$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33392e302f32342d3234203d3e203435333235.roa File: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (raw, json) Hash identifier: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU= Subject key identifier: 2B:2F:73:9D:9C:4A:72:CA:DD:D1:63:4C:F7:66:5F:E4:91:B0:B9:F3 Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 78E685F92377EF70A52E851CB13E682483E5875A Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33392e302f32342d3234203d3e203435333235.roa Signing time: Tue 07 Oct 2025 09:00:37 +0000 ROA not before: Tue 07 Oct 2025 08:55:37 +0000 ROA not after: Tue 06 Oct 2026 09:00:37 +0000 asID: 45325 IP address blocks: 122.248.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e6:85:f9:23:77:ef:70:a5:2e:85:1c:b1:3e:68:24:83:e5:87:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Oct 7 08:55:37 2025 GMT Not After : Oct 6 09:00:37 2026 GMT Subject: CN=2B2F739D9C4A72CADDD1634CF7665FE491B0B9F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:b9:0a:49:e3:3d:06:27:5e:76:41:d4:61: 31:21:23:09:51:42:31:65:12:50:8a:e1:67:53:64: 6a:d9:78:1b:39:f9:3d:02:66:94:08:e6:8d:36:8f: ef:ca:d6:31:35:4d:03:2a:3f:27:5c:e0:70:8c:87: ea:c1:9c:c8:d9:62:55:c4:fb:af:b5:fa:d6:76:a9: 94:7a:aa:ac:92:62:62:5e:0c:12:ff:03:bb:17:5d: de:9b:69:15:0e:33:80:3e:57:81:b6:42:32:cc:94: d0:d1:5f:71:d5:9b:ba:cb:03:1e:e9:28:46:73:4a: 08:dd:10:8f:c8:55:64:e2:46:48:bc:63:51:b7:8f: fd:a2:24:c5:a4:b2:52:a8:b7:61:2c:df:4c:12:f0: 9b:08:fe:9c:7c:e9:54:44:98:de:18:01:e7:37:25: 1a:fb:ba:5e:e0:22:4b:ff:21:dc:7c:e9:e9:67:cc: ff:1a:5e:6a:34:e3:51:0f:8b:ad:20:61:a8:40:58: 9c:97:07:2c:71:ff:ed:bc:45:a3:53:82:3f:80:df: 86:06:4a:e3:ce:e9:f5:47:61:b3:6c:a9:38:a4:70: f4:be:87:29:4f:a2:86:36:09:6d:2b:49:61:31:4b: 10:2b:a2:13:80:fa:7d:fd:b5:10:23:ac:eb:5b:0c: 9d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:73:9D:9C:4A:72:CA:DD:D1:63:4C:F7:66:5F:E4:91:B0:B9:F3 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33392e302f32342d3234203d3e203435333235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.39.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:23:2a:00:b3:9a:bd:67:f5:b8:87:dd:7c:1d:40:ee:79:27: 6a:5c:2b:75:32:23:ee:77:48:6a:4d:16:0a:88:9b:fc:61:ae: c2:57:f9:c4:93:ac:f0:69:ac:ee:0e:18:6e:81:85:8a:23:5c: c3:61:b8:d3:ab:96:f8:25:40:81:46:15:fa:cf:70:6c:af:1d: 45:41:81:a7:38:73:18:0c:cf:57:25:ba:52:f1:18:94:5c:7b: ec:b9:9f:0e:5a:fd:fa:6b:d3:a0:85:52:b1:08:67:7a:aa:39: cf:b4:95:73:33:bf:da:22:61:a5:38:b4:d9:5f:29:d8:8f:b3: 9b:a2:2a:9c:ec:c9:d5:d3:9b:3f:bc:7f:b0:f1:a9:1a:60:4f: 8b:60:35:29:f5:d4:2d:56:24:9c:84:db:54:48:3c:dd:47:c9: 8e:71:e0:15:35:0f:ec:c6:68:d2:26:bb:b0:6a:2b:94:82:8d: 42:1a:e8:5d:23:81:70:da:3b:4b:47:4a:79:7a:c1:20:1f:52: b8:57:20:73:ae:0c:eb:b3:61:a5:78:0e:57:dc:6c:50:db:8f: 03:dc:5c:ac:d3:73:af:e1:54:3e:40:25:de:60:47:33:c0:94: 6a:7c:da:74:28:1a:4f:3b:84:01:95:99:71:9e:3c:88:e0:de: 30:93:2d:1f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeOaF+SN373ClLoUcsT5oJIPlh1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTEwMDcwODU1MzdaFw0yNjEwMDYwOTAwMzdaMDMxMTAvBgNV BAMTKDJCMkY3MzlEOUM0QTcyQ0FEREQxNjM0Q0Y3NjY1RkU0OTFCMEI5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/rkKSeM9BidedkHUYTEhIwlR QjFlElCK4WdTZGrZeBs5+T0CZpQI5o02j+/K1jE1TQMqPydc4HCMh+rBnMjZYlXE +6+1+tZ2qZR6qqySYmJeDBL/A7sXXd6baRUOM4A+V4G2QjLMlNDRX3HVm7rLAx7p KEZzSgjdEI/IVWTiRki8Y1G3j/2iJMWkslKot2Es30wS8JsI/px86VREmN4YAec3 JRr7ul7gIkv/Idx86elnzP8aXmo041EPi60gYahAWJyXByxx/+28RaNTgj+A34YG SuPO6fVHYbNsqTikcPS+hylPooY2CW0rSWExSxArohOA+n39tRAjrOtbDJ2tAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUKy9znZxKcsrd0WNM92Zf5JGwufMwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHr4JzANBgkqhkiG 9w0BAQsFAAOCAQEADiMqALOavWf1uIfdfB1A7nknalwrdTIj7ndIak0WCoib/GGu wlf5xJOs8Gms7g4YboGFiiNcw2G406uW+CVAgUYV+s9wbK8dRUGBpzhzGAzPVyW6 UvEYlFx77LmfDlr9+mvToIVSsQhneqo5z7SVczO/2iJhpTi02V8p2I+zm6IqnOzJ 1dObP7x/sPGpGmBPi2A1KfXULVYknITbVEg83UfJjnHgFTUP7MZo0ia7sGorlIKN QhroXSOBcNo7S0dKeXrBIB9SuFcgc64M67NhpXgOV9xsUNuPA9xcrNNzr+FUPkAl 3mBHM8CUanzadCgaTzuEAZWZcZ48iODeMJMtHw== -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:42 2025 by rpki-client