$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e203234323036.roa File: 3230332e38342e3134302e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: T9tknLjTeQ+7ZUfv8SNf4lCYZ42qRdSxxizSEJYn0CA= Subject key identifier: 0B:54:87:51:DE:64:58:9A:26:00:7E:4E:5B:A0:F5:44:1E:64:1E:A6 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 7F37C32602192D84D8E7E0051EE0A10AB8A43CC8 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e203234323036.roa Signing time: Fri 01 Aug 2025 16:00:00 +0000 ROA not before: Fri 01 Aug 2025 15:55:00 +0000 ROA not after: Fri 31 Jul 2026 16:00:00 +0000 asID: 24206 IP address blocks: 203.84.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:37:c3:26:02:19:2d:84:d8:e7:e0:05:1e:e0:a1:0a:b8:a4:3c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 1 15:55:00 2025 GMT Not After : Jul 31 16:00:00 2026 GMT Subject: CN=0B548751DE64589A26007E4E5BA0F5441E641EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:c0:00:d7:86:16:e5:5e:64:40:4d:1d:a9: e6:19:2b:6a:16:d3:fa:bb:a5:33:91:b5:3d:26:c2: a4:a6:3f:63:8a:84:0a:b0:8a:be:75:32:ec:cd:5d: 65:b0:76:b8:7f:2b:d2:90:ac:15:77:27:3b:5d:98: e0:a2:ab:16:45:9f:92:d5:01:0d:c0:13:4f:60:55: 9e:f2:0a:07:2c:ab:4d:ee:b2:4c:1f:20:ae:7d:ce: fe:29:79:86:5c:d6:ce:38:4b:ed:73:39:a0:5a:b9: 94:25:c2:e6:74:28:2c:f2:6b:6f:a0:1f:57:b3:3c: ae:23:eb:9e:35:09:a6:b2:39:9a:32:6e:ef:a2:7d: 58:b5:56:16:dd:2e:33:67:a1:20:07:9c:c1:e3:a1: 8e:84:d5:01:38:00:39:20:a3:21:a1:ea:8a:21:44: db:01:bb:00:c1:67:b7:69:be:7f:80:4d:01:a4:a4: ae:5e:31:a8:14:52:01:99:9e:29:1e:ef:03:35:fc: 71:80:82:fd:94:d0:f0:97:66:31:80:5c:43:d7:da: ef:1c:b7:81:48:bf:39:a9:7d:97:14:59:06:9c:6f: 9b:04:98:18:b2:d4:92:3c:e4:a3:7d:1a:ca:a3:c7: c1:29:69:15:6c:a1:7e:69:31:bc:50:53:9c:d6:74: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:87:51:DE:64:58:9A:26:00:7E:4E:5B:A0:F5:44:1E:64:1E:A6 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134302e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.84.140.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2a:30:39:bd:d2:13:f8:e5:e0:aa:be:1d:fa:74:ce:49:d6: 24:b0:60:3b:4f:9f:58:bd:2e:37:84:6c:65:e1:bf:9d:e7:fd: 82:78:95:24:74:55:e5:76:c1:e6:ac:db:9d:f9:76:13:11:53: 72:b3:3c:4e:73:80:c9:b9:0a:a5:d0:c6:c2:d5:76:d6:f4:dd: b1:98:7b:b5:4f:32:5c:1f:fa:6d:74:98:da:84:50:87:4e:da: f2:24:7f:5a:f1:32:63:86:4b:bf:72:0c:a0:70:7d:70:22:5d: 13:32:21:a1:9e:d6:25:0c:8c:e1:42:3e:b4:e7:cc:80:1e:67: 79:64:3c:35:9e:0e:84:63:44:0e:8f:50:ce:0d:c1:b0:46:8b: 09:7d:bf:07:48:6a:da:7a:69:2e:71:c6:3f:e2:36:92:1b:51: 5c:34:1f:34:ae:94:ab:dd:47:38:5a:da:36:a1:0d:81:a0:8a: 53:bc:55:69:bb:c2:e3:f7:73:96:b9:31:32:e4:b9:58:77:9e: 6b:25:53:62:9c:48:86:e3:15:c4:0c:cd:9c:bf:88:fb:72:db: da:59:01:8b:34:82:b6:dc:83:ab:4b:78:6c:ee:8c:67:5c:21: 06:5c:84:89:04:91:85:58:af:21:99:af:81:5a:b5:d7:9d:db: 51:21:05:57 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfzfDJgIZLYTY5+AFHuChCrikPMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA4MDExNTU1MDBaFw0yNjA3MzExNjAwMDBaMDMxMTAvBgNV BAMTKDBCNTQ4NzUxREU2NDU4OUEyNjAwN0U0RTVCQTBGNTQ0MUU2NDFFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAsAA14YW5V5kQE0dqeYZK2oW 0/q7pTORtT0mwqSmP2OKhAqwir51MuzNXWWwdrh/K9KQrBV3JztdmOCiqxZFn5LV AQ3AE09gVZ7yCgcsq03uskwfIK59zv4peYZc1s44S+1zOaBauZQlwuZ0KCzya2+g H1ezPK4j6541CaayOZoybu+ifVi1VhbdLjNnoSAHnMHjoY6E1QE4ADkgoyGh6ooh RNsBuwDBZ7dpvn+ATQGkpK5eMagUUgGZnike7wM1/HGAgv2U0PCXZjGAXEPX2u8c t4FIvzmpfZcUWQacb5sEmBiy1JI85KN9Gsqjx8EpaRVsoX5pMbxQU5zWdEWpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUC1SHUd5kWJomAH5OW6D1RB5kHqYwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMyMzAzMzJlMzgzNDJlMzEzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtUjDANBgkqhkiG 9w0BAQsFAAOCAQEAJyowOb3SE/jl4Kq+Hfp0zknWJLBgO0+fWL0uN4RsZeG/nef9 gniVJHRV5XbB5qzbnfl2ExFTcrM8TnOAybkKpdDGwtV21vTdsZh7tU8yXB/6bXSY 2oRQh07a8iR/WvEyY4ZLv3IMoHB9cCJdEzIhoZ7WJQyM4UI+tOfMgB5neWQ8NZ4O hGNEDo9Qzg3BsEaLCX2/B0hq2nppLnHGP+I2khtRXDQfNK6Uq91HOFraNqENgaCK U7xVabvC4/dzlrkxMuS5WHeeayVTYpxIhuMVxAzNnL+I+3Lb2lkBizSCttyDq0t4 bO6MZ1whBlyEiQSRhVivIZmvgVq1153bUSEFVw== -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:38 2025 by rpki-client