$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32342e302f32342d3234203d3e20313430343639.roa File: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (raw, json) Hash identifier: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0= Subject key identifier: E8:3C:5F:CC:36:62:20:97:CC:82:85:BC:C9:AD:E7:28:67:1F:A5:40 Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Certificate serial: 38F5C264BBC8951997DF6B1261A05F344EF320D5 Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32342e302f32342d3234203d3e20313430343639.roa Signing time: Mon 06 Oct 2025 16:00:01 +0000 ROA not before: Mon 06 Oct 2025 15:55:01 +0000 ROA not after: Mon 05 Oct 2026 16:00:01 +0000 asID: 140469 IP address blocks: 202.57.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f5:c2:64:bb:c8:95:19:97:df:6b:12:61:a0:5f:34:4e:f3:20:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Validity Not Before: Oct 6 15:55:01 2025 GMT Not After : Oct 5 16:00:01 2026 GMT Subject: CN=E83C5FCC36622097CC8285BCC9ADE728671FA540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:78:41:94:10:c2:75:a8:32:b2:1f:ed:78: 09:f4:c3:b1:23:39:a9:fa:6f:da:13:80:53:cc:88: 50:d7:18:0d:2c:95:83:97:f3:07:9c:70:27:2c:70: 09:e1:18:36:7f:32:b9:3a:96:3d:ba:3c:44:8e:dc: 8a:4f:17:63:78:03:9a:84:e2:60:3d:96:d8:ba:26: 20:e2:62:ca:d7:95:81:cc:6b:86:8e:0c:ed:7e:64: 46:44:6d:51:1e:84:b0:bc:ad:ad:c1:54:54:bd:bd: 96:e0:07:7d:48:66:e6:e1:fb:59:a5:f7:f0:9a:22: de:fe:92:e0:d8:b7:de:04:8f:0b:85:6e:58:b0:98: c8:2d:a2:36:d5:fa:cf:f2:07:c5:5a:8c:df:eb:80: 38:4c:ae:05:53:92:87:1d:58:af:4d:bd:8d:92:08: 03:6d:4b:b3:e2:5e:84:a0:c7:ed:93:9b:ed:ea:70: 7f:ee:96:f5:83:8a:2b:01:8d:bf:39:f0:aa:c7:a8: 10:8f:45:4c:48:62:42:be:7c:fd:ea:b3:0f:cf:25: 47:b0:4c:91:b5:f2:94:fc:db:93:18:ad:0d:e2:b4: 09:44:66:0f:e1:d4:35:e9:1d:be:30:cd:df:a2:0a: 3b:e2:ad:bb:51:1c:fc:8d:91:f0:1b:50:2f:ee:1c: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3C:5F:CC:36:62:20:97:CC:82:85:BC:C9:AD:E7:28:67:1F:A5:40 X509v3 Authority Key Identifier: keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32342e302f32342d3234203d3e20313430343639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.24.0/24 Signature Algorithm: sha256WithRSAEncryption a2:4d:e3:58:30:c1:6f:e7:be:a9:5c:2a:d6:85:96:0f:71:f3: e5:d8:c0:c7:b4:e9:e2:83:6d:d3:c5:4c:1a:10:77:c4:f0:fe: a8:94:a8:61:03:2e:37:dc:eb:9e:ae:25:fc:2b:ac:3a:4a:71: ef:bd:c7:9d:47:ff:9d:27:f2:c8:4e:6d:6d:73:3e:ee:71:5e: a6:d8:b9:b9:ae:56:53:42:80:26:f5:d7:92:f7:ef:55:27:ad: a1:2a:a0:06:2c:10:8f:8a:78:19:ef:8e:a7:7c:b6:0f:e6:4e: d8:35:c6:9c:c6:1d:f0:14:00:94:20:aa:97:d5:76:82:16:c1: bd:45:74:ca:9f:41:69:82:82:b0:a5:f9:ff:bd:32:8f:59:18: 2a:2f:41:7e:da:33:80:3b:2c:8b:bd:a9:aa:30:e9:2c:fe:28: f6:06:76:d7:f8:27:0f:52:c1:08:ae:65:4e:6c:3d:62:87:ba: fa:da:40:53:60:f7:73:6e:52:78:85:db:63:10:5a:a5:b7:28: a9:1a:0a:91:17:d1:d1:69:92:1b:80:3a:55:78:6c:a1:12:8b: 01:24:61:3f:43:54:91:49:c1:cf:52:1c:4a:82:6c:43:32:5a: ae:b8:07:29:7e:4c:1e:43:2c:03:06:7c:c4:da:f7:cc:36:0c: 55:4a:6f:99 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOPXCZLvIlRmX32sSYaBfNE7zINUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3 Qjg1OUJENTAeFw0yNTEwMDYxNTU1MDFaFw0yNjEwMDUxNjAwMDFaMDMxMTAvBgNV BAMTKEU4M0M1RkNDMzY2MjIwOTdDQzgyODVCQ0M5QURFNzI4NjcxRkE1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1XhBlBDCdagysh/teAn0w7Ej Oan6b9oTgFPMiFDXGA0slYOX8weccCcscAnhGDZ/Mrk6lj26PESO3IpPF2N4A5qE 4mA9lti6JiDiYsrXlYHMa4aODO1+ZEZEbVEehLC8ra3BVFS9vZbgB31IZubh+1ml 9/CaIt7+kuDYt94EjwuFbliwmMgtojbV+s/yB8VajN/rgDhMrgVTkocdWK9NvY2S CANtS7PiXoSgx+2Tm+3qcH/ulvWDiisBjb858KrHqBCPRUxIYkK+fP3qsw/PJUew TJG18pT825MYrQ3itAlEZg/h1DXpHb4wzd+iCjvirbtRHPyNkfAbUC/uHOJ5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6DxfzDZiIJfMgoW8ya3nKGcfpUAwHwYDVR0j BBgwFoAUH5ae6bCDjSIVYRioiLgb8nuFm9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMC8xRjk2OUVFOUIw ODM4RDIyMTU2MTE4QTg4OEI4MUJGMjdCODU5QkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3Qjg1 OUJENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkM2YwOTViLTcxMzAtNDEyMi1h ZjI1LTdkMmU3YTExYjFiMS8wLzMyMzAzMjJlMzUzNzJlMzIzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo5GDANBgkqhkiG 9w0BAQsFAAOCAQEAok3jWDDBb+e+qVwq1oWWD3Hz5djAx7Tp4oNt08VMGhB3xPD+ qJSoYQMuN9zrnq4l/CusOkpx773HnUf/nSfyyE5tbXM+7nFepti5ua5WU0KAJvXX kvfvVSetoSqgBiwQj4p4Ge+Op3y2D+ZO2DXGnMYd8BQAlCCql9V2ghbBvUV0yp9B aYKCsKX5/70yj1kYKi9BftozgDssi72pqjDpLP4o9gZ21/gnD1LBCK5lTmw9Yoe6 +tpAU2D3c25SeIXbYxBapbcoqRoKkRfR0WmSG4A6VXhsoRKLASRhP0NUkUnBz1Ic SoJsQzJarrgHKX5MHkMsAwZ8xNr3zDYMVUpvmQ== -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:57 2025 by rpki-client