$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa File: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (raw, json) Hash identifier: mb4RdHaLVtluUJXDmdVSpVl3zLc9LDc6xWU2Tugox0c= Subject key identifier: D8:9E:39:BC:2F:62:5E:C6:76:DE:36:B5:28:C7:C7:97:38:B5:5D:46 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 541AA4511B4712CC0778CAAF3CF10BE47BB08130 Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa Signing time: Sat 05 Apr 2025 17:00:01 +0000 ROA not before: Sat 05 Apr 2025 16:55:01 +0000 ROA not after: Sat 04 Apr 2026 17:00:01 +0000 asID: 133799 IP address blocks: 123.108.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1a:a4:51:1b:47:12:cc:07:78:ca:af:3c:f1:0b:e4:7b:b0:81:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Apr 5 16:55:01 2025 GMT Not After : Apr 4 17:00:01 2026 GMT Subject: CN=D89E39BC2F625EC676DE36B528C7C79738B55D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:63:55:d0:a0:72:42:8b:fb:e4:5d:54:b3: 0a:15:de:0b:a5:ec:b6:df:99:cc:a8:92:83:71:31: 8b:1c:c2:a2:4e:c8:0c:ef:ec:e1:08:8c:1a:a6:20: cc:f3:e1:8b:2b:70:ff:52:09:b2:3b:a4:f6:da:dd: b1:a6:f7:3d:03:17:d6:1e:82:05:d5:fe:1c:97:f0: 92:4e:18:09:c9:75:64:d4:08:ce:7d:d7:8f:0b:8c: ef:94:92:fa:81:2a:06:4f:30:7c:6f:70:a5:34:d3: 14:8e:23:23:11:c0:26:1f:54:65:b8:4e:60:8b:3d: b4:d5:96:a8:0c:6c:3c:83:42:84:0d:4b:44:90:bc: e0:ec:66:96:af:29:44:af:3e:a5:b6:29:30:59:5d: 06:e0:de:32:e3:6f:9e:8d:d4:6d:b8:27:59:6c:b3: 2b:3b:9c:12:07:66:af:10:d7:4f:6d:d3:72:1c:70: b9:20:05:33:a4:4d:c4:45:4e:27:17:86:ab:fe:31: f4:85:bc:28:57:2a:0d:50:2d:9e:d4:c3:4d:89:7c: 14:b4:e1:6e:58:df:46:b2:5b:6c:20:97:2b:a7:23: 9f:5e:ed:9c:1d:8c:17:1f:28:55:19:14:3a:cf:5d: f0:42:f1:82:64:08:45:5a:b8:78:15:a1:96:00:03: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9E:39:BC:2F:62:5E:C6:76:DE:36:B5:28:C7:C7:97:38:B5:5D:46 X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.108.67.0/24 Signature Algorithm: sha256WithRSAEncryption 23:a9:3a:40:37:4b:1a:37:7e:52:a0:f4:8f:eb:12:64:22:c1: 09:33:ce:4d:92:66:48:2c:da:a5:41:b5:a0:00:d5:81:9e:b1: f3:86:d0:d8:a2:11:ef:d1:59:16:0c:3d:ed:2c:f5:3d:a0:91: b6:f1:5a:96:04:08:d2:d8:ea:3c:a8:e7:e9:b7:4e:5d:09:fa: 2f:38:d2:43:c6:8c:06:9e:e8:c2:52:56:3a:93:45:10:2e:60: 02:3e:2f:0c:6f:5f:a3:d4:1a:0d:c5:cb:c7:05:b1:8b:e2:9a: fc:a7:2f:57:b7:a9:44:83:e9:d2:5b:8c:e1:88:f1:85:cb:72: 8e:8d:c3:b3:ed:65:a5:a9:15:47:07:d8:bc:62:9b:0c:f8:37: b8:52:db:b5:56:64:55:d0:f4:48:91:04:de:7b:70:28:e1:f6: a9:72:32:f2:06:1e:ef:f6:8a:0c:bf:a8:9a:16:5d:40:aa:44: 03:75:89:64:a8:9e:20:dd:ec:ea:a5:1e:29:85:57:92:fc:a3: e5:07:fe:5e:37:57:53:23:4d:71:c8:6e:bf:ef:7c:b4:b8:e7: 19:d0:98:19:e9:85:94:84:73:f7:b1:44:f4:12:35:f7:14:50: 9d:48:db:fd:39:3a:30:a3:f8:6c:3a:fc:2c:53:57:8a:88:09: a8:92:1c:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVBqkURtHEswHeMqvPPEL5HuwgTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNTA0MDUxNjU1MDFaFw0yNjA0MDQxNzAwMDFaMDMxMTAvBgNV BAMTKEQ4OUUzOUJDMkY2MjVFQzY3NkRFMzZCNTI4QzdDNzk3MzhCNTVENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC232NV0KByQov75F1UswoV3gul 7LbfmcyokoNxMYscwqJOyAzv7OEIjBqmIMzz4YsrcP9SCbI7pPba3bGm9z0DF9Ye ggXV/hyX8JJOGAnJdWTUCM59148LjO+UkvqBKgZPMHxvcKU00xSOIyMRwCYfVGW4 TmCLPbTVlqgMbDyDQoQNS0SQvODsZpavKUSvPqW2KTBZXQbg3jLjb56N1G24J1ls sys7nBIHZq8Q109t03IccLkgBTOkTcRFTicXhqv+MfSFvChXKg1QLZ7Uw02JfBS0 4W5Y30ayW2wglyunI59e7ZwdjBcfKFUZFDrPXfBC8YJkCEVauHgVoZYAAw1dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2J45vC9iXsZ23ja1KMfHlzi1XUYwHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiNjNmNzcxLWE5NWYtNGI1My04 N2JjLThiZmY1MDRkYTFmNC8wLzMxMzIzMzJlMzEzMDM4MmUzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAe2xDMA0GCSqG SIb3DQEBCwUAA4IBAQAjqTpAN0saN35SoPSP6xJkIsEJM85NkmZILNqlQbWgANWB nrHzhtDYohHv0VkWDD3tLPU9oJG28VqWBAjS2Oo8qOfpt05dCfovONJDxowGnujC UlY6k0UQLmACPi8Mb1+j1BoNxcvHBbGL4pr8py9Xt6lEg+nSW4zhiPGFy3KOjcOz 7WWlqRVHB9i8YpsM+De4Utu1VmRV0PRIkQTee3Ao4fapcjLyBh7v9ooMv6iaFl1A qkQDdYlkqJ4g3ezqpR4phVeS/KPlB/5eN1dTI01xyG6/73y0uOcZ0JgZ6YWUhHP3 sUT0EjX3FFCdSNv9OTowo/hsOvwsU1eKiAmokhxR -----END CERTIFICATE-----Generated at Wed Nov 5 06:20:02 2025 by rpki-client