$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31392e302f32342d3234203d3e203233393530.roa File: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (raw, json) Hash identifier: 2GOcbt6lKgz0uDS+iD9xaVBtEJLrOlEfoFcSzaU8sBw= Subject key identifier: F2:F1:2E:E9:F8:40:FB:3E:FB:26:D7:FD:28:F9:3F:7F:1A:24:56:A3 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 7F7DEDEE341199AC1B99D6FE8A76CE62FADB9790 Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31392e302f32342d3234203d3e203233393530.roa Signing time: Thu 09 Oct 2025 15:00:00 +0000 ROA not before: Thu 09 Oct 2025 14:55:00 +0000 ROA not after: Thu 08 Oct 2026 15:00:00 +0000 asID: 23950 IP address blocks: 202.51.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7d:ed:ee:34:11:99:ac:1b:99:d6:fe:8a:76:ce:62:fa:db:97:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Oct 9 14:55:00 2025 GMT Not After : Oct 8 15:00:00 2026 GMT Subject: CN=F2F12EE9F840FB3EFB26D7FD28F93F7F1A2456A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:a2:09:1d:21:3a:3e:2b:8e:9b:12:e8:50: c3:bf:10:61:bf:67:9c:02:31:b9:f3:c1:bf:36:c0: b8:99:86:4c:00:4f:40:fd:f2:55:f3:3e:36:21:52: 42:49:28:c3:05:6e:de:57:43:38:92:1f:b5:5f:b5: c5:23:fe:c1:43:a9:8c:fc:0b:aa:82:e4:8d:a3:4b: ec:b5:0b:c0:0e:9b:db:2c:bd:21:65:0b:e2:30:b0: b2:42:e9:c2:84:d9:cd:b1:ae:fb:ef:42:59:b4:7f: 25:43:9f:f2:29:20:2f:37:5f:e9:de:ab:c0:58:65: ef:50:ea:1c:38:55:68:03:44:da:c3:5a:f0:d1:a9: fe:86:18:59:ff:4a:4e:fa:f0:ca:d9:2c:22:83:62: 8b:3f:cd:df:66:20:06:74:28:3f:64:c7:40:e5:9a: de:fa:87:a3:3a:bc:46:28:36:87:22:58:3e:0e:4d: f3:94:80:f2:4d:e0:ce:cd:7e:ef:15:68:1f:47:60: 80:47:73:6d:b1:b1:ec:5c:7c:37:0c:78:8c:e6:87: 3c:56:5c:5d:db:69:6e:35:9e:13:db:f6:10:2b:a4: 32:51:ee:37:da:52:a1:bc:e0:ec:c6:9c:a2:27:7d: 9a:2c:45:02:f6:a0:25:bd:28:41:b2:ad:e7:64:cc: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F1:2E:E9:F8:40:FB:3E:FB:26:D7:FD:28:F9:3F:7F:1A:24:56:A3 X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31392e302f32342d3234203d3e203233393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.19.0/24 Signature Algorithm: sha256WithRSAEncryption 97:7a:85:1f:46:b3:f2:e5:31:49:33:b9:7a:5b:f9:48:30:26: 68:3f:b2:fa:49:11:86:7e:1c:fd:5e:f9:17:e9:0e:56:1d:89: 2e:8e:d0:71:02:24:35:c1:97:b9:bd:06:2d:31:06:0d:9c:6a: 32:f1:16:da:b5:db:51:c9:7e:f9:ae:47:fa:f3:58:f5:d3:58: c9:e3:ff:61:1b:01:8f:70:7b:21:e2:23:f8:74:87:74:57:46: 16:d3:f3:3d:3d:f3:74:2a:0f:90:c6:dd:dd:43:d9:50:35:d7: 4a:fa:2d:5b:d7:0e:5d:e9:c9:38:16:78:87:ce:32:43:e3:54: 9e:9b:b9:aa:9c:4f:8a:75:bf:4e:d5:07:bc:ba:ef:e4:a0:f3: f8:5b:df:ab:80:b2:e5:88:e0:f8:13:6f:c8:5c:90:56:5c:50: a5:d7:1a:39:4c:04:5a:a6:15:3e:0d:2a:c5:34:e5:2c:16:5c: 5b:dc:ec:68:0d:b4:6d:1d:56:d7:57:14:92:ef:79:a9:0b:aa: ab:41:90:f1:23:2f:ce:37:a2:05:92:d2:c6:cf:3c:a7:1b:aa: c4:a0:20:34:d5:db:5f:87:43:f8:30:58:60:dc:f7:b3:da:fa: 39:e2:6a:cf:d7:51:cb:1a:0a:0d:77:e8:39:39:a7:16:75:74: 16:5b:f7:52 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUf33t7jQRmawbmdb+inbOYvrbl5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNTEwMDkxNDU1MDBaFw0yNjEwMDgxNTAwMDBaMDMxMTAvBgNV BAMTKEYyRjEyRUU5Rjg0MEZCM0VGQjI2RDdGRDI4RjkzRjdGMUEyNDU2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RKIJHSE6PiuOmxLoUMO/EGG/ Z5wCMbnzwb82wLiZhkwAT0D98lXzPjYhUkJJKMMFbt5XQziSH7VftcUj/sFDqYz8 C6qC5I2jS+y1C8AOm9ssvSFlC+IwsLJC6cKE2c2xrvvvQlm0fyVDn/IpIC83X+ne q8BYZe9Q6hw4VWgDRNrDWvDRqf6GGFn/Sk768MrZLCKDYos/zd9mIAZ0KD9kx0Dl mt76h6M6vEYoNociWD4OTfOUgPJN4M7Nfu8VaB9HYIBHc22xsexcfDcMeIzmhzxW XF3baW41nhPb9hArpDJR7jfaUqG84OzGnKInfZosRQL2oCW9KEGyredkzMGXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU8vEu6fhA+z77Jtf9KPk/fxokVqMwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5NGU2YjJkLTNkZGItNDZlYi04 M2VmLWM5OWIyMDAzNzgzZi8wLzMyMzAzMjJlMzUzMTJlMzEzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKMxMwDQYJKoZIhvcN AQELBQADggEBAJd6hR9Gs/LlMUkzuXpb+UgwJmg/svpJEYZ+HP1e+RfpDlYdiS6O 0HECJDXBl7m9Bi0xBg2cajLxFtq121HJfvmuR/rzWPXTWMnj/2EbAY9weyHiI/h0 h3RXRhbT8z0983QqD5DG3d1D2VA110r6LVvXDl3pyTgWeIfOMkPjVJ6buaqcT4p1 v07VB7y67+Sg8/hb36uAsuWI4PgTb8hckFZcUKXXGjlMBFqmFT4NKsU05SwWXFvc 7GgNtG0dVtdXFJLveakLqqtBkPEjL843ogWS0sbPPKcbqsSgIDTV21+HQ/gwWGDc 97Pa+jnias/XUcsaCg136Dk5pxZ1dBZb91I= -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:31 2025 by rpki-client