$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa File: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (raw, json) Hash identifier: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I= Subject key identifier: 43:A9:F4:AC:D7:DC:27:50:58:8B:EF:82:81:46:07:8F:DC:77:17:FF Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 2EF46996646FE3BEE063B35B7E4670A8E374A260 Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa Signing time: Fri 03 Oct 2025 00:36:45 +0000 ROA not before: Fri 03 Oct 2025 00:31:45 +0000 ROA not after: Fri 02 Oct 2026 00:36:45 +0000 asID: 38763 IP address blocks: 122.129.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f4:69:96:64:6f:e3:be:e0:63:b3:5b:7e:46:70:a8:e3:74:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Oct 3 00:31:45 2025 GMT Not After : Oct 2 00:36:45 2026 GMT Subject: CN=43A9F4ACD7DC2750588BEF828146078FDC7717FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:68:f7:cc:a8:7a:b0:f3:ef:04:b5:a2:40: 3f:af:c7:9e:43:6f:70:8d:e1:ad:d0:e4:9f:71:9c: e7:8f:ea:78:6e:27:5b:53:26:45:6e:2c:b0:48:4d: e5:cc:69:9e:1b:97:3f:ce:6f:d2:22:80:db:17:9d: dc:10:6a:bb:b9:b3:18:82:a7:9b:c0:f6:f4:d8:0a: 3c:88:30:99:cf:b6:82:a9:62:f8:c8:c5:2b:96:71: 69:26:7a:d5:8f:65:0c:63:83:3a:a4:aa:be:8f:06: 3d:ef:60:a1:b6:d4:b7:b6:bd:ac:02:71:fa:41:e8: 2b:88:96:91:3a:ab:29:09:5c:a5:93:07:e9:ae:47: 92:0a:4d:cb:b4:71:48:3c:29:ef:3f:26:75:6c:37: 65:90:a7:db:fc:03:d0:f9:b1:28:e6:f7:f4:2c:fe: 05:60:ce:16:8d:82:f4:99:98:ef:f1:d0:b7:2c:37: e9:5b:0f:7f:4f:19:e8:4b:62:d2:d4:ae:b8:1f:7b: 8f:4f:14:85:3c:72:15:13:34:e8:fa:82:85:8d:9b: 8b:79:44:fc:e4:24:1d:67:2c:f7:0f:ac:bc:ba:68: 9b:c1:40:44:36:c0:59:a6:37:8f:66:bc:0b:39:ed: 1a:8b:02:0f:0e:95:bc:da:4f:ef:98:97:2e:65:54: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A9:F4:AC:D7:DC:27:50:58:8B:EF:82:81:46:07:8F:DC:77:17:FF X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.129.200.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:90:17:dd:4a:15:ee:bc:7f:c6:95:32:1a:37:df:32:59:85: 85:8b:83:40:bf:6b:8a:51:b7:24:6a:e0:d2:3b:40:16:e9:ea: 83:e4:39:a2:e9:b1:45:50:44:a7:03:b1:ef:25:49:f3:f3:15: b9:c0:85:e4:b3:f4:3c:ad:f2:64:a9:f1:eb:b2:18:e3:6d:f4: 69:c9:7e:7b:1c:31:8e:7d:a5:58:1f:25:bf:bd:88:90:8e:2b: af:c6:f7:d2:e3:93:de:3b:d6:cd:98:f9:f3:01:58:9b:9b:5b: 7a:34:7e:47:3a:53:57:28:0b:00:ae:41:10:22:6d:1e:f2:d6: 29:52:d9:f6:66:d6:4f:8d:30:2d:b7:70:7f:66:0d:39:ab:97: 9b:51:d0:cc:4d:bf:65:2e:d7:56:3d:e2:ae:f1:51:f8:e5:a0: 39:4c:4b:27:fd:f6:06:03:6d:da:4e:b9:8b:c2:a4:b8:68:8d: e5:6d:50:6e:d9:d8:c2:fb:2f:ae:c3:3e:c1:fc:e1:6c:90:1c: 16:ee:63:52:bb:7e:af:03:ba:d9:f3:a8:9f:bd:03:54:b7:69: c8:74:84:dc:71:bc:11:26:83:9a:ae:70:22:e1:bb:23:30:a5: 4f:94:8a:9b:b3:fa:4c:0e:67:f1:4d:06:63:33:60:3a:cd:59: 74:33:39:38 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULvRplmRv477gY7NbfkZwqON0omAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNTEwMDMwMDMxNDVaFw0yNjEwMDIwMDM2NDVaMDMxMTAvBgNV BAMTKDQzQTlGNEFDRDdEQzI3NTA1ODhCRUY4MjgxNDYwNzhGREM3NzE3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSb2j3zKh6sPPvBLWiQD+vx55D b3CN4a3Q5J9xnOeP6nhuJ1tTJkVuLLBITeXMaZ4blz/Ob9IigNsXndwQaru5sxiC p5vA9vTYCjyIMJnPtoKpYvjIxSuWcWkmetWPZQxjgzqkqr6PBj3vYKG21Le2vawC cfpB6CuIlpE6qykJXKWTB+muR5IKTcu0cUg8Ke8/JnVsN2WQp9v8A9D5sSjm9/Qs /gVgzhaNgvSZmO/x0LcsN+lbD39PGehLYtLUrrgfe49PFIU8chUTNOj6goWNm4t5 RPzkJB1nLPcPrLy6aJvBQEQ2wFmmN49mvAs57RqLAg8OlbzaT++Yly5lVIMDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQ6n0rNfcJ1BYi++CgUYHj9x3F/8wHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0ZjlmOWExLTRhZDgtNDljZS05 ZmE5LWQ0NzY1NzNhZjUwZi8wLzMxMzIzMjJlMzEzMjM5MmUzMjMwMzAyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzMzM4MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDeoHIMA0GCSqG SIb3DQEBCwUAA4IBAQBOkBfdShXuvH/GlTIaN98yWYWFi4NAv2uKUbckauDSO0AW 6eqD5Dmi6bFFUESnA7HvJUnz8xW5wIXks/Q8rfJkqfHrshjjbfRpyX57HDGOfaVY HyW/vYiQjiuvxvfS45PeO9bNmPnzAVibm1t6NH5HOlNXKAsArkEQIm0e8tYpUtn2 ZtZPjTAtt3B/Zg05q5ebUdDMTb9lLtdWPeKu8VH45aA5TEsn/fYGA23aTrmLwqS4 aI3lbVBu2djC+y+uwz7B/OFskBwW7mNSu36vA7rZ86ifvQNUt2nIdITccbwRJoOa rnAi4bsjMKVPlIqbs/pMDmfxTQZjM2A6zVl0Mzk4 -----END CERTIFICATE-----Generated at Sun Oct 19 19:51:17 2025 by rpki-client