$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36392e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: IWpRULjWlGR9Jzsp+ASiF1flr+SwQ4Q2L5sVUGqiiWo= Subject key identifier: E0:58:EE:C7:01:1F:7B:95:EA:75:8F:9D:1B:31:CB:BB:FB:A4:21:7B Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 42C52224D39F21BD477692E73F316F3FC78F3E24 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36392e302f32342d3234203d3e203233363935.roa Signing time: Sat 16 Aug 2025 09:00:52 +0000 ROA not before: Sat 16 Aug 2025 08:55:52 +0000 ROA not after: Sat 15 Aug 2026 09:00:52 +0000 asID: 23695 IP address blocks: 202.173.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c5:22:24:d3:9f:21:bd:47:76:92:e7:3f:31:6f:3f:c7:8f:3e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Aug 16 08:55:52 2025 GMT Not After : Aug 15 09:00:52 2026 GMT Subject: CN=E058EEC7011F7B95EA758F9D1B31CBBBFBA4217B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:b7:88:57:40:9c:2d:0f:f6:e8:ac:f2:9c: 63:fc:bb:bc:bd:6a:46:43:50:14:2f:cb:5e:ba:6e: 62:c2:02:e8:33:0d:84:d6:b4:ff:85:f2:30:e9:a3: d2:0a:ea:4e:c9:74:e6:92:49:da:b4:b6:40:0b:f6: a5:34:4a:14:fb:93:c6:9f:8c:74:65:83:d7:81:01: ba:d3:10:4f:1c:64:fe:b6:4a:f2:1f:52:1c:69:62: 33:55:33:19:3e:27:85:ed:5f:b4:55:53:a6:f6:90: 9c:90:5b:ab:c9:4e:a7:dc:ac:87:66:f8:5b:38:35: e3:78:50:f6:f9:78:71:23:cf:c5:d1:5c:ae:5b:a7: b7:39:4a:d4:cd:d3:7a:d8:0d:e0:7b:7b:58:af:e9: 46:59:61:c8:cb:e7:bb:9d:8d:4f:3b:c4:7e:f6:1b: a2:b4:fe:94:2f:27:45:ee:10:12:02:7a:cc:8e:3c: 33:ca:60:c2:66:a4:b3:89:8a:1d:9a:e0:36:d9:83: 23:ed:53:eb:73:e0:ef:4e:d2:2c:e5:ae:65:bf:85: 49:78:00:ec:af:ae:7c:03:5d:51:a4:02:aa:92:5c: b7:93:b1:25:41:68:e8:63:33:5b:a7:6e:3b:4b:e8: 34:8c:54:b9:dc:0b:13:dc:bd:c6:c0:ef:d8:26:20: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:58:EE:C7:01:1F:7B:95:EA:75:8F:9D:1B:31:CB:BB:FB:A4:21:7B X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36392e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.69.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:59:7c:f4:a8:b6:d3:d8:3a:09:be:e0:53:92:ce:91:cd:8f: 3d:aa:81:4e:c3:27:ac:ad:eb:14:f2:1d:c0:c4:81:4f:89:b8: 76:75:7b:d5:a1:b2:12:21:66:1f:ba:bd:f4:d0:76:19:80:5b: 4f:46:5e:19:71:87:9e:50:4a:73:d5:42:58:26:ed:54:2c:40: d0:98:15:04:7c:0e:a2:5c:ad:10:49:10:64:87:2d:52:fd:02: 5d:fe:9f:93:1c:d6:f1:69:b9:43:35:2d:fe:41:e3:60:74:e9: 4a:a1:2a:93:c8:b1:7a:ec:a0:49:71:af:13:74:2e:cb:8e:a1: cd:21:5b:55:62:3f:a0:af:6e:dd:0f:de:7c:45:52:71:f0:11: 7a:be:c8:ba:d7:87:74:aa:e9:9b:55:72:c7:1a:8a:f9:ea:b7: 28:65:00:a5:d8:15:ec:1d:5f:32:96:28:7e:51:d8:3b:c0:56: cf:65:8e:70:fa:9b:06:7c:ed:90:c3:d6:3e:4d:5d:d5:0c:3e: 45:f3:fe:7d:58:7e:65:4d:66:14:d4:b0:ff:80:19:43:27:75: 6f:f8:4b:f4:ff:89:65:df:00:4a:75:a2:a4:9a:ae:f6:87:b4: 74:ec:02:6b:7a:8c:1b:c0:24:51:10:96:c3:af:a7:8e:c8:c8: 43:06:0d:27 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQsUiJNOfIb1HdpLnPzFvP8ePPiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA4MTYwODU1NTJaFw0yNjA4MTUwOTAwNTJaMDMxMTAvBgNV BAMTKEUwNThFRUM3MDExRjdCOTVFQTc1OEY5RDFCMzFDQkJCRkJBNDIxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpLeIV0CcLQ/26KzynGP8u7y9 akZDUBQvy166bmLCAugzDYTWtP+F8jDpo9IK6k7JdOaSSdq0tkAL9qU0ShT7k8af jHRlg9eBAbrTEE8cZP62SvIfUhxpYjNVMxk+J4XtX7RVU6b2kJyQW6vJTqfcrIdm +Fs4NeN4UPb5eHEjz8XRXK5bp7c5StTN03rYDeB7e1iv6UZZYcjL57udjU87xH72 G6K0/pQvJ0XuEBICesyOPDPKYMJmpLOJih2a4DbZgyPtU+tz4O9O0izlrmW/hUl4 AOyvrnwDXVGkAqqSXLeTsSVBaOhjM1unbjtL6DSMVLncCxPcvcbA79gmIDrDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU4FjuxwEfe5XqdY+dGzHLu/ukIXswHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtRTANBgkqhkiG 9w0BAQsFAAOCAQEAGll89Ki209g6Cb7gU5LOkc2PPaqBTsMnrK3rFPIdwMSBT4m4 dnV71aGyEiFmH7q99NB2GYBbT0ZeGXGHnlBKc9VCWCbtVCxA0JgVBHwOolytEEkQ ZIctUv0CXf6fkxzW8Wm5QzUt/kHjYHTpSqEqk8ixeuygSXGvE3Quy46hzSFbVWI/ oK9u3Q/efEVScfARer7IuteHdKrpm1VyxxqK+eq3KGUApdgV7B1fMpYoflHYO8BW z2WOcPqbBnztkMPWPk1d1Qw+RfP+fVh+ZU1mFNSw/4AZQyd1b/hL9P+JZd8ASnWi pJqu9oe0dOwCa3qMG8AkURCWw6+njsjIQwYNJw== -----END CERTIFICATE-----Generated at Sat Aug 23 19:24:03 2025 by rpki-client