$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37372e302f32342d3234203d3e203436303330.roa File: 3131362e3231322e37372e302f32342d3234203d3e203436303330.roa (raw, json) Hash identifier: ScD8N/TboXE9E1H0m5cyBHU/Yvg4Sb2pX2rMy4mx5E4= Subject key identifier: B6:7F:D7:9D:C5:BD:D2:EE:9A:A4:A4:AF:E0:04:B7:6A:60:0F:2D:1A Certificate issuer: /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Certificate serial: 419C54C336FAFEEE8FC11D57019A2A27DC4EB58E Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37372e302f32342d3234203d3e203436303330.roa Signing time: Tue 30 Sep 2025 15:00:02 +0000 ROA not before: Tue 30 Sep 2025 14:55:02 +0000 ROA not after: Tue 29 Sep 2026 15:00:02 +0000 asID: 46030 IP address blocks: 116.212.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 08:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9c:54:c3:36:fa:fe:ee:8f:c1:1d:57:01:9a:2a:27:dc:4e:b5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Validity Not Before: Sep 30 14:55:02 2025 GMT Not After : Sep 29 15:00:02 2026 GMT Subject: CN=B67FD79DC5BDD2EE9AA4A4AFE004B76A600F2D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e3:0d:4f:fe:76:85:91:db:a1:12:5b:14:43: b4:90:73:47:3d:ab:67:d7:ea:53:4b:d9:ee:d9:ff: 87:e9:c0:1d:23:0b:36:3d:15:33:22:cf:69:35:42: 91:ab:72:c2:0f:dd:ad:40:60:6f:80:bf:6b:1d:30: 39:7d:51:74:1b:97:35:bd:71:10:b7:f8:3e:59:ac: 0c:51:20:5e:0a:4c:fb:85:43:73:98:2f:fd:80:35: 64:fb:89:d5:2d:10:4c:a6:8c:38:d1:9d:6b:19:85: 18:41:4d:93:7b:71:29:7f:f8:40:f4:ea:da:ff:fd: 7b:9b:fd:6a:3d:16:b6:99:fb:45:75:48:63:39:e3: 7f:2b:dc:d8:0c:b4:6d:a9:9f:cb:06:bd:7a:c2:44: 94:b6:af:51:af:a9:8c:18:19:0f:91:97:1a:f6:2a: 24:18:54:17:ca:53:d4:2e:33:20:a9:d2:3b:22:a9: e7:ef:78:9c:c6:04:e0:6c:25:f4:2c:1b:cf:32:f8: a5:3f:d1:e3:25:46:4d:3d:91:c6:bf:3f:44:51:79: 59:e2:ae:d6:79:dd:8b:e4:19:73:e4:96:5b:0f:b0: d0:b6:9a:b7:69:30:1c:ed:b3:f2:c2:6a:d4:65:ae: 84:80:f6:40:2b:77:56:1b:e1:3d:4e:75:7f:76:2b: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7F:D7:9D:C5:BD:D2:EE:9A:A4:A4:AF:E0:04:B7:6A:60:0F:2D:1A X509v3 Authority Key Identifier: keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37372e302f32342d3234203d3e203436303330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.212.77.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:cc:17:50:ed:f7:53:46:4e:9e:b2:58:42:10:b3:1a:b6:35: ad:35:ec:54:f6:c0:6a:a3:13:64:b3:25:1d:ff:68:61:ef:8d: a5:8e:61:a6:ce:f4:30:ce:d9:e5:06:b2:97:f7:74:de:d2:c3: 1f:3e:d2:c7:d0:84:dc:bb:87:1b:4d:08:1b:dd:29:35:d9:60: e6:16:da:60:28:ff:6e:81:7c:0f:42:c4:c6:75:1b:4a:49:ec: 82:00:40:50:e1:a2:ab:26:6d:6d:1a:cd:4b:ef:26:4f:1f:cc: 5e:05:79:50:28:80:2d:9c:9a:3a:d0:28:07:50:41:cf:8a:49: 16:c2:1e:ab:2a:13:09:bc:80:a8:81:be:6b:89:d7:7d:1e:6d: 80:fa:bf:0e:48:b6:37:b1:48:e6:9b:20:da:c8:43:40:3f:72: fb:15:0f:e5:1c:f5:2f:16:a1:1c:73:02:7c:20:6e:ce:0c:99: 7e:68:82:90:2d:d9:c8:89:36:ed:f8:ca:03:fc:a1:6a:55:0d: 0c:0b:25:93:e9:fc:8d:2a:07:a0:1a:eb:e5:1e:fa:1c:4e:ab: 43:cf:5f:87:30:2e:fc:48:de:74:ad:a6:84:6d:b3:95:75:ec: 01:b3:fb:76:ee:ca:32:e5:95:18:2d:c9:3f:a6:3b:02:ea:e3: 12:58:97:47 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQZxUwzb6/u6PwR1XAZoqJ9xOtY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0 MEZCMDU1NjAeFw0yNTA5MzAxNDU1MDJaFw0yNjA5MjkxNTAwMDJaMDMxMTAvBgNV BAMTKEI2N0ZENzlEQzVCREQyRUU5QUE0QTRBRkUwMDRCNzZBNjAwRjJEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh4w1P/naFkduhElsUQ7SQc0c9 q2fX6lNL2e7Z/4fpwB0jCzY9FTMiz2k1QpGrcsIP3a1AYG+Av2sdMDl9UXQblzW9 cRC3+D5ZrAxRIF4KTPuFQ3OYL/2ANWT7idUtEEymjDjRnWsZhRhBTZN7cSl/+ED0 6tr//Xub/Wo9FraZ+0V1SGM5438r3NgMtG2pn8sGvXrCRJS2r1GvqYwYGQ+Rlxr2 KiQYVBfKU9QuMyCp0jsiqefveJzGBOBsJfQsG88y+KU/0eMlRk09kca/P0RReVni rtZ53YvkGXPkllsPsNC2mrdpMBzts/LCatRlroSA9kArd1Yb4T1OdX92K9NzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUtn/XncW90u6apKSv4AS3amAPLRowHwYDVR0j BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzEzNjJlMzIzMTMyMmUzNzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHTUTTANBgkqhkiG 9w0BAQsFAAOCAQEALMwXUO33U0ZOnrJYQhCzGrY1rTXsVPbAaqMTZLMlHf9oYe+N pY5hps70MM7Z5Qayl/d03tLDHz7Sx9CE3LuHG00IG90pNdlg5hbaYCj/boF8D0LE xnUbSknsggBAUOGiqyZtbRrNS+8mTx/MXgV5UCiALZyaOtAoB1BBz4pJFsIeqyoT CbyAqIG+a4nXfR5tgPq/Dki2N7FI5psg2shDQD9y+xUP5Rz1LxahHHMCfCBuzgyZ fmiCkC3ZyIk27fjKA/yhalUNDAslk+n8jSoHoBrr5R76HE6rQ89fhzAu/EjedK2m hG2zlXXsAbP7du7KMuWVGC3JP6Y7AurjEliXRw== -----END CERTIFICATE-----Generated at Tue Oct 21 11:31:17 2025 by rpki-client