$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137322e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3137322e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: rchYZLHyY0CasnmXFEwG0NHskFfhxxC6R+QDj5Pu8DY= Subject key identifier: 00:4F:E1:E9:24:F9:A8:5D:52:87:5F:01:34:DB:FE:5B:E2:22:4A:AC Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 06262A25A0FF54440D318BF05600E5891D0879DB Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137322e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:02:55 +0000 ROA not before: Fri 26 Sep 2025 03:57:55 +0000 ROA not after: Fri 25 Sep 2026 04:02:55 +0000 asID: 18059 IP address blocks: 202.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:26:2a:25:a0:ff:54:44:0d:31:8b:f0:56:00:e5:89:1d:08:79:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:57:55 2025 GMT Not After : Sep 25 04:02:55 2026 GMT Subject: CN=004FE1E924F9A85D52875F0134DBFE5BE2224AAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:79:29:82:e6:0c:6f:ea:a4:e7:8d:dc:26:ba: 4a:da:0d:8e:88:82:c5:60:62:28:75:5e:d3:a8:90: 42:f5:f1:6a:da:ff:90:22:d8:f7:ea:61:77:88:61: 49:00:d8:1e:15:cb:a3:0c:57:87:eb:91:2d:72:22: 5b:62:0d:8e:30:d9:8b:5b:42:a2:b0:6f:85:55:d1: 4b:66:38:39:25:fe:4d:16:dd:bf:b7:a5:89:6b:ea: 84:36:5b:25:05:88:3f:48:e8:02:d3:1a:0b:0d:17: c7:03:f6:94:82:e1:87:69:13:1e:15:d7:cd:6e:9c: 12:68:71:49:13:08:a6:72:ec:f4:d8:a0:bf:b3:a5: dd:8c:90:b3:70:db:ab:61:39:1e:68:dc:fd:50:60: 25:09:b4:ba:6d:92:35:1d:0b:3e:71:ed:c6:73:4c: 73:4b:1e:51:40:86:b6:a2:62:8d:f9:9c:e0:8d:b8: 29:42:27:fc:c7:a3:59:cd:69:6d:13:47:9d:ed:bc: 56:14:26:24:a5:38:0d:cf:93:7b:90:76:ea:c2:ff: b0:6c:2c:07:b9:96:0f:2d:a7:82:09:28:c7:74:9d: 47:50:33:52:54:75:af:4d:f3:6c:3b:a2:4f:54:7b: 67:9d:b2:1d:a3:3a:86:67:d4:23:db:ed:5a:3e:f3: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4F:E1:E9:24:F9:A8:5D:52:87:5F:01:34:DB:FE:5B:E2:22:4A:AC X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137322e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.172.0/24 Signature Algorithm: sha256WithRSAEncryption 97:9b:ce:18:07:88:be:ad:61:c9:b8:56:9c:12:a6:9f:e2:07: f1:50:e2:ae:89:47:40:73:09:aa:58:65:f5:48:3f:6f:c0:09: e6:44:ae:a6:ce:d2:d5:94:24:ac:e6:4b:08:17:b9:91:dd:54: 7c:bf:9d:c4:ef:7d:ff:41:3d:d3:84:40:34:bf:d2:04:ca:92: 35:e6:90:bb:9a:15:cc:c5:eb:70:b3:8f:73:4a:2e:a0:5b:6b: 8b:bd:d5:d4:42:67:10:2d:61:ad:5a:ba:da:a6:f1:85:f5:ef: a6:f1:00:2a:bd:3f:2d:a8:f5:2a:bf:b6:04:10:ad:2e:cb:a1: 86:7f:9e:4b:f7:39:24:79:e3:8f:44:71:70:44:0b:be:8f:71: 30:1b:1c:c4:45:1e:2a:d0:a2:f3:59:0a:bc:f1:c1:83:43:42: 1d:fc:c9:00:28:76:93:91:8a:dc:cb:73:ee:c3:97:0f:14:52: c6:0a:28:b5:dc:e0:4b:19:b8:58:d6:0f:09:ac:38:53:f3:e6: 08:64:e7:15:8a:af:5b:35:a6:d7:6c:84:3c:4b:05:dd:52:5a: 3f:65:39:a7:e0:31:ef:31:0a:c3:47:2b:14:77:db:c3:53:d7: 03:47:cb:23:7a:1d:57:75:b1:bf:d8:95:22:27:c7:87:d7:ea: 45:27:9e:76 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBiYqJaD/VEQNMYvwVgDliR0IedswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU3NTVaFw0yNjA5MjUwNDAyNTVaMDMxMTAvBgNV BAMTKDAwNEZFMUU5MjRGOUE4NUQ1Mjg3NUYwMTM0REJGRTVCRTIyMjRBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfeSmC5gxv6qTnjdwmukraDY6I gsVgYih1XtOokEL18Wra/5Ai2PfqYXeIYUkA2B4Vy6MMV4frkS1yIltiDY4w2Ytb QqKwb4VV0UtmODkl/k0W3b+3pYlr6oQ2WyUFiD9I6ALTGgsNF8cD9pSC4YdpEx4V 181unBJocUkTCKZy7PTYoL+zpd2MkLNw26thOR5o3P1QYCUJtLptkjUdCz5x7cZz THNLHlFAhraiYo35nOCNuClCJ/zHo1nNaW0TR53tvFYUJiSlOA3Pk3uQdurC/7Bs LAe5lg8tp4IJKMd0nUdQM1JUda9N82w7ok9Ue2edsh2jOoZn1CPb7Vo+87GRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAE/h6ST5qF1Sh18BNNv+W+IiSqwwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorrDANBgkqhkiG 9w0BAQsFAAOCAQEAl5vOGAeIvq1hybhWnBKmn+IH8VDirolHQHMJqlhl9Ug/b8AJ 5kSups7S1ZQkrOZLCBe5kd1UfL+dxO99/0E904RANL/SBMqSNeaQu5oVzMXrcLOP c0ouoFtri73V1EJnEC1hrVq62qbxhfXvpvEAKr0/Laj1Kr+2BBCtLsuhhn+eS/c5 JHnjj0RxcEQLvo9xMBscxEUeKtCi81kKvPHBg0NCHfzJACh2k5GK3Mtz7sOXDxRS xgootdzgSxm4WNYPCaw4U/PmCGTnFYqvWzWm12yEPEsF3VJaP2U5p+Ax7zEKw0cr FHfbw1PXA0fLI3odV3Wxv9iVIifHh9fqRSeedg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:44 2025 by rpki-client