$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa File: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (raw, json) Hash identifier: Au0lkFPRKVBvBG5KfA74Xt/Sxl2Jzxo+Ex2p9zz5DkQ= Subject key identifier: 0B:FB:FD:EC:C5:B2:E1:84:B2:B8:05:C0:A8:C3:D7:0D:28:AB:84:88 Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Certificate serial: 5553034E1D21C7C9E69E27473C5FF8B6BF499867 Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa Signing time: Wed 25 Jun 2025 14:00:00 +0000 ROA not before: Wed 25 Jun 2025 13:55:00 +0000 ROA not after: Wed 24 Jun 2026 14:00:00 +0000 asID: 38505 IP address blocks: 203.153.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:53:03:4e:1d:21:c7:c9:e6:9e:27:47:3c:5f:f8:b6:bf:49:98:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6 Validity Not Before: Jun 25 13:55:00 2025 GMT Not After : Jun 24 14:00:00 2026 GMT Subject: CN=0BFBFDECC5B2E184B2B805C0A8C3D70D28AB8488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:e8:bc:9e:39:06:1f:9d:50:9f:a3:10:57: c9:b1:8d:04:d7:c6:9f:f6:14:ee:b8:dd:cb:0d:1a: df:a6:f3:59:64:94:26:59:ee:13:ea:d4:4e:ea:93: 14:05:3d:d1:ad:22:15:4b:42:5e:6d:49:bb:cf:91: 9b:2f:05:fe:d6:e5:f6:50:e2:63:d1:95:a9:be:22: 4e:0a:65:a9:2e:83:3a:84:ab:fa:bd:4c:2d:d4:44: 4e:61:66:e8:24:2c:bf:e6:47:38:58:ed:33:1f:73: 08:67:e1:50:2d:af:9c:30:2b:d4:3c:85:d4:4f:0d: fd:06:62:d0:21:2c:ee:16:16:b7:07:a6:5b:53:50: f5:5a:01:69:65:f7:fc:01:1f:69:3e:db:a3:b8:e1: f3:96:99:90:f3:f5:92:5a:7e:80:a3:25:f1:25:56: 48:e2:f7:0d:46:a7:f0:cd:27:fc:bb:5a:88:16:fc: aa:32:95:d4:0f:88:67:80:23:95:23:52:48:4d:b0: 89:61:0a:f7:47:d5:da:8c:f0:5e:61:b6:98:36:29: 66:cf:0d:cf:dc:d8:6f:39:d2:bc:ac:58:6b:c5:be: 4f:01:75:cd:dc:7b:dc:e9:7d:72:5e:3c:02:5b:fe: ab:e9:20:3a:4f:b2:b6:03:44:80:6e:ba:77:fe:6b: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FB:FD:EC:C5:B2:E1:84:B2:B8:05:C0:A8:C3:D7:0D:28:AB:84:88 X509v3 Authority Key Identifier: keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.126.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:63:e6:90:04:7e:e8:11:47:ed:b5:15:0c:98:4f:00:b8:5c: 6f:92:18:e0:94:6c:52:ca:49:3d:85:17:66:9f:c3:f1:87:fe: 15:12:00:70:72:dd:a6:f9:41:26:d5:76:cd:c0:f0:72:8e:51: 17:90:6f:42:1c:e4:7b:0a:d5:a0:45:d1:4e:37:a0:97:cf:bb: aa:26:8f:73:6f:4c:63:3e:8e:2c:e1:98:db:29:51:b5:82:e2: 73:de:fb:5d:36:bf:66:ed:21:a0:5f:80:01:10:b9:74:ce:94: 90:79:e5:84:4e:c4:84:79:0e:11:1b:ff:04:e4:9a:75:59:a6: 70:f2:4d:38:94:61:69:ea:b2:ce:63:4b:92:35:04:aa:1f:9f: d8:e5:06:fb:f5:ac:31:e8:d2:fa:03:82:d1:7e:2c:a7:56:58: ca:7a:5d:70:95:9d:db:43:78:7c:c4:f4:45:49:98:71:4a:39: 6e:7f:8b:a6:50:64:50:b3:97:3f:fb:2c:fd:3f:ec:2a:21:df: ec:ef:61:ba:8a:85:a8:df:fc:9f:1e:9a:b6:76:42:90:5c:25: 10:08:21:12:29:be:5a:0e:65:9a:79:b3:bb:57:86:d3:b6:ed: 97:e4:4d:ff:a5:41:02:91:58:e4:a1:46:69:23:76:0e:fc:fb: 7f:41:5e:7c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVVMDTh0hx8nmnidHPF/4tr9JmGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE MTFEMzNBNjAeFw0yNTA2MjUxMzU1MDBaFw0yNjA2MjQxNDAwMDBaMDMxMTAvBgNV BAMTKDBCRkJGREVDQzVCMkUxODRCMkI4MDVDMEE4QzNENzBEMjhBQjg0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQOi8njkGH51Qn6MQV8mxjQTX xp/2FO643csNGt+m81lklCZZ7hPq1E7qkxQFPdGtIhVLQl5tSbvPkZsvBf7W5fZQ 4mPRlam+Ik4KZakugzqEq/q9TC3URE5hZugkLL/mRzhY7TMfcwhn4VAtr5wwK9Q8 hdRPDf0GYtAhLO4WFrcHpltTUPVaAWll9/wBH2k+26O44fOWmZDz9ZJafoCjJfEl Vkji9w1Gp/DNJ/y7WogW/KoyldQPiGeAI5UjUkhNsIlhCvdH1dqM8F5htpg2KWbP Dc/c2G850rysWGvFvk8Bdc3ce9zpfXJePAJb/qvpIDpPsrYDRIBuunf+a9UtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUC/v97MWy4YSyuAXAqMPXDSirhIgwHwYDVR0j BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE MzNBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05 NjY1LThkNDc0ZmQxNGFlYS8wLzMyMzAzMzJlMzEzNTMzMmUzMTMyMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzUzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBy5l+MA0GCSqG SIb3DQEBCwUAA4IBAQBvY+aQBH7oEUfttRUMmE8AuFxvkhjglGxSykk9hRdmn8Px h/4VEgBwct2m+UEm1XbNwPByjlEXkG9CHOR7CtWgRdFON6CXz7uqJo9zb0xjPo4s 4ZjbKVG1guJz3vtdNr9m7SGgX4ABELl0zpSQeeWETsSEeQ4RG/8E5Jp1WaZw8k04 lGFp6rLOY0uSNQSqH5/Y5Qb79awx6NL6A4LRfiynVljKel1wlZ3bQ3h8xPRFSZhx Sjluf4umUGRQs5c/+yz9P+wqId/s72G6ioWo3/yfHpq2dkKQXCUQCCESKb5aDmWa ebO7V4bTtu2X5E3/pUECkVjkoUZpI3YO/Pt/QV58 -----END CERTIFICATE-----Generated at Mon Jun 30 09:46:34 2025 by rpki-client