$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: RaKEgFfPBag0Nqmq1W+hCtI9Ea7HFEcZBDAtujJERJk= Subject key identifier: 96:7E:B5:38:C9:66:B9:3D:7B:BB:CF:0B:B9:39:85:C5:89:06:86:86 Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 499C511ACAF0406526D3345DE7AAD60BE6D35FC7 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa Signing time: Tue 12 Aug 2025 04:02:25 +0000 ROA not before: Tue 12 Aug 2025 03:57:25 +0000 ROA not after: Tue 11 Aug 2026 04:02:25 +0000 asID: 23695 IP address blocks: 202.173.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9c:51:1a:ca:f0:40:65:26:d3:34:5d:e7:aa:d6:0b:e6:d3:5f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Aug 12 03:57:25 2025 GMT Not After : Aug 11 04:02:25 2026 GMT Subject: CN=967EB538C966B93D7BBBCF0BB93985C589068686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:ff:b9:d3:c5:2d:d8:78:3f:be:d9:e8:79: db:e7:e9:83:a9:3f:fc:0c:85:ce:ef:92:0e:d6:49: 52:43:54:be:ac:5d:73:23:4f:e7:cd:69:c0:0c:5a: fe:82:e7:5c:cf:ef:4c:ba:33:ae:66:b4:0e:72:32: d4:7c:64:ea:23:1b:68:ac:6a:a4:99:0a:3f:29:f1: 99:f1:e9:aa:3f:40:fe:0d:a0:2f:45:ed:8c:70:95: af:64:03:a8:70:3c:c4:dd:72:01:7c:5a:d4:61:06: 11:69:4d:e7:af:e2:2a:cb:62:3f:16:a0:d8:e5:fc: 1b:ab:c7:9c:eb:0a:56:94:01:0d:07:e3:47:1c:5b: 73:81:d5:fd:2b:19:ec:9c:5c:ca:75:38:bc:a9:62: 2c:ce:dc:3e:0d:46:00:1b:bf:0e:b2:42:1f:ae:07: 15:61:4e:51:96:a7:39:2c:79:8c:51:61:9a:5e:e0: 12:09:21:f2:39:b2:2a:e6:b2:43:e6:4f:ff:62:33: 1e:cc:80:58:96:cd:8a:b3:fd:5d:d6:0a:8d:48:02: 03:2f:83:3d:1d:ab:3c:ef:77:88:40:b2:53:52:7e: 1a:e2:44:3a:7c:9e:85:9b:79:5e:3d:04:d6:8e:2b: 42:29:82:5c:cf:b4:8d:21:92:cd:2a:bd:25:0f:42: 89:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7E:B5:38:C9:66:B9:3D:7B:BB:CF:0B:B9:39:85:C5:89:06:86:86 X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.65.0/24 Signature Algorithm: sha256WithRSAEncryption c2:4b:75:60:9c:9d:01:62:63:32:2d:96:ae:1f:81:4d:20:a8: ca:84:3f:7d:cc:af:94:e8:f9:26:7a:83:68:ba:b7:b5:c9:e5: 05:8b:54:71:c1:65:86:55:c6:3c:cb:dc:20:be:7f:70:8b:df: 55:88:39:d0:98:ff:64:e6:b3:4b:24:99:cc:c2:f0:7d:aa:10: ab:67:f7:29:43:88:c9:73:b2:5c:32:7b:b8:03:b3:2b:29:55: 86:72:d7:8f:0e:09:99:d7:2b:4d:87:ba:56:9e:e5:3e:f9:a1: 19:5f:e5:1e:6c:49:42:61:c8:15:52:83:79:d1:7b:9a:8f:60: 29:f6:56:70:39:06:2d:12:bd:c0:47:3e:f2:78:eb:8f:d9:3e: d0:08:b8:82:f4:d5:04:5d:2a:5a:4f:be:b1:1f:71:78:07:c0: 15:e9:c7:4a:60:42:cb:d7:cb:5d:de:6d:0d:75:f7:a2:95:f3: b2:45:61:ec:8a:9b:40:a9:14:0f:4f:e3:4b:82:b1:c9:56:f1: 85:72:93:4e:6d:66:4f:1f:7c:e7:11:5f:f4:ed:58:6f:94:71: 41:b5:6f:ec:15:09:27:f7:78:ea:eb:3c:10:30:fb:4e:da:59: a6:ea:7a:dd:c2:59:8e:66:ab:8c:df:8d:e5:4b:38:36:06:07: 1e:6b:c6:c4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSZxRGsrwQGUm0zRd56rWC+bTX8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA4MTIwMzU3MjVaFw0yNjA4MTEwNDAyMjVaMDMxMTAvBgNV BAMTKDk2N0VCNTM4Qzk2NkI5M0Q3QkJCQ0YwQkI5Mzk4NUM1ODkwNjg2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdv+508Ut2Hg/vtnoedvn6YOp P/wMhc7vkg7WSVJDVL6sXXMjT+fNacAMWv6C51zP70y6M65mtA5yMtR8ZOojG2is aqSZCj8p8Znx6ao/QP4NoC9F7Yxwla9kA6hwPMTdcgF8WtRhBhFpTeev4irLYj8W oNjl/Burx5zrClaUAQ0H40ccW3OB1f0rGeycXMp1OLypYizO3D4NRgAbvw6yQh+u BxVhTlGWpzkseYxRYZpe4BIJIfI5sirmskPmT/9iMx7MgFiWzYqz/V3WCo1IAgMv gz0dqzzvd4hAslNSfhriRDp8noWbeV49BNaOK0IpglzPtI0hks0qvSUPQolvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUln61OMlmuT17u88LuTmFxYkGhoYwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtQTANBgkqhkiG 9w0BAQsFAAOCAQEAwkt1YJydAWJjMi2Wrh+BTSCoyoQ/fcyvlOj5JnqDaLq3tcnl BYtUccFlhlXGPMvcIL5/cIvfVYg50Jj/ZOazSySZzMLwfaoQq2f3KUOIyXOyXDJ7 uAOzKylVhnLXjw4JmdcrTYe6Vp7lPvmhGV/lHmxJQmHIFVKDedF7mo9gKfZWcDkG LRK9wEc+8njrj9k+0Ai4gvTVBF0qWk++sR9xeAfAFenHSmBCy9fLXd5tDXX3opXz skVh7IqbQKkUD0/jS4KxyVbxhXKTTm1mTx985xFf9O1Yb5RxQbVv7BUJJ/d46us8 EDD7TtpZpup63cJZjmarjN+N5Us4NgYHHmvGxA== -----END CERTIFICATE-----Generated at Sat Aug 23 19:24:02 2025 by rpki-client