$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137332e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3137332e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: yyFT8xKS+/ErwI5aH/cui5ATG5/A1SC5gk75OPy+NOQ= Subject key identifier: 10:25:31:B4:BD:67:42:1C:9B:58:52:DC:6C:6F:75:AE:F3:3C:A2:28 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 50A519614ABF04C75734F23FA36312C4E78DBC40 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137332e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:03:01 +0000 ROA not before: Fri 26 Sep 2025 03:58:01 +0000 ROA not after: Fri 25 Sep 2026 04:03:01 +0000 asID: 18059 IP address blocks: 202.43.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a5:19:61:4a:bf:04:c7:57:34:f2:3f:a3:63:12:c4:e7:8d:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:58:01 2025 GMT Not After : Sep 25 04:03:01 2026 GMT Subject: CN=102531B4BD67421C9B5852DC6C6F75AEF33CA228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:16:45:5e:ab:8a:c0:32:1f:70:ff:2b:fd: a0:7a:ef:7d:d1:65:d7:11:ff:d3:2d:7c:9a:1a:1b: 84:ae:81:3c:59:27:fc:40:d8:16:cf:0e:d1:c5:d8: 2e:2e:4e:9c:5a:16:43:41:2d:ac:6a:3a:2c:99:1f: 2d:4f:b9:04:ed:c2:48:97:a0:4b:00:cb:88:49:08: 5a:bf:28:dd:41:7a:44:61:b6:62:12:c0:c0:bc:d9: ae:d2:38:37:e6:c2:d5:87:91:83:b9:48:71:26:78: e1:d8:13:da:8e:96:44:ee:e5:73:95:9e:67:c1:3c: 73:58:ad:83:f2:1b:51:dd:7c:fc:8c:0b:0b:58:9b: bf:62:56:ef:54:99:47:73:76:0c:d5:bc:c6:8b:cf: 0e:04:5f:0a:ee:74:27:71:0f:39:cf:4f:29:d8:e4: 14:01:65:e0:29:4c:63:c9:c2:49:b2:bc:30:c3:e7: 36:54:27:80:06:9b:70:fe:9e:71:a6:73:f6:c0:7e: 6a:e0:44:eb:00:77:de:e6:06:76:9a:7c:0d:a0:f1: b4:e3:0d:f5:1f:66:84:25:e1:37:f8:e5:52:19:57: 19:52:2f:41:b6:f6:07:13:1d:5e:da:d9:c9:67:0f: f7:cd:44:0e:7f:50:9b:69:9e:bc:5c:4f:d0:f6:95: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:25:31:B4:BD:67:42:1C:9B:58:52:DC:6C:6F:75:AE:F3:3C:A2:28 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137332e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.173.0/24 Signature Algorithm: sha256WithRSAEncryption 04:c8:63:18:fb:44:3a:48:de:57:2c:26:58:4d:24:4c:9e:0f: 0d:f9:be:98:2f:ee:2e:46:25:64:a3:4b:10:56:71:80:68:1b: a3:f8:45:30:10:66:22:55:12:02:4b:ef:7a:99:cc:bb:46:bb: e2:0f:86:bd:51:c1:ef:42:56:48:2e:fe:56:28:27:87:49:92: 6f:53:2f:52:39:9b:dd:b5:07:d1:07:46:29:ad:33:9e:a5:82: 1d:d2:e8:6a:63:23:3a:ae:2c:88:99:bf:e0:76:00:69:ac:51: 4c:1d:eb:ff:a4:e7:71:7b:79:5b:09:23:7b:2c:ee:87:57:77: 69:d6:0f:e7:a2:ce:b8:df:eb:b2:4f:43:22:4a:ae:48:9d:fa: c1:8b:65:20:5a:46:a6:82:f2:b6:42:e9:d7:70:05:87:e0:d4: c3:f5:6c:7b:4a:a7:08:ae:6b:3f:6b:3c:8f:9f:9f:f5:c8:28: 0b:c3:d5:3f:ed:55:ef:9a:bb:7a:b0:82:96:17:a5:f8:8e:ab: e0:69:fc:26:dd:09:97:d9:4e:3e:d5:5f:ca:52:99:4d:3b:97: 42:e5:f0:b4:f7:2c:3f:ff:cc:0b:cc:09:f7:9f:0e:5e:b6:29: 37:98:25:ee:b4:09:ad:34:3e:80:41:d8:28:94:b6:9a:ed:98: f1:00:f7:66 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUKUZYUq/BMdXNPI/o2MSxOeNvEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU4MDFaFw0yNjA5MjUwNDAzMDFaMDMxMTAvBgNV BAMTKDEwMjUzMUI0QkQ2NzQyMUM5QjU4NTJEQzZDNkY3NUFFRjMzQ0EyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91RZFXquKwDIfcP8r/aB6733R ZdcR/9MtfJoaG4SugTxZJ/xA2BbPDtHF2C4uTpxaFkNBLaxqOiyZHy1PuQTtwkiX oEsAy4hJCFq/KN1BekRhtmISwMC82a7SODfmwtWHkYO5SHEmeOHYE9qOlkTu5XOV nmfBPHNYrYPyG1HdfPyMCwtYm79iVu9UmUdzdgzVvMaLzw4EXwrudCdxDznPTynY 5BQBZeApTGPJwkmyvDDD5zZUJ4AGm3D+nnGmc/bAfmrgROsAd97mBnaafA2g8bTj DfUfZoQl4Tf45VIZVxlSL0G29gcTHV7a2clnD/fNRA5/UJtpnrxcT9D2lQgrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUECUxtL1nQhybWFLcbG91rvM8oigwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorrTANBgkqhkiG 9w0BAQsFAAOCAQEABMhjGPtEOkjeVywmWE0kTJ4PDfm+mC/uLkYlZKNLEFZxgGgb o/hFMBBmIlUSAkvvepnMu0a74g+GvVHB70JWSC7+Vignh0mSb1MvUjmb3bUH0QdG Ka0znqWCHdLoamMjOq4siJm/4HYAaaxRTB3r/6TncXt5Wwkjeyzuh1d3adYP56LO uN/rsk9DIkquSJ36wYtlIFpGpoLytkLp13AFh+DUw/Vse0qnCK5rP2s8j5+f9cgo C8PVP+1V75q7erCClhel+I6r4Gn8Jt0Jl9lOPtVfylKZTTuXQuXwtPcsP//MC8wJ 958OXrYpN5gl7rQJrTQ+gEHYKJS2mu2Y8QD3Zg== -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:38 2025 by rpki-client