$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa File: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (raw, json) Hash identifier: q9g/7jnDYJJqOWmO7+ef/NTG70K2Els8BXgKpA4FB/A= Subject key identifier: 78:2A:9B:52:48:27:8A:FE:3A:09:3C:89:B4:61:15:B9:86:4B:1B:FC Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 4062917873951291A1D1E1717AD61928D9280C67 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa Signing time: Wed 15 Oct 2025 08:00:01 +0000 ROA not before: Wed 15 Oct 2025 07:55:01 +0000 ROA not after: Wed 14 Oct 2026 08:00:01 +0000 asID: 152055 IP address blocks: 210.79.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:62:91:78:73:95:12:91:a1:d1:e1:71:7a:d6:19:28:d9:28:0c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Oct 15 07:55:01 2025 GMT Not After : Oct 14 08:00:01 2026 GMT Subject: CN=782A9B5248278AFE3A093C89B46115B9864B1BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b8:32:25:a0:38:73:f3:e0:82:eb:76:0b:b3: bc:8f:2f:99:eb:bd:1a:cb:ac:52:ae:ae:a4:04:3b: f2:1f:f5:1b:8e:5a:37:83:8f:07:db:77:be:80:9b: 5f:9f:1d:5e:d0:ce:44:45:6d:f2:60:87:0a:51:3f: 23:b6:e5:2b:b3:e6:94:71:f0:92:9d:c8:e9:16:7a: a0:34:36:81:bf:f8:3d:d1:f3:b8:45:5d:cf:be:98: 6b:fb:4f:ee:aa:1b:dd:0d:0d:28:f4:6c:82:6b:8b: 79:9e:91:5b:15:4b:9c:4d:72:1f:5a:e1:e0:48:8b: 23:37:84:a1:a9:39:aa:92:79:38:ae:d5:21:f9:34: b8:23:9d:b4:5b:04:86:79:2e:16:90:0d:40:43:45: 64:f2:61:1f:aa:2c:b5:fa:f6:2b:2d:64:4f:ca:56: 27:ba:a1:7f:82:c8:ed:b3:4c:09:a1:06:72:3f:e1: 04:2b:5c:78:dc:3e:91:3e:a0:1e:a1:22:7a:08:3d: a9:4e:43:b7:8f:4b:b8:83:1b:7e:5f:b6:7c:dc:f3: f9:e7:96:9f:cf:29:e9:e3:b7:ed:2f:fb:3c:3e:32: c1:7b:c3:f2:d1:55:a2:ec:69:85:5a:c4:08:b1:1b: 77:da:27:d5:fc:6b:69:03:58:0f:a9:43:98:9a:2b: a0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2A:9B:52:48:27:8A:FE:3A:09:3C:89:B4:61:15:B9:86:4B:1B:FC X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.138.0/23 Signature Algorithm: sha256WithRSAEncryption 70:3a:06:8e:ed:66:c9:20:5a:5c:2f:27:a8:ce:6b:72:91:d7: 80:0a:1c:dc:77:05:54:65:00:93:15:4a:30:47:3e:df:e6:2c: 1f:a1:47:24:92:0c:e0:d0:4d:4a:ab:0b:86:32:6a:2e:e8:fa: 99:b4:e8:8d:7d:71:2d:4e:4e:65:13:87:a9:5e:4e:0a:f7:1f: f0:10:c6:1e:ca:b9:ee:a3:06:7f:32:82:aa:b9:39:b5:b4:85: 56:0a:3d:16:69:5c:cd:55:6a:63:e2:45:0f:16:d6:f4:d5:48: bd:e8:05:d2:f8:b1:a2:ef:80:23:fa:60:51:94:2a:14:69:e2: 2a:58:59:3a:dc:ce:9e:36:22:a1:ca:af:6e:e6:c3:ea:1d:56: 63:21:e8:b3:14:25:63:14:db:f5:ca:4c:43:3d:b0:e9:9a:7a: 68:5f:73:00:86:ca:eb:b5:54:ca:e5:27:6d:e0:c6:0d:5e:45: 5b:2c:f3:63:e1:09:61:66:3c:93:d2:d0:53:d1:5a:e2:68:ee: a4:23:d1:c5:1a:8b:ff:06:52:ec:d5:8f:f3:9e:08:02:7f:85: b1:12:90:2d:9a:54:92:c4:16:0e:af:35:68:b0:81:51:cf:5a: 42:f5:52:e4:27:04:d4:ca:ce:3a:80:97:e1:96:16:7a:1e:7d: e5:78:54:c4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQGKReHOVEpGh0eFxetYZKNkoDGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTEwMTUwNzU1MDFaFw0yNjEwMTQwODAwMDFaMDMxMTAvBgNV BAMTKDc4MkE5QjUyNDgyNzhBRkUzQTA5M0M4OUI0NjExNUI5ODY0QjFCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeuDIloDhz8+CC63YLs7yPL5nr vRrLrFKurqQEO/If9RuOWjeDjwfbd76Am1+fHV7QzkRFbfJghwpRPyO25Suz5pRx 8JKdyOkWeqA0NoG/+D3R87hFXc++mGv7T+6qG90NDSj0bIJri3mekVsVS5xNch9a 4eBIiyM3hKGpOaqSeTiu1SH5NLgjnbRbBIZ5LhaQDUBDRWTyYR+qLLX69istZE/K Vie6oX+CyO2zTAmhBnI/4QQrXHjcPpE+oB6hInoIPalOQ7ePS7iDG35ftnzc8/nn lp/PKenjt+0v+zw+MsF7w/LRVaLsaYVaxAixG3faJ9X8a2kDWA+pQ5iaK6D9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeCqbUkgniv46CTyJtGEVuYZLG/wwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTMyOGQ4LTg2N2UtNDIzMi1i NWUxLTY1YWIwYmMwNDg5Ni8wLzMyMzEzMDJlMzczOTJlMzEzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0k+KMA0GCSqG SIb3DQEBCwUAA4IBAQBwOgaO7WbJIFpcLyeozmtykdeAChzcdwVUZQCTFUowRz7f 5iwfoUckkgzg0E1KqwuGMmou6PqZtOiNfXEtTk5lE4epXk4K9x/wEMYeyrnuowZ/ MoKquTm1tIVWCj0WaVzNVWpj4kUPFtb01Ui96AXS+LGi74Aj+mBRlCoUaeIqWFk6 3M6eNiKhyq9u5sPqHVZjIeizFCVjFNv1ykxDPbDpmnpoX3MAhsrrtVTK5Sdt4MYN XkVbLPNj4QlhZjyT0tBT0VriaO6kI9HFGov/BlLs1Y/znggCf4WxEpAtmlSSxBYO rzVosIFRz1pC9VLkJwTUys46gJfhlhZ6Hn3leFTE -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:47 2025 by rpki-client