$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa File: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (raw, json) Hash identifier: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA= Subject key identifier: 97:D4:14:AB:74:B5:D2:3E:CF:10:E3:CA:C2:85:80:F4:36:1E:2E:9C Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 164AE28A70016C3A60F758E36FB3A221D667C0F2 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa Signing time: Tue 07 Oct 2025 09:00:38 +0000 ROA not before: Tue 07 Oct 2025 08:55:38 +0000 ROA not after: Tue 06 Oct 2026 09:00:38 +0000 asID: 45325 IP address blocks: 122.248.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4a:e2:8a:70:01:6c:3a:60:f7:58:e3:6f:b3:a2:21:d6:67:c0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Oct 7 08:55:38 2025 GMT Not After : Oct 6 09:00:38 2026 GMT Subject: CN=97D414AB74B5D23ECF10E3CAC28580F4361E2E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:ea:fd:f5:4c:4c:49:0a:16:1b:37:a7:fd: a1:88:69:9b:6f:7e:e9:36:83:71:4e:8d:9d:f0:0d: 62:eb:e8:ba:4b:80:41:eb:78:67:13:77:6a:d5:93: c2:fe:e7:ba:36:63:67:a3:8f:29:e4:63:3f:cd:a4: 1f:05:a3:7c:0a:28:15:b9:8e:13:62:0a:33:a9:6e: ba:a1:91:2e:5d:7c:2b:3d:51:54:01:cb:8e:27:7b: 54:fc:eb:27:2c:6b:a1:7c:e0:a0:3e:b6:80:20:9b: df:5c:f6:78:56:f5:b3:04:fc:59:05:fb:8a:df:91: 0f:c9:c1:ab:a1:0d:ce:36:71:95:a0:da:f4:18:14: f6:56:63:1d:b6:e4:6b:12:71:dd:d6:05:d7:63:40: 3b:b8:1b:ef:e7:b6:77:25:d1:91:9b:39:b9:de:29: e7:b1:32:c9:7c:0e:e5:da:18:a9:00:dc:15:1f:ea: 69:6e:09:1a:65:ef:40:30:9e:cc:55:8f:a9:d7:b5: 6c:37:b5:66:c3:84:75:93:24:87:60:d3:cd:3b:be: 50:f4:67:29:ea:44:ac:4a:9a:3e:b0:28:53:76:ac: b9:e9:f6:9a:03:11:ff:f1:d9:1f:6c:4c:78:14:09: 56:a1:ba:7f:20:64:b2:50:03:34:35:0d:e3:85:18: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D4:14:AB:74:B5:D2:3E:CF:10:E3:CA:C2:85:80:F4:36:1E:2E:9C X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.33.0/24 Signature Algorithm: sha256WithRSAEncryption 12:62:b8:9e:3c:78:45:65:3b:0f:f5:95:cd:98:e0:6d:23:cd: 6e:b6:4e:91:79:3e:14:a8:ff:92:66:38:a2:79:53:e8:8b:e2: a4:73:98:ea:58:6f:88:94:16:49:2e:ef:5d:83:55:dd:c0:48: 89:bf:b4:bc:b4:77:05:ea:36:f7:a5:40:77:33:26:c7:ff:ed: 69:15:4b:d4:32:1b:16:64:ca:33:c8:f8:f4:fb:5d:11:94:48: 67:e4:e2:f3:8d:f1:04:a5:5e:d7:d6:77:4c:e3:79:fa:59:bd: 4c:a1:a1:5f:bf:a3:71:2f:26:3e:32:f1:73:74:53:e3:82:06: 5f:25:49:b2:7b:fc:70:fb:3f:df:00:b6:e4:6e:1a:63:01:a8: 8e:e0:26:6f:40:7b:b1:d2:1e:d6:16:55:c7:12:b6:3e:71:bd: f2:52:11:88:eb:f0:87:12:d7:15:c7:ed:29:2f:d9:5a:db:62: 41:1e:10:8e:f1:71:85:78:a4:2a:5a:14:05:e8:9e:5f:a4:66: 0a:c3:92:ad:12:59:fe:3c:05:87:7d:b6:97:59:e0:b6:cf:15: d1:de:81:70:72:2e:c3:a4:e7:a9:cf:0d:8a:bb:2c:e6:b1:90: 02:ad:72:c0:bc:29:ea:42:c0:b1:8f:5c:8a:e4:8b:ca:29:c9: 26:5a:07:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFkriinABbDpg91jjb7OiIdZnwPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTEwMDcwODU1MzhaFw0yNjEwMDYwOTAwMzhaMDMxMTAvBgNV BAMTKDk3RDQxNEFCNzRCNUQyM0VDRjEwRTNDQUMyODU4MEY0MzYxRTJFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGhur99UxMSQoWGzen/aGIaZtv fuk2g3FOjZ3wDWLr6LpLgEHreGcTd2rVk8L+57o2Y2ejjynkYz/NpB8Fo3wKKBW5 jhNiCjOpbrqhkS5dfCs9UVQBy44ne1T86ycsa6F84KA+toAgm99c9nhW9bME/FkF +4rfkQ/JwauhDc42cZWg2vQYFPZWYx225GsScd3WBddjQDu4G+/ntncl0ZGbObne KeexMsl8DuXaGKkA3BUf6mluCRpl70AwnsxVj6nXtWw3tWbDhHWTJIdg0807vlD0 ZynqRKxKmj6wKFN2rLnp9poDEf/x2R9sTHgUCVahun8gZLJQAzQ1DeOFGOm1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUl9QUq3S10j7PEOPKwoWA9DYeLpwwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHr4ITANBgkqhkiG 9w0BAQsFAAOCAQEAEmK4njx4RWU7D/WVzZjgbSPNbrZOkXk+FKj/kmY4onlT6Ivi pHOY6lhviJQWSS7vXYNV3cBIib+0vLR3Beo296VAdzMmx//taRVL1DIbFmTKM8j4 9PtdEZRIZ+Ti843xBKVe19Z3TON5+lm9TKGhX7+jcS8mPjLxc3RT44IGXyVJsnv8 cPs/3wC25G4aYwGojuAmb0B7sdIe1hZVxxK2PnG98lIRiOvwhxLXFcftKS/ZWtti QR4QjvFxhXikKloUBeieX6RmCsOSrRJZ/jwFh322l1ngts8V0d6BcHIuw6Tnqc8N irss5rGQAq1ywLwp6kLAsY9ciuSLyinJJloHqg== -----END CERTIFICATE-----Generated at Mon Oct 20 12:57:16 2025 by rpki-client