$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231352e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA= Subject key identifier: CD:82:04:BF:FC:35:4F:E4:4A:EE:AE:97:B2:5D:3D:6B:13:02:F2:49 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 28B5ED23EEF212391BB26804E8D410D9268ADD9C Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231352e302f32342d3234203d3e203338313432.roa Signing time: Mon 22 Sep 2025 14:00:01 +0000 ROA not before: Mon 22 Sep 2025 13:55:01 +0000 ROA not after: Mon 21 Sep 2026 14:00:01 +0000 asID: 38142 IP address blocks: 210.57.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b5:ed:23:ee:f2:12:39:1b:b2:68:04:e8:d4:10:d9:26:8a:dd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Sep 22 13:55:01 2025 GMT Not After : Sep 21 14:00:01 2026 GMT Subject: CN=CD8204BFFC354FE44AEEAE97B25D3D6B1302F249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:cf:e4:a7:f4:04:5f:63:9b:f0:19:7a:22: 04:8a:f1:c9:6a:4a:be:fb:7d:d2:75:91:e7:49:57: 10:96:c3:5c:05:8d:ad:99:3b:bd:e6:13:eb:ec:c2: d8:54:bc:9a:d3:31:73:36:2e:42:91:46:e4:eb:e9: 8b:ca:a6:c9:2f:87:71:e0:cd:88:d6:7d:9b:37:6b: ba:24:d9:8c:88:6a:6c:31:67:4e:4a:ba:f6:c8:92: d8:ec:63:bc:b6:f6:e6:2d:eb:9e:3e:20:12:91:34: c5:71:7d:02:b0:5f:23:f1:c6:58:fe:32:14:c2:4a: 84:ec:e6:9a:e8:84:14:51:2d:4b:5a:0e:76:21:c2: d6:25:18:2b:4a:3e:00:71:55:54:de:07:9e:fd:02: 88:9d:fb:32:10:43:57:90:c2:03:58:e0:cb:e0:78: 80:d6:48:8c:14:b6:db:11:69:10:ee:55:2c:a7:c0: 7c:ac:82:88:6e:f9:52:b9:1a:a6:ae:9e:64:d9:79: e7:68:fb:f8:67:3d:a1:7e:72:df:88:fd:22:71:21: ec:c1:fd:b0:b0:37:fa:7f:04:c8:cc:f9:4a:4c:56: 42:6c:e9:ba:70:b8:62:8a:fa:3d:71:9a:fb:03:5d: fe:94:56:64:f4:9c:1a:e6:ca:8e:1f:9b:c6:3f:7a: 84:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:82:04:BF:FC:35:4F:E4:4A:EE:AE:97:B2:5D:3D:6B:13:02:F2:49 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231352e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.215.0/24 Signature Algorithm: sha256WithRSAEncryption ba:eb:e8:de:5b:f9:82:cc:c1:f9:ba:aa:05:a0:31:76:5a:4f: 26:16:64:02:b8:63:fa:68:1a:9f:5d:0f:d5:15:59:1d:c7:f0: 5c:ae:3e:d2:51:2d:13:17:32:2c:9a:ed:c9:a9:74:da:a6:09: bf:b4:b3:f8:87:3b:89:f5:08:e1:d5:40:7e:82:37:7d:86:1c: 90:76:fb:d8:74:d4:55:9b:6d:b9:36:e5:f1:2d:bb:fa:55:23: a7:70:bf:ee:65:6f:30:af:b7:c0:ca:23:91:0e:02:02:82:8a: 93:86:b4:62:9a:96:42:5f:6d:b2:06:6f:1a:1b:5b:8c:3b:ad: a9:7b:76:75:d0:e2:07:56:0a:4b:dc:3c:2e:4b:30:8e:7e:60: 8f:a8:4f:d0:2c:62:39:a7:78:b5:45:16:44:60:ba:51:f4:82: 91:b1:e0:72:02:db:66:4e:61:85:61:88:2e:6f:50:46:74:8e: 9a:85:43:19:bd:25:e9:1a:87:d5:a7:eb:eb:a7:72:34:a9:61: 6b:16:75:ae:e4:0a:c2:a4:af:aa:ce:54:f2:95:6f:5f:82:18: d3:78:c4:d0:24:5c:54:17:fc:32:02:8a:de:08:bc:f3:77:b4: b9:42:55:ae:63:85:80:00:b7:e4:cf:27:c0:a4:fe:af:05:95: b4:26:a8:07 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKLXtI+7yEjkbsmgE6NQQ2SaK3ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTA5MjIxMzU1MDFaFw0yNjA5MjExNDAwMDFaMDMxMTAvBgNV BAMTKENEODIwNEJGRkMzNTRGRTQ0QUVFQUU5N0IyNUQzRDZCMTMwMkYyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYc/kp/QEX2Ob8Bl6IgSK8clq Sr77fdJ1kedJVxCWw1wFja2ZO73mE+vswthUvJrTMXM2LkKRRuTr6YvKpskvh3Hg zYjWfZs3a7ok2YyIamwxZ05KuvbIktjsY7y29uYt654+IBKRNMVxfQKwXyPxxlj+ MhTCSoTs5prohBRRLUtaDnYhwtYlGCtKPgBxVVTeB579Aoid+zIQQ1eQwgNY4Mvg eIDWSIwUttsRaRDuVSynwHysgohu+VK5GqaunmTZeedo+/hnPaF+ct+I/SJxIezB /bCwN/p/BMjM+UpMVkJs6bpwuGKK+j1xmvsDXf6UVmT0nBrmyo4fm8Y/eoQTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzYIEv/w1T+RK7q6Xsl09axMC8kkwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI51zANBgkqhkiG 9w0BAQsFAAOCAQEAuuvo3lv5gszB+bqqBaAxdlpPJhZkArhj+mgan10P1RVZHcfw XK4+0lEtExcyLJrtyal02qYJv7Sz+Ic7ifUI4dVAfoI3fYYckHb72HTUVZttuTbl 8S27+lUjp3C/7mVvMK+3wMojkQ4CAoKKk4a0YpqWQl9tsgZvGhtbjDutqXt2ddDi B1YKS9w8Lkswjn5gj6hP0CxiOad4tUUWRGC6UfSCkbHgcgLbZk5hhWGILm9QRnSO moVDGb0l6RqH1afr66dyNKlhaxZ1ruQKwqSvqs5U8pVvX4IY03jE0CRcVBf8MgKK 3gi883e0uUJVrmOFgAC35M8nwKT+rwWVtCaoBw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:50 2025 by rpki-client