$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa File: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (raw, json) Hash identifier: KvSvkJVty1qHjYffQieqFJAuh3dt1BHzGki9sQiAFXI= Subject key identifier: 0E:9D:CD:6E:3C:50:A1:96:A5:B7:CD:49:92:E1:2A:98:C4:02:86:D1 Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Certificate serial: 7AD3D62C407C10BBAF2A0B4EF9F6F8677F747A39 Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa Signing time: Wed 25 Jun 2025 14:00:00 +0000 ROA not before: Wed 25 Jun 2025 13:55:00 +0000 ROA not after: Wed 24 Jun 2026 14:00:00 +0000 asID: 38505 IP address blocks: 203.153.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d3:d6:2c:40:7c:10:bb:af:2a:0b:4e:f9:f6:f8:67:7f:74:7a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Validity Not Before: Jun 25 13:55:00 2025 GMT Not After : Jun 24 14:00:00 2026 GMT Subject: CN=0E9DCD6E3C50A196A5B7CD4992E12A98C40286D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:27:29:8a:10:02:e3:e9:27:d5:78:fa:c5: fd:f3:1c:c1:98:c8:0e:9e:24:cc:ed:4c:a8:39:8b: 8e:fe:0f:51:7a:46:6c:7e:ab:3a:71:29:7b:27:f9: 24:ec:d6:61:97:5b:fd:a0:03:50:31:ed:83:6c:70: 7c:b7:d3:67:e3:ab:4b:f8:dc:eb:65:c9:73:d2:2b: 9c:60:8b:f2:33:80:7b:cb:43:d2:6c:b4:09:a4:fe: c6:86:07:87:90:f0:fe:f0:d3:f8:85:3e:2e:2a:80: 35:62:44:d4:84:65:a1:28:66:67:df:9d:8e:b1:64: f2:93:9d:3d:f7:1a:5f:b5:52:80:c0:be:13:1c:46: 40:22:81:b8:6b:20:49:c8:d9:ef:73:9a:23:d3:3a: 42:db:1b:e9:c0:be:8b:7c:6c:5f:23:bc:2c:17:a3: 62:cc:cc:8c:f9:a7:75:25:8f:66:04:be:cf:ca:f0: a0:99:1c:1b:91:b0:09:4b:12:c3:08:83:10:0f:cf: 17:0d:47:16:35:f0:97:04:be:75:3b:f4:30:4e:a8: 43:c2:d2:c5:51:b3:36:9e:62:4c:f7:0e:65:47:90: cb:7d:2e:65:d8:9a:cd:34:7b:44:e9:78:93:2a:e2: 18:62:6d:db:7c:96:75:3f:9f:86:3a:ed:30:d1:6e: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9D:CD:6E:3C:50:A1:96:A5:B7:CD:49:92:E1:2A:98:C4:02:86:D1 X509v3 Authority Key Identifier: keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.122.0/23 Signature Algorithm: sha256WithRSAEncryption c8:bd:73:ac:be:bb:cd:7a:60:23:c5:66:a6:0a:09:82:43:17: 32:4b:2b:09:0f:cf:3d:29:59:4b:a4:8f:37:cf:51:4c:79:12: 3b:45:a5:3e:12:d7:57:c0:79:3e:bc:da:fa:e4:ab:72:9c:cd: 33:29:8d:76:d8:5b:d0:2c:a1:6a:25:76:4a:e2:31:6a:71:23: f7:32:80:fa:26:c3:c3:ce:07:6e:b7:87:e3:bf:31:bd:02:87: 2b:2c:c8:e0:9c:43:0a:dd:15:1e:51:69:45:f6:c0:40:0b:d7: 55:da:b6:06:2d:f3:ff:05:d2:bf:f7:f4:81:0c:83:01:c0:96: 55:83:94:76:53:5d:71:e4:1a:45:20:d8:86:4a:bd:9d:cb:f5: a1:4a:48:1c:5f:f1:69:f5:e4:4b:33:e1:2b:3a:77:ef:07:ee: 2f:52:a4:19:f2:c8:c4:15:ba:dd:8f:9a:b8:86:0f:d0:22:bc: 85:e3:d1:f5:43:e6:6d:76:1d:79:bc:c7:7b:63:a2:f0:af:f1: b1:74:1a:74:31:3c:4a:6b:dd:c8:7c:50:3b:3e:9d:9b:cd:0c: ac:3b:b9:28:a1:e4:b4:b5:91:8b:da:f8:c4:73:40:da:09:4b: 57:23:ac:17:50:71:fb:29:04:4e:fa:03:ab:44:1b:4e:2b:b5: 1c:07:46:dd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUetPWLEB8ELuvKgtO+fb4Z390ejkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE MTFEMzNBNjAeFw0yNTA2MjUxMzU1MDBaFw0yNjA2MjQxNDAwMDBaMDMxMTAvBgNV BAMTKDBFOURDRDZFM0M1MEExOTZBNUI3Q0Q0OTkyRTEyQTk4QzQwMjg2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqicpihAC4+kn1Xj6xf3zHMGY yA6eJMztTKg5i47+D1F6Rmx+qzpxKXsn+STs1mGXW/2gA1Ax7YNscHy302fjq0v4 3OtlyXPSK5xgi/IzgHvLQ9JstAmk/saGB4eQ8P7w0/iFPi4qgDViRNSEZaEoZmff nY6xZPKTnT33Gl+1UoDAvhMcRkAigbhrIEnI2e9zmiPTOkLbG+nAvot8bF8jvCwX o2LMzIz5p3Ulj2YEvs/K8KCZHBuRsAlLEsMIgxAPzxcNRxY18JcEvnU79DBOqEPC 0sVRszaeYkz3DmVHkMt9LmXYms00e0TpeJMq4hhibdt8lnU/n4Y67TDRbmJlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUDp3NbjxQoZalt81JkuEqmMQChtEwHwYDVR0j BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE MzNBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzAzMzJlMzEzNTMzMmUzMTMyMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy5l6MA0GCSqG SIb3DQEBCwUAA4IBAQDIvXOsvrvNemAjxWamCgmCQxcySysJD889KVlLpI83z1FM eRI7RaU+EtdXwHk+vNr65KtynM0zKY122FvQLKFqJXZK4jFqcSP3MoD6JsPDzgdu t4fjvzG9AocrLMjgnEMK3RUeUWlF9sBAC9dV2rYGLfP/BdK/9/SBDIMBwJZVg5R2 U11x5BpFINiGSr2dy/WhSkgcX/Fp9eRLM+ErOnfvB+4vUqQZ8sjEFbrdj5q4hg/Q IryF49H1Q+Ztdh15vMd7Y6Lwr/GxdBp0MTxKa93IfFA7Pp2bzQysO7kooeS0tZGL 2vjEc0DaCUtXI6wXUHH7KQRO+gOrRBtOK7UcB0bd -----END CERTIFICATE-----Generated at Mon Jun 30 09:44:07 2025 by rpki-client