$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa File: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (raw, json) Hash identifier: fs11mYHw0N1XTmtPs5VLrZKEd/NebYnoDSeOf+OjB1M= Subject key identifier: A5:AD:DD:96:62:8D:07:07:0E:94:ED:93:EE:A0:FA:83:4C:6F:CA:CE Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Certificate serial: 2F6A6C07D2C27D837C6F208D0A84FA91AEEEAD07 Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa Signing time: Mon 02 Jun 2025 01:00:00 +0000 ROA not before: Mon 02 Jun 2025 00:55:00 +0000 ROA not after: Mon 01 Jun 2026 01:00:00 +0000 asID: 38758 IP address blocks: 203.176.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6a:6c:07:d2:c2:7d:83:7c:6f:20:8d:0a:84:fa:91:ae:ee:ad:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Validity Not Before: Jun 2 00:55:00 2025 GMT Not After : Jun 1 01:00:00 2026 GMT Subject: CN=A5ADDD96628D07070E94ED93EEA0FA834C6FCACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:e1:64:a7:62:cc:4c:5c:ff:62:54:cb:79: 08:68:d0:15:41:58:84:48:46:6a:c0:2e:8f:f2:f3: 95:c5:56:94:94:26:d5:8a:23:88:cf:d8:e2:ae:35: 20:be:08:cf:ac:1b:1c:35:47:b2:91:31:33:65:eb: 4f:d4:28:e7:c6:33:1b:c3:07:19:ad:70:56:ec:f9: bb:05:62:fb:a2:6e:d8:a8:c4:0f:e2:2e:68:74:d0: 75:b9:0d:1b:06:c0:ed:f2:4e:96:7b:54:63:f3:ae: 8e:d1:0f:8b:7b:bb:5a:11:58:9a:d2:68:88:39:4a: 46:b1:f0:6e:7d:35:1e:d1:7b:60:57:00:06:90:a4: 7a:f8:e6:c5:25:4a:d5:5c:22:29:db:38:0e:c2:a4: e5:c4:e1:e3:69:13:ee:16:a5:07:f5:73:34:24:ed: bf:d0:a7:3a:56:37:a3:40:94:89:bd:2e:87:78:95: 86:54:c7:5d:5f:99:cd:d9:87:d0:48:c5:59:03:97: 0d:cf:b9:44:79:ca:84:50:ad:83:2f:00:5c:ba:34: 11:b8:97:ad:fb:5f:92:58:14:27:35:37:40:9d:51: f5:cc:3d:b1:33:0c:f6:91:4c:d6:69:0a:58:2a:f3: 0e:43:2d:13:84:f6:5e:1d:f5:b5:ea:f6:3e:ac:db: da:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AD:DD:96:62:8D:07:07:0E:94:ED:93:EE:A0:FA:83:4C:6F:CA:CE X509v3 Authority Key Identifier: keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.176.176.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:ae:be:f3:48:9d:b5:66:f1:3e:e1:38:e0:64:63:44:fe:78: 4b:be:0b:81:77:1d:3b:e9:b9:0e:c5:ab:57:77:5f:90:a5:a3: e0:18:e8:e1:79:36:9d:23:bd:a2:95:0a:5c:1b:b2:b2:63:87: 27:23:59:e4:fc:61:00:fe:01:0e:38:34:ce:b5:bf:af:c0:7b: 7e:8d:3d:98:08:05:c1:37:aa:fb:12:bd:56:8e:5b:9e:b3:86: 7d:9c:8a:f6:56:30:1e:61:00:d9:b5:d4:f1:00:f4:75:93:56: 24:dc:03:50:e7:bd:d2:18:66:cf:17:51:c3:b2:74:32:f7:de: 06:ae:d0:f5:1c:61:94:5b:b6:97:c2:94:c0:f0:52:4e:09:5b: ef:c9:6c:02:f1:29:5a:a6:66:75:d0:1f:76:2f:a9:0f:82:a0: c5:51:61:78:91:6c:3c:37:29:bb:0a:51:af:78:62:3f:7f:1e: c3:5a:54:8c:cc:28:ab:a9:34:a9:b3:f8:00:44:37:e6:fe:19: 9a:22:7e:01:68:97:57:0a:61:c7:74:5a:55:dc:6b:23:d0:9c: ba:be:86:0b:05:e8:68:44:db:af:ca:37:0e:9a:ab:b0:4f:38: 9c:6c:03:bf:e8:59:c2:d5:54:a0:31:5d:b5:fe:67:6e:df:c1: b4:fc:41:a0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUL2psB9LCfYN8byCNCoT6ka7urQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1 NTQ5ODZGNDAeFw0yNTA2MDIwMDU1MDBaFw0yNjA2MDEwMTAwMDBaMDMxMTAvBgNV BAMTKEE1QURERDk2NjI4RDA3MDcwRTk0RUQ5M0VFQTBGQTgzNEM2RkNBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbuFkp2LMTFz/YlTLeQho0BVB WIRIRmrALo/y85XFVpSUJtWKI4jP2OKuNSC+CM+sGxw1R7KRMTNl60/UKOfGMxvD BxmtcFbs+bsFYvuibtioxA/iLmh00HW5DRsGwO3yTpZ7VGPzro7RD4t7u1oRWJrS aIg5Skax8G59NR7Re2BXAAaQpHr45sUlStVcIinbOA7CpOXE4eNpE+4WpQf1czQk 7b/QpzpWN6NAlIm9Lod4lYZUx11fmc3Zh9BIxVkDlw3PuUR5yoRQrYMvAFy6NBG4 l637X5JYFCc1N0CdUfXMPbEzDPaRTNZpClgq8w5DLROE9l4d9bXq9j6s29o5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpa3dlmKNBwcOlO2T7qD6g0xvys4wHwYDVR0j BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5 ODZGNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05 M2U1LTUyMmVlNTQwMThkNi8wLzMyMzAzMzJlMzEzNzM2MmUzMTM3MzYyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMzM4MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCy7CwMA0GCSqG SIb3DQEBCwUAA4IBAQBMrr7zSJ21ZvE+4TjgZGNE/nhLvguBdx076bkOxatXd1+Q paPgGOjheTadI72ilQpcG7KyY4cnI1nk/GEA/gEOODTOtb+vwHt+jT2YCAXBN6r7 Er1Wjlues4Z9nIr2VjAeYQDZtdTxAPR1k1Yk3ANQ573SGGbPF1HDsnQy994GrtD1 HGGUW7aXwpTA8FJOCVvvyWwC8SlapmZ10B92L6kPgqDFUWF4kWw8Nym7ClGveGI/ fx7DWlSMzCirqTSps/gARDfm/hmaIn4BaJdXCmHHdFpV3Gsj0Jy6voYLBehoRNuv yjcOmquwTzicbAO/6FnC1VSgMV21/mdu38G0/EGg -----END CERTIFICATE-----Generated at Fri Oct 24 14:55:23 2025 by rpki-client