$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35342e302f32342d3234203d3e203338313435.roa File: 3230322e3138302e35342e302f32342d3234203d3e203338313435.roa (raw, json) Hash identifier: EebQPkPYFK14OqBzKASx2gixOonVdg9YqhFAZDEu4RA= Subject key identifier: CF:48:96:7B:30:59:5D:03:E0:9D:D5:9B:91:68:A9:F2:C6:CB:6C:95 Certificate issuer: /CN=365454AF0090F9E623861AF2120855412F7447D1 Certificate serial: 35C6C106EA332FD1000E8BED0CF83846173129E5 Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35342e302f32342d3234203d3e203338313435.roa Signing time: Thu 14 Aug 2025 08:00:00 +0000 ROA not before: Thu 14 Aug 2025 07:55:00 +0000 ROA not after: Thu 13 Aug 2026 08:00:00 +0000 asID: 38145 IP address blocks: 202.180.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c6:c1:06:ea:33:2f:d1:00:0e:8b:ed:0c:f8:38:46:17:31:29:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1 Validity Not Before: Aug 14 07:55:00 2025 GMT Not After : Aug 13 08:00:00 2026 GMT Subject: CN=CF48967B30595D03E09DD59B9168A9F2C6CB6C95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:5f:37:14:6b:2e:8a:80:f6:dc:cd:12:25: 49:34:32:be:18:06:e2:80:05:a4:7f:0f:88:20:66: b0:d9:e0:6f:d1:b7:cf:34:e8:f0:5c:7b:9f:34:35: fd:e6:be:dd:4d:86:ec:d5:10:70:32:17:74:5c:66: 1d:1d:88:3d:23:78:88:88:93:12:b4:87:16:b7:68: ea:66:58:3e:b3:85:56:65:52:09:4a:f5:61:39:df: a8:7f:83:e7:f9:4b:d9:8b:7d:36:9f:49:d9:a8:1e: 92:04:62:fe:7d:9a:6e:15:6b:7b:88:45:a3:63:76: fc:38:8f:24:49:d4:01:c7:1e:9e:d9:25:44:d3:77: 50:bb:61:5f:2d:69:76:0a:6f:3c:06:f8:96:a8:30: b3:ce:cb:0a:23:44:f5:40:01:f6:29:4c:21:9d:e6: bb:7c:72:98:fb:f1:24:47:bf:6f:0f:d3:69:e2:f8: 72:77:8c:65:27:ac:b2:ae:df:ca:ef:b8:e7:af:f3: 5a:66:a4:d7:83:62:24:3e:f4:f4:7f:e3:5e:2b:24: c9:25:ae:7f:95:05:89:81:29:3f:21:12:71:e6:26: d2:2b:f8:ff:b7:bd:08:ca:8d:ef:73:45:9b:10:76: 9b:e5:cf:90:98:d7:14:66:d8:3e:a4:2f:39:e3:1f: 68:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:48:96:7B:30:59:5D:03:E0:9D:D5:9B:91:68:A9:F2:C6:CB:6C:95 X509v3 Authority Key Identifier: keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35342e302f32342d3234203d3e203338313435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.180.54.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:3f:82:ab:21:8a:f5:f8:23:39:65:0c:d8:db:7b:e0:6c:eb: dc:7f:0e:d6:b9:f7:e1:47:c9:0f:f4:38:2c:b9:b5:d7:b1:0a: 1d:82:23:26:58:86:2c:f0:b8:76:4d:2c:a3:5b:8b:16:d0:c9: eb:8e:0d:32:b1:61:18:12:7d:fe:a1:1b:68:a7:0a:2e:23:b4: 40:9a:15:54:c8:8d:6b:a9:9d:48:59:ea:5c:5a:9c:08:8a:12: 4b:cf:cc:30:01:52:9a:91:99:09:c9:2f:0e:0b:c3:e2:b0:aa: 71:fd:e0:26:54:69:b9:0e:7e:be:67:41:01:d7:fb:ac:ec:ed: 81:2c:0a:3c:34:00:bd:3e:93:ae:52:5d:ac:55:4d:8c:d2:3d: b1:65:53:f9:03:64:b0:eb:b5:86:9b:c8:2d:a9:7d:a6:08:69: c3:96:c6:c2:a7:88:e3:dd:34:23:6b:50:90:64:0a:9e:17:4c: 7b:e6:4f:c1:3e:4c:85:c8:bc:bd:aa:7e:5d:97:bf:82:5c:87: 82:a8:28:3b:ed:27:f3:c4:0b:b0:0f:03:5b:3a:e5:20:6b:48: 86:a6:53:60:0a:a9:c9:49:ec:ba:f5:72:a2:37:ac:da:12:08: ed:13:36:9c:4a:18:7a:3e:a2:09:14:78:6d:47:b8:24:76:9a: ea:e6:68:ec -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNcbBBuozL9EADovtDPg4RhcxKeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1NDEy Rjc0NDdEMTAeFw0yNTA4MTQwNzU1MDBaFw0yNjA4MTMwODAwMDBaMDMxMTAvBgNV BAMTKENGNDg5NjdCMzA1OTVEMDNFMDlERDU5QjkxNjhBOUYyQzZDQjZDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXV83FGsuioD23M0SJUk0Mr4Y BuKABaR/D4ggZrDZ4G/Rt8806PBce580Nf3mvt1NhuzVEHAyF3RcZh0diD0jeIiI kxK0hxa3aOpmWD6zhVZlUglK9WE536h/g+f5S9mLfTafSdmoHpIEYv59mm4Va3uI RaNjdvw4jyRJ1AHHHp7ZJUTTd1C7YV8taXYKbzwG+JaoMLPOywojRPVAAfYpTCGd 5rt8cpj78SRHv28P02ni+HJ3jGUnrLKu38rvuOev81pmpNeDYiQ+9PR/414rJMkl rn+VBYmBKT8hEnHmJtIr+P+3vQjKje9zRZsQdpvlz5CY1xRm2D6kLznjH2jXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUz0iWezBZXQPgndWbkWip8sbLbJUwHwYDVR0j BBgwFoAUNlRUrwCQ+eYjhhryEghVQS90R9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Nzk4NGUzYS00OGY5LTRjZGEtYmU2Yy00MDA2YzA4ZjhmZDIvMC8zNjU0NTRBRjAw OTBGOUU2MjM4NjFBRjIxMjA4NTU0MTJGNzQ0N0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY1NDU0QUYwMDkwRjlFNjIzODYxQUYyMTIwODU1NDEyRjc0 NDdEMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3OTg0ZTNhLTQ4ZjktNGNkYS1i ZTZjLTQwMDZjMDhmOGZkMi8wLzMyMzAzMjJlMzEzODMwMmUzNTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMq0NjANBgkqhkiG 9w0BAQsFAAOCAQEAfD+CqyGK9fgjOWUM2Nt74Gzr3H8O1rn34UfJD/Q4LLm117EK HYIjJliGLPC4dk0so1uLFtDJ644NMrFhGBJ9/qEbaKcKLiO0QJoVVMiNa6mdSFnq XFqcCIoSS8/MMAFSmpGZCckvDgvD4rCqcf3gJlRpuQ5+vmdBAdf7rOztgSwKPDQA vT6TrlJdrFVNjNI9sWVT+QNksOu1hpvILal9pghpw5bGwqeI4900I2tQkGQKnhdM e+ZPwT5Mhci8vap+XZe/glyHgqgoO+0n88QLsA8DWzrlIGtIhqZTYAqpyUnsuvVy ojes2hII7RM2nEoYej6iCRR4bUe4JHaa6uZo7A== -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:26 2025 by rpki-client