$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134392e302f32342d3234203d3e203538333937.roa File: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (raw, json) Hash identifier: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg= Subject key identifier: 54:D8:D2:25:B5:81:39:C3:F4:37:50:91:D6:FC:F9:5E:15:D9:D8:4F Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 60C3F0F3A1C6D5AEB0F5C1540FD9CB7198C16F97 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134392e302f32342d3234203d3e203538333937.roa Signing time: Fri 10 Oct 2025 23:00:01 +0000 ROA not before: Fri 10 Oct 2025 22:55:01 +0000 ROA not after: Fri 09 Oct 2026 23:00:01 +0000 asID: 58397 IP address blocks: 117.53.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c3:f0:f3:a1:c6:d5:ae:b0:f5:c1:54:0f:d9:cb:71:98:c1:6f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Oct 10 22:55:01 2025 GMT Not After : Oct 9 23:00:01 2026 GMT Subject: CN=54D8D225B58139C3F4375091D6FCF95E15D9D84F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:91:7b:ab:7f:c0:86:6e:c2:9c:0f:3b:71: 8d:97:10:16:66:4b:67:1f:36:aa:6f:37:53:e1:ae: 3c:06:db:44:71:33:a8:d6:9a:65:f2:cb:c9:92:2e: d6:e5:9a:ec:e1:5a:fa:6e:70:89:f6:00:03:ec:ea: ad:cd:96:0a:27:e3:16:8f:36:9d:e7:03:51:14:e0: 43:bc:1f:e8:77:e5:1f:0d:ca:71:dc:ed:a8:7e:19: 2c:9b:77:a4:bc:a0:e5:e9:b6:2a:f0:28:97:76:0e: 6b:bb:c5:d2:a1:1e:99:df:b8:db:6c:a2:12:f3:d2: 9d:71:cd:d7:af:0c:53:c2:97:d5:0e:25:de:bd:8e: 71:f9:3a:90:37:39:d6:6f:b3:f6:e7:c2:00:fa:c6: 4f:52:45:af:e0:0a:07:06:c1:35:dd:fe:d2:a7:22: ab:d8:ad:be:1e:d3:b8:48:4f:0c:a2:4d:23:ac:cf: a1:b0:3c:ad:e5:c4:7b:81:93:e4:4d:16:89:a5:6d: db:12:00:f9:1f:9e:2f:d2:a0:62:b5:34:08:45:62: 8a:cf:82:87:d4:77:f9:dc:30:1d:a9:49:6b:05:91: 99:21:56:f3:74:f6:15:75:ea:61:0a:38:1a:f2:ae: e0:3c:12:a6:1f:ba:96:b6:87:1f:83:3b:33:54:a0: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D8:D2:25:B5:81:39:C3:F4:37:50:91:D6:FC:F9:5E:15:D9:D8:4F X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3131372e35332e3134392e302f32342d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.53.149.0/24 Signature Algorithm: sha256WithRSAEncryption 88:6e:df:d9:e5:b7:43:40:56:ab:58:a3:3f:97:68:3a:db:de: 7c:bc:4e:64:b0:71:19:a5:cb:57:82:17:06:8e:c4:a3:76:c9: c9:41:30:a9:77:d9:9e:92:91:6f:db:f1:bd:91:b2:fb:d1:7f: b1:9e:a3:5b:7f:53:2e:90:7a:11:8d:80:d4:2c:2a:3b:6f:7e: fd:b6:6b:9c:43:c3:80:50:a9:95:10:d2:3d:16:97:5c:a5:90: 5b:fe:a4:a2:46:e8:85:e9:b8:70:43:6b:04:9d:a5:b2:13:96: f2:5b:b6:87:ba:cf:73:88:0d:f1:ec:44:a1:16:31:bb:5c:76: 10:da:e2:ea:57:7c:3b:71:0c:20:95:2d:27:65:db:6c:86:fb: 77:32:e0:fc:bc:ce:59:71:34:d7:f7:17:d2:52:f5:79:8c:89: c2:2f:a8:81:ee:39:28:30:84:ef:12:0c:c7:ac:5e:b0:b6:f2: f0:39:9b:5a:ce:38:12:29:0c:28:9e:68:ad:fd:c5:ac:2c:5d: af:b8:c2:d1:98:e8:63:78:70:5d:c9:ab:2e:d4:16:d7:64:9c: 5d:67:c6:bd:ae:0c:52:1f:a1:05:3e:58:44:9d:2a:24:a5:a2: ea:02:a4:04:3d:5b:22:6c:31:92:5b:4a:32:cc:50:9b:56:03: c9:58:32:e8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYMPw86HG1a6w9cFUD9nLcZjBb5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTEwMTAyMjU1MDFaFw0yNjEwMDkyMzAwMDFaMDMxMTAvBgNV BAMTKDU0RDhEMjI1QjU4MTM5QzNGNDM3NTA5MUQ2RkNGOTVFMTVEOUQ4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjZF7q3/Ahm7CnA87cY2XEBZm S2cfNqpvN1PhrjwG20RxM6jWmmXyy8mSLtblmuzhWvpucIn2AAPs6q3Nlgon4xaP Np3nA1EU4EO8H+h35R8NynHc7ah+GSybd6S8oOXptirwKJd2Dmu7xdKhHpnfuNts ohLz0p1xzdevDFPCl9UOJd69jnH5OpA3OdZvs/bnwgD6xk9SRa/gCgcGwTXd/tKn IqvYrb4e07hITwyiTSOsz6GwPK3lxHuBk+RNFomlbdsSAPkfni/SoGK1NAhFYorP gofUd/ncMB2pSWsFkZkhVvN09hV16mEKOBryruA8EqYfupa2hx+DOzNUoMCRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVNjSJbWBOcP0N1CR1vz5XhXZ2E8wHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzEzNzJlMzUzMzJlMzEzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHU1lTANBgkqhkiG 9w0BAQsFAAOCAQEAiG7f2eW3Q0BWq1ijP5doOtvefLxOZLBxGaXLV4IXBo7Eo3bJ yUEwqXfZnpKRb9vxvZGy+9F/sZ6jW39TLpB6EY2A1CwqO29+/bZrnEPDgFCplRDS PRaXXKWQW/6kokbohem4cENrBJ2lshOW8lu2h7rPc4gN8exEoRYxu1x2ENri6ld8 O3EMIJUtJ2XbbIb7dzLg/LzOWXE01/cX0lL1eYyJwi+oge45KDCE7xIMx6xesLby 8DmbWs44EikMKJ5orf3FrCxdr7jC0ZjoY3hwXcmrLtQW12ScXWfGva4MUh+hBT5Y RJ0qJKWi6gKkBD1bImwxkltKMsxQm1YDyVgy6A== -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:47 2025 by rpki-client