$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa File: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (raw, json) Hash identifier: f2/bnQrR/MLXFGa/5XG9w5LNWrb6RKk/0zpBaeZlPjA= Subject key identifier: 3E:DB:14:96:D1:C5:46:81:BB:4F:8F:5D:55:BC:3C:D2:FC:33:34:14 Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 0122FF3E640854E34A5B1B03CD658748851EF8A2 Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa Signing time: Wed 23 Jul 2025 05:45:06 +0000 ROA not before: Wed 23 Jul 2025 05:40:06 +0000 ROA not after: Wed 22 Jul 2026 05:45:06 +0000 asID: 24211 IP address blocks: 203.190.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 13:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:22:ff:3e:64:08:54:e3:4a:5b:1b:03:cd:65:87:48:85:1e:f8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Jul 23 05:40:06 2025 GMT Not After : Jul 22 05:45:06 2026 GMT Subject: CN=3EDB1496D1C54681BB4F8F5D55BC3CD2FC333414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:07:73:e1:3d:52:9d:66:a9:98:3f:88:15:66: fd:3c:0c:06:3f:d4:09:b9:ad:34:1f:1b:82:20:72: de:fc:d3:3c:48:8e:37:7d:9e:68:7a:96:02:94:7d: ae:c2:fd:5e:c8:51:89:aa:13:f6:fc:03:7d:67:3c: 97:29:7c:6a:79:1f:e7:45:58:72:85:3d:98:83:d4: dd:a0:36:f6:be:55:ba:a2:7d:db:a4:a5:4b:69:20: 7a:6f:11:ab:92:d8:36:71:4e:be:e7:49:55:90:be: af:37:29:78:bb:44:4d:69:ab:72:66:80:29:fa:f5: b5:04:01:b7:57:8e:6f:4a:4a:3d:2f:6b:b6:79:34: f4:25:91:66:e6:09:52:ae:d8:c7:0d:af:b8:ff:5e: 37:ab:18:68:29:31:f3:24:e6:4b:f6:9f:12:2d:8f: 01:d5:f4:35:9d:17:5b:d9:8f:2e:2d:c9:4a:03:35: d5:b0:ae:78:97:e1:8e:62:6f:35:69:5f:53:47:12: 59:50:04:c1:0b:6b:f9:e5:1c:e8:1a:91:6c:42:6b: eb:fb:33:9e:77:6a:43:e3:2d:95:41:eb:b2:b7:d7: 00:20:33:1b:b5:3e:9f:db:c9:c7:71:6d:86:80:5e: 91:b8:dc:08:b0:f9:ae:fe:e0:41:d1:ef:00:b8:db: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DB:14:96:D1:C5:46:81:BB:4F:8F:5D:55:BC:3C:D2:FC:33:34:14 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.240.0/24 Signature Algorithm: sha256WithRSAEncryption b9:44:b5:7b:a8:ee:76:92:ac:27:75:23:8b:d7:4d:21:10:29: b1:d7:b3:a3:5c:da:d5:10:af:34:ff:b9:f0:19:a1:7c:10:18: 2f:4f:19:a0:f2:97:90:bd:b7:82:9a:75:72:3b:31:17:17:b6: 16:3d:7d:68:8f:ca:67:0e:57:12:58:8e:82:6e:d3:2d:de:90: 2e:98:14:75:2a:58:9f:86:da:b6:bc:3b:76:8b:60:e3:f2:44: 59:6a:83:db:b2:b9:fc:b5:e8:83:57:60:82:8b:e8:dd:cd:1d: 27:6f:2c:75:c6:44:61:a7:db:ad:d8:f1:06:d4:38:1a:8f:f5: 2e:14:8b:af:7b:27:5d:86:80:bc:0c:2d:8d:30:6d:73:2b:57: 70:38:f9:45:b3:c3:bf:8e:f3:ef:e8:74:66:db:f8:d4:e3:a3: 21:7f:4c:bb:b5:2f:35:1b:aa:ae:22:3f:8e:bd:4a:0d:85:c4: 8d:b5:00:11:dc:c9:85:cf:63:8c:b3:74:a9:7e:9f:64:d4:83: 22:5f:d2:e1:74:9f:11:06:7c:f7:57:55:9f:0f:9e:3f:ab:1b: f7:16:7d:38:6a:46:58:bd:dc:64:02:35:0d:ec:b8:e0:ae:c0: d3:b3:3b:b4:ac:c6:c6:af:bd:de:13:33:47:f8:34:0d:6e:0f: db:fb:b7:a0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUASL/PmQIVONKWxsDzWWHSIUe+KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yNTA3MjMwNTQwMDZaFw0yNjA3MjIwNTQ1MDZaMDMxMTAvBgNV BAMTKDNFREIxNDk2RDFDNTQ2ODFCQjRGOEY1RDU1QkMzQ0QyRkMzMzM0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkB3PhPVKdZqmYP4gVZv08DAY/ 1Am5rTQfG4Igct780zxIjjd9nmh6lgKUfa7C/V7IUYmqE/b8A31nPJcpfGp5H+dF WHKFPZiD1N2gNva+VbqifdukpUtpIHpvEauS2DZxTr7nSVWQvq83KXi7RE1pq3Jm gCn69bUEAbdXjm9KSj0va7Z5NPQlkWbmCVKu2McNr7j/XjerGGgpMfMk5kv2nxIt jwHV9DWdF1vZjy4tyUoDNdWwrniX4Y5ibzVpX1NHEllQBMELa/nlHOgakWxCa+v7 M553akPjLZVB67K31wAgMxu1Pp/bycdxbYaAXpG43Aiw+a7+4EHR7wC42/X/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPtsUltHFRoG7T49dVbw80vwzNBQwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5ZjAxM2Y5LWI0ZjctNDU4Yy1h YWM1LTA4MDQxYjNmNjVlNi8wLzMyMzAzMzJlMzEzOTMwMmUzMjM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy77wMA0GCSqG SIb3DQEBCwUAA4IBAQC5RLV7qO52kqwndSOL100hECmx17OjXNrVEK80/7nwGaF8 EBgvTxmg8peQvbeCmnVyOzEXF7YWPX1oj8pnDlcSWI6CbtMt3pAumBR1Klifhtq2 vDt2i2Dj8kRZaoPbsrn8teiDV2CCi+jdzR0nbyx1xkRhp9ut2PEG1Dgaj/UuFIuv eyddhoC8DC2NMG1zK1dwOPlFs8O/jvPv6HRm2/jU46Mhf0y7tS81G6quIj+OvUoN hcSNtQAR3MmFz2OMs3Spfp9k1IMiX9LhdJ8RBnz3V1WfD54/qxv3Fn04akZYvdxk AjUN7LjgrsDTszu0rMbGr73eEzNH+DQNbg/b+7eg -----END CERTIFICATE-----Generated at Sat Jul 26 07:25:37 2025 by rpki-client