$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230382e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U= Subject key identifier: F6:D1:4B:16:A0:2F:90:91:03:4F:0C:C0:AC:93:4B:64:E4:7E:EF:39 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 775442DFF128298BECA500AD17DDBC660D3C0803 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230382e302f32342d3234203d3e203338313432.roa Signing time: Mon 22 Sep 2025 14:00:00 +0000 ROA not before: Mon 22 Sep 2025 13:55:00 +0000 ROA not after: Mon 21 Sep 2026 14:00:00 +0000 asID: 38142 IP address blocks: 210.57.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:54:42:df:f1:28:29:8b:ec:a5:00:ad:17:dd:bc:66:0d:3c:08:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Sep 22 13:55:00 2025 GMT Not After : Sep 21 14:00:00 2026 GMT Subject: CN=F6D14B16A02F9091034F0CC0AC934B64E47EEF39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:33:70:7e:3e:22:dd:c5:dd:0b:bf:cb:5f: e6:9f:86:68:08:9e:b7:24:fb:4e:32:60:7f:a0:e3: 44:59:e4:97:82:71:2a:6d:08:e8:6d:bc:d4:1a:88: d2:3a:ad:77:19:a6:0e:75:b9:8a:f6:d2:d3:90:55: 6d:b6:37:16:78:5d:9b:09:27:e1:4c:f1:0d:6b:f2: 6b:2c:24:a6:45:d8:55:e0:09:f6:42:b7:4e:a6:4a: ae:02:6b:6a:22:68:56:6e:27:1f:4f:c7:3f:03:dd: 5f:c8:43:a9:71:e1:33:7a:7f:c3:bd:0e:1f:22:9f: 74:58:62:f6:25:c2:8d:7e:42:28:8d:9b:f7:53:26: c8:af:03:02:b6:7f:13:83:89:cd:d0:60:1b:a4:01: 83:3c:c7:5b:c2:fe:b4:4f:c6:6e:93:8b:d5:66:c6: ef:68:2a:bf:59:07:57:41:73:89:f7:f8:8f:b9:1b: cc:74:06:08:52:f0:f5:49:c8:6a:bb:82:04:ea:68: 30:47:6e:c4:78:20:6e:01:99:46:dd:5c:08:77:9d: 46:e4:08:55:e8:68:35:02:cf:40:da:d0:eb:e8:1c: 16:02:e7:c0:fb:dc:30:50:0e:9b:57:44:b9:a6:42: c5:e8:d9:1b:dd:e7:68:b8:4b:2c:dc:3b:29:3f:f6: 9d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D1:4B:16:A0:2F:90:91:03:4F:0C:C0:AC:93:4B:64:E4:7E:EF:39 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230382e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.208.0/24 Signature Algorithm: sha256WithRSAEncryption 69:1b:ad:37:b4:a9:37:59:e8:2f:7a:35:0f:0c:43:20:be:75: 96:57:4a:88:a9:60:37:64:94:be:35:fd:44:83:df:b5:0f:5b: 60:69:c2:b6:06:90:fb:95:81:0f:db:b8:5f:b7:9a:93:1d:98: 01:a1:93:53:9d:8f:29:d5:bd:ea:f2:a2:98:ad:fb:af:82:79: cc:24:f2:0a:3f:27:81:da:3f:17:1b:85:cd:15:d8:e1:a1:b5: 56:ef:10:d3:f9:36:bf:14:fd:ba:7a:41:30:07:d4:29:ff:7a: ea:d3:af:0d:ec:3a:14:e0:63:f9:c1:84:6e:01:7b:a7:1e:40: 83:0b:35:5d:7a:7e:0d:cd:64:1a:53:62:12:39:6a:f3:a4:53: 8d:4a:22:99:0a:01:00:39:59:d1:bc:d5:b2:b4:22:33:cd:2c: b2:8e:0c:4c:0f:9b:c7:83:53:29:1f:50:8a:19:4b:8d:17:84: 78:d3:f4:8d:7a:fb:b2:7c:59:f6:94:27:4d:61:74:7a:16:ec: cb:b5:e1:14:29:13:8a:e7:ba:9b:c3:c3:b7:b7:d8:9a:cd:d6: 6a:4c:8a:a7:2e:3c:f3:e4:33:87:d5:62:74:0c:27:7a:2c:44: 0c:93:44:37:a8:04:fd:94:84:1e:56:57:49:7b:f9:3b:24:29: 49:21:ab:a4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUd1RC3/EoKYvspQCtF928Zg08CAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTA5MjIxMzU1MDBaFw0yNjA5MjExNDAwMDBaMDMxMTAvBgNV BAMTKEY2RDE0QjE2QTAyRjkwOTEwMzRGMENDMEFDOTM0QjY0RTQ3RUVGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkDNwfj4i3cXdC7/LX+afhmgI nrck+04yYH+g40RZ5JeCcSptCOhtvNQaiNI6rXcZpg51uYr20tOQVW22NxZ4XZsJ J+FM8Q1r8mssJKZF2FXgCfZCt06mSq4Ca2oiaFZuJx9Pxz8D3V/IQ6lx4TN6f8O9 Dh8in3RYYvYlwo1+QiiNm/dTJsivAwK2fxODic3QYBukAYM8x1vC/rRPxm6Ti9Vm xu9oKr9ZB1dBc4n3+I+5G8x0BghS8PVJyGq7ggTqaDBHbsR4IG4BmUbdXAh3nUbk CFXoaDUCz0Da0OvoHBYC58D73DBQDptXRLmmQsXo2Rvd52i4SyzcOyk/9p0tAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9tFLFqAvkJEDTwzArJNLZOR+7zkwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI50DANBgkqhkiG 9w0BAQsFAAOCAQEAaRutN7SpN1noL3o1DwxDIL51lldKiKlgN2SUvjX9RIPftQ9b YGnCtgaQ+5WBD9u4X7eakx2YAaGTU52PKdW96vKimK37r4J5zCTyCj8ngdo/FxuF zRXY4aG1Vu8Q0/k2vxT9unpBMAfUKf966tOvDew6FOBj+cGEbgF7px5Agws1XXp+ Dc1kGlNiEjlq86RTjUoimQoBADlZ0bzVsrQiM80sso4MTA+bx4NTKR9QihlLjReE eNP0jXr7snxZ9pQnTWF0ehbsy7XhFCkTiue6m8PDt7fYms3WakyKpy488+Qzh9Vi dAwneixEDJNEN6gE/ZSEHlZXSXv5OyQpSSGrpA== -----END CERTIFICATE-----Generated at Tue Oct 21 00:04:11 2025 by rpki-client