$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa File: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (raw, json) Hash identifier: AfAtTVgPMHWgpD8XH7bK7gIkMO49kiXkEP5R2Bob7nU= Subject key identifier: 0C:92:22:FC:E5:37:D3:BC:CB:A5:2F:6E:6B:CC:23:7D:12:4A:F8:84 Certificate issuer: /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40 Certificate serial: 2DAAB95FF18422945792DC717638DA1A93760501 Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa Signing time: Tue 05 Aug 2025 13:00:02 +0000 ROA not before: Tue 05 Aug 2025 12:55:02 +0000 ROA not after: Tue 04 Aug 2026 13:00:02 +0000 asID: 24530 IP address blocks: 119.10.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:aa:b9:5f:f1:84:22:94:57:92:dc:71:76:38:da:1a:93:76:05:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40 Validity Not Before: Aug 5 12:55:02 2025 GMT Not After : Aug 4 13:00:02 2026 GMT Subject: CN=0C9222FCE537D3BCCBA52F6E6BCC237D124AF884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:7d:96:61:ef:e8:f7:23:82:a4:f4:f6:ff: 5b:e5:da:3e:21:46:1b:5c:98:eb:49:b8:93:92:14: f8:20:59:9e:b8:da:22:11:48:c9:f7:a3:0d:49:70: 94:56:19:74:33:a7:a1:92:d2:bf:16:9d:ed:eb:75: 1c:b9:9f:3c:65:6f:9a:2b:42:72:44:68:d4:36:16: a2:51:44:d9:4f:d7:94:7f:38:c6:51:5b:72:09:bf: 93:ed:46:44:8d:b3:27:86:be:4b:9d:b5:4a:69:f5: 48:2b:76:85:78:72:8d:ec:64:32:4a:19:6e:1d:0d: 94:03:8f:36:33:d1:a2:cd:43:84:bb:fb:03:44:3c: 3e:ed:ca:a2:7d:f0:1b:2c:de:93:88:22:8f:a0:24: 3e:f6:85:1e:8d:10:07:1d:10:9f:03:7f:58:cd:1f: c4:c9:b0:e7:6a:7e:d7:55:01:86:2b:f0:4e:3a:26: 55:5a:71:58:6a:98:ff:c3:4d:fc:bc:49:fd:e9:32: be:48:7e:0e:bf:19:c2:e2:63:c3:96:2d:98:5f:ba: 0f:f9:1d:4e:14:9f:e8:42:72:37:68:6a:6a:ac:49: d1:15:22:98:05:e2:e5:29:73:9e:27:49:ad:39:26: 93:e8:c6:72:12:45:c0:88:a7:68:dc:c7:ea:83:d6: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:92:22:FC:E5:37:D3:BC:CB:A5:2F:6E:6B:CC:23:7D:12:4A:F8:84 X509v3 Authority Key Identifier: keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138332e302f32342d3234203d3e203234353330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.10.183.0/24 Signature Algorithm: sha256WithRSAEncryption 70:2f:70:3c:0e:8e:69:79:8c:ab:a3:d9:12:f2:91:32:80:14: 40:c6:a1:60:64:85:5b:5c:a3:67:16:af:34:d5:a8:cc:34:d5: 46:c8:d4:21:cd:50:9d:9a:33:0c:db:05:1d:61:cb:82:4a:3f: 16:ff:00:a4:07:f1:3b:95:1e:67:d2:d6:a5:59:41:9c:c6:a3: 88:1e:ca:7f:25:1f:cf:8e:20:2c:23:30:a8:d8:49:94:9f:e7: 77:9a:0a:42:95:6d:31:ae:a5:b1:fe:73:d4:f0:d2:f2:26:e5: 09:eb:48:3c:fa:f6:6b:1f:9a:37:0c:f0:ad:c9:3c:7c:7b:63: ae:c9:7c:67:4d:fc:75:a4:88:5b:30:b0:c5:05:29:b2:97:c4: 0c:ad:9e:a0:f4:c7:b6:93:9c:51:f9:c6:bd:5f:76:ac:57:e7: a9:1c:d9:bb:aa:a3:b1:d5:ce:8a:7a:ed:6a:e2:c4:d9:46:10: d7:3e:a5:49:5a:06:12:58:99:c4:3f:3f:d4:0b:d5:f4:d8:06: 8f:ed:0e:14:64:86:58:58:ad:a7:c5:eb:ef:f3:65:fd:40:60: 5b:69:e0:53:35:25:7b:bc:35:5f:7f:9b:c2:36:91:1c:81:e6: 3d:9e:d1:66:46:4e:ca:0d:d8:0b:00:62:9f:be:c5:fc:fc:65: 1e:fa:fd:5a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULaq5X/GEIpRXktxxdjjaGpN2BQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNC RjcxRkI0MDAeFw0yNTA4MDUxMjU1MDJaFw0yNjA4MDQxMzAwMDJaMDMxMTAvBgNV BAMTKDBDOTIyMkZDRTUzN0QzQkNDQkE1MkY2RTZCQ0MyMzdEMTI0QUY4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+b32WYe/o9yOCpPT2/1vl2j4h RhtcmOtJuJOSFPggWZ642iIRSMn3ow1JcJRWGXQzp6GS0r8Wne3rdRy5nzxlb5or QnJEaNQ2FqJRRNlP15R/OMZRW3IJv5PtRkSNsyeGvkudtUpp9UgrdoV4co3sZDJK GW4dDZQDjzYz0aLNQ4S7+wNEPD7tyqJ98Bss3pOIIo+gJD72hR6NEAcdEJ8Df1jN H8TJsOdqftdVAYYr8E46JlVacVhqmP/DTfy8Sf3pMr5Ifg6/GcLiY8OWLZhfug/5 HU4Un+hCcjdoamqsSdEVIpgF4uUpc54nSa05JpPoxnISRcCIp2jcx+qD1sslAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDJIi/OU307zLpS9ua8wjfRJK+IQwHwYDVR0j BBgwFoAUb2o1MBmKm3ZXpjb+zPs5879x+0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDIzNDRiZS1mOWZiLTQ2MzQtOTJkNi04OTRkZDUzOGNhZGYvMC82RjZBMzUzMDE5 OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JGNzFGQjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNCRjcx RkI0MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05 MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzODMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcKtzANBgkqhkiG 9w0BAQsFAAOCAQEAcC9wPA6OaXmMq6PZEvKRMoAUQMahYGSFW1yjZxavNNWozDTV RsjUIc1QnZozDNsFHWHLgko/Fv8ApAfxO5UeZ9LWpVlBnMajiB7KfyUfz44gLCMw qNhJlJ/nd5oKQpVtMa6lsf5z1PDS8iblCetIPPr2ax+aNwzwrck8fHtjrsl8Z038 daSIWzCwxQUpspfEDK2eoPTHtpOcUfnGvV92rFfnqRzZu6qjsdXOinrtauLE2UYQ 1z6lSVoGEliZxD8/1AvV9NgGj+0OFGSGWFitp8Xr7/Nl/UBgW2ngUzUle7w1X3+b wjaRHIHmPZ7RZkZOyg3YCwBin77F/PxlHvr9Wg== -----END CERTIFICATE-----Generated at Wed Nov 5 08:26:49 2025 by rpki-client