$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa File: 3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: HWMA9XCzWBVr3KMdmHK9hpuSoTRgdhwHDyLthwhLEMo= Subject key identifier: 39:69:C9:EF:12:7B:D3:35:C6:EC:04:C5:8E:50:78:0B:92:8A:F8:02 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 1D06BDD7B3FD855C2440E1AAD006A82C3B595946 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa Signing time: Sat 16 Aug 2025 04:00:00 +0000 ROA not before: Sat 16 Aug 2025 03:55:00 +0000 ROA not after: Sat 15 Aug 2026 04:00:00 +0000 asID: 138077 IP address blocks: 203.84.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:06:bd:d7:b3:fd:85:5c:24:40:e1:aa:d0:06:a8:2c:3b:59:59:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 16 03:55:00 2025 GMT Not After : Aug 15 04:00:00 2026 GMT Subject: CN=3969C9EF127BD335C6EC04C58E50780B928AF802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:8c:cd:26:15:c4:36:3e:87:50:cf:f3:73: f5:ea:36:47:98:7c:a1:12:36:c6:45:ba:f1:d0:58: 26:de:ac:6d:e6:ae:53:cb:19:5c:2c:9b:69:35:42: fe:34:37:e8:b6:15:88:0b:33:4c:2c:55:87:07:e7: 2c:5e:00:2a:5d:29:6a:66:da:7f:43:6c:86:89:5f: 6c:65:0c:2c:5d:9d:c7:76:52:17:c3:a8:9f:51:18: de:8f:df:87:e6:08:f0:d0:79:25:fa:ac:f2:68:e0: 1f:b3:9f:fc:48:de:c0:6b:44:bf:27:f4:18:db:9e: 26:12:fe:8a:6e:4a:e7:b0:52:a6:e6:a5:72:ff:a5: d4:0c:b1:8f:c3:07:f9:fb:15:ee:33:d4:95:2b:43: ee:67:a9:03:92:69:4c:7a:9f:0e:41:f6:ba:86:57: 8d:7b:04:3e:44:bc:93:cb:fb:ac:cb:28:f7:bc:8d: 24:d8:cd:b3:07:70:f2:69:46:a1:a3:71:b1:06:dc: f9:1a:7e:45:91:14:9d:4a:52:8b:b4:26:03:6e:79: b6:38:39:56:ba:2f:8f:26:b9:9a:ae:30:9a:b7:4d: ea:b6:2f:22:93:f0:b1:8e:99:b5:7d:36:a0:8a:d9: 60:a4:c6:14:6d:06:a2:ef:a0:af:e9:8d:7b:52:9b: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:C9:EF:12:7B:D3:35:C6:EC:04:C5:8E:50:78:0B:92:8A:F8:02 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.137.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:fc:33:0c:84:d6:cd:cb:68:63:b7:1d:c8:93:65:6d:d5:70: 3a:ac:64:c5:7b:eb:5d:a4:ee:bb:c3:4f:49:74:4c:b6:4d:64: 0e:b7:fd:c3:db:6c:f0:9c:47:15:c1:e1:36:c1:a7:31:3f:64: 8f:32:f3:76:ab:d5:f3:76:69:a2:a1:da:67:49:f2:ed:29:10: 41:af:97:7c:a8:99:b1:29:f0:0a:02:49:6c:79:06:11:be:2a: 73:26:8a:3d:5a:88:c0:5d:78:8f:51:da:94:97:23:99:58:4e: e6:fc:7c:2f:a0:a1:8e:30:91:36:87:75:a9:35:d5:c4:b1:ab: ae:af:15:30:a4:d5:fe:b2:eb:2d:60:f0:06:60:8d:07:dd:c6: bb:5f:b4:0d:3a:50:0c:0c:cf:e0:79:f6:75:cf:9e:4d:62:f9: 9e:a1:2c:10:b6:80:92:a9:f2:2c:e9:77:b0:15:5d:60:0d:a7: 6a:a3:4a:49:77:6d:fa:df:49:6b:1e:f9:9e:de:fe:e4:99:e3: f9:fc:d4:54:fa:7a:83:40:ba:17:d2:33:ca:2e:36:6f:e1:93: 5b:d3:12:69:ae:b9:d6:2b:1f:e4:6c:de:25:b1:cd:f4:fc:34: f2:42:fd:82:12:98:5a:ff:4b:67:be:48:33:21:b3:e4:f2:0f: f2:f8:75:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHQa917P9hVwkQOGq0AaoLDtZWUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA4MTYwMzU1MDBaFw0yNjA4MTUwNDAwMDBaMDMxMTAvBgNV BAMTKDM5NjlDOUVGMTI3QkQzMzVDNkVDMDRDNThFNTA3ODBCOTI4QUY4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbIzNJhXENj6HUM/zc/XqNkeY fKESNsZFuvHQWCberG3mrlPLGVwsm2k1Qv40N+i2FYgLM0wsVYcH5yxeACpdKWpm 2n9DbIaJX2xlDCxdncd2UhfDqJ9RGN6P34fmCPDQeSX6rPJo4B+zn/xI3sBrRL8n 9BjbniYS/opuSuewUqbmpXL/pdQMsY/DB/n7Fe4z1JUrQ+5nqQOSaUx6nw5B9rqG V417BD5EvJPL+6zLKPe8jSTYzbMHcPJpRqGjcbEG3PkafkWRFJ1KUou0JgNuebY4 OVa6L48muZquMJq3Teq2LyKT8LGOmbV9NqCK2WCkxhRtBqLvoK/pjXtSmwxtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOWnJ7xJ70zXG7ATFjlB4C5KK+AIwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1SJMA0GCSqG SIb3DQEBCwUAA4IBAQA+/DMMhNbNy2hjtx3Ik2Vt1XA6rGTFe+tdpO67w09JdEy2 TWQOt/3D22zwnEcVweE2wacxP2SPMvN2q9XzdmmiodpnSfLtKRBBr5d8qJmxKfAK AklseQYRvipzJoo9WojAXXiPUdqUlyOZWE7m/HwvoKGOMJE2h3WpNdXEsauurxUw pNX+sustYPAGYI0H3ca7X7QNOlAMDM/gefZ1z55NYvmeoSwQtoCSqfIs6XewFV1g Dadqo0pJd23630lrHvme3v7kmeP5/NRU+nqDQLoX0jPKLjZv4ZNb0xJprrnWKx/k bN4lsc30/DTyQv2CEpha/0tnvkgzIbPk8g/y+HVa -----END CERTIFICATE-----Generated at Sat Aug 23 16:18:42 2025 by rpki-client