$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa File: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (raw, json) Hash identifier: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ= Subject key identifier: 4D:E6:07:EF:BA:DD:53:F9:2B:F7:E1:44:0B:A7:52:34:57:D3:AF:8A Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 65BFD2F70962E95971380FFED3EDC55F23D3FC4F Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa Signing time: Sun 17 Aug 2025 14:00:01 +0000 ROA not before: Sun 17 Aug 2025 13:55:01 +0000 ROA not after: Sun 16 Aug 2026 14:00:01 +0000 asID: 134655 IP address blocks: 203.96.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:bf:d2:f7:09:62:e9:59:71:38:0f:fe:d3:ed:c5:5f:23:d3:fc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Aug 17 13:55:01 2025 GMT Not After : Aug 16 14:00:01 2026 GMT Subject: CN=4DE607EFBADD53F92BF7E1440BA7523457D3AF8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:93:ad:f9:7c:64:2c:80:88:7a:32:22:dc: 87:4d:59:10:7b:fe:44:c2:5a:ad:46:3e:8b:a6:82: bf:24:53:65:67:97:a9:79:d7:4e:04:09:be:bf:59: 0d:2d:5f:a5:b8:f9:c4:62:f5:3e:40:00:94:1f:b9: 2d:8e:2c:89:c1:6c:91:a3:c7:1e:61:3f:0c:98:0b: 5c:06:2d:ba:72:12:f4:a9:cc:6a:83:6c:75:cb:13: 7a:ff:78:53:8f:3a:40:a5:79:03:34:1a:dd:37:2c: 6e:ad:aa:3a:60:3a:cd:17:e3:64:af:fb:de:dc:fa: 02:b7:cb:a0:31:5e:b7:a6:5d:d8:1b:42:1e:23:1b: fe:a5:08:d3:4d:87:30:e0:ee:9d:88:2a:f0:ad:42: 72:b5:2a:bc:3e:5e:cb:ba:10:07:a1:61:f9:a9:f7: e0:dd:32:01:61:e2:0a:da:1a:8b:b4:4d:ce:3b:ab: 4b:37:a2:18:5d:69:d2:46:43:40:62:54:af:11:52: c9:ba:27:0f:95:7f:31:c6:ec:c5:95:ad:58:7a:28: 4c:bb:80:34:4e:37:df:49:ac:a5:50:24:53:d3:ff: 16:e3:79:9d:e9:2a:b0:1f:ec:70:3f:2d:84:a5:72: 13:44:2f:fa:13:94:75:8a:24:75:a6:f9:5b:47:30: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E6:07:EF:BA:DD:53:F9:2B:F7:E1:44:0B:A7:52:34:57:D3:AF:8A X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.96.228.0/23 Signature Algorithm: sha256WithRSAEncryption 55:6f:20:06:59:cd:86:0f:64:09:45:86:e8:73:e7:02:d0:96: 33:ab:77:2e:3a:a8:c7:72:3d:33:13:2e:76:d8:dd:8d:3f:b7: 32:72:9f:77:99:2f:d7:27:6d:3d:c9:14:76:02:b4:8c:a9:37: 28:29:62:f2:e0:9e:19:c5:4e:4f:a7:d8:4e:3c:a9:cc:77:2e: eb:4e:4f:23:7f:76:7f:2b:e9:fa:92:1a:7e:c8:3c:bd:50:9a: 3f:91:27:04:9e:e5:1f:97:c6:0f:f7:a1:ca:a6:a3:08:dc:fd: ee:27:49:9a:3c:7c:19:a4:51:b9:4f:79:22:0a:3f:88:2e:2a: d2:5a:ac:73:d2:19:8b:c1:98:08:bf:8f:7b:1b:3b:e3:98:b4: a1:d5:9a:cc:cb:83:45:fc:64:8a:09:ce:e5:99:3d:c2:d4:df: 76:f1:f0:89:80:d4:4a:af:12:7c:f2:dd:56:b7:7d:fa:ac:4b: 6e:5d:65:24:2b:21:cc:30:2b:3f:e7:5d:dc:ac:6c:8a:fb:b8: 63:e3:ad:cb:be:6f:f4:df:e9:c2:85:35:aa:76:6f:14:30:54: fd:e3:8d:6d:a6:12:41:1d:c7:e4:cd:2b:53:20:4b:08:3d:cb: 3d:3f:fe:a0:4c:8f:c6:ea:f8:05:f9:e7:42:95:c6:00:b8:56: 16:9a:64:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZb/S9wli6VlxOA/+0+3FXyPT/E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTA4MTcxMzU1MDFaFw0yNjA4MTYxNDAwMDFaMDMxMTAvBgNV BAMTKDRERTYwN0VGQkFERDUzRjkyQkY3RTE0NDBCQTc1MjM0NTdEM0FGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHJOt+XxkLICIejIi3IdNWRB7 /kTCWq1GPoumgr8kU2Vnl6l5104ECb6/WQ0tX6W4+cRi9T5AAJQfuS2OLInBbJGj xx5hPwyYC1wGLbpyEvSpzGqDbHXLE3r/eFOPOkCleQM0Gt03LG6tqjpgOs0X42Sv +97c+gK3y6AxXremXdgbQh4jG/6lCNNNhzDg7p2IKvCtQnK1Krw+Xsu6EAehYfmp 9+DdMgFh4graGou0Tc47q0s3ohhdadJGQ0BiVK8RUsm6Jw+VfzHG7MWVrVh6KEy7 gDRON99JrKVQJFPT/xbjeZ3pKrAf7HA/LYSlchNEL/oTlHWKJHWm+VtHMDKPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTeYH77rdU/kr9+FEC6dSNFfTr4owHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i YTkwLWNlZThkMzk3OWZjZC8wLzMyMzAzMzJlMzkzNjJlMzIzMjM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy2DkMA0GCSqG SIb3DQEBCwUAA4IBAQBVbyAGWc2GD2QJRYboc+cC0JYzq3cuOqjHcj0zEy522N2N P7cycp93mS/XJ209yRR2ArSMqTcoKWLy4J4ZxU5Pp9hOPKnMdy7rTk8jf3Z/K+n6 khp+yDy9UJo/kScEnuUfl8YP96HKpqMI3P3uJ0maPHwZpFG5T3kiCj+ILirSWqxz 0hmLwZgIv497GzvjmLSh1ZrMy4NF/GSKCc7lmT3C1N928fCJgNRKrxJ88t1Wt336 rEtuXWUkKyHMMCs/513crGyK+7hj463Lvm/03+nChTWqdm8UMFT9441tphJBHcfk zStTIEsIPcs9P/6gTI/G6vgF+edClcYAuFYWmmTu -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:33 2025 by rpki-client