$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32342d3234203d3e203233393532.roa File: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (raw, json) Hash identifier: kfaAp03dyflQljxrva7g4HC0eTaNF+N0ortCVYgdoCc= Subject key identifier: AC:1C:8C:15:3C:6A:55:CF:2A:08:BD:61:70:B4:02:B8:F4:34:4E:54 Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 396B13D24F8D00D9C05F726BEDBA9088772BFD1B Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32342d3234203d3e203233393532.roa Signing time: Thu 19 Jun 2025 14:44:01 +0000 ROA not before: Thu 19 Jun 2025 14:39:01 +0000 ROA not after: Thu 18 Jun 2026 14:44:01 +0000 asID: 23952 IP address blocks: 202.93.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6b:13:d2:4f:8d:00:d9:c0:5f:72:6b:ed:ba:90:88:77:2b:fd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Jun 19 14:39:01 2025 GMT Not After : Jun 18 14:44:01 2026 GMT Subject: CN=AC1C8C153C6A55CF2A08BD6170B402B8F4344E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:89:63:b3:d7:ab:a1:17:bb:53:06:85:23: 52:ac:98:96:21:25:ac:9a:d2:a8:e8:4a:22:9e:b1: 9f:e4:44:db:c1:d1:65:0f:5a:62:6a:78:69:c7:b8: 5e:9d:a8:91:fa:b2:c4:72:e8:0f:78:74:83:f4:77: 09:b2:ea:d6:2c:0a:b0:7a:1a:47:6c:f2:fd:ca:da: fc:38:8e:f7:aa:07:71:ad:c4:9e:04:ae:3e:78:a1: 9e:fa:eb:11:9d:d4:5f:1b:a4:9c:9c:d7:8d:ac:43: 86:1a:9e:61:29:c0:16:be:70:e1:78:e5:6f:2a:be: 29:73:33:87:65:e6:0f:5a:44:f7:d6:dd:d0:43:d6: e3:d7:4f:d8:3f:f3:12:fb:f9:ae:a9:c7:14:b4:47: 1d:92:fa:ac:2e:ed:8d:39:55:1c:a1:0a:da:96:5b: 46:ca:3a:3a:6e:da:db:f2:ec:ea:0d:80:2c:1b:22: 5e:63:bf:5a:44:6b:f9:35:79:db:eb:eb:1e:d3:1d: 21:63:82:f1:f7:c5:85:99:1e:1b:01:77:62:a1:af: af:81:6e:5c:dc:2e:6f:91:ce:c8:ad:7c:cd:07:0d: f2:1c:b8:c8:ab:42:57:7e:34:90:af:6a:88:57:b7: dc:e4:28:0d:45:89:de:cc:85:bc:33:97:48:84:c4: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1C:8C:15:3C:6A:55:CF:2A:08:BD:61:70:B4:02:B8:F4:34:4E:54 X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32342d3234203d3e203233393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.24.0/24 Signature Algorithm: sha256WithRSAEncryption 78:3f:dd:db:a7:16:55:a4:cf:c2:4f:71:0f:63:75:d3:62:78: dc:49:6c:d1:b6:06:f4:d8:00:1c:ba:6e:f7:a4:ff:18:f5:3a: 12:82:56:5c:b3:ab:31:5d:a2:31:db:3e:84:73:72:64:55:dc: 6c:4f:6e:39:98:85:86:6a:3c:36:de:b4:5c:40:21:08:a9:21: a3:eb:95:c7:8c:cd:60:ed:03:85:06:be:fe:31:b2:86:73:1b: 98:44:43:2f:04:84:27:e2:46:05:35:11:be:e5:c2:cc:c6:94: 51:c7:8e:02:f2:68:fd:50:e6:c0:48:bb:e0:0a:ea:a2:cb:fa: 14:9b:29:c8:73:cc:34:1f:23:64:58:13:77:9a:3d:94:eb:3e: 52:45:49:d0:c8:e8:a9:86:e8:b3:e5:2c:61:4f:d0:47:1f:62: 83:16:37:f2:08:4b:5a:75:5b:a4:bc:60:b8:8f:7c:bc:3c:76: d7:74:83:b4:d8:c8:49:a1:61:69:07:df:ed:0c:33:e8:9a:93: a7:bf:57:4c:d6:0d:4b:e6:f8:6d:a1:4a:9e:e4:4a:f3:33:6c: 4f:6e:5b:5e:e3:6c:12:b8:76:75:8b:19:a8:2c:0f:fb:f5:3e: a0:de:e1:7f:64:7d:ff:05:8c:40:5c:c3:d1:9b:21:ee:79:56: 85:55:3f:7e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUOWsT0k+NANnAX3Jr7bqQiHcr/RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNTA2MTkxNDM5MDFaFw0yNjA2MTgxNDQ0MDFaMDMxMTAvBgNV BAMTKEFDMUM4QzE1M0M2QTU1Q0YyQTA4QkQ2MTcwQjQwMkI4RjQzNDRFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj94ljs9eroRe7UwaFI1KsmJYh Jaya0qjoSiKesZ/kRNvB0WUPWmJqeGnHuF6dqJH6ssRy6A94dIP0dwmy6tYsCrB6 Gkds8v3K2vw4jveqB3GtxJ4Erj54oZ766xGd1F8bpJyc142sQ4YanmEpwBa+cOF4 5W8qvilzM4dl5g9aRPfW3dBD1uPXT9g/8xL7+a6pxxS0Rx2S+qwu7Y05VRyhCtqW W0bKOjpu2tvy7OoNgCwbIl5jv1pEa/k1edvr6x7THSFjgvH3xYWZHhsBd2Khr6+B blzcLm+RzsitfM0HDfIcuMirQld+NJCvaohXt9zkKA1Fid7Mhbwzl0iExGS9AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUrByMFTxqVc8qCL1hcLQCuPQ0TlQwHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjOGFiM2UwLWNhNjgtNDJmNi05 OGY2LTY1NGEyNTJhODY0OC8wLzMyMzAzMjJlMzkzMzJlMzIzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXRgwDQYJKoZIhvcN AQELBQADggEBAHg/3dunFlWkz8JPcQ9jddNieNxJbNG2BvTYABy6bvek/xj1OhKC VlyzqzFdojHbPoRzcmRV3GxPbjmYhYZqPDbetFxAIQipIaPrlceMzWDtA4UGvv4x soZzG5hEQy8EhCfiRgU1Eb7lwszGlFHHjgLyaP1Q5sBIu+AK6qLL+hSbKchzzDQf I2RYE3eaPZTrPlJFSdDI6KmG6LPlLGFP0EcfYoMWN/IIS1p1W6S8YLiPfLw8dtd0 g7TYyEmhYWkH3+0MM+iak6e/V0zWDUvm+G2hSp7kSvMzbE9uW17jbBK4dnWLGags D/v1PqDe4X9kff8FjEBcw9GbIe55VoVVP34= -----END CERTIFICATE-----Generated at Mon Jun 30 14:12:31 2025 by rpki-client