$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32312d3231203d3e203233393532.roa File: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (raw, json) Hash identifier: lCpd9EDW6kxJeEntdCCqy3nxOkL8KJcbnO36OKZILBc= Subject key identifier: DD:06:F7:DA:1B:A6:42:93:05:88:CA:9A:1B:A0:6B:5D:F7:E8:55:58 Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 53D2A9AA17DC24767213359690DB1EFF67149886 Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32312d3231203d3e203233393532.roa Signing time: Thu 19 Jun 2025 14:48:40 +0000 ROA not before: Thu 19 Jun 2025 14:43:40 +0000 ROA not after: Thu 18 Jun 2026 14:48:40 +0000 asID: 23952 IP address blocks: 202.93.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d2:a9:aa:17:dc:24:76:72:13:35:96:90:db:1e:ff:67:14:98:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Jun 19 14:43:40 2025 GMT Not After : Jun 18 14:48:40 2026 GMT Subject: CN=DD06F7DA1BA642930588CA9A1BA06B5DF7E85558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:78:9f:42:93:03:8a:8b:bf:14:d5:bc:ed: 15:d4:fb:fc:80:10:07:18:f2:0e:c2:02:c6:d8:9d: b3:66:49:27:08:0a:b8:57:e5:c9:03:5a:c2:92:78: 3f:e2:ae:6b:75:49:7a:02:a5:6f:41:ef:61:82:6f: 3f:3a:f0:bd:72:9b:19:6f:0c:be:77:23:c2:56:4b: 6e:5c:37:b4:6a:af:c7:11:d5:98:fb:47:de:9b:16: 54:72:38:31:68:0d:b7:07:8d:ef:23:fe:e5:ef:4c: 57:36:09:f2:78:6c:69:21:c5:a6:69:e5:f1:07:f6: 7a:02:af:33:a1:b6:c9:c3:31:59:8d:08:0f:6a:9e: de:47:66:41:08:56:bc:d8:e8:ce:07:d7:69:61:b8: 85:13:bb:36:59:a2:c7:82:e4:d6:c5:48:cd:16:ed: 61:93:2c:26:52:64:8b:7b:65:96:e6:6b:1a:2e:85: c6:94:13:86:9b:0b:43:99:1b:91:cb:a3:ce:b3:61: 71:95:34:26:be:58:36:67:b2:dc:8f:a4:04:1a:83: 3c:34:f1:10:09:a0:64:af:40:e0:e7:65:81:82:78: 36:70:a3:a4:d7:8e:67:92:63:1b:0c:ce:3b:e9:c6: 15:8f:30:78:83:4a:be:2f:7e:4c:01:3e:25:9b:dd: 62:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:06:F7:DA:1B:A6:42:93:05:88:CA:9A:1B:A0:6B:5D:F7:E8:55:58 X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32312d3231203d3e203233393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.24.0/21 Signature Algorithm: sha256WithRSAEncryption af:f4:ac:ea:dd:65:db:8c:13:98:4f:1f:62:49:55:51:d4:2d: dd:0e:49:13:bf:b8:50:93:2d:fd:6e:ef:70:8d:23:ee:ab:a9: 16:07:12:1c:08:df:ca:6c:ee:0a:c9:f1:7b:1b:fa:69:c9:1a: 7d:04:e3:1d:6c:4a:7e:06:5a:ae:7d:dd:aa:a3:7b:16:41:5b: 1e:1c:fa:be:04:f6:77:21:a4:39:90:b3:3f:6a:3e:b3:9f:83: e1:68:1d:98:21:b2:15:8b:94:c7:ad:3c:9d:ce:e3:39:67:46: 5b:40:9d:77:94:e7:f5:d3:3e:8a:81:7a:91:19:45:b1:16:7b: 8b:af:59:67:73:7b:32:90:4e:87:a3:61:ee:9d:85:ad:07:79: fb:2f:25:c5:b5:ee:1f:2e:d1:f9:1e:f8:8a:5c:44:a9:a5:6c: 34:6f:ed:20:89:56:4d:9c:57:29:cb:e0:9d:b8:39:09:ad:aa: 15:c9:8d:42:9c:e8:02:03:2b:78:a4:77:5b:27:2a:f2:26:99: 95:88:de:e6:98:13:04:9a:ec:4d:7a:e9:aa:72:8b:17:de:74: 3c:fb:35:14:12:f0:9a:94:78:7c:a4:e0:a7:29:26:82:58:ff: 41:a1:f3:5c:74:ef:57:c7:38:c4:f5:8a:15:81:91:db:d5:a7: e3:60:d7:a8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUU9KpqhfcJHZyEzWWkNse/2cUmIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNTA2MTkxNDQzNDBaFw0yNjA2MTgxNDQ4NDBaMDMxMTAvBgNV BAMTKEREMDZGN0RBMUJBNjQyOTMwNTg4Q0E5QTFCQTA2QjVERjdFODU1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJznifQpMDiou/FNW87RXU+/yA EAcY8g7CAsbYnbNmSScICrhX5ckDWsKSeD/irmt1SXoCpW9B72GCbz868L1ymxlv DL53I8JWS25cN7Rqr8cR1Zj7R96bFlRyODFoDbcHje8j/uXvTFc2CfJ4bGkhxaZp 5fEH9noCrzOhtsnDMVmNCA9qnt5HZkEIVrzY6M4H12lhuIUTuzZZoseC5NbFSM0W 7WGTLCZSZIt7ZZbmaxouhcaUE4abC0OZG5HLo86zYXGVNCa+WDZnstyPpAQagzw0 8RAJoGSvQODnZYGCeDZwo6TXjmeSYxsMzjvpxhWPMHiDSr4vfkwBPiWb3WL9AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU3Qb32humQpMFiMqaG6BrXffoVVgwHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjOGFiM2UwLWNhNjgtNDJmNi05 OGY2LTY1NGEyNTJhODY0OC8wLzMyMzAzMjJlMzkzMzJlMzIzNDJlMzAyZjMyMzEy ZDMyMzEyMDNkM2UyMDMyMzMzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKXRgwDQYJKoZIhvcN AQELBQADggEBAK/0rOrdZduME5hPH2JJVVHULd0OSRO/uFCTLf1u73CNI+6rqRYH EhwI38ps7grJ8Xsb+mnJGn0E4x1sSn4GWq593aqjexZBWx4c+r4E9nchpDmQsz9q PrOfg+FoHZghshWLlMetPJ3O4zlnRltAnXeU5/XTPoqBepEZRbEWe4uvWWdzezKQ ToejYe6dha0HefsvJcW17h8u0fke+IpcRKmlbDRv7SCJVk2cVynL4J24OQmtqhXJ jUKc6AIDK3ikd1snKvImmZWI3uaYEwSa7E166apyixfedDz7NRQS8JqUeHyk4Kcp JoJY/0Gh81x071fHOMT1ihWBkdvVp+Ng16g= -----END CERTIFICATE-----Generated at Mon Jun 30 13:34:18 2025 by rpki-client