$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24199.roa File: AS24199.roa (raw, json) Hash identifier: U4cgf8pRnJDfbgBaIKTvqLFE5Zfb4IzPlimCVzLULSQ= Subject key identifier: FC:0D:FC:7E:A3:1D:BD:17:2D:97:85:F5:30:70:69:EF:82:EF:CB:81 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F32F72322CE0C1EBAE68AC41ED2A9FBC0026CC5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24199.roa Signing time: Tue 16 Sep 2025 04:02:24 +0000 ROA not before: Tue 16 Sep 2025 03:57:24 +0000 ROA not after: Tue 15 Sep 2026 04:02:24 +0000 asID: 24199 IP address blocks: 202.89.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:32:f7:23:22:ce:0c:1e:ba:e6:8a:c4:1e:d2:a9:fb:c0:02:6c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 16 03:57:24 2025 GMT Not After : Sep 15 04:02:24 2026 GMT Subject: CN=FC0DFC7EA31DBD172D9785F5307069EF82EFCB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:4e:db:21:3a:7c:a4:2f:13:df:cd:28:13: 0f:04:04:d5:bd:8f:06:11:e1:fa:63:72:f7:5c:4a: 72:8f:2d:df:3f:12:90:eb:5b:ee:f5:8b:d8:7e:f2: 84:4e:af:ea:8f:c6:93:5c:ae:9a:2a:9d:01:ca:25: d4:57:78:ad:02:1d:60:c0:e9:0e:f6:45:e6:3b:4a: 52:40:4d:b6:8d:f4:f3:f7:71:c4:b5:7a:f1:16:93: a6:e9:ac:cb:ce:b6:9d:bf:aa:a0:17:d1:e8:e6:c8: c0:37:f3:aa:e8:72:c8:90:2d:b8:42:62:8d:44:54: 61:52:10:f1:eb:c3:79:c1:57:f3:0d:3f:13:6b:3e: 77:46:fd:de:b5:05:cc:e3:44:94:5a:a1:9a:4b:f5: 35:d9:b2:43:62:6f:37:26:c9:c4:88:ef:db:79:f5: c9:c7:ba:a9:7f:7e:0b:39:51:b0:5d:dc:fa:f4:e0: 9a:a1:bc:d1:12:20:f0:d9:68:cb:c1:0c:e4:18:3f: 97:bf:aa:71:ac:d4:c5:f3:df:bd:af:46:e5:cb:3a: f1:12:0c:65:0b:c2:34:f4:9a:57:1b:9e:76:99:cd: 59:34:4d:e8:ff:0c:4c:34:89:6b:59:7b:04:c7:57: a3:8f:74:14:10:6b:b4:04:d9:57:41:37:51:cd:57: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0D:FC:7E:A3:1D:BD:17:2D:97:85:F5:30:70:69:EF:82:EF:CB:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS24199.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.89.208.0/24 Signature Algorithm: sha256WithRSAEncryption 42:39:b6:40:88:7a:6f:99:61:42:8b:16:28:46:dc:c7:e8:21: f6:bc:b1:a5:a7:62:90:94:77:20:c9:12:7e:55:51:7b:b5:0d: b0:e5:dd:3b:6a:aa:e3:f3:e0:03:6f:60:3e:b6:9d:0b:a7:20: 20:aa:82:d7:a4:19:fe:d3:56:90:02:69:d3:74:e9:65:8f:59: 4d:cf:64:a6:3d:06:9a:b7:84:ed:23:cb:93:59:a4:93:7e:7c: e3:df:4d:21:68:e7:a9:ed:af:f1:52:69:54:e0:52:b2:34:3f: 06:20:4f:28:27:f1:5c:d9:87:b5:4a:f6:64:bf:3b:3f:c4:49: 19:70:e0:bb:c4:e5:8a:86:44:1d:c6:be:c6:5f:4f:1d:d0:9d: c0:08:37:58:b6:bc:e0:ef:e4:1b:33:eb:d8:7d:c6:f9:9a:34: 2e:15:87:cb:55:c4:83:cd:3b:f9:a9:f7:fa:68:3f:20:b8:29: a1:be:70:af:3a:85:8d:e2:e3:b9:9f:87:c2:f2:c4:d3:2f:ae: 7c:04:26:b3:b1:81:7f:f2:57:35:69:86:27:c9:ee:c9:e0:a1: 1c:71:bf:3c:a0:cc:6c:13:89:d9:04:59:8e:96:fe:6e:9a:de: 7d:7b:66:b4:d2:da:96:2b:11:44:41:f9:ea:84:7e:82:5c:ba: 4d:b5:5e:21 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUXzL3IyLODB665orEHtKp+8ACbMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNjAzNTcyNFoX DTI2MDkxNTA0MDIyNFowMzExMC8GA1UEAxMoRkMwREZDN0VBMzFEQkQxNzJEOTc4 NUY1MzA3MDY5RUY4MkVGQ0I4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJL9TtshOnykLxPfzSgTDwQE1b2PBhHh+mNy91xKco8t3z8SkOtb7vWL2H7y hE6v6o/Gk1yumiqdAcol1Fd4rQIdYMDpDvZF5jtKUkBNto308/dxxLV68RaTpums y862nb+qoBfR6ObIwDfzquhyyJAtuEJijURUYVIQ8evDecFX8w0/E2s+d0b93rUF zONElFqhmkv1NdmyQ2JvNybJxIjv23n1yce6qX9+CzlRsF3c+vTgmqG80RIg8Nlo y8EM5Bg/l7+qcazUxfPfva9G5cs68RIMZQvCNPSaVxuedpnNWTRN6P8MTDSJa1l7 BMdXo490FBBrtATZV0E3Uc1X/M8CAwEAAaOCAc8wggHLMB0GA1UdDgQWBBT8Dfx+ ox29Fy2XhfUwcGnvgu/LgTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzI0MTk5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAylnQMA0GCSqGSIb3DQEBCwUAA4IBAQBCObZAiHpvmWFCixYoRtzH 6CH2vLGlp2KQlHcgyRJ+VVF7tQ2w5d07aqrj8+ADb2A+tp0LpyAgqoLXpBn+01aQ AmnTdOllj1lNz2SmPQaat4TtI8uTWaSTfnzj300haOep7a/xUmlU4FKyND8GIE8o J/Fc2Ye1SvZkvzs/xEkZcOC7xOWKhkQdxr7GX08d0J3ACDdYtrzg7+QbM+vYfcb5 mjQuFYfLVcSDzTv5qff6aD8guCmhvnCvOoWN4uO5n4fC8sTTL658BCazsYF/8lc1 aYYnye7J4KEccb88oMxsE4nZBFmOlv5umt59e2a00tqWKxFEQfnqhH6CXLpNtV4h -----END CERTIFICATE-----Generated at Mon Oct 20 08:51:53 2025 by rpki-client