$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa File: 3131362e39302e3137332e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: s9Umfo8v96tuQdAE3rzjN9yefJzhw3W83gCsb/5cYqE= Subject key identifier: 66:AD:7D:E5:71:97:62:70:A6:58:A0:66:30:B4:90:01:20:A4:C2:0F Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 3519584D34CBDD4339B7A42492E265F093D1A3AE Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:02:56 +0000 ROA not before: Fri 26 Sep 2025 03:57:56 +0000 ROA not after: Fri 25 Sep 2026 04:02:56 +0000 asID: 18059 IP address blocks: 116.90.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:19:58:4d:34:cb:dd:43:39:b7:a4:24:92:e2:65:f0:93:d1:a3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:57:56 2025 GMT Not After : Sep 25 04:02:56 2026 GMT Subject: CN=66AD7DE571976270A658A06630B4900120A4C20F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:e0:6b:1a:43:7d:d0:6e:79:dd:b0:68:96: 75:2b:ed:1f:ad:32:60:ba:8c:c4:f4:95:85:8c:a8: c1:0f:bd:51:84:48:a7:2f:37:ce:a6:b2:e6:68:0a: 40:00:06:2f:91:a5:9f:32:cc:f2:d6:d2:23:39:4e: 99:5c:60:93:1a:23:86:35:90:0b:eb:f3:79:a2:a3: 6f:5f:96:2a:1d:ef:7b:78:b4:a3:16:e4:9b:29:70: cb:7a:9d:fb:49:d8:ec:d7:25:1c:35:1a:b0:66:14: af:bb:ad:1a:53:5f:11:85:e6:4e:fb:bc:6a:21:39: 22:20:8b:c0:82:2a:29:60:2e:dd:06:5f:6d:55:8c: 7d:67:7b:df:3c:83:7b:21:13:5d:ef:4b:de:8a:7e: ec:f5:e1:ae:5b:fa:0d:0d:79:fa:b3:80:2a:bb:41: 3e:be:cc:71:28:bd:f8:96:8c:73:7f:b3:5b:8a:ae: 53:48:7f:af:e9:21:f1:2c:4b:75:3d:f8:23:9c:91: 31:2f:fb:d1:59:16:89:fd:f8:60:f9:c1:27:38:10: 07:c9:a6:3e:99:e4:b3:d6:0c:81:ad:58:1c:e2:c3: bf:83:a8:7e:c7:c4:5e:91:65:16:dc:47:67:fc:88: 7d:23:1a:23:bb:11:28:7c:6a:8e:6c:c6:32:35:3d: 2c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AD:7D:E5:71:97:62:70:A6:58:A0:66:30:B4:90:01:20:A4:C2:0F X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137332e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.173.0/24 Signature Algorithm: sha256WithRSAEncryption 28:b6:58:c6:e2:42:5a:e3:44:0e:5d:34:78:70:f6:0a:2c:fb: 11:64:cf:0a:3d:1d:66:d4:78:95:6b:11:8a:fa:0e:a3:40:ae: 85:20:e2:eb:35:bf:f2:21:d0:e2:a8:f3:a7:4f:05:a6:6c:9f: 27:92:03:3f:f9:92:dc:ac:6f:d6:4d:d3:29:9f:8f:5b:ba:b0: 15:10:1c:5b:03:ad:ee:7d:f2:e1:27:35:25:c7:4e:da:08:ef: 9f:b6:1a:69:1f:ae:94:00:82:80:fb:b7:49:4e:ea:0f:ba:f7: 7e:04:a7:05:16:be:33:c9:81:0e:ca:ff:58:ce:09:ee:3e:2a: 69:da:1d:cd:0e:49:bb:d1:f3:32:05:ff:12:67:06:1a:91:f2: f7:70:1d:dd:ed:e0:11:b7:aa:e6:52:fd:b0:31:da:c2:a6:34: 22:64:a2:a6:6a:9d:f4:82:22:bc:97:56:0d:c9:38:8f:a1:91: e5:21:a2:11:6d:18:41:08:7d:d4:44:89:97:88:88:db:2a:ea: 26:ac:37:92:1a:1e:25:b2:98:6f:3c:e2:b9:b5:79:da:2e:ac: 43:07:58:13:68:4d:f4:9e:d0:96:e7:98:57:92:59:29:51:eb: 43:fd:28:96:e6:5b:7f:03:91:ca:c7:d6:66:d0:74:a9:20:84: 9a:a6:3b:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNRlYTTTL3UM5t6QkkuJl8JPRo64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU3NTZaFw0yNjA5MjUwNDAyNTZaMDMxMTAvBgNV BAMTKDY2QUQ3REU1NzE5NzYyNzBBNjU4QTA2NjMwQjQ5MDAxMjBBNEMyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyIeBrGkN90G553bBolnUr7R+t MmC6jMT0lYWMqMEPvVGESKcvN86msuZoCkAABi+RpZ8yzPLW0iM5TplcYJMaI4Y1 kAvr83mio29fliod73t4tKMW5JspcMt6nftJ2OzXJRw1GrBmFK+7rRpTXxGF5k77 vGohOSIgi8CCKilgLt0GX21VjH1ne988g3shE13vS96Kfuz14a5b+g0NefqzgCq7 QT6+zHEovfiWjHN/s1uKrlNIf6/pIfEsS3U9+COckTEv+9FZFon9+GD5wSc4EAfJ pj6Z5LPWDIGtWBziw7+DqH7HxF6RZRbcR2f8iH0jGiO7ESh8ao5sxjI1PSyhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZq195XGXYnCmWKBmMLSQASCkwg8wHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzEzNjJlMzkzMDJlMzEzNzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRarTANBgkqhkiG 9w0BAQsFAAOCAQEAKLZYxuJCWuNEDl00eHD2Ciz7EWTPCj0dZtR4lWsRivoOo0Cu hSDi6zW/8iHQ4qjzp08FpmyfJ5IDP/mS3Kxv1k3TKZ+PW7qwFRAcWwOt7n3y4Sc1 JcdO2gjvn7YaaR+ulACCgPu3SU7qD7r3fgSnBRa+M8mBDsr/WM4J7j4qadodzQ5J u9HzMgX/EmcGGpHy93Ad3e3gEbeq5lL9sDHawqY0ImSipmqd9IIivJdWDck4j6GR 5SGiEW0YQQh91ESJl4iI2yrqJqw3khoeJbKYbzziubV52i6sQwdYE2hN9J7QlueY V5JZKVHrQ/0oluZbfwORysfWZtB0qSCEmqY71w== -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:20 2025 by rpki-client