$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e20313331363931.roa File: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (raw, json) Hash identifier: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA= Subject key identifier: 95:F7:05:CA:AD:15:68:FF:80:07:3A:69:6A:12:DB:16:5F:0D:F5:29 Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 090A50C24C639E16AC31EFF13169837D4D158250 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e20313331363931.roa Signing time: Mon 20 Oct 2025 19:00:02 +0000 ROA not before: Mon 20 Oct 2025 18:55:02 +0000 ROA not after: Mon 19 Oct 2026 19:00:02 +0000 asID: 131691 IP address blocks: 202.69.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 05:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0a:50:c2:4c:63:9e:16:ac:31:ef:f1:31:69:83:7d:4d:15:82:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Oct 20 18:55:02 2025 GMT Not After : Oct 19 19:00:02 2026 GMT Subject: CN=95F705CAAD1568FF80073A696A12DB165F0DF529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:53:69:8b:26:6b:8a:72:7e:d7:f2:42:46:33: 2e:61:7a:e4:1a:47:75:86:6e:e2:c9:69:e1:26:9b: 00:42:0d:21:23:0b:e4:0b:64:9f:c9:c7:69:28:10: 57:b2:3b:0d:9b:bd:45:d9:df:09:1b:75:ca:bb:ca: 55:69:b4:3c:1d:91:65:00:45:b6:24:ea:03:94:7b: b1:4e:5f:15:83:f5:fa:11:b6:5b:2d:d9:c6:db:e7: 56:41:c4:98:fd:f5:94:ce:45:0b:d6:57:87:16:55: b3:38:bd:0b:20:8e:0f:88:b7:86:e4:2a:cf:d0:11: c6:92:73:3f:00:05:95:ed:cf:24:41:d6:52:a6:67: e9:e4:a3:68:da:7d:f9:02:7f:db:bd:67:98:bb:a2: cf:20:e2:0b:f3:37:ce:91:69:5e:70:a4:14:4b:f6: 62:a7:8c:43:69:aa:ea:ec:ee:78:56:68:43:80:08: c6:22:a9:84:fa:5f:b9:2d:e9:dc:b2:2e:a6:ca:f2: cf:8c:10:2d:11:53:ef:5e:e5:d1:f5:13:dd:e3:77: ba:74:19:63:2f:24:36:89:28:6c:1f:22:3e:a1:51: 73:a2:0b:90:12:84:70:c7:54:26:ea:60:61:04:20: b1:55:4d:d8:33:67:2d:07:be:89:67:25:dd:be:dd: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F7:05:CA:AD:15:68:FF:80:07:3A:69:6A:12:DB:16:5F:0D:F5:29 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e20313331363931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.69.96.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:c6:95:85:82:1e:c9:eb:3d:ea:30:be:68:c0:aa:26:87:0d: 45:47:58:67:05:ac:c4:10:b3:10:15:91:ed:a8:8f:23:3a:60: 95:03:d7:f2:01:66:66:05:7e:41:82:cb:79:69:76:d0:e4:47: a1:15:2a:16:51:85:8e:6f:ad:46:e2:9a:9c:65:c6:c4:c5:de: 77:b5:71:bc:80:e9:e4:90:c5:e3:63:84:37:93:ef:94:74:be: 2d:79:98:ad:c1:bf:ea:fe:7e:95:6b:7b:25:e9:83:ed:35:06: f2:56:85:e7:17:ad:12:bd:72:bb:b2:77:2c:16:f0:36:47:6d: b2:14:07:ab:c8:f8:36:15:b4:5f:ed:90:31:72:4e:02:c8:86: 01:47:fe:ab:39:dc:cf:ae:4f:91:4d:48:fa:50:ea:51:06:99: 9a:b8:9f:3b:25:5d:e4:3b:08:64:41:84:b7:3e:1b:41:ff:18: 6d:d7:30:97:63:1e:47:97:30:08:cc:4a:fe:3f:58:b8:5c:c1: 10:26:47:2c:6a:b6:35:aa:9d:1d:80:7c:e5:ca:e1:15:b5:13: 0e:bb:03:9f:47:8d:40:0a:cb:a5:2d:cb:c6:90:84:3c:62:3b: 50:81:da:ca:91:58:04:ac:2d:fa:4b:bb:c4:44:58:80:db:02: 96:2b:b3:9b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCQpQwkxjnhasMe/xMWmDfU0VglAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTEwMjAxODU1MDJaFw0yNjEwMTkxOTAwMDJaMDMxMTAvBgNV BAMTKDk1RjcwNUNBQUQxNTY4RkY4MDA3M0E2OTZBMTJEQjE2NUYwREY1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqU2mLJmuKcn7X8kJGMy5heuQa R3WGbuLJaeEmmwBCDSEjC+QLZJ/Jx2koEFeyOw2bvUXZ3wkbdcq7ylVptDwdkWUA RbYk6gOUe7FOXxWD9foRtlst2cbb51ZBxJj99ZTORQvWV4cWVbM4vQsgjg+It4bk Ks/QEcaScz8ABZXtzyRB1lKmZ+nko2jaffkCf9u9Z5i7os8g4gvzN86RaV5wpBRL 9mKnjENpqurs7nhWaEOACMYiqYT6X7kt6dyyLqbK8s+MEC0RU+9e5dH1E93jd7p0 GWMvJDaJKGwfIj6hUXOiC5AShHDHVCbqYGEEILFVTdgzZy0HvolnJd2+3TrtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlfcFyq0VaP+ABzppahLbFl8N9SkwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MGM5MDA5LWFkNTMtNGZhNi1h MTgzLTM0YjM0NTdiZWEwMy8wLzMyMzAzMjJlMzYzOTJlMzkzNjJlMzAyZjMyMzAy ZDMyMzQyMDNkM2UyMDMxMzMzMTM2MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMpFYDANBgkqhkiG 9w0BAQsFAAOCAQEAKsaVhYIeyes96jC+aMCqJocNRUdYZwWsxBCzEBWR7aiPIzpg lQPX8gFmZgV+QYLLeWl20ORHoRUqFlGFjm+tRuKanGXGxMXed7VxvIDp5JDF42OE N5PvlHS+LXmYrcG/6v5+lWt7JemD7TUG8laF5xetEr1yu7J3LBbwNkdtshQHq8j4 NhW0X+2QMXJOAsiGAUf+qzncz65PkU1I+lDqUQaZmrifOyVd5DsIZEGEtz4bQf8Y bdcwl2MeR5cwCMxK/j9YuFzBECZHLGq2NaqdHYB85crhFbUTDrsDn0eNQArLpS3L xpCEPGI7UIHaypFYBKwt+ku7xERYgNsCliuzmw== -----END CERTIFICATE-----Generated at Tue Oct 21 14:13:08 2025 by rpki-client