$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa File: 3138322e34382e3136342e302f32342d3234203d3e203436303330.roa (raw, json) Hash identifier: mGnKrMA12X8YEPGWa2G807LWyuVRJJOge4K9g1O8pfg= Subject key identifier: D5:A7:21:F1:DE:4E:B0:49:ED:14:76:EC:9F:C0:F9:8D:58:7C:4E:33 Certificate issuer: /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Certificate serial: 6ED90A0972DFE11D3E27B87DC03C2F4899986644 Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa Signing time: Fri 19 Sep 2025 13:01:17 +0000 ROA not before: Fri 19 Sep 2025 12:56:17 +0000 ROA not after: Fri 18 Sep 2026 13:01:17 +0000 asID: 46030 IP address blocks: 182.48.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 08:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d9:0a:09:72:df:e1:1d:3e:27:b8:7d:c0:3c:2f:48:99:98:66:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556 Validity Not Before: Sep 19 12:56:17 2025 GMT Not After : Sep 18 13:01:17 2026 GMT Subject: CN=D5A721F1DE4EB049ED1476EC9FC0F98D587C4E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:c0:2a:07:db:ed:25:0d:69:ef:12:ac:91: 75:bb:c1:72:80:a2:95:4d:83:ee:ac:10:f2:fd:35: d6:60:84:8d:eb:cd:82:02:ec:37:c8:b5:fd:bd:b0: c7:67:42:14:01:35:b4:16:1f:e1:8a:84:8a:48:33: 13:5d:59:43:09:7a:3c:50:68:2b:bb:db:57:7c:46: 18:96:d1:97:b8:e6:61:93:e1:a9:fd:f0:98:26:e2: 2e:88:a7:5d:9f:94:b9:7e:b1:ac:4c:25:6d:6f:c7: 01:1a:16:6e:8e:90:cc:ce:00:23:8b:76:3f:3e:b4: 04:0e:91:1a:81:a7:69:fe:7a:4b:77:19:0a:0d:d3: ad:d1:b1:d1:46:a9:7e:42:02:93:42:65:9f:8c:f0: 44:bf:55:98:29:bb:d9:16:76:84:37:31:4c:86:e6: 93:4e:39:f4:68:51:79:e3:6f:ef:9f:eb:f1:9a:fc: 6f:92:33:43:0e:9a:6c:79:93:f6:b6:bd:e9:9a:21: 32:98:27:e4:1f:03:a1:52:af:6c:f7:36:08:de:a4: dd:a1:45:d4:11:a5:7b:1b:50:b5:8a:92:74:38:ba: fd:bd:a7:92:09:9d:0b:cb:7f:39:84:3b:f8:db:28: 89:07:47:be:ea:55:4c:c1:1c:09:27:00:62:55:01: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:21:F1:DE:4E:B0:49:ED:14:76:EC:9F:C0:F9:8D:58:7C:4E:33 X509v3 Authority Key Identifier: keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136342e302f32342d3234203d3e203436303330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.48.164.0/24 Signature Algorithm: sha256WithRSAEncryption 39:f9:93:61:88:8d:b8:7f:03:52:52:b0:ee:b8:08:f2:9c:68: 8d:20:1e:a0:21:5a:24:64:e1:8c:2e:14:17:8b:ca:6b:a0:85: 12:b8:13:b3:63:4e:8d:70:cd:80:a5:49:35:b5:49:90:a9:7d: e5:e6:c4:20:42:16:cb:0c:78:01:c6:5d:46:c9:09:1f:33:83: ab:18:92:89:cc:44:61:11:62:09:f5:ce:22:1d:af:5a:63:da: dc:5b:e9:36:87:91:e4:26:ba:fd:a3:9d:f1:b8:6f:88:0f:f0: d7:20:a2:f0:a8:ac:60:60:af:29:f5:e1:ce:18:4a:93:7d:f9: ef:e0:72:f3:8a:bd:af:da:c3:2d:78:b5:87:21:b6:2d:be:17: 10:e8:46:b8:26:51:17:ce:36:92:ed:cb:dc:f8:04:b3:02:73: f3:43:a0:35:70:c3:03:2b:ac:a4:45:d6:5a:4a:45:9d:df:67: e6:0e:20:81:05:1c:b0:e7:ec:9d:33:37:f7:05:80:3c:89:03: 1b:66:77:cc:3e:73:23:3f:49:3c:41:76:35:6f:d7:5d:3f:22: 18:8d:9e:c3:11:26:90:ad:96:24:61:4f:01:8f:25:7c:37:e6: 72:93:b5:9b:9f:41:2e:f9:0d:8b:40:03:d2:8d:86:9e:61:50: 31:2d:a2:e1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbtkKCXLf4R0+J7h9wDwvSJmYZkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0 MEZCMDU1NjAeFw0yNTA5MTkxMjU2MTdaFw0yNjA5MTgxMzAxMTdaMDMxMTAvBgNV BAMTKEQ1QTcyMUYxREU0RUIwNDlFRDE0NzZFQzlGQzBGOThENTg3QzRFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgcAqB9vtJQ1p7xKskXW7wXKA opVNg+6sEPL9NdZghI3rzYIC7DfItf29sMdnQhQBNbQWH+GKhIpIMxNdWUMJejxQ aCu721d8RhiW0Ze45mGT4an98Jgm4i6Ip12flLl+saxMJW1vxwEaFm6OkMzOACOL dj8+tAQOkRqBp2n+ekt3GQoN063RsdFGqX5CApNCZZ+M8ES/VZgpu9kWdoQ3MUyG 5pNOOfRoUXnjb++f6/Ga/G+SM0MOmmx5k/a2vemaITKYJ+QfA6FSr2z3NgjepN2h RdQRpXsbULWKknQ4uv29p5IJnQvLfzmEO/jbKIkHR77qVUzBHAknAGJVAej5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1ach8d5OsEntFHbsn8D5jVh8TjMwHwYDVR0j BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzgzMjJlMzQzODJlMzEzNjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYwpDANBgkqhkiG 9w0BAQsFAAOCAQEAOfmTYYiNuH8DUlKw7rgI8pxojSAeoCFaJGThjC4UF4vKa6CF ErgTs2NOjXDNgKVJNbVJkKl95ebEIEIWywx4AcZdRskJHzODqxiSicxEYRFiCfXO Ih2vWmPa3FvpNoeR5Ca6/aOd8bhviA/w1yCi8KisYGCvKfXhzhhKk3357+By84q9 r9rDLXi1hyG2Lb4XEOhGuCZRF842ku3L3PgEswJz80OgNXDDAyuspEXWWkpFnd9n 5g4ggQUcsOfsnTM39wWAPIkDG2Z3zD5zIz9JPEF2NW/XXT8iGI2ewxEmkK2WJGFP AY8lfDfmcpO1m59BLvkNi0AD0o2GnmFQMS2i4Q== -----END CERTIFICATE-----Generated at Tue Oct 21 11:28:12 2025 by rpki-client