$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232302e302f32342d3234203d3e203138333933.roa File: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (raw, json) Hash identifier: c/XbFe4dPRB2q+OfVzGCTy9c4E7hXAP72IIURBQoeTI= Subject key identifier: C8:D0:07:20:5A:8F:AF:A1:00:46:E6:3C:CB:7B:6B:D9:AB:01:5D:2D Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 1896540002BA2D21562AC956BDC2D4DE306BFD54 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232302e302f32342d3234203d3e203138333933.roa Signing time: Wed 15 Oct 2025 12:45:02 +0000 ROA not before: Wed 15 Oct 2025 12:40:02 +0000 ROA not after: Wed 14 Oct 2026 12:45:02 +0000 asID: 18393 IP address blocks: 203.77.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 20:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:96:54:00:02:ba:2d:21:56:2a:c9:56:bd:c2:d4:de:30:6b:fd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Oct 15 12:40:02 2025 GMT Not After : Oct 14 12:45:02 2026 GMT Subject: CN=C8D007205A8FAFA10046E63CCB7B6BD9AB015D2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:39:e4:04:c7:02:06:df:de:f5:7b:06:7b: 55:eb:4d:dd:ea:74:28:32:dd:b8:1a:29:0d:56:de: 5b:60:a1:cc:99:42:55:1f:39:0a:3c:20:60:06:4f: e8:37:aa:e0:9c:b3:4a:e0:3b:38:ee:d3:31:c6:7e: 9f:4b:9a:9f:40:7f:87:b4:68:65:ea:e7:a9:31:3b: 6a:23:09:3c:c1:5d:b5:f6:97:35:a3:80:e7:07:bb: 94:9e:f8:66:3f:ca:4e:cf:7b:89:a6:e1:15:ed:33: 1e:7e:52:99:02:29:e7:93:88:cb:a6:75:ce:08:58: 06:93:79:19:1f:7e:a4:16:77:ce:18:20:49:bd:a4: 2e:8e:fd:f5:e3:63:03:5a:21:8a:16:64:01:8a:19: 1b:07:ad:05:28:9d:9d:67:04:c4:51:dc:8b:fa:bd: 10:74:49:71:0f:de:89:a4:05:bd:99:07:1d:61:21: f5:8c:3d:1a:c6:81:b3:5f:90:10:ad:0f:46:00:ef: 3f:e6:bb:b6:03:27:ab:f9:ab:35:fb:8a:ac:97:b1: 69:af:82:6a:98:5c:f5:82:87:b8:64:9d:21:f0:d4: 9d:3b:db:88:0b:d6:c7:93:09:57:9a:ff:f3:40:06: 23:39:4e:27:37:77:da:36:72:d6:da:d0:42:e6:f7: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:07:20:5A:8F:AF:A1:00:46:E6:3C:CB:7B:6B:D9:AB:01:5D:2D X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3232302e302f32342d3234203d3e203138333933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.77.220.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:3a:59:f4:58:b9:7c:fd:a9:5c:60:7b:c3:de:ce:38:a0:cf: 57:f8:a7:ec:5e:26:83:0f:c9:55:e6:8b:9a:b3:ae:a4:6f:f6: e4:7a:bf:fd:db:ad:f7:12:13:d8:47:60:77:61:8f:9b:28:c1: 26:d7:ba:b5:6c:89:2f:a6:32:2d:64:2b:d7:86:ed:5e:82:2d: 09:d7:7f:3d:c0:69:22:49:64:80:c6:70:e4:a9:a7:d4:f3:06: df:16:fc:8a:11:6c:75:27:d4:c1:ac:92:29:99:95:d4:57:3b: 2e:a1:be:22:5d:38:8a:c1:71:33:94:ac:6e:40:81:1a:ce:05: 71:ab:e7:7c:70:c6:dc:4e:6b:49:45:a4:90:27:9e:a0:16:4e: 5d:ec:01:3e:0d:6f:5c:5f:69:7b:3a:05:72:0e:bf:e6:47:2c: a6:3e:a8:48:83:3f:70:3a:90:7d:24:0c:67:aa:21:9f:55:f9: 6d:5e:df:c2:44:53:30:11:d5:81:e4:af:07:14:ac:2c:39:5e: 42:21:b6:57:b0:e6:fc:c0:7c:a8:df:ce:9e:34:b4:4c:8e:f1: 2b:0f:bb:b5:0c:e1:9b:bd:fb:d5:d0:96:aa:80:9d:fe:be:99: 3e:aa:16:04:67:44:43:03:d1:0a:d1:75:bc:ba:23:af:fe:34: 57:6f:7a:eb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGJZUAAK6LSFWKslWvcLU3jBr/VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTEwMTUxMjQwMDJaFw0yNjEwMTQxMjQ1MDJaMDMxMTAvBgNV BAMTKEM4RDAwNzIwNUE4RkFGQTEwMDQ2RTYzQ0NCN0I2QkQ5QUIwMTVEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cznkBMcCBt/e9XsGe1XrTd3q dCgy3bgaKQ1W3ltgocyZQlUfOQo8IGAGT+g3quCcs0rgOzju0zHGfp9Lmp9Af4e0 aGXq56kxO2ojCTzBXbX2lzWjgOcHu5Se+GY/yk7Pe4mm4RXtMx5+UpkCKeeTiMum dc4IWAaTeRkffqQWd84YIEm9pC6O/fXjYwNaIYoWZAGKGRsHrQUonZ1nBMRR3Iv6 vRB0SXEP3omkBb2ZBx1hIfWMPRrGgbNfkBCtD0YA7z/mu7YDJ6v5qzX7iqyXsWmv gmqYXPWCh7hknSHw1J0724gL1seTCVea//NABiM5Tic3d9o2ctba0ELm9+dHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUyNAHIFqPr6EARuY8y3tr2asBXS0wHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlMzE1OWYyLTBjZjAtNDNjNi1i MjgyLWM2OWZiYTEzYTE0YS8wLzMyMzAzMzJlMzczNzJlMzIzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtN3DANBgkqhkiG 9w0BAQsFAAOCAQEASjpZ9Fi5fP2pXGB7w97OOKDPV/in7F4mgw/JVeaLmrOupG/2 5Hq//dut9xIT2Edgd2GPmyjBJte6tWyJL6YyLWQr14btXoItCdd/PcBpIklkgMZw 5Kmn1PMG3xb8ihFsdSfUwaySKZmV1Fc7LqG+Il04isFxM5SsbkCBGs4FcavnfHDG 3E5rSUWkkCeeoBZOXewBPg1vXF9pezoFcg6/5kcspj6oSIM/cDqQfSQMZ6ohn1X5 bV7fwkRTMBHVgeSvBxSsLDleQiG2V7Dm/MB8qN/OnjS0TI7xKw+7tQzhm7371dCW qoCd/r6ZPqoWBGdEQwPRCtF1vLojr/40V2966w== -----END CERTIFICATE-----Generated at Tue Oct 21 03:50:02 2025 by rpki-client