$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa File: 3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa (raw, json) Hash identifier: zOrekVHKDlRTk2Cm8y3kE2iNwTc4NxHsl+gpBFdmBQw= Subject key identifier: 28:99:1E:32:E6:50:9F:F1:F0:64:78:15:EC:8E:FE:1B:F8:7B:4A:41 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 3E9ECDDA3858E45BEF19C6A85D4F4BCB58D82D69 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa Signing time: Wed 13 Aug 2025 10:00:01 +0000 ROA not before: Wed 13 Aug 2025 09:55:01 +0000 ROA not after: Wed 12 Aug 2026 10:00:01 +0000 asID: 136121 IP address blocks: 202.154.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9e:cd:da:38:58:e4:5b:ef:19:c6:a8:5d:4f:4b:cb:58:d8:2d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Aug 13 09:55:01 2025 GMT Not After : Aug 12 10:00:01 2026 GMT Subject: CN=28991E32E6509FF1F0647815EC8EFE1BF87B4A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:88:b5:f5:c5:a0:54:11:e3:ad:62:76:ac: eb:a4:ac:3d:a8:33:26:31:49:ac:a6:32:9e:18:78: ac:49:c4:2e:34:75:22:32:02:6e:16:3c:b4:9e:73: b2:4a:b9:2c:1d:a4:cb:22:c1:64:4a:a1:6b:7d:f3: 1f:c2:dd:63:c7:a3:45:a1:78:ef:e8:13:0e:75:19: fc:33:7a:d1:86:7e:16:b6:65:10:39:f0:81:1d:0e: 34:7a:45:35:ba:89:33:bc:8a:3b:82:ed:e2:d0:c8: 16:be:c7:11:e8:d0:83:68:d5:cc:c0:83:c2:6a:3f: 56:31:83:76:7f:e6:ab:9a:03:3d:02:fb:e1:56:54: 95:3b:a2:28:85:1f:26:66:48:8c:f0:db:e1:e1:5c: 7f:41:fd:69:6e:6f:9b:10:1b:19:14:db:23:62:60: 73:62:8b:1a:99:d7:9b:92:d7:80:3e:3c:bb:fc:a8: c6:89:c9:e3:f3:3d:6f:e4:64:75:38:c0:18:b2:8e: 6e:45:c3:1d:ce:e2:da:43:53:d5:90:1b:3c:3a:a0: 7f:29:b8:6d:1b:06:3e:ee:e4:56:91:8d:40:bf:6e: 10:0f:4e:8d:1a:ed:5c:e4:31:bf:8f:51:b5:65:18: 70:2b:22:bd:70:05:4c:c8:d4:4b:72:db:a5:ec:49: fe:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:99:1E:32:E6:50:9F:F1:F0:64:78:15:EC:8E:FE:1B:F8:7B:4A:41 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32342d3234203d3e20313336313231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.18.0/24 Signature Algorithm: sha256WithRSAEncryption 52:45:02:6f:b6:65:be:bb:94:28:c1:ef:4f:4f:e2:e4:80:ea: df:3c:90:9f:8b:4c:18:f1:76:7e:d1:10:fa:cc:55:42:97:81: bd:9c:5d:f7:80:13:54:f6:f7:f5:dd:e7:68:0a:d0:23:c4:4c: a3:5c:ed:9a:71:f7:b9:64:27:0d:30:fa:a6:87:1f:5e:46:98: ca:56:6b:f1:51:4a:c8:e4:b5:cb:46:9a:43:fa:8f:f6:21:f7: ce:fe:a1:90:27:c9:0f:a7:20:f8:f1:0b:5a:f5:67:df:bc:5d: 66:0d:7e:cb:46:e3:f6:0e:3b:35:79:29:02:b7:a8:fb:84:80: 98:66:01:e1:b5:82:a4:32:69:11:10:34:9b:d0:f8:b8:8e:79: 31:e4:43:32:ac:62:49:48:36:9d:39:0d:4c:4f:85:0a:90:62: f7:07:9b:77:89:dd:53:8b:67:a4:5c:ca:b9:0c:13:3b:b9:26: 20:34:b7:1f:94:0e:6e:81:88:fd:1d:9b:8a:f6:9c:0e:c3:2b: 57:51:19:cd:57:f7:24:c5:80:6e:77:c7:9d:4f:4f:97:dd:98: 4b:66:a1:e7:35:43:a1:63:44:49:d3:7a:90:d9:8f:93:28:8a: c3:9d:1f:64:5b:52:0a:23:bb:5e:ea:92:17:d9:85:58:25:4c: bc:34:56:7f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPp7N2jhY5FvvGcaoXU9Ly1jYLWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTA4MTMwOTU1MDFaFw0yNjA4MTIxMDAwMDFaMDMxMTAvBgNV BAMTKDI4OTkxRTMyRTY1MDlGRjFGMDY0NzgxNUVDOEVGRTFCRjg3QjRBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDoi19cWgVBHjrWJ2rOukrD2o MyYxSaymMp4YeKxJxC40dSIyAm4WPLSec7JKuSwdpMsiwWRKoWt98x/C3WPHo0Wh eO/oEw51GfwzetGGfha2ZRA58IEdDjR6RTW6iTO8ijuC7eLQyBa+xxHo0INo1czA g8JqP1Yxg3Z/5quaAz0C++FWVJU7oiiFHyZmSIzw2+HhXH9B/Wlub5sQGxkU2yNi YHNiixqZ15uS14A+PLv8qMaJyePzPW/kZHU4wBiyjm5Fwx3O4tpDU9WQGzw6oH8p uG0bBj7u5FaRjUC/bhAPTo0a7VzkMb+PUbVlGHArIr1wBUzI1Ety26XsSf5lAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKJkeMuZQn/HwZHgV7I7+G/h7SkEwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypoSMA0GCSqG SIb3DQEBCwUAA4IBAQBSRQJvtmW+u5Qowe9PT+LkgOrfPJCfi0wY8XZ+0RD6zFVC l4G9nF33gBNU9vf13edoCtAjxEyjXO2acfe5ZCcNMPqmhx9eRpjKVmvxUUrI5LXL RppD+o/2IffO/qGQJ8kPpyD48Qta9WffvF1mDX7LRuP2Djs1eSkCt6j7hICYZgHh tYKkMmkREDSb0Pi4jnkx5EMyrGJJSDadOQ1MT4UKkGL3B5t3id1Ti2ekXMq5DBM7 uSYgNLcflA5ugYj9HZuK9pwOwytXURnNV/ckxYBud8edT0+X3ZhLZqHnNUOhY0RJ 03qQ2Y+TKIrDnR9kW1IKI7te6pIX2YVYJUy8NFZ/ -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:45 2025 by rpki-client