$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa File: 3230322e37382e3139392e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: yH3bbDV0mMYM8TRBcz52YRoCvMhYiyrlrUA9NVWZ6Vw= Subject key identifier: 1A:64:30:C3:AA:5C:14:7C:0B:2D:B5:06:2E:94:2F:E1:3B:0F:77:CF Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 2EDC419DA1833EFCA57D744574D511A5A60C20F2 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 04:03:01 +0000 ROA not before: Fri 26 Sep 2025 03:58:01 +0000 ROA not after: Fri 25 Sep 2026 04:03:01 +0000 asID: 18059 IP address blocks: 202.78.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 21:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:dc:41:9d:a1:83:3e:fc:a5:7d:74:45:74:d5:11:a5:a6:0c:20:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 03:58:01 2025 GMT Not After : Sep 25 04:03:01 2026 GMT Subject: CN=1A6430C3AA5C147C0B2DB5062E942FE13B0F77CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:22:67:46:9b:99:96:ee:74:c8:a9:fb:93: b4:83:45:15:75:a8:e3:bb:bd:79:c0:cf:97:33:56: 3e:7b:c4:2c:c6:3c:0c:98:9a:ea:78:29:ee:62:b5: d4:af:b1:c1:90:26:34:8e:fc:c9:b9:93:c9:96:7e: 37:57:07:4f:6a:89:ab:df:cb:7a:96:5e:00:7e:c8: 43:db:5d:6d:55:c9:80:c8:a3:88:a5:c9:6e:e9:e7: 92:67:9f:ed:8e:9f:54:c9:36:21:84:97:2d:2f:aa: 02:92:e0:91:0b:f1:76:da:0c:6c:75:09:c3:d8:0d: 07:ff:bf:98:53:93:a2:ed:53:e4:34:06:85:7d:78: 7e:85:64:2a:c8:80:bb:5c:0b:da:e6:04:92:98:b4: 3f:d1:44:c8:1b:43:a5:fb:29:b8:06:3f:75:47:fe: a5:af:c7:a6:cf:44:c3:41:ae:6d:dc:d3:d1:aa:0e: 34:60:08:80:66:60:1f:d7:e1:a3:95:03:cf:22:28: 72:14:7d:44:cb:d8:70:ed:98:66:00:33:c3:92:4c: db:94:1f:26:5f:b3:e9:fc:83:ec:0e:f9:f3:b6:6a: 8f:63:fe:25:d4:78:b8:87:47:d7:8e:de:90:45:96: bf:be:49:72:ab:2a:8d:5c:88:2e:59:aa:f0:ff:66: 5b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:64:30:C3:AA:5C:14:7C:0B:2D:B5:06:2E:94:2F:E1:3B:0F:77:CF X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.78.199.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:92:7e:79:bf:1e:cf:8d:37:20:41:cc:37:b8:27:34:83:d8: fa:e9:df:1c:23:b0:82:7e:06:f6:52:74:d1:c4:87:bf:db:1a: f1:e8:97:57:3a:d7:67:cd:8f:22:5c:e9:a6:fe:7f:00:c8:b9: 0a:d2:49:1d:ef:c9:23:36:7a:25:a7:26:16:08:d3:c4:ef:19: e8:1d:e0:fe:49:03:5b:c1:54:08:5e:d8:e0:7a:5a:50:0e:71: dc:9f:1c:af:85:3c:97:5f:25:a2:32:42:87:44:1e:69:e9:93: ae:09:cd:c2:be:da:02:74:4e:b3:65:20:f1:46:21:a9:d1:ab: 87:d0:e4:b4:93:df:36:10:ee:db:4b:bb:d2:e4:9f:d2:2c:8f: b2:0e:91:3f:71:9a:35:c6:c5:10:ee:b8:4a:fd:0d:b1:17:6b: 3e:eb:6a:80:56:1c:10:a6:fa:80:66:02:bb:a1:19:07:a5:73: 1b:7e:58:34:58:e2:12:e9:e0:39:67:46:03:d3:17:55:0d:44: 06:27:c6:eb:3b:be:a0:d2:02:c4:fb:a1:33:e5:36:2f:48:4d: 96:3f:1e:ab:ea:ff:49:0b:de:ca:de:5a:04:3d:0c:c2:78:75: f7:cc:1d:cb:80:41:54:0e:8e:30:0f:9c:87:39:78:fa:30:3b: cb:d0:5d:fb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULtxBnaGDPvylfXRFdNURpaYMIPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMzU4MDFaFw0yNjA5MjUwNDAzMDFaMDMxMTAvBgNV BAMTKDFBNjQzMEMzQUE1QzE0N0MwQjJEQjUwNjJFOTQyRkUxM0IwRjc3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRSJnRpuZlu50yKn7k7SDRRV1 qOO7vXnAz5czVj57xCzGPAyYmup4Ke5itdSvscGQJjSO/Mm5k8mWfjdXB09qiavf y3qWXgB+yEPbXW1VyYDIo4ilyW7p55Jnn+2On1TJNiGEly0vqgKS4JEL8XbaDGx1 CcPYDQf/v5hTk6LtU+Q0BoV9eH6FZCrIgLtcC9rmBJKYtD/RRMgbQ6X7KbgGP3VH /qWvx6bPRMNBrm3c09GqDjRgCIBmYB/X4aOVA88iKHIUfUTL2HDtmGYAM8OSTNuU HyZfs+n8g+wO+fO2ao9j/iXUeLiHR9eO3pBFlr++SXKrKo1ciC5ZqvD/ZltVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUGmQww6pcFHwLLbUGLpQv4TsPd88wHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzczODJlMzEzOTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpOxzANBgkqhkiG 9w0BAQsFAAOCAQEAPJJ+eb8ez403IEHMN7gnNIPY+unfHCOwgn4G9lJ00cSHv9sa 8eiXVzrXZ82PIlzppv5/AMi5CtJJHe/JIzZ6JacmFgjTxO8Z6B3g/kkDW8FUCF7Y 4HpaUA5x3J8cr4U8l18lojJCh0QeaemTrgnNwr7aAnROs2Ug8UYhqdGrh9DktJPf NhDu20u70uSf0iyPsg6RP3GaNcbFEO64Sv0NsRdrPutqgFYcEKb6gGYCu6EZB6Vz G35YNFjiEungOWdGA9MXVQ1EBifG6zu+oNICxPuhM+U2L0hNlj8eq+r/SQveyt5a BD0Mwnh198wdy4BBVA6OMA+chzl4+jA7y9Bd+w== -----END CERTIFICATE-----Generated at Tue Oct 21 06:28:04 2025 by rpki-client