$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa File: 3230322e3134352e382e302f32312d3234203d3e203535363835.roa (raw, json) Hash identifier: GOo3tD35sZEqpK24cDb9XI+IGHHize4rrSw2ZbSo+Qw= Subject key identifier: 7B:1B:BC:D4:7E:B8:A6:BC:3C:8D:6A:A8:D7:9B:0F:A6:F3:5D:BD:60 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 193184143FB830BCACE431231E8D1B0846AD1B05 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa Signing time: Tue 12 Aug 2025 10:22:13 +0000 ROA not before: Tue 12 Aug 2025 10:17:13 +0000 ROA not after: Tue 11 Aug 2026 10:22:13 +0000 asID: 55685 IP address blocks: 202.145.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:31:84:14:3f:b8:30:bc:ac:e4:31:23:1e:8d:1b:08:46:ad:1b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Aug 12 10:17:13 2025 GMT Not After : Aug 11 10:22:13 2026 GMT Subject: CN=7B1BBCD47EB8A6BC3C8D6AA8D79B0FA6F35DBD60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:78:d0:5e:b8:ae:5b:75:eb:11:13:98:aa: 92:23:11:62:0b:28:6d:f5:f9:6e:2f:ad:ec:44:5c: f4:d5:8c:92:4b:de:53:ae:b3:3b:16:ef:bb:89:b3: 3e:96:db:ac:12:ae:57:46:2e:e8:50:48:1a:2a:8b: 67:41:84:6d:d9:5c:85:7b:de:44:14:62:7c:fb:89: 34:45:59:0b:7d:a3:d7:f2:1c:31:75:ac:46:a3:e1: 5b:aa:c7:69:99:cd:d2:71:b7:bd:0f:07:6c:f9:ce: 92:09:2c:f8:20:03:bd:9e:f6:07:ef:f8:db:cd:08: 10:7f:ea:27:2b:cc:26:48:1e:73:f2:18:1d:9b:da: 39:f1:02:f6:6f:53:2f:7c:d5:76:fa:12:76:9c:d5: 39:93:5f:65:05:ad:12:9b:a3:27:14:c2:bb:e7:05: a2:86:a8:33:52:b4:89:4e:fa:5c:9f:6c:82:b1:23: c2:c4:a0:ca:43:56:a5:e5:9e:20:6c:c4:f2:21:90: b4:ef:fd:d2:99:70:dc:9a:56:26:65:8b:5a:88:26: 33:46:a2:80:42:44:8c:97:dd:de:cf:fe:4d:c2:77: 4c:1e:ba:cb:f3:9c:21:5a:de:d0:47:12:25:e6:f2: aa:a0:9c:47:2d:17:fa:d2:56:de:c0:87:fe:bc:99: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1B:BC:D4:7E:B8:A6:BC:3C:8D:6A:A8:D7:9B:0F:A6:F3:5D:BD:60 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.145.8.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:22:02:06:ba:6e:e1:ca:94:81:69:26:58:b5:75:cc:df:5d: c8:76:18:18:0a:3f:ae:bb:2a:c8:86:34:56:cf:5f:f3:c8:23: 67:95:79:22:32:91:95:b8:52:7e:6b:e7:1b:9c:9e:ca:90:60: 37:f6:bb:4e:87:e3:a2:89:7b:c1:9f:ff:34:d6:79:22:d1:e2: 03:1b:3a:42:4e:28:2a:1a:2f:2e:ea:15:33:92:26:83:b4:51: 87:66:ea:a2:11:85:d2:2d:13:bd:d3:6a:fc:84:50:22:48:b9: e9:44:03:59:a8:12:9d:f9:17:df:ca:19:e4:de:4a:1b:85:83: 21:9b:0e:50:3c:19:2a:71:45:b1:61:39:f3:47:a8:78:c8:f8: a6:3a:75:74:c2:83:9b:eb:68:0a:d5:c1:c9:35:98:f4:75:6c: 64:77:a7:f1:d1:12:5b:84:10:d8:0d:64:46:76:a4:6c:b4:0e: ff:dc:d8:cd:84:9c:53:0f:66:b6:87:c3:12:a6:15:d7:9d:e6: 89:75:bb:26:f1:61:36:e8:cb:59:da:36:11:2a:a3:7c:94:73: 89:e2:d7:7d:eb:9f:c5:37:11:f4:4c:34:b8:f9:c9:49:cb:fa: b8:39:b8:11:1c:83:ab:a3:bb:f1:f7:4b:05:09:78:6d:69:16: 9f:e1:73:dc -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUGTGEFD+4MLys5DEjHo0bCEatGwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTA4MTIxMDE3MTNaFw0yNjA4MTExMDIyMTNaMDMxMTAvBgNV BAMTKDdCMUJCQ0Q0N0VCOEE2QkMzQzhENkFBOEQ3OUIwRkE2RjM1REJENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aXjQXriuW3XrEROYqpIjEWIL KG31+W4vrexEXPTVjJJL3lOuszsW77uJsz6W26wSrldGLuhQSBoqi2dBhG3ZXIV7 3kQUYnz7iTRFWQt9o9fyHDF1rEaj4Vuqx2mZzdJxt70PB2z5zpIJLPggA72e9gfv +NvNCBB/6icrzCZIHnPyGB2b2jnxAvZvUy981Xb6Enac1TmTX2UFrRKboycUwrvn BaKGqDNStIlO+lyfbIKxI8LEoMpDVqXlniBsxPIhkLTv/dKZcNyaViZli1qIJjNG ooBCRIyX3d7P/k3Cd0weusvznCFa3tBHEiXm8qqgnEctF/rSVt7Ah/68mVCJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUexu81H64prw8jWqo15sPpvNdvWAwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMjJlMzEzNDM1MmUzODJlMzAyZjMyMzEy ZDMyMzQyMDNkM2UyMDM1MzUzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKkQgwDQYJKoZIhvcN AQELBQADggEBADoiAga6buHKlIFpJli1dczfXch2GBgKP667KsiGNFbPX/PII2eV eSIykZW4Un5r5xucnsqQYDf2u06H46KJe8Gf/zTWeSLR4gMbOkJOKCoaLy7qFTOS JoO0UYdm6qIRhdItE73TavyEUCJIuelEA1moEp35F9/KGeTeShuFgyGbDlA8GSpx RbFhOfNHqHjI+KY6dXTCg5vraArVwck1mPR1bGR3p/HREluEENgNZEZ2pGy0Dv/c 2M2EnFMPZraHwxKmFded5ol1uybxYTboy1naNhEqo3yUc4ni133rn8U3EfRMNLj5 yUnL+rg5uBEcg6uju/H3SwUJeG1pFp/hc9w= -----END CERTIFICATE-----Generated at Sat Aug 23 18:42:03 2025 by rpki-client