$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa File: 3131302e3233322e36372e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: RYAz9qzV8DLvkQaGkPleXllxbGELxolKeuy+HsHR0UM= Subject key identifier: BE:AC:30:05:4C:A4:F3:46:8B:A7:0F:E1:88:C5:B9:DB:43:FD:54:95 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 2CEA72384B569A1920E9D8814FF75206536D9E45 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa Signing time: Fri 11 Jul 2025 11:02:23 +0000 ROA not before: Fri 11 Jul 2025 10:57:23 +0000 ROA not after: Fri 10 Jul 2026 11:02:23 +0000 asID: 23679 IP address blocks: 110.232.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 09:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ea:72:38:4b:56:9a:19:20:e9:d8:81:4f:f7:52:06:53:6d:9e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jul 11 10:57:23 2025 GMT Not After : Jul 10 11:02:23 2026 GMT Subject: CN=BEAC30054CA4F3468BA70FE188C5B9DB43FD5495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:2b:5d:c7:ce:19:9f:f2:71:2b:c0:f5:0f: 0b:b3:cb:75:87:2f:ff:c8:75:b2:83:ca:34:3d:a4: 25:c6:de:93:00:f3:87:f2:45:06:ac:ab:54:47:83: ef:fd:f6:e2:9d:5b:c4:83:f6:ab:a8:db:9d:70:ed: 35:77:30:0c:73:26:f2:75:60:33:88:59:d8:37:65: 49:35:d8:64:c1:2c:02:bc:88:c7:d1:83:dc:cb:a5: b8:4e:25:83:30:ba:4d:fc:78:82:19:83:a5:93:6f: a7:a1:42:72:df:cd:f1:81:fa:53:d8:b8:4e:97:c1: 74:dd:cf:c6:13:e7:34:8c:06:9e:b1:12:a3:27:5a: 72:e4:8e:1f:b5:5f:0b:fa:b2:49:c8:9a:a9:2f:9c: 74:ae:46:10:76:55:9e:a8:3d:15:34:f6:f4:80:20: 7a:67:21:c5:8e:04:d7:3e:a4:ed:1f:b1:0d:c0:73: aa:86:aa:22:76:ae:83:7c:49:97:fe:f3:ee:7e:5e: 7c:57:3c:eb:07:ee:df:5c:11:76:fb:45:9b:be:5b: 04:e0:3a:f7:b7:09:c2:07:9b:77:8a:25:99:5c:48: bd:d5:09:c8:16:5d:a9:71:fd:b6:be:bb:92:1f:4f: 3e:36:d1:28:87:1d:9a:4a:a4:fa:cf:c4:55:c3:09: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AC:30:05:4C:A4:F3:46:8B:A7:0F:E1:88:C5:B9:DB:43:FD:54:95 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36372e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.232.67.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:94:81:e6:b4:63:b7:82:cc:35:d1:21:97:fa:a8:b7:d5:a9: 38:42:4f:57:3c:ca:a6:41:70:e4:3c:df:a3:b1:10:fa:d9:e9: 68:f8:f9:b4:d2:34:da:44:b2:78:1b:3c:c6:1e:9a:c3:b8:62: f2:82:81:4a:d6:89:04:b5:a0:fc:4e:77:e9:89:a9:0b:8d:70: a1:12:ee:38:a6:4b:cd:06:04:05:1f:fd:eb:97:c5:34:8b:e3: 55:07:cf:88:a5:a4:c1:b8:46:7e:3a:92:87:98:9f:fc:f0:28: 62:0a:a5:5e:79:6a:4d:1f:c0:94:f8:6b:fb:fc:8b:12:c7:31: db:a8:f9:80:90:5a:a4:79:3f:00:03:73:cd:a0:c1:87:31:0e: 9a:50:5c:f3:03:29:1c:b6:f4:45:3a:ec:dd:b5:5e:0c:ca:e4: da:a2:da:3b:a7:41:c8:af:03:30:d8:d3:f0:3f:c5:f1:51:e8: 9a:ed:d1:39:99:61:46:21:9d:56:c7:8d:3a:d4:2a:0e:15:57: 80:d7:7d:e3:ff:33:ed:5d:ec:e5:7a:df:31:91:0d:b1:d5:1a: 51:70:b8:cf:e3:48:07:ec:6e:74:b9:51:88:21:6b:4f:22:87: cb:41:a0:f2:90:37:f6:3e:70:de:cf:77:ab:48:0f:d0:4d:d2: bd:35:c1:e1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULOpyOEtWmhkg6diBT/dSBlNtnkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTA3MTExMDU3MjNaFw0yNjA3MTAxMTAyMjNaMDMxMTAvBgNV BAMTKEJFQUMzMDA1NENBNEYzNDY4QkE3MEZFMTg4QzVCOURCNDNGRDU0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3ytdx84Zn/JxK8D1Dwuzy3WH L//IdbKDyjQ9pCXG3pMA84fyRQasq1RHg+/99uKdW8SD9quo251w7TV3MAxzJvJ1 YDOIWdg3ZUk12GTBLAK8iMfRg9zLpbhOJYMwuk38eIIZg6WTb6ehQnLfzfGB+lPY uE6XwXTdz8YT5zSMBp6xEqMnWnLkjh+1Xwv6sknImqkvnHSuRhB2VZ6oPRU09vSA IHpnIcWOBNc+pO0fsQ3Ac6qGqiJ2roN8SZf+8+5+XnxXPOsH7t9cEXb7RZu+WwTg Ove3CcIHm3eKJZlcSL3VCcgWXalx/ba+u5IfTz420SiHHZpKpPrPxFXDCbsVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvqwwBUyk80aLpw/hiMW520P9VJUwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG7oQzANBgkqhkiG 9w0BAQsFAAOCAQEAPJSB5rRjt4LMNdEhl/qot9WpOEJPVzzKpkFw5Dzfo7EQ+tnp aPj5tNI02kSyeBs8xh6aw7hi8oKBStaJBLWg/E536YmpC41woRLuOKZLzQYEBR/9 65fFNIvjVQfPiKWkwbhGfjqSh5if/PAoYgqlXnlqTR/AlPhr+/yLEscx26j5gJBa pHk/AANzzaDBhzEOmlBc8wMpHLb0RTrs3bVeDMrk2qLaO6dByK8DMNjT8D/F8VHo mu3ROZlhRiGdVseNOtQqDhVXgNd94/8z7V3s5XrfMZENsdUaUXC4z+NIB+xudLlR iCFrTyKHy0Gg8pA39j5w3s93q0gP0E3SvTXB4Q== -----END CERTIFICATE-----Generated at Fri Jul 25 18:24:29 2025 by rpki-client