$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa File: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (raw, json) Hash identifier: XNOVEI3YN45FFKxPdBMlhL4tIvoqWKr9UzQJy69423A= Subject key identifier: 81:7C:8C:A8:C1:1E:AB:DD:CF:F1:33:5B:03:72:4B:C1:E5:AB:A4:09 Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 59FAD03D2471947612B6F09ED19EAAF1CB668156 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa Signing time: Wed 23 Jul 2025 15:00:42 +0000 ROA not before: Wed 23 Jul 2025 14:55:42 +0000 ROA not after: Wed 22 Jul 2026 15:00:42 +0000 asID: 4382 IP address blocks: 202.93.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 12:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:fa:d0:3d:24:71:94:76:12:b6:f0:9e:d1:9e:aa:f1:cb:66:81:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Jul 23 14:55:42 2025 GMT Not After : Jul 22 15:00:42 2026 GMT Subject: CN=817C8CA8C11EABDDCFF1335B03724BC1E5ABA409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5f:11:a1:c9:2c:a6:dd:c3:89:69:34:98:1d: a7:79:9f:ff:78:74:27:5b:38:9e:3e:25:76:71:72: 22:70:7d:9f:8f:12:98:ec:2c:e5:a5:51:eb:b2:7b: 0a:79:b2:97:a7:d7:4f:39:a9:15:7b:56:09:7d:c7: e5:1f:12:ee:d6:f2:65:59:f5:1b:dc:c3:4b:3e:ca: f6:4b:77:f6:a5:20:d2:89:aa:a6:a5:7d:74:c9:a1: e8:08:e8:d9:e5:43:74:a6:fc:b3:67:ff:79:55:e4: bc:92:9d:35:55:c5:70:31:eb:57:8d:db:67:c1:3e: 98:f2:62:c6:b0:92:d5:43:a3:61:f9:30:4f:64:f6: ba:30:46:e7:04:a6:5e:40:33:31:56:32:0d:85:32: c1:35:16:01:67:37:6d:d0:de:80:f3:20:da:94:e3: e8:56:3a:c2:51:fe:ce:95:7b:c5:1d:66:53:a0:f3: b0:13:55:f5:d3:b3:b8:c9:c2:a8:75:14:3f:2f:7a: 1a:a5:00:cc:f1:32:57:2a:6b:ad:f7:48:0c:16:05: 88:50:f6:8e:42:c5:41:f3:14:86:48:ed:d4:d4:f9: db:bd:00:f5:bf:a6:6d:2c:eb:65:12:c4:0c:b2:91: a2:ea:1d:25:65:7b:47:13:a1:18:75:bc:7d:6b:df: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7C:8C:A8:C1:1E:AB:DD:CF:F1:33:5B:03:72:4B:C1:E5:AB:A4:09 X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.134.0/24 Signature Algorithm: sha256WithRSAEncryption 81:1f:e3:48:95:75:65:5f:bc:b9:cf:76:84:b0:2b:81:bd:93: 02:ac:65:f3:12:36:cb:b3:b1:4d:c4:51:1c:2e:d8:d1:c0:17: 51:d6:2e:9f:4e:43:46:ec:7d:c5:e4:c6:b1:49:f9:fc:fe:a5: 68:65:2b:1a:d6:ef:e7:58:1b:05:22:da:1a:b8:41:e0:01:2a: 3d:f8:0e:5f:d5:e4:8b:4a:d6:90:f7:f7:17:0e:a5:e7:18:63: f6:1c:2d:c9:77:48:a1:89:b4:74:78:cd:d1:9c:dd:93:1f:b4: f1:2b:b5:93:0e:d8:5f:06:f3:61:9f:7f:e7:a7:a4:27:4c:c5: f7:84:d5:dd:44:da:d6:f0:ba:54:66:b5:d5:c6:e2:22:60:51: e0:ab:70:70:9d:a9:c8:63:57:5e:aa:4e:7b:29:a0:08:03:38: ba:0f:aa:78:72:3c:b0:10:0e:e5:27:9d:cc:5b:4e:19:1b:be: f7:b6:16:ec:bb:6e:94:a3:cc:e0:c3:85:0b:e5:bb:39:d4:d4: 27:2e:05:8b:0d:53:0a:14:85:5d:b7:1b:f3:3c:d7:3b:cc:86: 82:43:65:6e:34:f1:29:ea:41:f7:f6:01:fa:e1:a3:20:f5:38: d3:6f:87:3a:5d:e7:1c:cc:33:22:59:ec:36:af:77:5e:92:21: 6d:16:9d:f9 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUWfrQPSRxlHYStvCe0Z6q8ctmgVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNTA3MjMxNDU1NDJaFw0yNjA3MjIxNTAwNDJaMDMxMTAvBgNV BAMTKDgxN0M4Q0E4QzExRUFCRERDRkYxMzM1QjAzNzI0QkMxRTVBQkE0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXxGhySym3cOJaTSYHad5n/94 dCdbOJ4+JXZxciJwfZ+PEpjsLOWlUeuyewp5spen1085qRV7Vgl9x+UfEu7W8mVZ 9Rvcw0s+yvZLd/alINKJqqalfXTJoegI6NnlQ3Sm/LNn/3lV5LySnTVVxXAx61eN 22fBPpjyYsawktVDo2H5ME9k9rowRucEpl5AMzFWMg2FMsE1FgFnN23Q3oDzINqU 4+hWOsJR/s6Ve8UdZlOg87ATVfXTs7jJwqh1FD8vehqlAMzxMlcqa633SAwWBYhQ 9o5CxUHzFIZI7dTU+du9APW/pm0s62USxAyykaLqHSVle0cToRh1vH1r3xJBAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUgXyMqMEeq93P8TNbA3JLweWrpAkwHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYYwDQYJKoZIhvcN AQELBQADggEBAIEf40iVdWVfvLnPdoSwK4G9kwKsZfMSNsuzsU3EURwu2NHAF1HW Lp9OQ0bsfcXkxrFJ+fz+pWhlKxrW7+dYGwUi2hq4QeABKj34Dl/V5ItK1pD39xcO pecYY/YcLcl3SKGJtHR4zdGc3ZMftPErtZMO2F8G82Gff+enpCdMxfeE1d1E2tbw ulRmtdXG4iJgUeCrcHCdqchjV16qTnspoAgDOLoPqnhyPLAQDuUnncxbThkbvve2 Fuy7bpSjzODDhQvluznU1CcuBYsNUwoUhV23G/M81zvMhoJDZW408SnqQff2Afrh oyD1ONNvhzpd5xzMMyJZ7Davd16SIW0Wnfk= -----END CERTIFICATE-----Generated at Fri Oct 24 20:49:49 2025 by rpki-client