$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa File: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (raw, json) Hash identifier: ILoC7SZWlYY8tT8nCMj2qTfJpiM1Y89EAaEhPrCEnXY= Subject key identifier: 17:E0:C6:80:43:8D:32:E9:FE:0A:ED:6F:55:EF:BC:AE:9E:19:5C:69 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 632718DA021AA2B7D028FE1AADEEC7DE3D5FA492 Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa Signing time: Sat 04 Oct 2025 12:02:27 +0000 ROA not before: Sat 04 Oct 2025 11:57:27 +0000 ROA not after: Sat 03 Oct 2026 12:02:27 +0000 asID: 24536 IP address blocks: 202.146.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:27:18:da:02:1a:a2:b7:d0:28:fe:1a:ad:ee:c7:de:3d:5f:a4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Oct 4 11:57:27 2025 GMT Not After : Oct 3 12:02:27 2026 GMT Subject: CN=17E0C680438D32E9FE0AED6F55EFBCAE9E195C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:4d:dd:c4:a3:df:f0:7c:fe:11:e3:e7:fe: 62:3c:51:0e:ce:0c:13:c6:95:ce:d3:a2:0c:94:0f: 8d:d0:93:31:e4:2f:74:4d:9f:9b:d9:b6:ca:c1:19: 1d:d2:1e:bb:34:6d:89:c4:6e:0a:a8:3c:ff:98:39: 77:f2:3c:76:b7:9a:65:58:0e:53:bf:82:ce:ae:25: 4e:d1:bc:c0:33:6d:b5:fc:e5:cd:c9:0e:79:21:41: f9:54:db:42:72:f6:f3:a3:da:52:37:ff:b8:00:d3: ab:36:3e:e8:82:49:c9:1b:56:99:c0:f0:c1:de:e4: 3e:c2:db:76:b0:ef:0c:72:cc:29:5b:ad:4b:01:eb: 52:53:e6:61:be:6a:70:48:1e:74:97:00:61:aa:bd: 7d:02:39:ee:02:64:65:26:74:15:dc:4b:98:3a:c6: 32:e6:02:70:18:7b:b6:f0:fc:d4:1c:5d:6c:e7:fe: b8:6a:41:ad:d7:34:e7:45:25:14:c7:a6:07:96:f5: 00:bc:6e:08:14:42:3d:14:bf:6d:e2:5e:bb:3d:25: d6:b3:d8:17:ab:8c:2c:57:28:88:fc:25:27:4c:b1: 38:12:13:4a:9e:5e:df:c1:6c:62:17:28:75:60:89: d3:0c:af:9d:09:4c:12:7b:67:11:fd:63:88:60:6e: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E0:C6:80:43:8D:32:E9:FE:0A:ED:6F:55:EF:BC:AE:9E:19:5C:69 X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.146.176.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:70:1f:7e:af:eb:db:6a:94:1f:fb:31:99:37:5d:3d:e9:9d: 2b:9c:e7:12:f5:b0:8e:32:1a:67:be:18:43:d5:4f:85:3b:0f: 6d:fe:2e:a6:ae:cf:6a:cb:3f:95:45:5e:90:c5:6c:2d:1a:b5: b9:3c:8f:f7:76:b3:f7:aa:f1:8d:fe:a8:d0:7e:89:f9:90:67: ad:63:14:0d:2b:f8:17:a6:a0:56:40:a9:24:f2:59:5d:e9:c3: f4:03:75:d5:14:b3:d6:f6:90:cb:f2:3e:91:d6:c6:89:1e:9e: c4:b5:9b:f9:5a:ad:12:73:9a:b8:3c:94:52:a3:ce:ad:34:50: 4c:d4:ad:81:9d:99:d6:37:73:7f:6f:47:c8:e0:5d:18:27:26: fe:d7:35:b0:be:db:a8:df:87:bf:56:0d:6c:07:f3:32:e5:e2: 45:50:a4:26:27:ba:66:85:ed:56:a7:a3:cd:5f:ea:93:e9:b5: bb:67:e9:dd:67:d2:b6:f1:89:12:70:dc:20:ce:9f:34:c2:94: 81:c7:b6:be:ca:df:f8:07:96:24:08:65:74:80:f4:48:03:52: df:b9:35:78:49:ce:aa:1a:ee:6a:01:57:2f:bc:8c:e9:6e:31: 79:3a:75:d2:d0:f4:2f:c6:8b:5f:ed:0a:17:e8:02:c5:36:b2: 5d:1e:8a:97 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYycY2gIaorfQKP4are7H3j1fpJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNTEwMDQxMTU3MjdaFw0yNjEwMDMxMjAyMjdaMDMxMTAvBgNV BAMTKDE3RTBDNjgwNDM4RDMyRTlGRTBBRUQ2RjU1RUZCQ0FFOUUxOTVDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFE3dxKPf8Hz+EePn/mI8UQ7O DBPGlc7TogyUD43QkzHkL3RNn5vZtsrBGR3SHrs0bYnEbgqoPP+YOXfyPHa3mmVY DlO/gs6uJU7RvMAzbbX85c3JDnkhQflU20Jy9vOj2lI3/7gA06s2PuiCSckbVpnA 8MHe5D7C23aw7wxyzClbrUsB61JT5mG+anBIHnSXAGGqvX0COe4CZGUmdBXcS5g6 xjLmAnAYe7bw/NQcXWzn/rhqQa3XNOdFJRTHpgeW9QC8bggUQj0Uv23iXrs9Jdaz 2BerjCxXKIj8JSdMsTgSE0qeXt/BbGIXKHVgidMMr50JTBJ7ZxH9Y4hgbvwLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUF+DGgEONMun+Cu1vVe+8rp4ZXGkwHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3Nzc1ZGNmLTI4M2YtNDNjNS1h ZjYwLTA5ZTBkZWJhMDFhMi8wLzMyMzAzMjJlMzEzNDM2MmUzMTM3MzYyZTMwMmYz MjMxMmQzMjM0MjAzZDNlMjAzMjM0MzUzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDypKwMA0GCSqG SIb3DQEBCwUAA4IBAQA8cB9+r+vbapQf+zGZN1096Z0rnOcS9bCOMhpnvhhD1U+F Ow9t/i6mrs9qyz+VRV6QxWwtGrW5PI/3drP3qvGN/qjQfon5kGetYxQNK/gXpqBW QKkk8lld6cP0A3XVFLPW9pDL8j6R1saJHp7EtZv5Wq0Sc5q4PJRSo86tNFBM1K2B nZnWN3N/b0fI4F0YJyb+1zWwvtuo34e/Vg1sB/My5eJFUKQmJ7pmhe1Wp6PNX+qT 6bW7Z+ndZ9K28YkScNwgzp80wpSBx7a+yt/4B5YkCGV0gPRIA1LfuTV4Sc6qGu5q AVcvvIzpbjF5OnXS0PQvxotf7QoX6ALFNrJdHoqX -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:15 2025 by rpki-client