$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231392e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0= Subject key identifier: BB:BA:5D:6C:0C:14:2F:F7:0D:80:27:10:7D:09:93:2C:66:1B:D5:74 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 6B086CF03212F680FC383F8684522FB6AAE1BA26 Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231392e302f32342d3234203d3e203338313432.roa Signing time: Mon 22 Sep 2025 14:00:01 +0000 ROA not before: Mon 22 Sep 2025 13:55:01 +0000 ROA not after: Mon 21 Sep 2026 14:00:01 +0000 asID: 38142 IP address blocks: 210.57.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:08:6c:f0:32:12:f6:80:fc:38:3f:86:84:52:2f:b6:aa:e1:ba:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Sep 22 13:55:01 2025 GMT Not After : Sep 21 14:00:01 2026 GMT Subject: CN=BBBA5D6C0C142FF70D8027107D09932C661BD574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:e6:b7:0a:be:96:1e:4c:54:d2:f6:3c:e2: 0b:c0:23:d0:a6:c3:20:fb:c3:38:a8:3e:78:82:37: 38:9a:2a:97:b2:a3:06:52:46:f6:e3:34:e1:50:12: 07:79:47:e6:d9:c0:ac:ca:30:2b:e0:71:2a:7f:49: a2:d1:9b:6e:29:7a:47:cc:c8:33:2c:44:08:4a:f5: a5:18:ea:de:63:60:b2:20:5b:5f:49:ff:1c:4c:fe: 34:82:dd:a6:50:53:05:ca:1d:94:99:60:d7:62:9c: ca:e2:20:99:48:2d:3e:97:6f:ec:11:1a:9f:2d:48: 4f:8e:cd:88:28:73:de:ce:f2:ed:63:54:7f:04:54: fa:0b:35:49:09:aa:30:1a:f8:62:4a:72:b7:4e:af: b3:3c:23:50:22:91:05:23:83:e8:d5:a1:c7:f8:f9: ea:46:ac:77:c5:3c:24:e5:82:88:42:95:1d:a3:51: 24:07:9b:59:fd:04:88:1d:40:5e:33:77:0d:19:d7: e1:b7:35:5c:26:02:0f:51:b6:7f:80:01:2a:7c:c1: f5:63:5d:76:73:5d:bf:66:42:1b:e5:b7:60:c3:04: ae:83:27:ac:5c:7d:98:a1:cb:97:39:d4:e7:a5:e1: 10:8d:6f:a7:d3:5e:9d:ed:30:97:e0:18:4c:11:9c: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BA:5D:6C:0C:14:2F:F7:0D:80:27:10:7D:09:93:2C:66:1B:D5:74 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231392e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.219.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:00:fd:69:eb:f8:64:ed:7e:48:a6:69:04:e8:88:00:31:81: 2f:07:6d:c4:78:11:7f:62:df:a6:4b:83:36:89:c4:bf:be:5a: af:9f:87:90:78:1f:2c:53:84:65:8d:ad:4f:c5:b1:48:57:78: d0:1e:c8:99:d2:66:ca:ac:57:19:6d:ee:c6:42:e9:db:24:34: a3:8b:3a:8a:a4:1e:dd:8e:72:fc:77:8e:62:a0:f9:7f:93:8c: fa:c0:d5:4f:96:0d:bb:a1:68:d7:75:95:55:7d:6a:e5:0f:2f: 43:12:87:e2:4e:f9:c6:8f:4f:7c:ba:d4:f5:00:30:cc:5a:ef: 21:dc:5f:d8:6a:ab:70:df:c9:ce:cf:bd:05:0b:90:1a:c3:2e: e6:e8:52:6b:8e:9b:8c:db:6a:1a:ff:26:19:cd:c2:d2:5d:5b: c4:05:c8:bf:96:d4:a4:fe:b6:8e:ed:81:d4:b6:1c:7e:df:3e: db:16:75:57:cd:c7:d3:6f:53:ba:c1:9b:7a:8a:0e:98:61:7b: 7b:34:3d:6f:e4:8e:e3:ec:05:04:90:01:ca:1d:bb:93:7a:79: dd:95:d3:f5:45:41:d1:00:bf:77:da:07:1f:19:88:61:c1:70: c2:cb:48:e3:44:28:3d:49:c9:cf:d6:40:a7:9b:f7:26:f4:f3: b7:9b:9f:65 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUawhs8DIS9oD8OD+GhFIvtqrhuiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTA5MjIxMzU1MDFaFw0yNjA5MjExNDAwMDFaMDMxMTAvBgNV BAMTKEJCQkE1RDZDMEMxNDJGRjcwRDgwMjcxMDdEMDk5MzJDNjYxQkQ1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3ea3Cr6WHkxU0vY84gvAI9Cm wyD7wzioPniCNziaKpeyowZSRvbjNOFQEgd5R+bZwKzKMCvgcSp/SaLRm24pekfM yDMsRAhK9aUY6t5jYLIgW19J/xxM/jSC3aZQUwXKHZSZYNdinMriIJlILT6Xb+wR Gp8tSE+OzYgoc97O8u1jVH8EVPoLNUkJqjAa+GJKcrdOr7M8I1AikQUjg+jVocf4 +epGrHfFPCTlgohClR2jUSQHm1n9BIgdQF4zdw0Z1+G3NVwmAg9Rtn+AASp8wfVj XXZzXb9mQhvlt2DDBK6DJ6xcfZihy5c51Oel4RCNb6fTXp3tMJfgGEwRnDmRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUu7pdbAwUL/cNgCcQfQmTLGYb1XQwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI52zANBgkqhkiG 9w0BAQsFAAOCAQEATgD9aev4ZO1+SKZpBOiIADGBLwdtxHgRf2LfpkuDNonEv75a r5+HkHgfLFOEZY2tT8WxSFd40B7ImdJmyqxXGW3uxkLp2yQ0o4s6iqQe3Y5y/HeO YqD5f5OM+sDVT5YNu6Fo13WVVX1q5Q8vQxKH4k75xo9PfLrU9QAwzFrvIdxf2Gqr cN/Jzs+9BQuQGsMu5uhSa46bjNtqGv8mGc3C0l1bxAXIv5bUpP62ju2B1LYcft8+ 2xZ1V83H029TusGbeooOmGF7ezQ9b+SO4+wFBJAByh27k3p53ZXT9UVB0QC/d9oH HxmIYcFwwstI40QoPUnJz9ZAp5v3JvTzt5ufZQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:03:02 2025 by rpki-client