$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136322e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3136322e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: gMPx4uwhJ2ej10OaDSx7/I37IpqlXQGk/EI3S2mVYeA= Subject key identifier: C9:94:97:D4:0A:82:80:5A:75:4E:0C:4E:8D:00:2B:D7:5A:DC:F0:E3 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 114407D2F60125162837D9E9603BF7B4F89E2C30 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136322e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:03:03 +0000 ROA not before: Fri 26 Sep 2025 03:58:03 +0000 ROA not after: Fri 25 Sep 2026 04:03:03 +0000 asID: 18059 IP address blocks: 202.43.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:44:07:d2:f6:01:25:16:28:37:d9:e9:60:3b:f7:b4:f8:9e:2c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:58:03 2025 GMT Not After : Sep 25 04:03:03 2026 GMT Subject: CN=C99497D40A82805A754E0C4E8D002BD75ADCF0E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:77:e2:9a:38:70:9e:99:4e:dd:65:7d:20:16: 95:d0:16:18:43:32:d1:38:dd:fb:3f:d2:26:c5:67: b4:65:19:b6:26:25:01:6d:fc:d6:8b:be:b0:57:01: 7a:cd:85:cb:f1:38:0d:1c:f8:7a:74:6c:c8:c9:5f: 75:a6:1f:bd:b9:ac:d9:02:cb:91:0d:46:78:34:e9: 57:f3:b5:86:64:15:9d:cb:f4:c7:88:8d:47:c7:a7: cd:70:4e:3f:45:81:bd:e7:8a:f8:57:f1:1a:fc:7b: 1e:29:60:47:06:72:41:5b:be:12:4f:61:9c:14:57: 15:8a:79:cf:c5:1f:c3:56:19:2f:ce:f2:4d:68:d2: 28:91:5b:e2:35:17:74:2e:bc:76:ee:35:c4:b0:22: 13:39:c7:da:98:db:45:fe:26:de:d7:ff:ef:46:4d: f0:ea:d8:56:de:5c:2b:28:44:f0:5a:7a:cf:91:cb: ef:3b:28:e8:f0:2a:af:07:99:38:a3:db:1c:b5:8d: 75:2b:44:f5:b4:49:02:06:9a:9b:17:da:0d:20:6c: 7d:d0:a7:a4:cc:92:85:d0:89:67:3d:9a:6c:fd:cc: 84:f8:fa:2f:34:42:89:6d:bc:a7:52:35:e9:77:e3: 5b:47:f9:6a:18:4e:10:20:83:68:27:a0:f0:0f:0f: 94:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:94:97:D4:0A:82:80:5A:75:4E:0C:4E:8D:00:2B:D7:5A:DC:F0:E3 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136322e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.162.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:ba:28:d6:60:25:8a:73:83:f5:fd:82:2d:97:7d:f9:f0:d8: f4:31:f4:37:7f:73:b8:f4:eb:dc:3b:a4:cf:ed:5f:f6:74:e5: 3c:68:f8:23:63:1f:a7:ac:da:30:88:b4:60:64:db:ea:f6:f4: 2c:0b:32:43:a9:d7:36:e9:f5:9f:98:a9:0d:8b:be:ce:d1:3b: 6f:65:86:81:7c:08:29:da:27:13:fd:43:99:25:1e:3e:49:46: ab:51:4f:75:f8:87:30:53:28:84:7e:1f:62:f7:17:5f:a7:cd: 5d:d6:8c:0c:61:74:35:1b:1b:fc:bf:3d:5f:bc:09:b9:1c:aa: af:07:16:34:ab:f2:4f:02:a3:2c:e6:14:80:dc:1d:b5:12:ab: 2b:b5:7e:8f:89:26:e3:11:de:c4:27:f5:f9:7d:2e:10:ee:f0: 3a:9a:80:5f:89:50:ba:ad:73:e0:e1:3c:3a:a4:09:6d:df:68: dc:97:2f:d6:48:f2:60:9b:15:af:38:d9:a8:c8:3b:e3:aa:e0: 21:00:47:fe:da:61:2a:dc:a0:25:2f:2e:98:3d:da:cd:1f:81: 41:78:30:9d:49:28:ae:4f:ce:d5:73:c1:e5:5c:d4:cd:41:a3: 03:a5:6e:8b:1b:3d:a5:f2:89:63:83:0c:19:12:70:b1:db:6c: 35:19:ca:8d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEUQH0vYBJRYoN9npYDv3tPieLDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU4MDNaFw0yNjA5MjUwNDAzMDNaMDMxMTAvBgNV BAMTKEM5OTQ5N0Q0MEE4MjgwNUE3NTRFMEM0RThEMDAyQkQ3NUFEQ0YwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDid+KaOHCemU7dZX0gFpXQFhhD MtE43fs/0ibFZ7RlGbYmJQFt/NaLvrBXAXrNhcvxOA0c+Hp0bMjJX3WmH725rNkC y5ENRng06VfztYZkFZ3L9MeIjUfHp81wTj9Fgb3nivhX8Rr8ex4pYEcGckFbvhJP YZwUVxWKec/FH8NWGS/O8k1o0iiRW+I1F3QuvHbuNcSwIhM5x9qY20X+Jt7X/+9G TfDq2FbeXCsoRPBaes+Ry+87KOjwKq8HmTij2xy1jXUrRPW0SQIGmpsX2g0gbH3Q p6TMkoXQiWc9mmz9zIT4+i80QoltvKdSNel341tH+WoYThAgg2gnoPAPD5TnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUyZSX1AqCgFp1TgxOjQAr11rc8OMwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorojANBgkqhkiG 9w0BAQsFAAOCAQEAD7oo1mAlinOD9f2CLZd9+fDY9DH0N39zuPTr3Dukz+1f9nTl PGj4I2Mfp6zaMIi0YGTb6vb0LAsyQ6nXNun1n5ipDYu+ztE7b2WGgXwIKdonE/1D mSUePklGq1FPdfiHMFMohH4fYvcXX6fNXdaMDGF0NRsb/L89X7wJuRyqrwcWNKvy TwKjLOYUgNwdtRKrK7V+j4km4xHexCf1+X0uEO7wOpqAX4lQuq1z4OE8OqQJbd9o 3Jcv1kjyYJsVrzjZqMg746rgIQBH/tphKtygJS8umD3azR+BQXgwnUkork/O1XPB 5VzUzUGjA6Vuixs9pfKJY4MMGRJwsdtsNRnKjQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:33:25 2025 by rpki-client