$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa File: 3230322e34332e3137352e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: 9gUwT4ss4ZPvH6ucQrRT0WUrQvB1hj34UpPGLmfzYPA= Subject key identifier: 9A:49:19:21:20:07:48:BD:FD:E4:D6:E5:81:A5:00:09:14:5E:54:14 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 760C15AFBD25860235BAFF2F1B3703FEA7AD03FB Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:03:00 +0000 ROA not before: Fri 26 Sep 2025 03:58:00 +0000 ROA not after: Fri 25 Sep 2026 04:03:00 +0000 asID: 18059 IP address blocks: 202.43.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0c:15:af:bd:25:86:02:35:ba:ff:2f:1b:37:03:fe:a7:ad:03:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:58:00 2025 GMT Not After : Sep 25 04:03:00 2026 GMT Subject: CN=9A491921200748BDFDE4D6E581A50009145E5414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:32:35:cf:1c:71:fd:22:d7:68:0f:fb:cd: 04:10:84:7b:24:50:16:97:4c:35:2a:03:cc:c8:57: 85:cb:5b:17:cc:19:df:d4:2a:6e:6f:50:53:0a:23: 24:52:be:81:49:99:c5:f7:bc:c2:56:db:9d:ae:51: ae:60:1c:8e:02:d7:a3:29:b0:df:e8:dd:65:a7:65: 7e:9f:e7:ba:99:33:cc:4c:fe:7e:6a:f4:70:17:0d: 80:4b:10:d1:f0:dc:58:c6:03:24:ab:f6:63:bb:3c: ed:6a:fe:af:d8:42:55:9a:5c:99:32:74:68:bd:6f: 38:ae:d2:5c:43:b3:db:7d:e3:ef:94:8f:da:07:9e: 0c:66:ac:0d:d9:5e:f2:f0:6d:ea:c7:98:bb:73:e6: ea:d1:ff:b0:03:c0:02:58:18:b9:fa:be:41:90:ff: de:5b:0a:1b:9d:6e:15:31:97:9c:f0:fd:de:be:38: c9:56:50:67:69:7a:dd:49:5e:ea:d2:7d:03:27:05: f8:aa:29:13:b3:0a:84:d9:9b:c8:03:ac:8b:1f:33: 5b:52:c8:1f:36:27:ae:c7:16:2a:17:fc:d8:a4:e3: 65:89:6b:f2:91:d2:0e:4c:d2:19:34:08:41:14:fd: 74:42:72:e1:99:16:fd:14:4e:23:84:db:fd:1a:5a: 3f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:49:19:21:20:07:48:BD:FD:E4:D6:E5:81:A5:00:09:14:5E:54:14 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3137352e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.175.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:62:c9:20:62:76:29:f3:ab:a4:65:30:4f:0a:99:30:9b:1f: 90:b8:53:aa:ba:99:38:69:00:e7:fd:94:42:54:76:b0:2a:76: 21:fd:16:6b:04:82:21:4b:3f:4c:00:da:66:57:70:1c:a5:50: 67:8d:95:d4:20:24:f3:24:e8:59:d5:c2:8b:b4:4f:c5:00:7f: a2:f2:74:57:e9:f1:89:41:41:45:6d:9c:38:d5:3b:92:3e:a8: f6:bf:20:f0:30:19:c5:58:c3:ed:82:cf:14:25:92:4d:11:99: 27:48:ea:92:7b:da:a3:23:53:0b:53:69:c3:0d:da:9c:ea:fc: e0:c4:da:f1:39:99:07:ba:44:af:4b:f4:51:72:75:c8:cd:07: 57:24:15:32:1e:78:92:d7:07:0d:d9:25:0e:45:22:91:d1:d6: 5b:25:bc:e7:cf:d1:6b:4b:66:87:05:0d:b0:cd:7e:76:c2:ce: 06:56:fe:9c:b6:ac:53:96:19:35:d1:b2:56:e1:65:29:4c:60: fd:ce:66:53:bb:33:6a:5e:ba:c8:37:64:8c:ad:0d:bf:71:35: 01:d5:65:f3:42:11:d3:58:f6:e0:68:c6:48:b6:d9:df:44:cb: b3:96:60:7e:8f:7c:74:17:1b:7a:59:42:1b:21:1d:4e:fb:7e: c4:9b:de:01 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdgwVr70lhgI1uv8vGzcD/qetA/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU4MDBaFw0yNjA5MjUwNDAzMDBaMDMxMTAvBgNV BAMTKDlBNDkxOTIxMjAwNzQ4QkRGREU0RDZFNTgxQTUwMDA5MTQ1RTU0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQDI1zxxx/SLXaA/7zQQQhHsk UBaXTDUqA8zIV4XLWxfMGd/UKm5vUFMKIyRSvoFJmcX3vMJW252uUa5gHI4C16Mp sN/o3WWnZX6f57qZM8xM/n5q9HAXDYBLENHw3FjGAySr9mO7PO1q/q/YQlWaXJky dGi9bziu0lxDs9t94++Uj9oHngxmrA3ZXvLwberHmLtz5urR/7ADwAJYGLn6vkGQ /95bChudbhUxl5zw/d6+OMlWUGdpet1JXurSfQMnBfiqKROzCoTZm8gDrIsfM1tS yB82J67HFioX/Nik42WJa/KR0g5M0hk0CEEU/XRCcuGZFv0UTiOE2/0aWj8/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUmkkZISAHSL395NblgaUACRReVBQwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorrzANBgkqhkiG 9w0BAQsFAAOCAQEAW2LJIGJ2KfOrpGUwTwqZMJsfkLhTqrqZOGkA5/2UQlR2sCp2 If0WawSCIUs/TADaZldwHKVQZ42V1CAk8yToWdXCi7RPxQB/ovJ0V+nxiUFBRW2c ONU7kj6o9r8g8DAZxVjD7YLPFCWSTRGZJ0jqknvaoyNTC1Npww3anOr84MTa8TmZ B7pEr0v0UXJ1yM0HVyQVMh54ktcHDdklDkUikdHWWyW858/Ra0tmhwUNsM1+dsLO Blb+nLasU5YZNdGyVuFlKUxg/c5mU7szal66yDdkjK0Nv3E1AdVl80IR01j24GjG SLbZ30TLs5Zgfo98dBcbellCGyEdTvt+xJveAQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:58 2025 by rpki-client