$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa File: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw= Subject key identifier: BD:3E:37:B1:B8:2C:13:7C:1C:01:2E:0F:80:98:D3:4E:F5:21:B8:58 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 491A59EC4F68F02B9ACFAAC1880860414D08DBA2 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa Signing time: Mon 02 Jun 2025 02:02:30 +0000 ROA not before: Mon 02 Jun 2025 01:57:30 +0000 ROA not after: Mon 01 Jun 2026 02:02:30 +0000 asID: 38150 IP address blocks: 202.91.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 00:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1a:59:ec:4f:68:f0:2b:9a:cf:aa:c1:88:08:60:41:4d:08:db:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jun 2 01:57:30 2025 GMT Not After : Jun 1 02:02:30 2026 GMT Subject: CN=BD3E37B1B82C137C1C012E0F8098D34EF521B858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:9a:77:02:c3:30:f0:fe:d7:60:d1:49:74: 26:94:c4:3c:ea:4d:11:41:47:2a:03:e7:97:21:81: 44:9e:09:07:c4:68:d0:6a:bc:3e:5b:28:62:ba:e5: ef:1d:88:79:0f:4d:42:d5:10:10:d9:f0:0f:6b:bd: e6:93:40:da:8c:88:37:2a:86:e9:8d:c2:35:28:e6: 65:a3:ce:75:79:e7:d3:4d:57:43:b6:e6:86:92:66: 49:ec:5c:dc:28:34:13:fd:67:e7:9c:9b:6d:8b:ff: 24:19:26:12:f4:ef:5c:31:0b:53:c2:ba:12:7a:de: 76:8c:6f:4c:14:e1:25:1a:e1:aa:a5:f3:e2:81:66: 1b:8c:cd:aa:52:e1:69:9b:2b:cf:3a:09:38:3e:ba: 88:c0:e5:c8:a7:f3:ca:a7:7d:ee:76:8c:59:d6:48: 83:39:8f:f2:85:69:0b:14:3d:5d:9c:bf:9a:07:ea: 9c:c2:bd:44:3b:83:3a:33:3a:f4:6d:50:83:06:c6: 59:55:d3:05:0a:56:2c:bd:9d:93:e3:e3:6b:5e:ca: 0c:17:ec:18:0d:40:f2:71:cc:66:2c:fc:8b:26:18: d6:1d:46:3c:d6:f2:e7:71:7b:a0:db:e4:d2:cc:b6: 77:42:d8:5f:e5:a5:d3:ff:70:67:09:b1:df:2d:ef: 5f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3E:37:B1:B8:2C:13:7C:1C:01:2E:0F:80:98:D3:4E:F5:21:B8:58 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.10.0/24 Signature Algorithm: sha256WithRSAEncryption 80:a6:42:a0:75:0b:73:38:1e:0b:d9:bc:28:f8:ae:36:73:62: b8:f9:d7:db:17:25:4f:6c:b8:a4:7f:ca:fa:c9:c0:0b:ac:83: 9c:65:ed:d2:1e:5f:b3:f4:7c:86:30:78:21:53:12:0a:85:b2: d6:91:08:55:3a:c9:1c:d7:66:bf:81:e1:15:c2:16:8f:28:ff: a5:d0:6c:a9:8d:fd:5a:f4:c2:15:64:b9:88:d6:cb:8e:54:e3: 7b:1b:9e:a0:93:d7:47:3c:93:74:01:4c:71:1f:c8:aa:8b:c3: 62:27:99:f3:31:da:2a:fa:52:bf:d5:a7:5d:5f:d3:35:e3:0c: 40:25:de:41:92:04:29:ea:c6:f1:45:18:f8:4b:13:4e:74:04: 42:0f:b9:73:66:d1:41:eb:49:dc:d2:71:c0:5f:43:d8:0e:c4: 56:61:bb:2d:46:fc:55:3d:06:00:91:aa:fa:94:c5:80:3a:85: 40:76:a6:ff:36:dc:9e:fd:59:10:3c:43:67:d9:b8:4d:47:90: 86:70:ca:7a:ab:ac:37:6b:0e:ad:38:d1:f2:51:d1:40:a7:2d: fe:38:34:a6:dd:f7:b8:ca:f3:a6:f7:16:50:e6:9c:3a:e3:e5: 25:03:fa:6d:e6:07:23:1e:b0:0a:3f:0b:ae:42:81:d0:b3:8f: 56:13:c2:cf -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSRpZ7E9o8Cuaz6rBiAhgQU0I26IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA2MDIwMTU3MzBaFw0yNjA2MDEwMjAyMzBaMDMxMTAvBgNV BAMTKEJEM0UzN0IxQjgyQzEzN0MxQzAxMkUwRjgwOThEMzRFRjUyMUI4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfJp3AsMw8P7XYNFJdCaUxDzq TRFBRyoD55chgUSeCQfEaNBqvD5bKGK65e8diHkPTULVEBDZ8A9rveaTQNqMiDcq humNwjUo5mWjznV559NNV0O25oaSZknsXNwoNBP9Z+ecm22L/yQZJhL071wxC1PC uhJ63naMb0wU4SUa4aql8+KBZhuMzapS4WmbK886CTg+uojA5cin88qnfe52jFnW SIM5j/KFaQsUPV2cv5oH6pzCvUQ7gzozOvRtUIMGxllV0wUKViy9nZPj42teygwX 7BgNQPJxzGYs/IsmGNYdRjzW8udxe6Db5NLMtndC2F/lpdP/cGcJsd8t718/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUvT43sbgsE3wcAS4PgJjTTvUhuFgwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMyMzAzMjJlMzkzMTJlMzEzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWwowDQYJKoZIhvcN AQELBQADggEBAICmQqB1C3M4HgvZvCj4rjZzYrj519sXJU9suKR/yvrJwAusg5xl 7dIeX7P0fIYweCFTEgqFstaRCFU6yRzXZr+B4RXCFo8o/6XQbKmN/Vr0whVkuYjW y45U43sbnqCT10c8k3QBTHEfyKqLw2InmfMx2ir6Ur/Vp11f0zXjDEAl3kGSBCnq xvFFGPhLE050BEIPuXNm0UHrSdzSccBfQ9gOxFZhuy1G/FU9BgCRqvqUxYA6hUB2 pv823J79WRA8Q2fZuE1HkIZwynqrrDdrDq040fJR0UCnLf44NKbd97jK86b3FlDm nDrj5SUD+m3mByMesAo/C65CgdCzj1YTws8= -----END CERTIFICATE-----Generated at Sun Nov 2 11:22:01 2025 by rpki-client