$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231372e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk= Subject key identifier: 0E:0B:1C:CC:73:B4:40:9A:FF:08:28:8B:A4:80:B2:6B:E4:4F:D2:90 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 3CBC51021645A42327D934AF78FD4D14953EFC4D Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231372e302f32342d3234203d3e203338313432.roa Signing time: Mon 22 Sep 2025 12:00:00 +0000 ROA not before: Mon 22 Sep 2025 11:55:00 +0000 ROA not after: Mon 21 Sep 2026 12:00:00 +0000 asID: 38142 IP address blocks: 210.57.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bc:51:02:16:45:a4:23:27:d9:34:af:78:fd:4d:14:95:3e:fc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Sep 22 11:55:00 2025 GMT Not After : Sep 21 12:00:00 2026 GMT Subject: CN=0E0B1CCC73B4409AFF08288BA480B26BE44FD290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:09:c1:95:34:d3:85:a0:a8:c3:4c:09:4e: 5a:73:61:cc:62:49:6f:f9:97:ef:2e:c4:de:d5:b1: b3:77:f0:c1:b7:07:88:bd:f4:35:bb:1c:f5:f8:fc: 16:3d:3f:3e:1c:95:7e:1e:c6:53:4d:b4:6b:d4:62: fa:30:2d:a2:cc:ce:17:b0:32:b8:8a:d4:57:49:d7: da:f3:b9:45:40:05:f1:a2:be:48:ce:8d:7a:8f:b2: ca:27:77:f6:37:34:90:57:c0:23:39:81:8d:96:f8: b5:f0:b3:dd:f0:c2:f7:41:c4:89:98:36:41:30:89: bd:32:a2:3a:f5:24:80:3a:8b:25:b2:fd:81:e1:53: c7:2f:f2:7c:94:a8:9c:22:f0:5f:f6:19:9c:c9:71: fb:2a:85:b5:1b:8b:61:de:a7:19:0f:c2:83:0c:b0: b2:57:24:e7:78:b8:ee:03:e5:4f:7a:dd:da:e6:e9: 89:45:08:b0:a0:0f:6a:20:86:d5:c1:38:71:d1:c4: 4e:a7:4f:97:9a:ea:88:5f:f3:20:88:bc:e3:31:a8: 79:a8:80:96:b8:05:e6:cd:7a:7c:ff:fd:9f:79:bd: e0:1a:f2:3c:4b:bf:b0:9a:d1:22:12:6e:0d:c1:20: c7:53:1b:a9:8a:b0:47:e8:ba:bc:d4:b3:26:8f:e3: 9c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0B:1C:CC:73:B4:40:9A:FF:08:28:8B:A4:80:B2:6B:E4:4F:D2:90 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231372e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.217.0/24 Signature Algorithm: sha256WithRSAEncryption b8:d3:71:b9:0e:6c:f5:01:b6:a7:fc:40:71:9b:28:22:aa:f4: ab:95:d4:1b:49:9b:69:3b:dd:a9:e1:d7:b4:a7:bb:d0:e6:16: 8c:b3:e8:5c:90:12:8c:f9:c3:2d:25:3a:d8:62:d3:c4:36:f7: d0:23:f1:4b:a0:b6:6c:60:13:7b:b9:4b:65:64:f5:81:ae:19: 95:fd:80:c8:d2:78:18:ef:5b:1d:96:c7:18:f0:ed:61:6f:ef: 3d:66:38:49:f6:9d:0a:ae:ae:7d:23:85:5d:8d:9d:41:6e:2d: 61:b8:2c:2a:b4:73:33:69:95:b4:27:9a:f2:4e:e5:9b:c1:35: 02:78:f0:3a:16:7b:d8:f2:f1:78:d8:ef:67:7c:8a:32:86:ad: 2a:08:f7:7c:ee:79:3c:ed:75:57:0d:c6:a6:01:cc:c1:2e:88: 53:61:5a:c6:1b:84:07:d6:4a:c7:b1:5c:0c:0c:1f:6c:09:5c: 55:34:73:1f:5b:0b:ba:bd:b4:f6:4c:44:3a:83:14:73:b1:bf: 36:30:f5:bc:30:6d:f9:6f:f2:c3:d0:d5:d5:f2:0a:52:73:2f: ed:ea:14:41:3e:bd:1a:a0:a1:8c:34:1d:06:91:d7:c6:79:9c: 11:d1:b7:4f:8f:88:43:c2:e4:9c:73:a8:30:7e:7b:5b:5a:8d: 71:6f:8f:43 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPLxRAhZFpCMn2TSveP1NFJU+/E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTA5MjIxMTU1MDBaFw0yNjA5MjExMjAwMDBaMDMxMTAvBgNV BAMTKDBFMEIxQ0NDNzNCNDQwOUFGRjA4Mjg4QkE0ODBCMjZCRTQ0RkQyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJQnBlTTThaCow0wJTlpzYcxi SW/5l+8uxN7VsbN38MG3B4i99DW7HPX4/BY9Pz4clX4exlNNtGvUYvowLaLMzhew MriK1FdJ19rzuUVABfGivkjOjXqPssond/Y3NJBXwCM5gY2W+LXws93wwvdBxImY NkEwib0yojr1JIA6iyWy/YHhU8cv8nyUqJwi8F/2GZzJcfsqhbUbi2HepxkPwoMM sLJXJOd4uO4D5U963drm6YlFCLCgD2oghtXBOHHRxE6nT5ea6ohf8yCIvOMxqHmo gJa4BebNenz//Z95veAa8jxLv7Ca0SISbg3BIMdTG6mKsEfourzUsyaP45whAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDgsczHO0QJr/CCiLpICya+RP0pAwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI52TANBgkqhkiG 9w0BAQsFAAOCAQEAuNNxuQ5s9QG2p/xAcZsoIqr0q5XUG0mbaTvdqeHXtKe70OYW jLPoXJASjPnDLSU62GLTxDb30CPxS6C2bGATe7lLZWT1ga4Zlf2AyNJ4GO9bHZbH GPDtYW/vPWY4SfadCq6ufSOFXY2dQW4tYbgsKrRzM2mVtCea8k7lm8E1AnjwOhZ7 2PLxeNjvZ3yKMoatKgj3fO55PO11Vw3GpgHMwS6IU2FaxhuEB9ZKx7FcDAwfbAlc VTRzH1sLur209kxEOoMUc7G/NjD1vDBt+W/yw9DV1fIKUnMv7eoUQT69GqChjDQd BpHXxnmcEdG3T4+IQ8LknHOoMH57W1qNcW+PQw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:03:27 2025 by rpki-client