$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230322e39332e3232342e302f32312d3234203d3e203338373538.roa File: 3230322e39332e3232342e302f32312d3234203d3e203338373538.roa (raw, json) Hash identifier: pHeh4WZc6QAiJI01oIhwHizGh3B/+0TL7uxRsM4Hqog= Subject key identifier: BC:07:F4:2B:43:16:26:7D:9F:AB:83:48:10:A1:6D:22:8B:24:C9:AD Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Certificate serial: 04EEEF50B1D6DB8551C2818EFDA86E73F06AF4C3 Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230322e39332e3232342e302f32312d3234203d3e203338373538.roa Signing time: Mon 02 Jun 2025 01:00:01 +0000 ROA not before: Mon 02 Jun 2025 00:55:01 +0000 ROA not after: Mon 01 Jun 2026 01:00:01 +0000 asID: 38758 IP address blocks: 202.93.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ee:ef:50:b1:d6:db:85:51:c2:81:8e:fd:a8:6e:73:f0:6a:f4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Validity Not Before: Jun 2 00:55:01 2025 GMT Not After : Jun 1 01:00:01 2026 GMT Subject: CN=BC07F42B4316267D9FAB834810A16D228B24C9AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:d1:93:64:75:59:dd:76:e3:8b:21:23:9a: cf:0e:c3:57:25:dd:6b:a6:10:67:30:36:58:9c:9e: 7c:3f:ab:6f:44:e9:d4:97:fd:c1:c6:87:28:23:2b: bb:9f:e5:e9:ea:39:8a:11:3e:10:68:8b:2c:c7:a7: d2:c5:a0:37:89:c5:2e:39:da:45:7f:85:a9:0a:9f: 0e:06:6d:23:15:cd:d2:e4:4e:82:f4:46:b7:e6:48: 43:79:22:39:4a:bc:bd:d1:d5:75:68:ce:2f:a9:07: 6b:ac:1b:28:7b:6e:f4:8e:ad:25:25:5e:0f:28:d4: de:53:8f:a8:5b:d4:71:04:ff:97:71:f8:97:b4:46: ee:b3:b1:18:a1:6a:51:59:66:2b:26:52:41:c3:48: e7:c4:d2:b2:a4:2a:1f:0f:a3:8f:a5:d9:81:c6:e3: fa:b8:35:c6:7f:27:c8:76:77:d6:2a:be:95:ed:6e: 36:4b:41:58:bb:7d:08:6b:16:cd:ff:82:ea:ae:ac: 18:5a:1d:fe:db:14:14:2b:b0:a9:6c:cc:ca:7c:40: c8:ba:e5:6c:29:61:f7:6f:f0:ca:30:96:46:5a:f4: 4a:31:61:bd:17:d6:ea:d0:21:b7:17:83:37:ba:38: 47:66:b5:0b:1c:40:de:18:a7:9d:2c:b9:f9:d3:33: 3e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:F4:2B:43:16:26:7D:9F:AB:83:48:10:A1:6D:22:8B:24:C9:AD X509v3 Authority Key Identifier: keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230322e39332e3232342e302f32312d3234203d3e203338373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.224.0/21 Signature Algorithm: sha256WithRSAEncryption 84:be:1d:f7:3e:cc:9b:03:95:0e:ae:58:e5:c0:f5:ae:4f:65: 7b:a7:c8:89:ac:e9:0d:1e:33:90:d3:59:f4:eb:1e:31:72:53: 61:6a:b8:17:69:9c:df:65:9d:d5:a2:1e:9c:52:8d:dd:0c:72: 26:ce:fd:63:c2:e0:d0:25:4b:a9:1d:7a:ae:97:0c:58:33:1b: 5d:60:80:8f:a2:85:a8:b9:3c:90:3c:d4:6f:11:8c:0a:34:e4: 24:bd:a2:26:f1:fe:2d:11:97:19:70:1c:7c:04:dc:d5:cc:4c: 25:3a:ce:eb:80:f6:b3:da:98:cf:1b:28:0a:9a:d5:6e:f0:c3: 1c:08:09:eb:9c:7e:ca:ae:05:3e:96:b8:7f:2e:76:bf:2d:75: b9:87:71:07:c9:d7:46:70:f0:65:8b:28:6e:52:73:04:0e:4d: ba:18:c8:cd:8e:9b:26:0b:55:3d:35:9e:81:ea:58:6d:e5:ce: a0:0f:a2:92:fa:d1:c0:c1:1c:a4:ee:11:7a:57:ab:9b:ec:8e: 6e:ce:3a:64:fd:2c:e6:ea:46:56:88:3c:5d:68:f5:77:46:7e: 02:34:c8:e0:a2:3c:e2:b8:c4:12:6b:45:36:91:a8:d6:45:55: 2b:18:33:28:34:70:dc:5f:55:f6:07:e2:d5:cd:87:53:42:7c: 20:13:7b:c1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBO7vULHW24VRwoGO/ahuc/Bq9MMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1 NTQ5ODZGNDAeFw0yNTA2MDIwMDU1MDFaFw0yNjA2MDEwMTAwMDFaMDMxMTAvBgNV BAMTKEJDMDdGNDJCNDMxNjI2N0Q5RkFCODM0ODEwQTE2RDIyOEIyNEM5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTP9GTZHVZ3XbjiyEjms8Ow1cl 3WumEGcwNlicnnw/q29E6dSX/cHGhygjK7uf5enqOYoRPhBoiyzHp9LFoDeJxS45 2kV/hakKnw4GbSMVzdLkToL0RrfmSEN5IjlKvL3R1XVozi+pB2usGyh7bvSOrSUl Xg8o1N5Tj6hb1HEE/5dx+Je0Ru6zsRihalFZZismUkHDSOfE0rKkKh8Po4+l2YHG 4/q4NcZ/J8h2d9YqvpXtbjZLQVi7fQhrFs3/guqurBhaHf7bFBQrsKlszMp8QMi6 5WwpYfdv8MowlkZa9EoxYb0X1urQIbcXgze6OEdmtQscQN4Yp50sufnTMz4hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvAf0K0MWJn2fq4NIEKFtIoskya0wHwYDVR0j BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5 ODZGNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05 M2U1LTUyMmVlNTQwMThkNi8wLzMyMzAzMjJlMzkzMzJlMzIzMjM0MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzMzODM3MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pd4DANBgkqhkiG 9w0BAQsFAAOCAQEAhL4d9z7MmwOVDq5Y5cD1rk9le6fIiazpDR4zkNNZ9OseMXJT YWq4F2mc32Wd1aIenFKN3QxyJs79Y8Lg0CVLqR16rpcMWDMbXWCAj6KFqLk8kDzU bxGMCjTkJL2iJvH+LRGXGXAcfATc1cxMJTrO64D2s9qYzxsoCprVbvDDHAgJ65x+ yq4FPpa4fy52vy11uYdxB8nXRnDwZYsoblJzBA5NuhjIzY6bJgtVPTWegepYbeXO oA+ikvrRwMEcpO4Relerm+yObs46ZP0s5upGVog8XWj1d0Z+AjTI4KI84rjEEmtF NpGo1kVVKxgzKDRw3F9V9gfi1c2HU0J8IBN7wQ== -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:47 2025 by rpki-client