a9:14:6d:f5:bf:0e:95:c7:7c:a0:40:16:83:b1:98: 91:2c:04:d0:e2:82:98:9b:0d:26:a3:4e:be:13:c9: 2b:2d:71:c0:dc:49:51:9b:a6:a3:0b:6d:f3:17:16: f5:7c:67:29:27:4d:64:e8:9a:a0:a3:9d:8d:0b:0a: e6:fd:1c:42:2e:16:cf:a8:b6:e8:7b:2a:f1:c7:46: 02:ee:ae:77:b3:95:0e:b6:12:92:c1:1b:a8:ba:75: dd:ee:80:3a:1f:d0:5f:75:f2:07:6e:f3:7d:3f:35: 89:9d:5e:6a:a6:bb:c8:c0:1f:46:ad:a8:05:7b:f6: b4:09:26:dd:d8:96:0e:ba:d4:05:e5:aa:8c:dc:fb: 4c:9c:3d:c7:ae:9a:5d:14:49:b6:2e:c0:d7:0e:1d: 12:31:1a:f0:05:c5:39:5c:4f:f3:ab:f3:a7:69:de: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:26:1B:9E:ED:EB:8D:C9:BC:33:4F:46:C1:39:D0:8C:25:A8:B3:20 X509v3 Authority Key Identifier: keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e20323032363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.22.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c0:a9:70:03:a9:98:23:6c:d2:f7:3c:2b:57:41:77:38:c4: d1:4b:97:d2:ad:22:8b:75:7e:16:5e:fd:fb:a6:4a:fa:4f:d8: a4:df:91:41:f3:62:2c:fd:f6:98:ce:0b:76:a5:ad:84:70:93: a8:23:29:9e:43:3f:46:ab:92:cc:9a:a1:81:4a:da:52:9c:12: cd:00:1d:10:e0:9e:08:c7:c3:63:85:9c:c2:31:cd:8a:76:11: 1c:ee:1e:f2:77:1a:d1:b3:b5:50:38:55:47:c2:92:05:42:c4: d6:a1:17:01:1c:b5:a4:82:b6:a3:b6:9f:ad:23:e1:68:24:11: 50:07:9a:f1:f3:6d:6a:2a:7b:66:5f:b8:5c:a1:9d:16:35:d6: 38:77:a9:52:b3:8a:1e:46:9a:01:92:a4:69:c3:15:d6:c4:87: f0:56:57:77:aa:d7:07:68:89:49:71:d3:29:9e:65:3b:b9:5e: fe:06:2f:27:c2:11:9e:aa:01:ab:7e:d2:4c:bc:3c:2f:84:b6: 28:86:69:42:9f:e4:32:85:58:8f:65:92:2d:f6:5c:44:ed:9b: 0e:53:79:15:36:d3:51:d8:1d:4a:fb:cd:c1:69:ed:e6:c4:6a: db:3a:6f:21:6a:03:1d:90:98:15:d8:69:38:1e:f3:d8:0b:28: 44:94:49:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAKMyQI5uL64BhBtQ6uJY8nWnybQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw MjM4MTk0RjAeFw0yNTA5MTQyMTU1MDJaFw0yNjA5MTMyMjAwMDJaMDMxMTAvBgNV BAMTKEFEMjYxQjlFRURFQjhEQzlCQzMzNEY0NkMxMzlEMDhDMjVBOEIzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpl6ri22tAbsCpI51ogDkNiIk5 rmxhu450yd2BhKCIYm5UmotuyCR9JgEZt+Lc7xm7OS0vk0s49+2x3VhKbM0WEOjK XUA0OvnhQr2E0ITb31gCEYpIpJ/JaqkUbfW/DpXHfKBAFoOxmJEsBNDigpibDSaj Tr4TySstccDcSVGbpqMLbfMXFvV8ZyknTWTomqCjnY0LCub9HEIuFs+otuh7KvHH RgLurnezlQ62EpLBG6i6dd3ugDof0F918gdu830/NYmdXmqmu8jAH0atqAV79rQJ Jt3Ylg661AXlqozc+0ycPceuml0USbYuwNcOHRIxGvAFxTlcT/Or86dp3juLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrSYbnu3rjcm8M09GwTnQjCWosyAwHwYDVR0j BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2 OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4 MTk0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMDMyMzYzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeoAWMA0GCSqG SIb3DQEBCwUAA4IBAQBXwKlwA6mYI2zS9zwrV0F3OMTRS5fSrSKLdX4WXv37pkr6 T9ik35FB82Is/faYzgt2pa2EcJOoIymeQz9Gq5LMmqGBStpSnBLNAB0Q4J4Ix8Nj hZzCMc2KdhEc7h7ydxrRs7VQOFVHwpIFQsTWoRcBHLWkgrajtp+tI+FoJBFQB5rx 821qKntmX7hcoZ0WNdY4d6lSs4oeRpoBkqRpwxXWxIfwVld3qtcHaIlJcdMpnmU7 uV7+Bi8nwhGeqgGrftJMvDwvhLYohmlCn+QyhViPZZIt9lxE7ZsOU3kVNtNR2B1K +83Bae3mxGrbOm8hagMdkJgV2Gk4HvPYCyhElElm -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:17 2025 by rpki-client