$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136362e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3136362e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: E5bVBlUKumQD8OueCh6tYxDjMF4mJIZXcek9qxkPsbg= Subject key identifier: 64:A9:0C:40:31:38:A9:64:15:04:A9:8C:DB:92:0E:EF:D1:A7:CB:74 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 717991B86C5B6CB0FBC64B4AB26CA5F03ED2BD37 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136362e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:02:55 +0000 ROA not before: Fri 26 Sep 2025 03:57:55 +0000 ROA not after: Fri 25 Sep 2026 04:02:55 +0000 asID: 18059 IP address blocks: 202.43.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:79:91:b8:6c:5b:6c:b0:fb:c6:4b:4a:b2:6c:a5:f0:3e:d2:bd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:57:55 2025 GMT Not After : Sep 25 04:02:55 2026 GMT Subject: CN=64A90C403138A9641504A98CDB920EEFD1A7CB74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:f5:ec:e4:1e:03:a3:12:e9:f3:bd:24:21: cc:92:ed:e4:fa:f3:19:d8:25:a1:67:ad:15:54:ab: 01:eb:35:73:47:70:ef:20:10:4a:80:75:53:4a:33: 79:34:a1:bf:a9:5f:81:fe:90:02:52:91:b4:39:19: f3:ef:6a:49:96:a8:c2:42:8e:52:84:05:2f:c1:8f: ea:9a:86:ce:62:fb:52:b5:d5:8d:73:85:af:b6:75: 72:a2:df:da:1b:9a:a4:9c:06:b9:8d:79:f1:6c:8f: 7a:0d:ea:6c:b7:c5:6f:2b:3b:ac:cb:d2:e7:ed:36: 3d:fa:42:3b:a0:4c:16:2c:cd:f0:a0:10:f0:ca:d8: 6a:12:dc:5c:5c:1d:2f:65:aa:aa:7c:19:db:62:9d: a5:a5:71:82:d4:40:e8:36:63:8d:30:b9:be:30:a3: be:7a:8c:70:b0:67:85:5e:f3:c9:51:f0:4e:44:56: 12:25:a5:1d:c5:2c:9d:47:67:4c:54:48:4f:1e:58: ea:87:e3:f0:b5:7e:d8:a2:32:f5:be:78:38:69:4a: f2:4c:b3:d2:5c:ce:34:92:c7:21:89:6d:f2:e1:4f: 0c:f1:99:c1:45:fa:77:73:be:5f:6a:59:81:7d:46: 8f:14:31:17:9e:35:74:e6:75:64:48:7e:ce:ff:e8: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A9:0C:40:31:38:A9:64:15:04:A9:8C:DB:92:0E:EF:D1:A7:CB:74 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136362e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.166.0/24 Signature Algorithm: sha256WithRSAEncryption 43:85:cd:a0:91:f9:f3:82:14:94:4f:36:ad:6d:36:5a:48:6f: f3:24:51:3a:0f:0f:3b:6e:65:9a:6b:bd:28:de:2d:46:c5:30: 6e:cd:2d:59:01:21:de:91:5e:eb:4d:e8:16:63:e1:27:89:29: 7a:54:a7:5b:58:25:46:d0:f4:1b:52:74:64:99:c1:79:2d:da: 8e:ea:17:76:e9:f4:43:45:33:b8:82:32:f2:80:c8:d5:36:ac: d4:82:4c:d2:f0:ee:5f:ce:af:ba:67:e1:01:40:41:ef:b5:db: 1e:e2:51:82:ff:1f:13:ed:3a:93:67:b2:cb:88:99:ac:7f:a4: 59:b3:0f:5d:87:b0:7f:cc:75:cb:64:1a:39:aa:a4:16:03:2f: 8b:55:55:94:c3:12:b4:1b:1e:d6:08:4c:f5:6a:73:ea:c3:79: 10:07:df:e9:76:2d:2a:dd:27:bf:19:42:b1:24:e3:8b:b9:8a: 95:31:f9:d1:ea:8f:f5:57:66:29:26:6e:14:89:a9:aa:a7:3b: be:18:3e:2f:98:42:d3:c5:f5:15:cb:0f:ff:31:da:f3:40:8c: ac:11:e0:c8:49:44:1b:ea:9e:c6:c4:00:cd:f1:62:58:cc:e4: 91:e7:d7:65:78:54:44:02:60:d2:26:16:a6:7c:e1:70:44:17: c8:d8:27:13 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcXmRuGxbbLD7xktKsmyl8D7SvTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU3NTVaFw0yNjA5MjUwNDAyNTVaMDMxMTAvBgNV BAMTKDY0QTkwQzQwMzEzOEE5NjQxNTA0QTk4Q0RCOTIwRUVGRDFBN0NCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBh/Xs5B4DoxLp870kIcyS7eT6 8xnYJaFnrRVUqwHrNXNHcO8gEEqAdVNKM3k0ob+pX4H+kAJSkbQ5GfPvakmWqMJC jlKEBS/Bj+qahs5i+1K11Y1zha+2dXKi39obmqScBrmNefFsj3oN6my3xW8rO6zL 0uftNj36QjugTBYszfCgEPDK2GoS3FxcHS9lqqp8GdtinaWlcYLUQOg2Y40wub4w o756jHCwZ4Ve88lR8E5EVhIlpR3FLJ1HZ0xUSE8eWOqH4/C1ftiiMvW+eDhpSvJM s9JczjSSxyGJbfLhTwzxmcFF+ndzvl9qWYF9Ro8UMReeNXTmdWRIfs7/6NzTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZKkMQDE4qWQVBKmM25IO79Gny3QwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorpjANBgkqhkiG 9w0BAQsFAAOCAQEAQ4XNoJH584IUlE82rW02Wkhv8yRROg8PO25lmmu9KN4tRsUw bs0tWQEh3pFe603oFmPhJ4kpelSnW1glRtD0G1J0ZJnBeS3ajuoXdun0Q0UzuIIy 8oDI1Tas1IJM0vDuX86vumfhAUBB77XbHuJRgv8fE+06k2eyy4iZrH+kWbMPXYew f8x1y2QaOaqkFgMvi1VVlMMStBse1ghM9Wpz6sN5EAff6XYtKt0nvxlCsSTji7mK lTH50eqP9VdmKSZuFImpqqc7vhg+L5hC08X1FcsP/zHa80CMrBHgyElEG+qexsQA zfFiWMzkkefXZXhURAJg0iYWpnzhcEQXyNgnEw== -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:11 2025 by rpki-client