$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa File: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (raw, json) Hash identifier: Via8twfYiTOYYUS4MnDOw8zvlMb40Ue2urMBm24mYnU= Subject key identifier: 11:59:88:BB:BF:7F:F4:5E:68:42:E6:06:BB:04:36:9E:8B:95:F8:C3 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 3F2540D302C5AB6AEEDE76042D96A31B9FBF7401 Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa Signing time: Fri 19 Sep 2025 09:02:54 +0000 ROA not before: Fri 19 Sep 2025 08:57:54 +0000 ROA not after: Fri 18 Sep 2026 09:02:54 +0000 asID: 152012 IP address blocks: 203.175.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:25:40:d3:02:c5:ab:6a:ee:de:76:04:2d:96:a3:1b:9f:bf:74:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Sep 19 08:57:54 2025 GMT Not After : Sep 18 09:02:54 2026 GMT Subject: CN=115988BBBF7FF45E6842E606BB04369E8B95F8C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:62:56:5a:be:99:97:0b:d4:e5:a9:ae:87:c6: 06:41:8e:ab:09:9c:25:92:8c:0d:de:37:2c:40:3d: 3b:0f:d2:77:99:c7:ca:7d:8f:33:59:2d:37:31:8b: a9:02:e4:d9:88:6f:24:32:62:1d:6b:7f:be:8f:ca: 07:ae:a8:64:18:3c:b3:19:42:9b:6e:3d:b0:96:41: 4f:53:0f:75:8a:c4:0b:07:9b:56:3b:3f:7c:02:f2: aa:6b:65:f2:f5:28:d9:76:bd:39:f9:c7:48:be:32: ed:f1:b0:5e:bc:a7:36:60:ea:62:26:a6:cd:9b:47: f1:bf:34:34:6b:71:40:d2:5c:1f:66:81:9f:68:16: 2f:c6:d8:6f:33:2f:03:9c:76:8b:c7:98:31:6e:f5: 3b:e5:0b:e3:2c:79:f4:1a:b6:38:ea:a0:45:76:dd: 75:cd:d9:ff:d8:6a:60:ce:38:18:9e:b9:2d:3a:ac: e3:a7:78:5e:a2:41:9e:4b:eb:36:7f:ed:40:7f:9c: 17:92:8e:5d:11:eb:da:39:f9:67:4a:a5:8f:4e:27: 8e:6d:1e:77:0d:55:e5:55:96:df:70:06:1f:40:bc: 93:ac:db:fa:be:31:28:43:a4:a0:8d:fe:58:7d:9b: 0d:7d:99:9b:99:02:09:9f:2d:19:20:a5:06:d9:d2: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:59:88:BB:BF:7F:F4:5E:68:42:E6:06:BB:04:36:9E:8B:95:F8:C3 X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.100.0/23 Signature Algorithm: sha256WithRSAEncryption 37:b9:0f:11:60:d7:91:02:57:5f:10:99:7c:54:7c:2a:7c:81: de:77:57:c4:47:c5:3c:d3:7b:d4:95:4f:54:75:97:19:45:be: 39:07:7c:8b:dc:9a:01:fb:9e:cf:ef:a0:d3:00:03:7a:75:4f: df:d0:d6:be:51:39:15:fb:6e:8d:06:38:f3:f1:8b:3d:10:d4: c8:8f:f2:80:65:7b:64:ce:57:ad:56:c0:87:dd:10:7a:1a:44: ed:e4:71:38:0c:8d:cf:9f:e7:b5:dc:02:80:48:ef:86:00:5a: f4:f5:b9:e4:6e:35:b7:40:1c:da:0b:f8:f3:66:13:30:0a:de: fe:c9:25:00:8d:df:cd:50:f3:2e:9f:6e:87:c3:27:f0:5e:e4: 7c:75:11:00:92:61:83:be:dd:31:6e:56:50:9c:4e:7c:e1:a7: 68:a7:fa:03:94:8f:b5:e0:a8:cf:31:d9:ba:5a:cc:63:bd:ed: dc:5b:9e:b4:a0:d1:d2:d0:4f:71:30:b6:31:34:17:f6:4b:e9: 41:7f:c1:a0:79:20:92:e9:71:85:c3:78:e2:ef:7c:53:a8:cc: c6:9d:ad:bc:0f:23:f8:c1:d9:23:ed:0d:f2:6d:52:3e:48:d5: 73:f6:93:ce:ba:11:7c:d8:f4:5a:2c:6b:05:98:9c:62:c5:ce: 89:fa:6d:38 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPyVA0wLFq2ru3nYELZajG5+/dAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTA5MTkwODU3NTRaFw0yNjA5MTgwOTAyNTRaMDMxMTAvBgNV BAMTKDExNTk4OEJCQkY3RkY0NUU2ODQyRTYwNkJCMDQzNjlFOEI5NUY4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpYlZavpmXC9Tlqa6HxgZBjqsJ nCWSjA3eNyxAPTsP0neZx8p9jzNZLTcxi6kC5NmIbyQyYh1rf76PygeuqGQYPLMZ QptuPbCWQU9TD3WKxAsHm1Y7P3wC8qprZfL1KNl2vTn5x0i+Mu3xsF68pzZg6mIm ps2bR/G/NDRrcUDSXB9mgZ9oFi/G2G8zLwOcdovHmDFu9TvlC+MsefQatjjqoEV2 3XXN2f/YamDOOBieuS06rOOneF6iQZ5L6zZ/7UB/nBeSjl0R69o5+WdKpY9OJ45t HncNVeVVlt9wBh9AvJOs2/q+MShDpKCN/lh9mw19mZuZAgmfLRkgpQbZ0oAjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUEVmIu79/9F5oQuYGuwQ2nouV+MMwHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5OTgxOTVmLTE0YmItNDFmZC1i NmVkLTdhOTY3YzhlNDNkZi8wLzMyMzAzMzJlMzEzNzM1MmUzMTMwMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzIzMDMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLr2QwDQYJ KoZIhvcNAQELBQADggEBADe5DxFg15ECV18QmXxUfCp8gd53V8RHxTzTe9SVT1R1 lxlFvjkHfIvcmgH7ns/voNMAA3p1T9/Q1r5RORX7bo0GOPPxiz0Q1MiP8oBle2TO V61WwIfdEHoaRO3kcTgMjc+f57XcAoBI74YAWvT1ueRuNbdAHNoL+PNmEzAK3v7J JQCN381Q8y6fbofDJ/Be5Hx1EQCSYYO+3TFuVlCcTnzhp2in+gOUj7XgqM8x2bpa zGO97dxbnrSg0dLQT3EwtjE0F/ZL6UF/waB5IJLpcYXDeOLvfFOozMadrbwPI/jB 2SPtDfJtUj5I1XP2k866EXzY9FosawWYnGLFzon6bTg= -----END CERTIFICATE-----Generated at Mon Oct 20 21:07:22 2025 by rpki-client