$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa File: 3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: m4waNR9O8CSbNuX84sPB1sJTr7mGmHPTka1myLbtjac= Subject key identifier: 63:B3:94:AA:EC:7B:96:B9:49:0D:04:72:13:D4:66:BB:9B:F9:E8:58 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 41920C5DD0C431CB513F09E323A20BA60F7EDA62 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 06:00:01 +0000 ROA not before: Fri 26 Sep 2025 05:55:01 +0000 ROA not after: Fri 25 Sep 2026 06:00:01 +0000 asID: 18059 IP address blocks: 203.134.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:92:0c:5d:d0:c4:31:cb:51:3f:09:e3:23:a2:0b:a6:0f:7e:da:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 05:55:01 2025 GMT Not After : Sep 25 06:00:01 2026 GMT Subject: CN=63B394AAEC7B96B9490D047213D466BB9BF9E858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:df:17:e1:e2:78:02:f5:30:36:2b:f8:f2:da: c1:90:ba:69:cb:6a:6e:97:02:c0:0d:cb:89:ee:c8: 6d:c3:d9:bf:90:b6:62:ad:2f:b9:35:7e:3f:58:64: 33:f4:45:6c:75:8a:24:34:16:fa:27:b0:89:ef:1a: 53:02:cd:15:2d:3d:eb:c0:4f:82:21:ee:40:eb:c7: 42:19:f7:38:8e:cb:a9:d0:85:6f:be:f2:65:f3:75: 76:e9:f2:db:40:c5:de:19:32:d0:c5:b3:d2:0a:86: e1:8f:aa:99:8a:61:5e:a6:ba:d1:58:9f:81:12:b9: 73:a2:ee:a0:d4:5d:d8:2d:38:1e:e4:19:cb:ee:6f: d9:48:87:a1:84:da:19:50:58:75:91:10:80:4e:1a: 65:14:29:2c:fa:79:d7:c8:2a:4d:45:fb:64:25:f5: cb:97:38:e9:3f:52:74:2e:59:17:d7:35:92:07:1a: a4:b1:ef:44:5a:c0:ed:d3:e2:65:95:64:ea:57:26: 03:8d:9c:b8:c9:3e:78:a2:9e:d2:d2:76:76:f0:6f: aa:42:25:83:29:a0:5d:38:ab:04:9a:1c:84:cd:6b: 7c:ee:9b:0d:22:2a:60:10:6f:c6:91:a6:62:84:42: 3a:a3:a3:1b:82:48:26:cf:5c:96:37:8d:3f:56:f1: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B3:94:AA:EC:7B:96:B9:49:0D:04:72:13:D4:66:BB:9B:F9:E8:58 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.134.239.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:d4:7b:84:38:17:0b:2d:93:7d:d9:eb:7a:af:a5:c3:bd:ec: 2f:bc:e5:4c:87:30:9a:b7:35:18:76:3c:e7:c1:3c:41:28:c3: f7:a7:ab:51:4d:59:f6:5e:88:4f:d1:6d:73:55:65:81:cb:f2: 94:7d:8c:a1:98:ba:23:d0:60:a8:3e:3f:e3:c3:8d:85:e4:aa: e8:02:cc:45:f5:31:38:b2:b2:da:c6:2c:d1:49:8c:23:ed:78: 21:44:87:8d:bd:de:5f:23:4e:ee:96:e7:e4:ad:51:6c:b3:18: c3:44:6b:3e:15:3d:43:3d:74:01:80:9f:b3:3c:88:60:40:e2: 62:4b:e1:0c:ce:5c:ec:d4:d7:1d:99:cc:8f:6b:f6:41:db:99: 33:b0:4f:c2:40:f3:a0:66:c2:8b:f1:f8:2f:05:5b:fc:33:c0: 24:66:60:e1:c3:2e:96:0c:4f:e5:56:30:2b:4c:44:6d:10:72: 8f:fd:5c:f9:92:d9:73:01:e2:85:83:bf:16:25:d9:bc:25:a8: 37:92:c0:21:7f:81:be:32:32:de:9c:f8:0b:4b:cf:e6:00:2f: 84:60:06:04:2d:99:d4:af:40:15:08:95:c5:48:74:14:c5:0d: f9:83:b5:0c:c4:a6:a5:63:93:13:9a:4a:be:54:98:c8:46:0a: ca:63:dc:7a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQZIMXdDEMctRPwnjI6ILpg9+2mIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwNTU1MDFaFw0yNjA5MjUwNjAwMDFaMDMxMTAvBgNV BAMTKDYzQjM5NEFBRUM3Qjk2Qjk0OTBEMDQ3MjEzRDQ2NkJCOUJGOUU4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr3xfh4ngC9TA2K/jy2sGQumnL am6XAsANy4nuyG3D2b+QtmKtL7k1fj9YZDP0RWx1iiQ0FvonsInvGlMCzRUtPevA T4Ih7kDrx0IZ9ziOy6nQhW++8mXzdXbp8ttAxd4ZMtDFs9IKhuGPqpmKYV6mutFY n4ESuXOi7qDUXdgtOB7kGcvub9lIh6GE2hlQWHWREIBOGmUUKSz6edfIKk1F+2Ql 9cuXOOk/UnQuWRfXNZIHGqSx70RawO3T4mWVZOpXJgONnLjJPniintLSdnbwb6pC JYMpoF04qwSaHITNa3zumw0iKmAQb8aRpmKEQjqjoxuCSCbPXJY3jT9W8UfpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUY7OUqux7lrlJDQRyE9Rmu5v56FgwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4bvMA0GCSqG SIb3DQEBCwUAA4IBAQB/1HuEOBcLLZN92et6r6XDvewvvOVMhzCatzUYdjznwTxB KMP3p6tRTVn2XohP0W1zVWWBy/KUfYyhmLoj0GCoPj/jw42F5KroAsxF9TE4srLa xizRSYwj7XghRIeNvd5fI07ulufkrVFssxjDRGs+FT1DPXQBgJ+zPIhgQOJiS+EM zlzs1NcdmcyPa/ZB25kzsE/CQPOgZsKL8fgvBVv8M8AkZmDhwy6WDE/lVjArTERt EHKP/Vz5ktlzAeKFg78WJdm8Jag3ksAhf4G+MjLenPgLS8/mAC+EYAYELZnUr0AV CJXFSHQUxQ35g7UMxKalY5MTmkq+VJjIRgrKY9x6 -----END CERTIFICATE-----Generated at Mon Oct 20 15:20:17 2025 by rpki-client