$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa File: 3131362e39302e3137302e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: VSdTmfNgnAzS6QR/r/iwHNEggQAi0uD+qyZsEbHSJCo= Subject key identifier: E5:48:34:A3:E2:FD:8C:E4:6E:04:39:39:F1:F0:E6:5E:B6:F7:90:70 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 43535AD92073EB091E4EDB2EB7B4EE0774D74650 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:02:57 +0000 ROA not before: Fri 26 Sep 2025 03:57:57 +0000 ROA not after: Fri 25 Sep 2026 04:02:57 +0000 asID: 18059 IP address blocks: 116.90.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 21:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:53:5a:d9:20:73:eb:09:1e:4e:db:2e:b7:b4:ee:07:74:d7:46:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:57:57 2025 GMT Not After : Sep 25 04:02:57 2026 GMT Subject: CN=E54834A3E2FD8CE46E043939F1F0E65EB6F79070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:43:ec:4c:c1:6d:8d:14:d6:9f:86:2f:be: a0:24:c5:2a:3b:20:5e:af:58:eb:8d:dc:7a:a6:dd: 77:d1:68:58:b0:97:f9:ce:c3:56:1d:ed:82:74:00: a6:24:22:b6:fd:06:c9:3d:8e:29:49:8e:aa:25:d1: 89:ea:8e:88:b5:37:e9:83:b2:ff:1d:70:f8:fa:92: c6:ce:e7:da:1e:95:37:86:12:0c:10:9c:ea:d4:92: 15:3c:f7:52:33:46:2a:1e:1e:69:35:b1:33:de:30: af:33:87:e7:73:ff:5e:dc:e2:29:fb:59:c3:65:82: 40:02:9d:b4:05:bb:fa:9b:8c:a4:d6:21:35:68:b1: b4:15:a2:a4:6d:b6:0a:5b:60:f5:07:93:92:37:33: 80:f1:39:53:db:e0:ee:aa:6e:38:30:84:59:4d:01: 80:1e:c5:8e:ad:50:0a:73:e4:6c:78:3c:93:52:ed: d7:eb:c1:64:d8:a0:cb:d1:6e:a7:e6:48:ca:24:b4: ff:e4:ca:a5:e6:78:38:24:58:64:2f:98:fa:a0:ef: 3d:65:56:d8:9b:a5:c3:5e:b0:c5:ad:34:5f:ef:8f: fc:b0:93:7e:a1:fa:7d:2a:2b:a4:e8:1a:ee:03:2b: 42:a4:0e:57:da:ef:0b:a8:dc:bb:db:34:ba:8c:71: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:48:34:A3:E2:FD:8C:E4:6E:04:39:39:F1:F0:E6:5E:B6:F7:90:70 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137302e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.170.0/24 Signature Algorithm: sha256WithRSAEncryption 40:be:de:a8:34:df:73:9d:6e:70:7d:81:d0:1e:fb:95:83:51: 30:a2:94:76:8e:eb:45:c1:9a:5d:e1:80:45:61:86:c8:61:26: 04:e0:1a:2f:83:f4:9f:aa:9e:a3:27:da:a8:29:e8:dc:36:52: 84:f2:23:3e:8a:52:df:49:d3:fc:ae:9f:4d:b7:a5:63:bb:4f: 58:a2:35:e7:57:b9:fa:a8:e0:f1:d6:66:bd:e1:55:93:7c:5a: 55:5d:9f:5a:41:79:93:59:9a:12:88:dd:72:97:d8:ea:61:98: 02:ad:1d:75:ba:23:55:90:0c:40:37:de:70:ed:11:24:4e:7f: 13:df:ff:05:cf:9c:fe:16:50:b3:97:54:91:9f:46:6b:29:3b: ce:b7:a8:92:bf:45:31:95:be:4a:a5:87:73:4b:7d:67:2b:e1: 84:cd:f4:3c:ac:73:55:00:a3:82:31:d2:68:4c:63:83:e3:07: 32:71:d7:bd:8a:53:23:0d:c7:a2:6b:5f:26:aa:47:bb:ad:f2: 26:d4:f7:16:55:cd:8b:3d:af:93:71:4d:90:95:58:4a:b3:89: 9d:bb:78:38:d2:51:55:dd:8b:2b:ff:77:60:47:04:41:7c:0f: e5:0f:60:80:4a:47:fe:24:a0:b4:82:94:a0:ec:cf:72:c5:04: 1c:e3:1c:9d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ1Na2SBz6wkeTtsut7TuB3TXRlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU3NTdaFw0yNjA5MjUwNDAyNTdaMDMxMTAvBgNV BAMTKEU1NDgzNEEzRTJGRDhDRTQ2RTA0MzkzOUYxRjBFNjVFQjZGNzkwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8lkPsTMFtjRTWn4YvvqAkxSo7 IF6vWOuN3Hqm3XfRaFiwl/nOw1Yd7YJ0AKYkIrb9Bsk9jilJjqol0Ynqjoi1N+mD sv8dcPj6ksbO59oelTeGEgwQnOrUkhU891IzRioeHmk1sTPeMK8zh+dz/17c4in7 WcNlgkACnbQFu/qbjKTWITVosbQVoqRttgpbYPUHk5I3M4DxOVPb4O6qbjgwhFlN AYAexY6tUApz5Gx4PJNS7dfrwWTYoMvRbqfmSMoktP/kyqXmeDgkWGQvmPqg7z1l VtibpcNesMWtNF/vj/ywk36h+n0qK6ToGu4DK0KkDlfa7wuo3LvbNLqMcbohAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5Ug0o+L9jORuBDk58fDmXrb3kHAwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzEzNjJlMzkzMDJlMzEzNzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRaqjANBgkqhkiG 9w0BAQsFAAOCAQEAQL7eqDTfc51ucH2B0B77lYNRMKKUdo7rRcGaXeGARWGGyGEm BOAaL4P0n6qeoyfaqCno3DZShPIjPopS30nT/K6fTbelY7tPWKI151e5+qjg8dZm veFVk3xaVV2fWkF5k1maEojdcpfY6mGYAq0ddbojVZAMQDfecO0RJE5/E9//Bc+c /hZQs5dUkZ9Gayk7zreokr9FMZW+SqWHc0t9ZyvhhM30PKxzVQCjgjHSaExjg+MH MnHXvYpTIw3HomtfJqpHu63yJtT3FlXNiz2vk3FNkJVYSrOJnbt4ONJRVd2LK/93 YEcEQXwP5Q9ggEpH/iSgtIKUoOzPcsUEHOMcnQ== -----END CERTIFICATE-----Generated at Tue Oct 21 06:28:05 2025 by rpki-client