$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa File: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (raw, json) Hash identifier: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw= Subject key identifier: F6:9C:6A:DA:DF:C5:09:D7:2B:CA:3A:E4:DC:1C:5A:31:6B:77:C7:A8 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 33F185E0080F491357EB79CE30DC4AABC7C861A1 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa Signing time: Sun 06 Jul 2025 19:00:00 +0000 ROA not before: Sun 06 Jul 2025 18:55:00 +0000 ROA not after: Sun 05 Jul 2026 19:00:00 +0000 asID: 17670 IP address blocks: 202.147.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f1:85:e0:08:0f:49:13:57:eb:79:ce:30:dc:4a:ab:c7:c8:61:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Jul 6 18:55:00 2025 GMT Not After : Jul 5 19:00:00 2026 GMT Subject: CN=F69C6ADADFC509D72BCA3AE4DC1C5A316B77C7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:07:49:aa:28:5f:52:0f:82:eb:bb:9e:54: da:6c:ab:0b:4d:d0:a7:9f:b7:e4:be:43:76:de:18: 69:d5:86:37:c2:2c:06:0c:cf:e5:4e:ed:04:af:af: 6d:b1:64:3b:74:74:55:c7:f7:b1:67:12:1c:2f:ee: 7c:1d:eb:3c:1a:87:06:9d:e3:f9:48:f5:d8:15:9d: 16:82:cd:dc:94:77:79:56:a6:9e:f4:7e:6b:5a:ad: a0:20:29:b2:27:08:7a:1b:0d:5d:73:a3:8d:48:5e: 67:97:73:d2:fb:c3:e6:2e:f5:78:8f:5c:f3:d2:58: f1:33:69:67:9f:a1:19:50:e8:c6:67:6b:b5:fe:c3: fd:98:f6:64:a2:21:ee:12:8a:de:da:e8:4a:82:c6: d3:27:bd:6f:be:b2:98:fd:e8:2c:eb:b7:a0:46:0c: 9c:fb:6e:56:ad:38:26:fa:a6:ec:37:d7:ed:96:f1: ff:93:fe:cb:87:73:36:dd:ac:3a:1c:d8:01:db:2e: 8b:9b:42:44:1a:95:29:4e:37:00:b5:83:81:b2:4c: bc:58:3c:32:4d:9a:55:8e:bf:05:56:e7:f8:12:0e: 9e:4d:9b:6f:8b:ea:7c:a6:70:dd:88:12:da:d8:0b: f7:04:d4:75:8b:c3:2b:8f:63:f5:dd:fe:b3:59:21: d8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9C:6A:DA:DF:C5:09:D7:2B:CA:3A:E4:DC:1C:5A:31:6B:77:C7:A8 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.147.192.0/20 Signature Algorithm: sha256WithRSAEncryption ab:a6:5c:62:f2:cc:49:d6:b3:95:9c:aa:44:73:16:fa:5f:f3: bc:f0:32:c8:b0:43:ca:8c:79:23:30:63:f9:ab:0f:9b:06:b9: 69:18:69:09:8c:c9:1d:6e:9c:83:42:d0:a4:b6:ab:d1:7a:0b: c9:67:4d:44:47:82:cb:b4:60:8a:4c:71:43:03:e3:09:36:70: 2f:07:0f:33:a1:f4:54:9b:e1:4e:a4:f3:2a:21:8a:26:73:ba: 1c:34:10:eb:67:f4:36:08:1e:3b:03:d6:17:17:b0:e6:2d:25: 25:38:45:ae:9d:3e:5d:da:8a:fb:3c:6d:22:fb:c3:d3:9e:dc: 68:1a:08:25:ab:b0:08:26:42:be:7d:21:65:c7:79:52:e7:ac: 51:fb:ea:1f:f8:0f:11:8b:da:88:d0:cc:df:28:7b:92:a4:b9: f3:f1:dd:47:60:9d:5a:20:20:09:34:81:36:ab:5c:8e:6c:8a: 7e:73:6b:8e:f0:1d:30:c0:d9:8e:af:a1:57:c5:b6:fe:03:27: 55:87:32:09:b2:91:a3:a4:15:82:28:92:83:90:d8:0f:d0:48: ff:84:58:e8:ee:60:aa:1c:5c:d8:62:fe:c7:cd:7c:90:79:24: ec:8f:c7:46:ef:5b:35:c2:50:e2:c6:51:cf:98:9e:26:04:1a: 8c:29:86:e4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUM/GF4AgPSRNX63nOMNxKq8fIYaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTA3MDYxODU1MDBaFw0yNjA3MDUxOTAwMDBaMDMxMTAvBgNV BAMTKEY2OUM2QURBREZDNTA5RDcyQkNBM0FFNERDMUM1QTMxNkI3N0M3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aAdJqihfUg+C67ueVNpsqwtN 0Keft+S+Q3beGGnVhjfCLAYMz+VO7QSvr22xZDt0dFXH97FnEhwv7nwd6zwahwad 4/lI9dgVnRaCzdyUd3lWpp70fmtaraAgKbInCHobDV1zo41IXmeXc9L7w+Yu9XiP XPPSWPEzaWefoRlQ6MZna7X+w/2Y9mSiIe4Sit7a6EqCxtMnvW++spj96Czrt6BG DJz7blatOCb6puw31+2W8f+T/suHczbdrDoc2AHbLoubQkQalSlONwC1g4GyTLxY PDJNmlWOvwVW5/gSDp5Nm2+L6nymcN2IEtrYC/cE1HWLwyuPY/Xd/rNZIdgRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9pxq2t/FCdcryjrk3BxaMWt3x6gwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04 OTQ3LWZiYTZlN2M0YmU3Yy8wLzMyMzAzMjJlMzEzNDM3MmUzMTM5MzIyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzMTM3MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEypPAMA0GCSqG SIb3DQEBCwUAA4IBAQCrplxi8sxJ1rOVnKpEcxb6X/O88DLIsEPKjHkjMGP5qw+b BrlpGGkJjMkdbpyDQtCktqvRegvJZ01ER4LLtGCKTHFDA+MJNnAvBw8zofRUm+FO pPMqIYomc7ocNBDrZ/Q2CB47A9YXF7DmLSUlOEWunT5d2or7PG0i+8PTntxoGggl q7AIJkK+fSFlx3lS56xR++of+A8Ri9qI0MzfKHuSpLnz8d1HYJ1aICAJNIE2q1yO bIp+c2uO8B0wwNmOr6FXxbb+AydVhzIJspGjpBWCKJKDkNgP0Ej/hFjo7mCqHFzY Yv7HzXyQeSTsj8dG71s1wlDixlHPmJ4mBBqMKYbk -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:57 2025 by rpki-client