$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36302e302f32332d3233203d3e203338373535.roa File: 3230332e3132332e36302e302f32332d3233203d3e203338373535.roa (raw, json) Hash identifier: INETTqcjTAvmJFMWU57yWz9QFD5EfNi5anUfbBYXR+0= Subject key identifier: 2B:B3:48:E4:14:F0:D3:7D:81:20:FF:69:A4:60:C9:4F:7D:29:AA:2D Certificate issuer: /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Certificate serial: 4E52CE5BB02D950543B903C3E89ED8D232A087AD Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36302e302f32332d3233203d3e203338373535.roa Signing time: Thu 03 Jul 2025 12:00:02 +0000 ROA not before: Thu 03 Jul 2025 11:55:02 +0000 ROA not after: Thu 02 Jul 2026 12:00:02 +0000 asID: 38755 IP address blocks: 203.123.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 05:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:52:ce:5b:b0:2d:95:05:43:b9:03:c3:e8:9e:d8:d2:32:a0:87:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Validity Not Before: Jul 3 11:55:02 2025 GMT Not After : Jul 2 12:00:02 2026 GMT Subject: CN=2BB348E414F0D37D8120FF69A460C94F7D29AA2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:7d:97:9d:de:29:31:a1:b7:df:e6:3c:90: 88:03:9d:92:8d:29:32:72:94:69:5a:81:1f:f8:5d: f5:49:73:ec:da:53:d6:b5:e4:9d:6b:ef:31:44:b6: fe:42:2f:1e:84:56:89:39:ea:3e:7a:8a:51:e7:c2: 28:d2:8b:b6:54:6b:54:f2:aa:af:aa:32:a0:fd:4c: 83:87:6a:70:8f:4c:0b:02:ae:59:ee:47:e6:2d:69: e4:ef:21:dc:e5:0b:02:68:7d:81:9b:a2:fe:9e:c8: 5d:10:06:f4:2b:67:b9:af:67:3c:63:a4:f4:c4:0f: 5b:7a:f8:95:e5:41:16:b9:4c:10:19:3e:a7:91:3a: b6:fe:50:bf:7f:e5:71:19:37:35:27:b4:a2:44:d0: 50:c5:b6:0f:4d:e1:7d:61:29:a7:ac:17:78:52:28: c7:37:09:03:ca:24:37:cf:82:cf:6d:f1:18:3a:55: 0a:45:b7:27:19:37:ed:8b:a9:33:c3:5d:a6:b2:1d: db:6f:04:1f:6f:ca:88:3b:67:3f:fd:af:fd:17:05: c3:ab:ff:82:f5:c7:d1:bc:dd:8a:92:48:93:61:8f: b5:e7:a2:b8:1d:2c:22:a7:24:cd:75:21:16:10:80: 15:d8:0e:2c:74:9e:28:82:b6:03:25:4f:d2:a9:61: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B3:48:E4:14:F0:D3:7D:81:20:FF:69:A4:60:C9:4F:7D:29:AA:2D X509v3 Authority Key Identifier: keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36302e302f32332d3233203d3e203338373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.123.60.0/23 Signature Algorithm: sha256WithRSAEncryption 12:f6:db:ea:f9:d3:82:63:e7:e6:03:f7:35:0c:dc:27:1a:42: cc:b4:1e:72:69:c8:43:83:95:fc:37:71:72:97:f6:f0:35:85: e7:b2:2b:50:fe:e9:35:0d:2d:11:e1:5d:b5:73:93:69:b7:94: 5e:73:e0:60:32:e7:74:0c:b8:3a:08:69:f1:65:f2:b1:e6:eb: 14:b3:79:b0:71:ea:a0:63:d0:fe:41:05:5d:bb:a3:b5:31:d4: 30:01:b7:84:d0:51:cd:cd:9d:26:f5:db:0f:ac:78:2b:4d:84: 2b:4a:de:fe:f5:af:c4:8e:4c:12:1d:79:24:ad:0a:46:33:01: ec:59:d6:2b:ed:2a:7b:1e:07:b6:0f:0c:b8:1b:2f:a0:3b:3a: 6b:6f:aa:69:08:60:3d:6d:98:a1:e0:9d:c9:45:5d:12:bf:45: d2:7a:eb:38:ac:2c:2f:55:ca:5a:d0:12:e2:df:76:37:db:3d: b5:72:1a:9c:15:82:9c:f9:51:61:fb:ea:a8:2e:f6:2b:f7:8b: 53:a7:eb:6e:89:8b:72:f3:81:98:62:7a:6c:77:a5:f4:c2:11: 30:e4:f5:d7:b6:a8:00:38:e3:0d:65:dd:af:9e:12:68:ef:d1: ea:46:a9:ae:5f:c2:e6:65:09:4e:8c:cb:94:80:29:55:5d:92: 3d:2f:d9:6f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTlLOW7AtlQVDuQPD6J7Y0jKgh60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE MDFCMTVDNzAeFw0yNTA3MDMxMTU1MDJaFw0yNjA3MDIxMjAwMDJaMDMxMTAvBgNV BAMTKDJCQjM0OEU0MTRGMEQzN0Q4MTIwRkY2OUE0NjBDOTRGN0QyOUFBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkkn2Xnd4pMaG33+Y8kIgDnZKN KTJylGlagR/4XfVJc+zaU9a15J1r7zFEtv5CLx6EVok56j56ilHnwijSi7ZUa1Ty qq+qMqD9TIOHanCPTAsCrlnuR+YtaeTvIdzlCwJofYGbov6eyF0QBvQrZ7mvZzxj pPTED1t6+JXlQRa5TBAZPqeROrb+UL9/5XEZNzUntKJE0FDFtg9N4X1hKaesF3hS KMc3CQPKJDfPgs9t8Rg6VQpFtycZN+2LqTPDXaayHdtvBB9vyog7Zz/9r/0XBcOr /4L1x9G83YqSSJNhj7XnorgdLCKnJM11IRYQgBXYDix0niiCtgMlT9KpYdkLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUK7NI5BTw032BIP9ppGDJT30pqi0wHwYDVR0j BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC MTVDNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhYjM5MDJiLTc0NTktNDg1NC1h NWY1LTA5ZjE1ZDhjODdkMy8wLzMyMzAzMzJlMzEzMjMzMmUzNjMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzMzODM3MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAct7PDANBgkqhkiG 9w0BAQsFAAOCAQEAEvbb6vnTgmPn5gP3NQzcJxpCzLQecmnIQ4OV/Ddxcpf28DWF 57IrUP7pNQ0tEeFdtXOTabeUXnPgYDLndAy4Oghp8WXysebrFLN5sHHqoGPQ/kEF XbujtTHUMAG3hNBRzc2dJvXbD6x4K02EK0re/vWvxI5MEh15JK0KRjMB7FnWK+0q ex4Htg8MuBsvoDs6a2+qaQhgPW2YoeCdyUVdEr9F0nrrOKwsL1XKWtAS4t92N9s9 tXIanBWCnPlRYfvqqC72K/eLU6frbomLcvOBmGJ6bHel9MIRMOT117aoADjjDWXd r54SaO/R6kaprl/C5mUJTozLlIApVV2SPS/Zbw== -----END CERTIFICATE-----Generated at Mon Oct 27 11:04:20 2025 by rpki-client