$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134382e302f32342d3234203d3e203538333937.roa File: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (raw, json) Hash identifier: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg= Subject key identifier: C7:4E:6B:AB:33:8D:1B:55:F9:55:C5:D4:BE:9C:C5:5F:E7:AC:93:60 Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 7A63EF2CD7C8F7212A3D9EB202A642D47234F58F Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134382e302f32342d3234203d3e203538333937.roa Signing time: Fri 10 Oct 2025 22:00:01 +0000 ROA not before: Fri 10 Oct 2025 21:55:01 +0000 ROA not after: Fri 09 Oct 2026 22:00:01 +0000 asID: 58397 IP address blocks: 117.53.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:63:ef:2c:d7:c8:f7:21:2a:3d:9e:b2:02:a6:42:d4:72:34:f5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Oct 10 21:55:01 2025 GMT Not After : Oct 9 22:00:01 2026 GMT Subject: CN=C74E6BAB338D1B55F955C5D4BE9CC55FE7AC9360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:31:47:17:69:07:7d:de:f6:49:62:ad:b4: cf:67:23:81:6b:ea:41:d1:2f:d4:3e:cb:07:f5:45: ba:db:f1:58:73:f1:7e:0b:fe:b3:26:c2:de:67:f9: 17:6f:b2:e8:56:7e:36:58:cb:1c:d0:79:2a:5f:ae: eb:16:9b:65:bd:35:08:46:d6:03:67:2a:04:7d:a2: 0e:48:1e:9d:74:10:7a:41:19:07:d7:45:37:3c:c0: 9e:cf:dd:11:21:a1:5e:db:b7:23:ca:4b:fa:1f:ce: 07:f2:bc:ad:ac:80:e1:8d:f7:3e:5a:0b:96:f2:8b: 36:21:87:95:43:e5:62:e4:51:46:35:a0:40:dd:35: 11:39:bd:24:2a:14:2b:36:84:81:b7:f1:6a:ac:0d: 9d:e2:55:a3:17:e2:5b:31:50:48:c7:10:d0:8d:39: 56:c1:f7:8b:91:5c:0b:f1:ba:8d:52:fa:68:d4:77: cb:fc:7e:57:31:c5:4b:f3:39:b4:61:88:19:8e:fe: 84:38:68:77:fd:ff:41:06:78:99:65:35:d2:d7:d6: 81:bf:92:6b:e8:e0:0e:21:48:8d:0b:ac:84:91:93: 37:f1:8c:61:72:f7:d9:5e:e6:e0:5d:62:22:cd:9e: 3a:1c:1a:21:0c:65:ed:c1:af:99:1d:b5:35:84:5e: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:6B:AB:33:8D:1B:55:F9:55:C5:D4:BE:9C:C5:5F:E7:AC:93:60 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134382e302f32342d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.53.148.0/24 Signature Algorithm: sha256WithRSAEncryption 62:98:77:b8:f1:d4:f1:b8:2a:14:7a:ec:64:16:37:47:39:e7: c7:53:af:fe:48:ac:df:8e:7d:a0:e2:e1:9f:5d:b1:1c:c2:f5: 75:92:e0:9b:63:ba:18:5c:38:c1:5b:f5:22:44:0b:e0:56:c5: 85:20:87:cf:d0:bb:92:06:50:23:5a:98:f4:72:af:28:e3:cd: f3:19:ed:d7:0d:5b:7f:75:63:8e:8c:06:09:01:0e:ef:7c:cd: b1:8b:78:98:1d:bf:29:e1:ab:cb:32:3e:f9:7b:9d:ed:f3:11: 45:83:14:b0:4c:7d:e9:31:c4:d3:67:74:a4:ab:ba:f6:32:9f: ae:a7:79:c1:62:29:89:e7:46:ac:03:9d:bf:bc:7f:a0:a2:c2: 69:24:97:a2:85:8c:31:7d:a5:a8:e2:96:f4:df:ef:b4:70:c3: 7a:f9:ef:5e:02:b0:42:68:7e:88:c2:33:1a:f3:23:b3:8e:5a: 0f:56:19:7f:95:97:83:5c:d8:45:d7:b3:54:e5:b9:25:ba:ec: f2:e8:c7:b9:db:d7:5e:c5:14:31:a9:4b:94:ae:aa:0c:dc:d7: b3:db:30:8b:86:c6:8a:36:36:b7:45:f6:4b:89:70:1a:9f:ea: 67:20:17:fd:5b:5d:ae:16:94:ef:ae:3b:2e:05:50:aa:1d:fe: 88:7b:7a:44 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUemPvLNfI9yEqPZ6yAqZC1HI09Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTEwMTAyMTU1MDFaFw0yNjEwMDkyMjAwMDFaMDMxMTAvBgNV BAMTKEM3NEU2QkFCMzM4RDFCNTVGOTU1QzVENEJFOUNDNTVGRTdBQzkzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vzFHF2kHfd72SWKttM9nI4Fr 6kHRL9Q+ywf1Rbrb8Vhz8X4L/rMmwt5n+RdvsuhWfjZYyxzQeSpfrusWm2W9NQhG 1gNnKgR9og5IHp10EHpBGQfXRTc8wJ7P3REhoV7btyPKS/ofzgfyvK2sgOGN9z5a C5byizYhh5VD5WLkUUY1oEDdNRE5vSQqFCs2hIG38WqsDZ3iVaMX4lsxUEjHENCN OVbB94uRXAvxuo1S+mjUd8v8flcxxUvzObRhiBmO/oQ4aHf9/0EGeJllNdLX1oG/ kmvo4A4hSI0LrISRkzfxjGFy99le5uBdYiLNnjocGiEMZe3Br5kdtTWEXjbzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUx05rqzONG1X5VcXUvpzFX+esk2AwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzEzNzJlMzUzMzJlMzEzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHU1lDANBgkqhkiG 9w0BAQsFAAOCAQEAYph3uPHU8bgqFHrsZBY3Rznnx1Ov/kis3459oOLhn12xHML1 dZLgm2O6GFw4wVv1IkQL4FbFhSCHz9C7kgZQI1qY9HKvKOPN8xnt1w1bf3VjjowG CQEO73zNsYt4mB2/KeGryzI++Xud7fMRRYMUsEx96THE02d0pKu69jKfrqd5wWIp iedGrAOdv7x/oKLCaSSXooWMMX2lqOKW9N/vtHDDevnvXgKwQmh+iMIzGvMjs45a D1YZf5WXg1zYRdezVOW5Jbrs8ujHudvXXsUUMalLlK6qDNzXs9swi4bGijY2t0X2 S4lwGp/qZyAX/VtdrhaU7647LgVQqh3+iHt6RA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:05 2025 by rpki-client