$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3135302e302f32342d3234203d3e203538333937.roa File: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (raw, json) Hash identifier: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go= Subject key identifier: 09:66:29:8D:B6:DE:05:50:1F:69:04:95:EF:BB:4B:EE:EB:D4:C0:E5 Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 30836DCDF990B20584E38AD0641300F5FD500553 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3135302e302f32342d3234203d3e203538333937.roa Signing time: Fri 10 Oct 2025 23:00:01 +0000 ROA not before: Fri 10 Oct 2025 22:55:01 +0000 ROA not after: Fri 09 Oct 2026 23:00:01 +0000 asID: 58397 IP address blocks: 117.53.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:83:6d:cd:f9:90:b2:05:84:e3:8a:d0:64:13:00:f5:fd:50:05:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Oct 10 22:55:01 2025 GMT Not After : Oct 9 23:00:01 2026 GMT Subject: CN=0966298DB6DE05501F690495EFBB4BEEEBD4C0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:e2:2d:97:05:7c:2f:34:16:c7:b3:5e:ee: 16:b1:22:75:79:2f:33:95:bf:66:4d:ab:84:2d:68: f7:a3:4e:ce:c1:ec:66:b6:8c:be:c3:87:66:e4:9e: 55:40:c3:02:9c:11:92:13:de:7d:15:8d:40:8a:31: 8b:68:c5:d1:7d:3d:91:78:0d:b8:a4:0f:fa:c5:c0: 0d:98:9a:ea:be:3e:39:95:92:61:20:93:e8:9f:4a: 9f:ec:00:1d:39:f2:91:60:9e:c0:1b:87:dc:37:6e: e9:68:e8:23:2e:1d:c9:ac:fe:b9:f6:8e:75:ec:5e: 1d:79:a6:3e:96:fb:75:f8:30:db:a8:73:0d:57:5c: 82:a3:1a:44:b1:27:1b:cd:af:d7:85:56:bd:87:2a: c7:84:02:a2:3c:49:68:ce:64:09:ad:11:80:47:ab: 0e:4a:7b:12:26:73:96:2a:bb:dc:63:34:d6:c4:8f: 98:c0:09:cf:51:5b:99:5b:3c:44:f7:2b:2b:de:f9: e9:20:d3:51:a9:05:79:b1:5c:ec:89:a1:f6:9a:fa: 5e:0e:1c:08:ce:d8:79:7e:7c:a3:f4:fe:36:e8:5c: c4:b7:13:f1:3d:c4:dd:d4:9f:57:71:cc:b2:4f:60: cc:c7:16:ba:8e:04:8e:16:eb:db:0e:d2:5a:c4:e5: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:66:29:8D:B6:DE:05:50:1F:69:04:95:EF:BB:4B:EE:EB:D4:C0:E5 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3135302e302f32342d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.53.150.0/24 Signature Algorithm: sha256WithRSAEncryption 91:f5:e2:d2:cd:f7:2e:3c:0d:e8:31:a1:89:18:da:02:d1:1f: da:a9:dc:7d:1a:fb:86:6a:3f:c7:9a:32:56:b8:c3:ff:6a:93: 42:ac:31:d0:b9:45:eb:f0:cd:2f:9a:d4:fb:b3:08:b4:63:83: 5c:91:23:2b:d5:5d:a1:d2:65:f8:e3:78:8c:55:81:3a:1d:e4: 0d:92:25:fd:5e:23:0b:4d:e4:c8:b9:09:91:eb:d1:2a:e2:e0: 5a:5a:73:7d:db:1b:d3:a4:24:d7:49:4a:62:af:c3:56:14:80: 42:9b:e6:e4:21:62:c7:f4:ef:90:30:1b:0e:36:8a:36:6a:fc: d9:44:f2:e5:eb:80:c8:04:9c:2e:c8:5a:7f:a6:11:c9:3a:00: b7:e5:ab:56:32:53:db:fd:e8:3a:39:7f:ee:b8:6f:63:af:ef: 8f:a3:dc:f4:f9:59:f0:c8:df:2f:0e:fa:79:59:86:d7:e9:3b: 78:7f:ce:09:18:3c:70:9b:f5:3b:6b:43:84:8e:90:d0:ae:d6: 60:ed:08:a2:e8:5b:21:69:7d:fd:ca:01:45:f9:f8:09:01:d9: 9e:52:ae:62:57:f1:0d:cc:a2:67:0b:30:87:82:5f:c4:26:75: 84:c3:23:9b:60:94:fc:bf:d6:bc:36:ec:cb:09:29:9d:ac:ef: 12:b6:ed:74 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMINtzfmQsgWE44rQZBMA9f1QBVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTEwMTAyMjU1MDFaFw0yNjEwMDkyMzAwMDFaMDMxMTAvBgNV BAMTKDA5NjYyOThEQjZERTA1NTAxRjY5MDQ5NUVGQkI0QkVFRUJENEMwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQ+ItlwV8LzQWx7Ne7haxInV5 LzOVv2ZNq4QtaPejTs7B7Ga2jL7Dh2bknlVAwwKcEZIT3n0VjUCKMYtoxdF9PZF4 DbikD/rFwA2Ymuq+PjmVkmEgk+ifSp/sAB058pFgnsAbh9w3bulo6CMuHcms/rn2 jnXsXh15pj6W+3X4MNuocw1XXIKjGkSxJxvNr9eFVr2HKseEAqI8SWjOZAmtEYBH qw5KexImc5Yqu9xjNNbEj5jACc9RW5lbPET3Kyve+ekg01GpBXmxXOyJofaa+l4O HAjO2Hl+fKP0/jboXMS3E/E9xN3Un1dxzLJPYMzHFrqOBI4W69sO0lrE5Ww5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCWYpjbbeBVAfaQSV77tL7uvUwOUwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzEzNzJlMzUzMzJlMzEzNTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHU1ljANBgkqhkiG 9w0BAQsFAAOCAQEAkfXi0s33LjwN6DGhiRjaAtEf2qncfRr7hmo/x5oyVrjD/2qT Qqwx0LlF6/DNL5rU+7MItGODXJEjK9VdodJl+ON4jFWBOh3kDZIl/V4jC03kyLkJ kevRKuLgWlpzfdsb06Qk10lKYq/DVhSAQpvm5CFix/TvkDAbDjaKNmr82UTy5euA yAScLshaf6YRyToAt+WrVjJT2/3oOjl/7rhvY6/vj6Pc9PlZ8MjfLw76eVmG1+k7 eH/OCRg8cJv1O2tDhI6Q0K7WYO0IouhbIWl9/coBRfn4CQHZnlKuYlfxDcyiZwsw h4JfxCZ1hMMjm2CU/L/WvDbsywkpnazvErbtdA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:13 2025 by rpki-client