$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa File: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (raw, json) Hash identifier: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk= Subject key identifier: 9B:4A:D7:AF:9A:35:8B:4E:B5:E2:86:00:0F:F9:2F:C9:B1:C5:8F:50 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 104186AE63C9508A09EC2C6D726FDB62B521EDAC Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa Signing time: Wed 04 Jun 2025 05:00:00 +0000 ROA not before: Wed 04 Jun 2025 04:55:00 +0000 ROA not after: Wed 03 Jun 2026 05:00:00 +0000 asID: 23949 IP address blocks: 202.150.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:41:86:ae:63:c9:50:8a:09:ec:2c:6d:72:6f:db:62:b5:21:ed:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Jun 4 04:55:00 2025 GMT Not After : Jun 3 05:00:00 2026 GMT Subject: CN=9B4AD7AF9A358B4EB5E286000FF92FC9B1C58F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:49:05:88:4a:af:53:75:de:15:fb:2f:87: 69:fd:45:3d:8b:ff:69:79:db:88:26:78:40:31:bb: 5d:45:b8:c6:f9:f3:74:0b:e9:82:c4:40:3e:dd:7c: ba:d5:32:73:01:0f:b1:ba:82:a0:f2:69:a8:46:b9: c2:37:a1:c5:77:bf:36:d7:f8:2e:07:e0:c1:81:b6: a0:4b:ca:93:d9:2f:2d:49:83:ba:d1:29:60:61:bf: a4:e2:23:9b:d4:23:86:68:5b:1d:c1:0f:f8:36:f0: d8:d6:9c:69:b1:55:e6:6f:11:db:06:e4:43:c4:9f: 53:78:53:99:23:77:e2:42:b5:39:32:04:3b:92:25: 1e:d6:ec:39:bf:f2:33:6b:a6:06:ec:dd:f2:46:d3: ef:dc:cb:50:8b:97:6d:9a:31:6c:99:9c:e6:58:6d: 5c:61:71:f1:c3:b0:d4:57:67:98:7a:1e:8c:db:f1: 18:38:bd:d0:b6:0e:7c:87:ef:61:bb:88:79:ec:52: 33:59:00:2c:ef:6b:db:69:6d:8e:07:f9:92:7a:37: ea:1e:35:63:08:2b:09:9a:29:5a:79:d2:f6:b0:b3: 1e:91:22:77:13:ef:0c:d7:cf:27:18:82:fc:55:ba: 91:c9:8f:0f:85:14:c9:d9:68:ca:43:39:f7:1d:8d: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4A:D7:AF:9A:35:8B:4E:B5:E2:86:00:0F:F9:2F:C9:B1:C5:8F:50 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.150.128.0/19 Signature Algorithm: sha256WithRSAEncryption 7c:9b:df:c9:4a:0e:84:25:e4:54:0e:a0:17:0b:28:a2:14:b9: 1e:a7:46:ef:8a:69:e9:ef:50:94:e7:2c:f4:80:a8:d1:2d:2d: 38:7c:42:f1:b6:dd:54:3e:a2:6b:02:9a:a4:a0:0b:61:b9:d8: 5b:40:39:1a:c9:97:c8:d4:59:db:fd:bd:25:77:60:74:74:e5: f8:6d:89:0d:7c:5e:e1:a3:1c:60:08:1f:07:37:4e:b1:fb:c4: 1f:8a:e9:46:99:ef:81:e3:0e:df:d6:eb:d1:8c:fa:92:7d:d2: 25:94:04:f4:c9:b4:30:85:fc:87:ce:17:e4:17:f8:cf:53:aa: dc:2d:f5:70:b9:55:33:5a:c0:45:5f:55:4f:b0:5e:76:97:ad: 19:45:c4:bb:9d:b8:1a:be:79:1d:fa:f8:fb:45:e2:74:da:1c: 49:54:ea:f7:2d:c2:56:67:54:cf:21:32:64:1b:bc:5e:51:c9: 20:b6:22:fa:28:fb:e5:8e:27:9d:d3:b4:74:a4:ec:b7:dc:d2: a7:32:af:57:a5:05:68:ce:80:97:0b:f1:7f:8c:46:83:ae:33: 95:4a:d0:0e:0b:d3:6e:6e:e2:26:bd:fb:d9:02:fa:2e:7a:a4: d3:a4:14:ec:17:74:25:27:e4:7d:fd:ed:cb:13:55:92:94:c4: 10:75:13:6b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEEGGrmPJUIoJ7Cxtcm/bYrUh7awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTA2MDQwNDU1MDBaFw0yNjA2MDMwNTAwMDBaMDMxMTAvBgNV BAMTKDlCNEFEN0FGOUEzNThCNEVCNUUyODYwMDBGRjkyRkM5QjFDNThGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2EkFiEqvU3XeFfsvh2n9RT2L /2l524gmeEAxu11FuMb583QL6YLEQD7dfLrVMnMBD7G6gqDyaahGucI3ocV3vzbX +C4H4MGBtqBLypPZLy1Jg7rRKWBhv6TiI5vUI4ZoWx3BD/g28NjWnGmxVeZvEdsG 5EPEn1N4U5kjd+JCtTkyBDuSJR7W7Dm/8jNrpgbs3fJG0+/cy1CLl22aMWyZnOZY bVxhcfHDsNRXZ5h6Hozb8Rg4vdC2DnyH72G7iHnsUjNZACzva9tpbY4H+ZJ6N+oe NWMIKwmaKVp50vawsx6RIncT7wzXzycYgvxVupHJjw+FFMnZaMpDOfcdjSLbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUm0rXr5o1i0614oYAD/kvybHFj1AwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiNjk4MjJjLTJlMjItNDhiZS04 YmEyLTYzNGY1ODJjMmVjYi8wLzMyMzAzMjJlMzEzNTMwMmUzMTMyMzgyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzMjMzMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFypaAMA0GCSqG SIb3DQEBCwUAA4IBAQB8m9/JSg6EJeRUDqAXCyiiFLkep0bvimnp71CU5yz0gKjR LS04fELxtt1UPqJrApqkoAthudhbQDkayZfI1Fnb/b0ld2B0dOX4bYkNfF7hoxxg CB8HN06x+8QfiulGme+B4w7f1uvRjPqSfdIllAT0ybQwhfyHzhfkF/jPU6rcLfVw uVUzWsBFX1VPsF52l60ZRcS7nbgavnkd+vj7ReJ02hxJVOr3LcJWZ1TPITJkG7xe UckgtiL6KPvljied07R0pOy33NKnMq9XpQVozoCXC/F/jEaDrjOVStAOC9NubuIm vfvZAvoueqTTpBTsF3QlJ+R9/e3LE1WSlMQQdRNr -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:26 2025 by rpki-client