$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e20313338313036.roa File: 3131342e3139392e39322e302f32342d3234203d3e20313338313036.roa (raw, json) Hash identifier: nNepIgJrVfI6kOsD5oZ0/fFz2bnrI39ni1C56NkTJIY= Subject key identifier: 20:7A:B4:38:05:61:71:4A:45:6A:87:67:C3:A0:78:FC:05:36:9A:CD Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 5DACEE1B391F60B30BC30F6787CFAF5587EFE671 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e20313338313036.roa Signing time: Tue 23 Sep 2025 09:52:23 +0000 ROA not before: Tue 23 Sep 2025 09:47:23 +0000 ROA not after: Tue 22 Sep 2026 09:52:23 +0000 asID: 138106 IP address blocks: 114.199.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ac:ee:1b:39:1f:60:b3:0b:c3:0f:67:87:cf:af:55:87:ef:e6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Sep 23 09:47:23 2025 GMT Not After : Sep 22 09:52:23 2026 GMT Subject: CN=207AB4380561714A456A8767C3A078FC05369ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:75:a3:1c:9b:ef:1b:98:93:99:35:32:77: ad:13:a3:c7:36:9c:d8:cf:90:6b:5c:cf:84:7d:53: be:dc:6a:a6:85:33:33:78:1a:e2:2d:b8:62:68:da: 1e:5c:e4:25:68:57:46:fb:be:37:87:8f:60:62:d5: 71:7a:b8:e0:b9:49:9e:74:79:d8:75:9f:6b:29:89: 78:c3:91:dd:63:2b:0c:8b:1c:e5:d4:25:2c:80:74: 7d:c5:ea:c3:c5:4d:e0:6f:68:f4:27:c7:5e:01:58: 2e:e3:ca:42:cc:38:5a:50:34:33:1d:21:75:5c:e4: 86:74:2a:f9:06:21:5a:37:17:8c:59:fc:7d:b7:f2: a0:02:60:aa:ba:04:69:90:e7:3a:95:c6:22:ce:bb: 52:f1:ff:7e:f6:c8:06:7f:1a:6e:b7:e5:60:52:2f: f7:4e:4a:89:fb:34:70:a8:87:98:f4:3c:4b:20:e9: 3b:f8:35:f9:d6:41:f6:be:9b:54:87:e3:49:76:32: 99:a2:58:7c:61:a5:67:af:a6:0e:25:31:fa:27:e2: 25:ea:b6:b1:9a:33:56:e9:b5:e0:a6:60:35:54:4f: 76:03:18:61:1a:8f:ae:00:eb:67:b5:87:b5:9d:11: cc:db:e8:c1:4f:fe:87:9f:fb:35:c5:e0:ac:69:6b: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:B4:38:05:61:71:4A:45:6A:87:67:C3:A0:78:FC:05:36:9A:CD X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e20313338313036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.92.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:26:1a:a4:0f:09:8b:7e:93:4b:b9:34:80:d9:56:bb:ee:5d: db:76:92:d6:25:f6:a5:1d:79:51:20:f2:0f:1e:0c:e3:16:f4: 47:1d:2b:f2:95:01:62:52:2b:01:a6:64:2e:83:ae:f1:24:ce: 13:8f:96:bc:80:0f:57:61:ff:44:bf:aa:a7:94:f9:bf:04:2b: fa:2e:f2:83:e4:aa:d1:bf:db:3a:90:24:a8:58:21:27:d4:cb: 46:fe:5b:9c:3c:80:b9:c1:d1:6f:b6:3d:97:78:b8:89:75:d8: 63:3e:13:73:e6:33:d0:eb:ef:c8:b4:46:49:13:2b:fe:bd:83: b0:a4:dd:2d:78:7b:17:36:28:9d:a0:32:d0:ce:3f:61:45:63: 53:9c:28:a4:f9:6c:6f:04:51:dc:33:29:ac:cd:a7:3e:d3:77: b5:bc:c2:98:88:46:fd:c0:c7:34:41:f0:6e:cd:cb:93:32:be: f0:43:40:ee:28:6a:57:d2:18:84:d4:f3:09:00:61:84:51:b1: 69:c0:89:38:80:89:75:e7:c4:c9:87:6d:0f:f4:0b:08:de:81: 5f:23:13:3f:b6:9e:08:f4:27:42:f9:fd:3a:d1:ad:ae:6b:22: b7:5e:ec:73:92:f6:05:46:7d:12:e0:40:01:94:5d:e1:f2:ae: 6d:f1:06:0d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXazuGzkfYLMLww9nh8+vVYfv5nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA5MjMwOTQ3MjNaFw0yNjA5MjIwOTUyMjNaMDMxMTAvBgNV BAMTKDIwN0FCNDM4MDU2MTcxNEE0NTZBODc2N0MzQTA3OEZDMDUzNjlBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVnWjHJvvG5iTmTUyd60To8c2 nNjPkGtcz4R9U77caqaFMzN4GuItuGJo2h5c5CVoV0b7vjeHj2Bi1XF6uOC5SZ50 edh1n2spiXjDkd1jKwyLHOXUJSyAdH3F6sPFTeBvaPQnx14BWC7jykLMOFpQNDMd IXVc5IZ0KvkGIVo3F4xZ/H238qACYKq6BGmQ5zqVxiLOu1Lx/372yAZ/Gm635WBS L/dOSon7NHCoh5j0PEsg6Tv4NfnWQfa+m1SH40l2MpmiWHxhpWevpg4lMfon4iXq trGaM1bpteCmYDVUT3YDGGEaj64A62e1h7WdEczb6MFP/oef+zXF4Kxpa6OLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIHq0OAVhcUpFaodnw6B4/AU2ms0wHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzOTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdcMA0GCSqG SIb3DQEBCwUAA4IBAQCKJhqkDwmLfpNLuTSA2Va77l3bdpLWJfalHXlRIPIPHgzj FvRHHSvylQFiUisBpmQug67xJM4Tj5a8gA9XYf9Ev6qnlPm/BCv6LvKD5KrRv9s6 kCSoWCEn1MtG/lucPIC5wdFvtj2XeLiJddhjPhNz5jPQ6+/ItEZJEyv+vYOwpN0t eHsXNiidoDLQzj9hRWNTnCik+WxvBFHcMymszac+03e1vMKYiEb9wMc0QfBuzcuT Mr7wQ0DuKGpX0hiE1PMJAGGEUbFpwIk4gIl158TJh20P9AsI3oFfIxM/tp4I9CdC +f060a2uayK3XuxzkvYFRn0S4EABlF3h8q5t8QYN -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:00 2025 by rpki-client