$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136332e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3136332e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: ifOkOX+dsg9fJB+AdmPbUwTEli5v9r1I8T1FymcIXo0= Subject key identifier: 0C:9F:4C:7F:9F:4C:13:7B:3F:B2:D4:6E:F2:9B:9F:9F:E1:72:F3:82 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 0B8A1FF181193C8BD06152693530D26E58BDF842 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136332e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:02:58 +0000 ROA not before: Fri 26 Sep 2025 03:57:58 +0000 ROA not after: Fri 25 Sep 2026 04:02:58 +0000 asID: 18059 IP address blocks: 202.43.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8a:1f:f1:81:19:3c:8b:d0:61:52:69:35:30:d2:6e:58:bd:f8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:57:58 2025 GMT Not After : Sep 25 04:02:58 2026 GMT Subject: CN=0C9F4C7F9F4C137B3FB2D46EF29B9F9FE172F382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:b6:67:67:30:87:0f:18:e0:af:f3:d2:ac: c9:a9:d7:14:f9:80:ac:7c:84:b6:89:42:4c:90:67: 5c:dc:b7:f4:63:31:b1:f1:20:28:a7:d3:45:ed:ee: e4:e8:24:93:b8:22:5f:ff:f2:22:ac:b7:7c:1e:65: 4a:d6:fa:e1:4a:96:60:f3:2c:e4:8f:9f:3b:7c:62: 44:b3:4f:b6:99:49:43:d2:62:5d:cf:15:95:4d:f5: b9:a6:b4:50:ab:0a:61:5e:ae:17:bb:50:16:2f:ed: 9c:49:ac:a2:d8:a2:cf:fa:5a:03:22:d7:82:25:0c: 82:cb:f4:39:f3:2b:47:93:b8:c0:cc:b2:e4:48:45: ef:50:36:91:74:dc:f1:fe:74:d9:58:ba:f8:5e:00: 2b:26:49:0e:c3:78:24:90:f9:7f:d9:dc:a4:a9:32: e3:50:f5:32:bc:c3:21:c8:03:1b:f1:9f:de:14:b0: 83:bf:cb:a9:bc:4c:1d:e1:c9:bf:a4:24:6c:8f:5a: 76:90:b7:72:b7:69:aa:43:64:6c:3d:ee:53:21:e4: 93:df:9a:c1:09:56:e2:8d:9d:e1:47:8a:5a:29:86: a7:8f:a5:50:8b:7f:0c:6c:2d:12:f1:53:90:1c:51: 07:26:14:d5:83:35:22:41:5c:94:6f:ad:28:64:f1: b2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9F:4C:7F:9F:4C:13:7B:3F:B2:D4:6E:F2:9B:9F:9F:E1:72:F3:82 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136332e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.163.0/24 Signature Algorithm: sha256WithRSAEncryption 87:47:b6:b4:60:14:d1:45:b5:45:a5:0a:92:f1:9b:59:76:60: e8:f6:39:eb:9b:77:05:56:ef:70:13:d1:4f:c7:2a:6e:4c:a7: 97:e4:28:ce:2a:ef:e0:2e:97:ca:cd:6a:e4:21:a1:3b:32:b8: 44:b1:ec:df:7a:4f:26:9f:22:cc:cc:ea:9d:43:7b:d0:20:5c: 16:76:1a:a0:e7:21:11:0b:77:8f:59:f0:ef:e8:2d:6c:3a:04: 74:a5:97:0a:ef:a2:c7:cd:0d:05:c0:f8:9c:9c:a0:27:b4:b5: 34:98:b9:44:86:25:05:5f:40:05:3b:d1:b7:7a:36:de:76:48: c0:88:3d:18:17:9f:50:86:2d:eb:da:70:37:2a:46:23:9c:ac: f5:68:2f:c6:7b:64:ee:d4:9b:b4:04:74:22:2b:40:81:ef:58: a3:f6:ca:8a:79:49:1b:5a:ab:74:af:48:42:fc:4f:78:03:9a: 9c:05:c0:0f:33:88:a1:4c:ba:08:4d:ca:c7:fa:d4:e9:18:c0: 0f:c7:0c:45:84:69:26:27:b4:1b:d6:c7:f0:c3:bc:d5:98:bf: 5a:6a:9d:82:b7:74:3a:33:b1:41:2d:d0:e7:4a:cd:e0:66:43: 28:f8:ef:81:93:fb:0d:15:54:c4:f1:80:61:7f:4a:b8:41:92: 85:6c:40:ea -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC4of8YEZPIvQYVJpNTDSbli9+EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU3NThaFw0yNjA5MjUwNDAyNThaMDMxMTAvBgNV BAMTKDBDOUY0QzdGOUY0QzEzN0IzRkIyRDQ2RUYyOUI5RjlGRTE3MkYzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACrZnZzCHDxjgr/PSrMmp1xT5 gKx8hLaJQkyQZ1zct/RjMbHxICin00Xt7uToJJO4Il//8iKst3weZUrW+uFKlmDz LOSPnzt8YkSzT7aZSUPSYl3PFZVN9bmmtFCrCmFerhe7UBYv7ZxJrKLYos/6WgMi 14IlDILL9DnzK0eTuMDMsuRIRe9QNpF03PH+dNlYuvheACsmSQ7DeCSQ+X/Z3KSp MuNQ9TK8wyHIAxvxn94UsIO/y6m8TB3hyb+kJGyPWnaQt3K3aapDZGw97lMh5JPf msEJVuKNneFHilophqePpVCLfwxsLRLxU5AcUQcmFNWDNSJBXJRvrShk8bK/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDJ9Mf59ME3s/stRu8pufn+Fy84IwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorozANBgkqhkiG 9w0BAQsFAAOCAQEAh0e2tGAU0UW1RaUKkvGbWXZg6PY565t3BVbvcBPRT8cqbkyn l+Qozirv4C6Xys1q5CGhOzK4RLHs33pPJp8izMzqnUN70CBcFnYaoOchEQt3j1nw 7+gtbDoEdKWXCu+ix80NBcD4nJygJ7S1NJi5RIYlBV9ABTvRt3o23nZIwIg9GBef UIYt69pwNypGI5ys9Wgvxntk7tSbtAR0IitAge9Yo/bKinlJG1qrdK9IQvxPeAOa nAXADzOIoUy6CE3Kx/rU6RjAD8cMRYRpJie0G9bH8MO81Zi/Wmqdgrd0OjOxQS3Q 50rN4GZDKPjvgZP7DRVUxPGAYX9KuEGShWxA6g== -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:04 2025 by rpki-client