$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232302e302f32342d3234203d3e203338313432.roa File: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (raw, json) Hash identifier: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE= Subject key identifier: 50:CE:FC:12:68:C4:F8:0B:6D:B4:21:36:12:2B:34:EF:E5:3D:0C:A5 Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511 Certificate serial: 21499FEA5542074033753E3E217C50F4121F273A Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232302e302f32342d3234203d3e203338313432.roa Signing time: Mon 22 Sep 2025 14:00:01 +0000 ROA not before: Mon 22 Sep 2025 13:55:01 +0000 ROA not after: Mon 21 Sep 2026 14:00:01 +0000 asID: 38142 IP address blocks: 210.57.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:49:9f:ea:55:42:07:40:33:75:3e:3e:21:7c:50:f4:12:1f:27:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511 Validity Not Before: Sep 22 13:55:01 2025 GMT Not After : Sep 21 14:00:01 2026 GMT Subject: CN=50CEFC1268C4F80B6DB42136122B34EFE53D0CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1a:20:7a:80:d3:c1:6a:c2:5d:f3:25:d3:c0: 15:5a:12:91:fa:82:fd:45:7e:39:5f:47:8e:a6:31: f2:f9:08:60:25:21:1a:0c:9e:4f:a6:4e:64:65:4a: 19:a7:37:3f:8f:f7:7b:5a:18:40:6b:b7:ed:b8:32: bb:2c:b1:ff:b1:ac:fd:55:c9:ef:51:78:72:c4:c2: d9:69:91:63:cb:40:75:dd:d7:b9:65:f7:06:6d:a2: 67:e2:89:ce:95:71:1e:c9:26:42:2c:da:f6:b4:b1: 1f:30:96:b6:a0:7c:58:4d:8a:3e:3b:e4:2c:8d:22: 6a:e8:72:1b:f0:33:e4:78:84:aa:8a:ad:9d:f6:16: 41:09:30:ce:4c:22:42:46:bb:14:40:7d:2e:cc:b7: 75:cd:2d:4a:37:0f:c8:15:6b:0f:f7:bb:5a:b5:df: f6:a6:bf:79:61:c8:58:e1:9c:03:6f:b0:0d:a8:0f: c9:81:3d:4c:90:2b:1a:bd:bf:d5:4f:72:98:96:57: 92:7f:71:5d:7b:6f:b3:1a:9d:8f:33:dc:d9:55:34: c3:bb:64:80:8a:19:8a:83:8b:80:2a:ec:2a:90:3b: 09:0a:9c:98:17:52:35:4a:87:59:5f:e2:b3:81:8a: bc:34:db:93:cc:c0:dd:49:6d:e5:68:75:ab:05:56: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CE:FC:12:68:C4:F8:0B:6D:B4:21:36:12:2B:34:EF:E5:3D:0C:A5 X509v3 Authority Key Identifier: keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232302e302f32342d3234203d3e203338313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.57.220.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:03:60:41:bf:e9:88:db:15:44:73:e6:e8:23:44:3b:f9:5f: 87:1f:5e:e5:85:30:f3:d4:36:49:f6:dd:5a:46:d2:79:9b:67: f0:e6:75:c4:36:34:de:3d:19:ef:9e:70:cf:66:af:2f:af:3b: d8:dc:0b:16:ea:bc:77:75:ad:80:90:91:08:41:b9:89:8f:b1: 3e:98:b5:44:f7:02:03:3d:bf:53:ba:93:24:c6:4c:50:e5:01: 73:ec:70:86:fb:20:d0:47:d6:7f:b2:42:7f:a8:fc:bb:b2:8f: 8e:ee:75:32:74:b5:a4:8d:67:87:fa:e7:4f:df:a7:c6:6c:9f: 73:0a:40:00:75:59:d5:b1:ee:fa:2a:fa:d4:9a:f0:5f:62:a7: 0d:54:2d:ce:da:73:ce:a5:65:52:1f:af:06:41:21:cf:d2:d8: 1c:f4:b5:8a:71:f2:70:ed:b6:41:11:02:e0:75:7d:3f:f1:4a: d8:24:8c:90:2d:b5:08:f0:4f:02:f6:f9:3f:9f:30:cc:2c:aa: d4:07:d1:2e:78:1b:e5:48:a2:ca:1f:3d:e3:57:d5:86:3d:bd: bc:ae:f3:9c:a9:cb:7a:77:52:7f:ac:76:25:8d:d4:28:57:75: 82:4b:65:43:c0:2a:e0:27:75:2d:74:28:1a:6c:06:ce:82:f0: 17:2a:48:5f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIUmf6lVCB0AzdT4+IXxQ9BIfJzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2 RTYwOTUxMTAeFw0yNTA5MjIxMzU1MDFaFw0yNjA5MjExNDAwMDFaMDMxMTAvBgNV BAMTKDUwQ0VGQzEyNjhDNEY4MEI2REI0MjEzNjEyMkIzNEVGRTUzRDBDQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpGiB6gNPBasJd8yXTwBVaEpH6 gv1FfjlfR46mMfL5CGAlIRoMnk+mTmRlShmnNz+P93taGEBrt+24Mrsssf+xrP1V ye9ReHLEwtlpkWPLQHXd17ll9wZtomfiic6VcR7JJkIs2va0sR8wlragfFhNij47 5CyNImrochvwM+R4hKqKrZ32FkEJMM5MIkJGuxRAfS7Mt3XNLUo3D8gVaw/3u1q1 3/amv3lhyFjhnANvsA2oD8mBPUyQKxq9v9VPcpiWV5J/cV17b7ManY8z3NlVNMO7 ZICKGYqDi4Aq7CqQOwkKnJgXUjVKh1lf4rOBirw025PMwN1JbeVodasFVsq7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUUM78EmjE+AtttCE2Eis07+U9DKUwHwYDVR0j BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04 OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI53DANBgkqhkiG 9w0BAQsFAAOCAQEAHgNgQb/piNsVRHPm6CNEO/lfhx9e5YUw89Q2SfbdWkbSeZtn 8OZ1xDY03j0Z755wz2avL6872NwLFuq8d3WtgJCRCEG5iY+xPpi1RPcCAz2/U7qT JMZMUOUBc+xwhvsg0EfWf7JCf6j8u7KPju51MnS1pI1nh/rnT9+nxmyfcwpAAHVZ 1bHu+ir61JrwX2KnDVQtztpzzqVlUh+vBkEhz9LYHPS1inHycO22QREC4HV9P/FK 2CSMkC21CPBPAvb5P58wzCyq1AfRLngb5Uiiyh8941fVhj29vK7znKnLendSf6x2 JY3UKFd1gktlQ8Aq4Cd1LXQoGmwGzoLwFypIXw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:03:27 2025 by rpki-client