$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33312e302f32342d3234203d3e203233393532.roa File: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (raw, json) Hash identifier: JUNEmwAQ3OD9z4dCAUDRWMfxMppfea30FX3ZfMpQ2Ss= Subject key identifier: 98:AA:25:19:0E:B3:2A:39:45:E5:C8:DC:F3:39:A9:49:1D:05:9C:64 Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 38976B0D979F45DD79E8CC5101A6AEC35E7E261A Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33312e302f32342d3234203d3e203233393532.roa Signing time: Thu 19 Jun 2025 14:45:51 +0000 ROA not before: Thu 19 Jun 2025 14:40:51 +0000 ROA not after: Thu 18 Jun 2026 14:45:51 +0000 asID: 23952 IP address blocks: 202.93.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:97:6b:0d:97:9f:45:dd:79:e8:cc:51:01:a6:ae:c3:5e:7e:26:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Jun 19 14:40:51 2025 GMT Not After : Jun 18 14:45:51 2026 GMT Subject: CN=98AA25190EB32A3945E5C8DCF339A9491D059C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:51:7b:f3:74:8d:c8:e4:4b:41:ab:ce:63:a8: 60:7b:c0:14:e8:34:5d:65:aa:b4:f4:87:69:15:ee: 41:20:d0:86:25:2c:cb:37:95:3c:c6:a6:86:af:5a: 68:15:f4:31:03:dc:02:dc:39:65:75:3e:ef:e5:3b: b9:b3:82:67:e6:1d:cd:da:55:fc:a3:12:44:90:95: 69:1f:ed:d2:fb:9e:22:6e:28:f4:3f:2c:bf:1a:ca: 5a:04:fb:aa:a8:90:d1:a6:83:34:b5:e3:8a:e7:e5: 1c:35:78:c1:1f:b5:d7:cc:aa:2d:88:65:55:b3:e7: 6e:68:7f:dc:83:74:9e:73:20:ed:53:92:f3:12:42: ff:19:21:76:11:7c:8c:03:62:be:08:e8:cb:d0:9c: 3d:b7:c4:07:b6:06:8d:bc:c6:7a:5b:97:ab:7f:97: 61:d9:c5:48:94:64:eb:26:75:2f:46:e3:b3:c6:4f: e7:9f:38:04:0f:40:56:ba:7f:a3:88:32:74:ec:a9: ab:a2:2f:43:e6:c4:c8:ca:76:4c:6f:e2:9d:97:9f: f5:8a:96:36:df:6a:e5:59:20:cd:b6:79:60:37:d1: 19:11:9c:e2:f2:20:35:1b:17:61:e6:27:5d:20:89: d3:e6:ef:18:83:1b:d7:05:e2:b8:ff:81:77:7f:da: 92:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AA:25:19:0E:B3:2A:39:45:E5:C8:DC:F3:39:A9:49:1D:05:9C:64 X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33312e302f32342d3234203d3e203233393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.31.0/24 Signature Algorithm: sha256WithRSAEncryption bb:8d:57:56:79:dd:56:a6:05:78:d0:89:46:07:f2:c2:2e:32: b0:a1:96:9a:bb:c4:c6:4a:fc:da:44:73:a0:3e:10:92:92:64: bf:b2:f1:90:f3:e5:17:a1:62:44:cb:18:a7:e6:02:1d:2c:91: 09:17:c0:1a:48:d3:fa:09:92:c3:84:ee:ae:d1:3f:d4:68:ef: 19:c3:17:ce:61:23:9e:b2:66:4b:9b:45:1e:45:f5:d3:d2:b4: 59:83:0c:5e:f5:4e:75:92:71:58:03:a5:7d:b6:0d:7c:0a:37: 36:1c:d1:69:eb:7f:d7:94:71:69:69:d3:52:2b:32:8f:9e:6d: 21:02:5c:0f:51:92:a6:20:b0:d7:74:38:81:82:50:ca:31:83: 66:72:a8:27:58:08:e7:b3:4b:97:03:12:d8:78:28:4c:0e:91: 15:89:38:90:92:89:61:7f:b6:c1:95:03:9d:ce:37:4d:96:fe: 77:d9:c1:1f:9f:67:82:7c:58:96:1e:e1:9d:09:36:90:d3:7c: d5:93:b1:2c:a0:6d:15:12:02:d1:09:5b:0a:59:5c:76:8a:c0: 90:d8:83:5a:45:8d:0e:04:5c:39:53:03:18:68:e5:60:51:87: e6:f9:c6:98:97:83:19:59:12:84:8c:8f:91:fd:26:df:4e:91: 15:c2:00:27 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUOJdrDZefRd156MxRAaauw15+JhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNTA2MTkxNDQwNTFaFw0yNjA2MTgxNDQ1NTFaMDMxMTAvBgNV BAMTKDk4QUEyNTE5MEVCMzJBMzk0NUU1QzhEQ0YzMzlBOTQ5MUQwNTlDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWUXvzdI3I5EtBq85jqGB7wBTo NF1lqrT0h2kV7kEg0IYlLMs3lTzGpoavWmgV9DED3ALcOWV1Pu/lO7mzgmfmHc3a VfyjEkSQlWkf7dL7niJuKPQ/LL8ayloE+6qokNGmgzS144rn5Rw1eMEftdfMqi2I ZVWz525of9yDdJ5zIO1TkvMSQv8ZIXYRfIwDYr4I6MvQnD23xAe2Bo28xnpbl6t/ l2HZxUiUZOsmdS9G47PGT+efOAQPQFa6f6OIMnTsqauiL0PmxMjKdkxv4p2Xn/WK ljbfauVZIM22eWA30RkRnOLyIDUbF2HmJ10gidPm7xiDG9cF4rj/gXd/2pKzAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUmKolGQ6zKjlF5cjc8zmpSR0FnGQwHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjOGFiM2UwLWNhNjgtNDJmNi05 OGY2LTY1NGEyNTJhODY0OC8wLzMyMzAzMjJlMzkzMzJlMzMzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXR8wDQYJKoZIhvcN AQELBQADggEBALuNV1Z53VamBXjQiUYH8sIuMrChlpq7xMZK/NpEc6A+EJKSZL+y 8ZDz5RehYkTLGKfmAh0skQkXwBpI0/oJksOE7q7RP9Ro7xnDF85hI56yZkubRR5F 9dPStFmDDF71TnWScVgDpX22DXwKNzYc0Wnrf9eUcWlp01IrMo+ebSECXA9RkqYg sNd0OIGCUMoxg2ZyqCdYCOezS5cDEth4KEwOkRWJOJCSiWF/tsGVA53ON02W/nfZ wR+fZ4J8WJYe4Z0JNpDTfNWTsSygbRUSAtEJWwpZXHaKwJDYg1pFjQ4EXDlTAxho 5WBRh+b5xpiXgxlZEoSMj5H9Jt9OkRXCACc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:01 2025 by rpki-client