$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa File: 3131302e33352e38302e302f32312d3231203d3e203137373237.roa (raw, json) Hash identifier: Ss/IdqODQlesFJ6ISDf8Q9otM3Op8rrNsac9It2iUiU= Subject key identifier: E7:29:56:F4:8D:F0:BF:3D:7C:A7:8F:76:B1:88:FB:71:26:76:5C:4B Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 73026342A51D90B8AF689E9EC3C0D714D9855856 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa Signing time: Sun 31 Aug 2025 10:00:01 +0000 ROA not before: Sun 31 Aug 2025 09:55:01 +0000 ROA not after: Sun 30 Aug 2026 10:00:01 +0000 asID: 17727 IP address blocks: 110.35.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 06:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:02:63:42:a5:1d:90:b8:af:68:9e:9e:c3:c0:d7:14:d9:85:58:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Aug 31 09:55:01 2025 GMT Not After : Aug 30 10:00:01 2026 GMT Subject: CN=E72956F48DF0BF3D7CA78F76B188FB7126765C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:73:68:88:36:99:cb:26:73:6c:7a:f1:26: db:c6:5d:bd:74:10:6b:7b:cf:d7:5e:e1:07:7c:ee: bf:68:44:fb:4a:4a:16:53:e6:26:a4:c7:9c:d1:38: 71:94:c5:1a:ff:35:12:aa:0d:d8:d7:79:3d:38:42: 12:7b:66:51:e3:3d:4e:1a:85:6e:15:0d:c1:4d:21: 5e:5d:3f:b9:30:c8:58:1a:2b:5d:62:c5:51:df:3c: 3d:93:7a:8d:d7:ef:e4:d5:66:ef:9f:f1:f1:49:de: 34:86:f5:35:61:d4:de:44:22:dd:ca:a6:83:d4:f3: 96:bc:56:43:2b:f9:58:ba:db:98:4d:09:82:96:85: 2f:b1:f2:c1:a1:fd:68:56:de:be:e5:47:c7:c4:24: 98:a5:47:c3:0c:ed:e6:ee:5e:2c:28:33:c9:c0:66: 15:86:03:30:ac:be:eb:82:c4:b9:c8:0c:f5:15:64: ee:14:97:99:82:c7:ff:09:52:c4:9e:4a:fd:ba:c9: 55:8b:93:66:3f:10:7f:3f:ab:b9:9e:71:69:5c:f6: 1d:c7:d8:29:b3:d9:5c:9b:7c:00:5a:4d:85:a9:bd: 8b:33:0c:9c:22:5b:41:e0:ba:03:8a:a8:e1:53:5d: 16:a8:90:16:1f:45:09:eb:90:58:49:d7:78:f9:66: 54:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:29:56:F4:8D:F0:BF:3D:7C:A7:8F:76:B1:88:FB:71:26:76:5C:4B X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.35.80.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:1a:ca:e8:e2:f9:69:11:28:5f:25:45:d3:64:05:5e:ce:a0: 1a:41:90:f0:95:99:08:d7:c2:c2:15:fb:18:cd:53:79:cb:a7: 19:9f:eb:ac:15:c4:11:c0:08:cf:63:e0:0d:0f:4f:ab:a5:37: 95:d5:8b:7d:5d:79:6d:a2:7c:b3:87:9b:0a:c4:df:fc:55:6e: a2:25:98:53:eb:48:2f:03:77:0f:33:f4:f4:ce:44:e7:49:87: 88:32:d5:bf:92:d7:a2:d8:d9:1a:5f:9c:a7:a8:bc:15:d7:3d: 92:12:d6:77:4e:8b:fa:a0:f5:43:29:c0:5b:52:62:68:3d:dd: 38:62:53:82:3e:b5:71:b1:a9:16:4a:f5:86:0d:6d:62:1a:e4: 3d:d6:1b:c8:bb:b0:56:c8:42:b0:14:c8:60:66:84:09:35:14: b7:51:55:88:d1:fd:eb:60:50:d3:4d:15:55:11:e8:58:40:06: c9:9b:f2:66:af:9b:02:76:24:31:d8:42:18:60:b1:86:38:a1: f3:85:3e:98:1f:7f:92:ab:42:a6:c4:97:90:54:ae:d1:d9:2c: 8e:4d:69:3b:4a:b6:a2:a9:d1:4d:05:a7:73:ca:4c:d3:19:a5: 13:8a:f5:98:cb:3e:13:12:b4:01:41:0f:53:d7:2b:85:cb:41: c6:ea:3c:f0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUcwJjQqUdkLivaJ6ew8DXFNmFWFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTA4MzEwOTU1MDFaFw0yNjA4MzAxMDAwMDFaMDMxMTAvBgNV BAMTKEU3Mjk1NkY0OERGMEJGM0Q3Q0E3OEY3NkIxODhGQjcxMjY3NjVDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEv3NoiDaZyyZzbHrxJtvGXb10 EGt7z9de4Qd87r9oRPtKShZT5iakx5zROHGUxRr/NRKqDdjXeT04QhJ7ZlHjPU4a hW4VDcFNIV5dP7kwyFgaK11ixVHfPD2Teo3X7+TVZu+f8fFJ3jSG9TVh1N5EIt3K poPU85a8VkMr+Vi625hNCYKWhS+x8sGh/WhW3r7lR8fEJJilR8MM7ebuXiwoM8nA ZhWGAzCsvuuCxLnIDPUVZO4Ul5mCx/8JUsSeSv26yVWLk2Y/EH8/q7mecWlc9h3H 2Cmz2VybfABaTYWpvYszDJwiW0HgugOKqOFTXRaokBYfRQnrkFhJ13j5ZlRPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU5ylW9I3wvz18p492sYj7cSZ2XEswHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzMDJlMzMzNTJlMzgzMDJlMzAyZjMyMzEy ZDMyMzEyMDNkM2UyMDMxMzczNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANuI1AwDQYJKoZIhvcN AQELBQADggEBADwayuji+WkRKF8lRdNkBV7OoBpBkPCVmQjXwsIV+xjNU3nLpxmf 66wVxBHACM9j4A0PT6ulN5XVi31deW2ifLOHmwrE3/xVbqIlmFPrSC8Ddw8z9PTO ROdJh4gy1b+S16LY2RpfnKeovBXXPZIS1ndOi/qg9UMpwFtSYmg93ThiU4I+tXGx qRZK9YYNbWIa5D3WG8i7sFbIQrAUyGBmhAk1FLdRVYjR/etgUNNNFVUR6FhABsmb 8mavmwJ2JDHYQhhgsYY4ofOFPpgff5KrQqbEl5BUrtHZLI5NaTtKtqKp0U0Fp3PK TNMZpROK9ZjLPhMStAFBD1PXK4XLQcbqPPA= -----END CERTIFICATE-----Generated at Sun Oct 26 08:06:37 2025 by rpki-client