$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk= Subject key identifier: E5:FB:BF:1B:70:6D:D7:08:A4:F4:30:4B:03:6B:64:F2:C8:4D:AB:87 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 30C73CBCE4E2E1327AC48B4CCD295C7C438918E4 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa Signing time: Mon 22 Sep 2025 14:00:00 +0000 ROA not before: Mon 22 Sep 2025 13:55:00 +0000 ROA not after: Mon 21 Sep 2026 14:00:00 +0000 asID: 38142 IP address blocks: 210.57.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c7:3c:bc:e4:e2:e1:32:7a:c4:8b:4c:cd:29:5c:7c:43:89:18:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Sep 22 13:55:00 2025 GMT Not After : Sep 21 14:00:00 2026 GMT Subject: CN=E5FBBF1B706DD708A4F4304B036B64F2C84DAB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:a7:3f:7f:93:94:68:75:ce:d9:01:7c:48: ed:75:75:6d:82:78:a5:46:51:34:af:8d:5f:df:64: 0d:c7:ff:bb:b7:83:38:13:28:ca:0f:97:1e:6b:d6: 20:81:df:65:92:ed:7c:8c:2f:85:f5:dd:60:d5:0a: 90:ec:0f:1a:28:84:b8:fb:5c:d2:05:ed:38:85:6f: d0:5f:f5:8d:70:ae:23:7e:11:17:2a:6a:94:0b:74: 85:a0:a8:4a:1f:e4:19:72:f7:2d:be:a4:83:c2:9f: 5f:e1:9d:87:3e:53:01:f4:9b:2e:6a:9a:bb:b1:42: 2c:91:b5:56:d4:84:85:25:fd:11:05:11:b2:88:f1: 9b:0c:f9:ac:85:01:c3:12:01:2c:1c:bc:4c:6d:d7: 4e:67:20:cc:6d:f1:f7:94:00:17:04:f7:b5:08:e0: 3a:46:b4:7a:30:5f:e3:f8:f6:00:8a:42:22:9b:54: 76:02:75:ae:51:35:74:03:6c:c0:72:4f:20:ed:b1: 49:12:a7:69:6b:4c:0f:5a:87:98:d8:57:4d:c3:0f: 4d:48:87:09:72:51:ca:f8:73:83:20:25:02:35:aa: 70:48:7c:dc:10:ba:04:65:c0:1c:ee:5d:75:4a:ef: a5:7a:2c:1f:a8:31:ac:cb:ee:8c:29:e9:ef:2f:a7: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FB:BF:1B:70:6D:D7:08:A4:F4:30:4B:03:6B:64:F2:C8:4D:AB:87 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.214.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:06:19:2d:76:56:6a:79:50:a9:8f:c3:c8:5d:b9:70:01:f1: 8c:47:cb:dd:28:aa:23:14:85:0a:2b:de:05:3d:a2:aa:cb:54: 78:97:6c:b1:78:e1:73:de:26:ac:c2:5e:32:3c:7d:88:87:2e: ed:2e:2a:bd:f4:d1:94:5f:2c:9a:21:a0:d4:07:a1:fe:49:c1: 40:6f:af:0f:48:35:1f:bd:a2:f2:0e:23:1d:8a:43:dc:6a:f3: 6b:34:6e:b7:07:f8:3b:41:3e:7f:86:98:13:0b:42:4c:7d:13: 94:20:49:45:8e:20:ae:30:50:c2:bb:90:8d:45:00:0c:85:a8: 2d:a6:7c:ad:05:69:42:61:94:1e:f2:c7:7e:97:31:04:dc:e0: 71:62:82:54:5d:bf:e3:cb:61:5c:dc:7b:57:ae:d3:84:84:db: e5:10:a8:c6:7a:7a:6c:1c:b4:79:ac:61:0a:04:35:1a:c3:ca: c2:0a:91:6a:a7:b9:a2:4f:e8:a1:8b:39:f6:5e:33:38:10:32: 26:cd:8d:17:06:1c:a6:9b:7b:60:a3:d4:f6:90:ea:68:fb:84: ea:6f:d7:c6:98:03:f5:38:08:81:0a:c2:ce:f8:08:67:2f:76: 43:1d:66:74:74:da:fd:c3:41:0c:12:b4:af:7c:4e:db:90:e6: fe:a0:1b:4f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMMc8vOTi4TJ6xItMzSlcfEOJGOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTA5MjIxMzU1MDBaFw0yNjA5MjExNDAwMDBaMDMxMTAvBgNV BAMTKEU1RkJCRjFCNzA2REQ3MDhBNEY0MzA0QjAzNkI2NEYyQzg0REFCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0l6c/f5OUaHXO2QF8SO11dW2C eKVGUTSvjV/fZA3H/7u3gzgTKMoPlx5r1iCB32WS7XyML4X13WDVCpDsDxoohLj7 XNIF7TiFb9Bf9Y1wriN+ERcqapQLdIWgqEof5Bly9y2+pIPCn1/hnYc+UwH0my5q mruxQiyRtVbUhIUl/REFEbKI8ZsM+ayFAcMSASwcvExt105nIMxt8feUABcE97UI 4DpGtHowX+P49gCKQiKbVHYCda5RNXQDbMByTyDtsUkSp2lrTA9ah5jYV03DD01I hwlyUcr4c4MgJQI1qnBIfNwQugRlwBzuXXVK76V6LB+oMazL7owp6e8vp5GdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5fu/G3Bt1wik9DBLA2tk8shNq4cwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI51jANBgkqhkiG 9w0BAQsFAAOCAQEAXgYZLXZWanlQqY/DyF25cAHxjEfL3SiqIxSFCiveBT2iqstU eJdssXjhc94mrMJeMjx9iIcu7S4qvfTRlF8smiGg1Aeh/knBQG+vD0g1H72i8g4j HYpD3GrzazRutwf4O0E+f4aYEwtCTH0TlCBJRY4grjBQwruQjUUADIWoLaZ8rQVp QmGUHvLHfpcxBNzgcWKCVF2/48thXNx7V67ThITb5RCoxnp6bBy0eaxhCgQ1GsPK wgqRaqe5ok/ooYs59l4zOBAyJs2NFwYcppt7YKPU9pDqaPuE6m/XxpgD9TgIgQrC zvgIZy92Qx1mdHTa/cNBDBK0r3xO25Dm/qAbTw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:59 2025 by rpki-client