$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI= Subject key identifier: 1A:AA:17:14:7C:5F:65:8C:C4:8B:FE:33:E9:F2:A8:96:68:9A:9E:DC Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 559DFB2D6EF0631F9743440C41294201B21F2D73 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa Signing time: Mon 22 Sep 2025 14:00:01 +0000 ROA not before: Mon 22 Sep 2025 13:55:01 +0000 ROA not after: Mon 21 Sep 2026 14:00:01 +0000 asID: 38142 IP address blocks: 210.57.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 05:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9d:fb:2d:6e:f0:63:1f:97:43:44:0c:41:29:42:01:b2:1f:2d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Sep 22 13:55:01 2025 GMT Not After : Sep 21 14:00:01 2026 GMT Subject: CN=1AAA17147C5F658CC48BFE33E9F2A896689A9EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:70:3a:2b:84:90:cf:04:17:cc:25:b2:e8: e6:c2:bf:9c:80:ed:55:b0:a6:7f:17:38:d2:50:98: 9d:5f:21:ae:17:be:34:10:cb:31:24:93:9f:ad:55: 43:48:81:83:33:1e:b4:76:2b:27:2c:7b:c6:b0:8f: e4:f3:a1:2b:a4:f4:1e:a2:94:91:07:4b:7e:41:28: fc:a6:21:de:45:6d:41:cf:62:8e:3f:ec:70:af:5f: e6:4b:d5:ed:3d:d7:f0:04:e5:84:16:58:55:f0:60: d8:0d:e3:7c:fd:e7:a1:7a:c6:3d:dc:0f:c9:83:0c: 27:bf:57:1b:f8:52:3d:39:6b:5b:86:bf:9b:2f:1b: 31:1d:fd:6e:50:d2:a6:8a:98:4d:89:ac:c1:9e:68: 2c:0a:df:09:56:9f:d9:89:86:b2:47:df:27:e5:28: d3:2f:07:b7:bd:8e:5c:81:7c:92:2a:f1:06:c0:88: ec:85:7c:44:6c:78:c8:16:a6:2e:c0:a1:47:63:d3: 16:6a:57:84:43:8b:f4:31:88:04:4a:b0:d7:79:09: a4:11:39:e9:08:9d:2e:d5:49:27:ab:22:91:be:54: 03:09:4d:47:72:33:ca:88:a3:ae:a2:ee:bb:fb:06: e9:70:00:a7:17:e3:de:0f:2e:73:50:1c:43:26:11: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AA:17:14:7C:5F:65:8C:C4:8B:FE:33:E9:F2:A8:96:68:9A:9E:DC X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.209.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f9:bf:38:19:a9:cc:91:cf:9b:02:53:1d:ed:d8:57:ad:21: dd:8b:4f:d4:d6:e8:67:d7:4d:75:bd:77:a6:44:d8:36:af:63: 55:76:8f:9f:ee:bc:a2:e8:a9:56:7f:7b:dd:a6:0f:50:42:e9: 07:34:51:24:9b:c8:12:60:86:22:3d:97:7f:8e:6a:1d:aa:7f: 38:67:08:04:c2:2e:68:7b:ab:9a:0c:64:99:13:9d:28:8f:92: 30:bf:0d:bf:b6:f7:16:81:4e:d1:8c:1c:12:77:2d:00:04:d5: 6f:4c:61:07:a6:b6:2d:c6:c4:fd:7b:3b:83:36:8a:8e:39:ed: 77:f9:b8:4b:2a:aa:a9:0e:56:3a:b4:1a:e7:cb:6f:1f:e0:94: 47:a8:91:bf:d4:fa:b7:f8:a9:63:62:5e:c9:d3:b5:21:88:63: c0:58:11:4c:ba:48:3a:d7:0a:69:a0:1b:c9:60:c9:d8:28:d7: 4e:30:28:70:c4:a7:1c:49:c3:60:24:16:a5:05:e4:89:93:e4: 80:6d:d8:25:57:b6:15:0d:70:97:7f:7e:98:e7:b5:42:5b:ca: 1e:85:fe:14:5e:c3:6e:1a:b6:26:07:8b:de:a0:0d:65:0a:01: a6:8e:6f:b1:34:8b:3f:f0:31:01:c9:9a:c9:d4:43:f8:11:e6: 1c:05:c1:ae -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVZ37LW7wYx+XQ0QMQSlCAbIfLXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTA5MjIxMzU1MDFaFw0yNjA5MjExNDAwMDFaMDMxMTAvBgNV BAMTKDFBQUExNzE0N0M1RjY1OENDNDhCRkUzM0U5RjJBODk2Njg5QTlFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86HA6K4SQzwQXzCWy6ObCv5yA 7VWwpn8XONJQmJ1fIa4XvjQQyzEkk5+tVUNIgYMzHrR2Kycse8awj+TzoSuk9B6i lJEHS35BKPymId5FbUHPYo4/7HCvX+ZL1e091/AE5YQWWFXwYNgN43z956F6xj3c D8mDDCe/Vxv4Uj05a1uGv5svGzEd/W5Q0qaKmE2JrMGeaCwK3wlWn9mJhrJH3yfl KNMvB7e9jlyBfJIq8QbAiOyFfERseMgWpi7AoUdj0xZqV4RDi/QxiARKsNd5CaQR OekInS7VSSerIpG+VAMJTUdyM8qIo66i7rv7BulwAKcX494PLnNQHEMmETlxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUGqoXFHxfZYzEi/4z6fKolmiantwwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI50TANBgkqhkiG 9w0BAQsFAAOCAQEAcvm/OBmpzJHPmwJTHe3YV60h3YtP1NboZ9dNdb13pkTYNq9j VXaPn+68ouipVn973aYPUELpBzRRJJvIEmCGIj2Xf45qHap/OGcIBMIuaHurmgxk mROdKI+SML8Nv7b3FoFO0YwcEnctAATVb0xhB6a2LcbE/Xs7gzaKjjntd/m4Syqq qQ5WOrQa58tvH+CUR6iRv9T6t/ipY2JeydO1IYhjwFgRTLpIOtcKaaAbyWDJ2CjX TjAocMSnHEnDYCQWpQXkiZPkgG3YJVe2FQ1wl39+mOe1QlvKHoX+FF7Dbhq2JgeL 3qANZQoBpo5vsTSLP/AxAcmaydRD+BHmHAXBrg== -----END CERTIFICATE-----Generated at Tue Oct 21 07:48:25 2025 by rpki-client