$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa File: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (raw, json) Hash identifier: 5jpE9PaDWg32h1mep4+lRpd6+XHerxcnHEsnK1sv4vU= Subject key identifier: B9:8F:5B:FA:AA:32:87:C0:5E:B6:B6:94:E7:7C:4B:D0:F2:6B:F7:8E Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 67BEE77A455693F466447F7741D2D9BF23101CED Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa Signing time: Tue 17 Jun 2025 14:00:00 +0000 ROA not before: Tue 17 Jun 2025 13:55:00 +0000 ROA not after: Tue 16 Jun 2026 14:00:00 +0000 asID: 38759 IP address blocks: 202.180.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:be:e7:7a:45:56:93:f4:66:44:7f:77:41:d2:d9:bf:23:10:1c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Jun 17 13:55:00 2025 GMT Not After : Jun 16 14:00:00 2026 GMT Subject: CN=B98F5BFAAA3287C05EB6B694E77C4BD0F26BF78E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:b6:62:76:84:8f:45:3c:4c:f5:86:f5:a5: 39:cc:ba:9d:56:8d:5a:17:32:d9:e7:dd:c9:2b:6d: 94:3d:09:fc:31:78:08:53:1d:d5:a9:6a:4f:02:50: ab:0c:91:3e:9a:07:25:e1:4e:81:af:0d:51:6d:a3: 11:f0:67:e9:2e:1a:7c:df:82:c9:08:ea:1a:a0:12: 2b:72:6e:15:31:57:26:eb:6d:97:3c:e1:7d:d4:35: 2c:58:b0:ba:f5:12:00:e2:ce:42:34:6b:7f:a0:ed: 2c:3e:6f:bf:09:da:68:9f:e0:b8:27:83:cc:ff:7f: e0:4e:e1:ba:40:99:76:b0:3e:02:10:c5:be:2a:fc: af:31:b1:3b:71:c0:e0:70:ed:e3:8e:da:d9:5b:06: a9:d7:e6:f5:fe:48:3d:6f:33:57:c7:26:87:70:8f: cb:5c:d8:f3:5d:f8:3b:b9:d5:ae:08:27:c2:7e:a7: e3:b6:14:52:f1:f7:1c:66:82:54:b3:82:c1:7a:ed: 2f:99:24:62:fb:5e:91:6f:81:99:d3:b3:0b:0c:bc: 64:9f:b4:01:a8:f8:3c:71:21:b5:83:bd:fb:a4:3d: dd:5b:27:a8:8c:92:b8:f8:d6:ff:dd:ef:be:8d:73: 52:36:29:ac:8f:05:d2:85:9a:90:7c:a4:d0:4e:14: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8F:5B:FA:AA:32:87:C0:5E:B6:B6:94:E7:7C:4B:D0:F2:6B:F7:8E X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.180.7.0/24 Signature Algorithm: sha256WithRSAEncryption b4:b3:b7:67:cc:40:f0:0d:54:f0:f7:9f:ab:f3:cf:2d:a3:e7: f8:d1:6a:0c:23:c9:07:bf:67:ad:d5:7c:e5:2e:1b:05:36:53: 62:98:76:64:98:ad:03:38:56:65:7d:22:43:cc:94:1d:89:e9: 14:c1:91:74:cc:96:be:f8:bf:d6:45:aa:ff:bf:74:30:99:d2: c0:6f:14:b1:c6:86:b5:75:43:8f:52:7d:f4:38:4e:f9:ab:87: c6:58:2f:3a:bb:0b:2e:61:ab:2a:ef:22:c9:5b:c2:8e:38:4e: d5:5a:48:7d:99:9f:ce:32:44:36:57:22:8c:fa:bb:c0:d9:da: 24:a3:30:87:57:cb:4b:45:eb:d8:3a:13:89:f0:d3:f5:8e:c1: 30:6f:70:cb:46:4c:e8:31:ae:b8:37:88:f5:d6:31:5d:2d:4e: e9:4b:10:9c:1e:be:8e:ca:96:6c:fc:f6:52:f6:a0:82:48:c9: de:77:34:4d:2c:7b:1d:e4:f7:b3:87:2f:90:df:d5:06:fc:5a: 99:dd:d9:83:67:03:09:8f:75:84:60:a0:b8:1d:f5:c2:72:81: 48:e7:0b:d4:73:43:5e:30:05:b7:2e:ae:57:cc:97:6a:c1:a2: ec:99:dd:fd:5b:c1:4d:76:bf:16:f8:f7:be:df:31:7a:a6:10: 8d:8f:b3:1a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZ77nekVWk/RmRH93QdLZvyMQHO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNTA2MTcxMzU1MDBaFw0yNjA2MTYxNDAwMDBaMDMxMTAvBgNV BAMTKEI5OEY1QkZBQUEzMjg3QzA1RUI2QjY5NEU3N0M0QkQwRjI2QkY3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChL7ZidoSPRTxM9Yb1pTnMup1W jVoXMtnn3ckrbZQ9CfwxeAhTHdWpak8CUKsMkT6aByXhToGvDVFtoxHwZ+kuGnzf gskI6hqgEitybhUxVybrbZc84X3UNSxYsLr1EgDizkI0a3+g7Sw+b78J2mif4Lgn g8z/f+BO4bpAmXawPgIQxb4q/K8xsTtxwOBw7eOO2tlbBqnX5vX+SD1vM1fHJodw j8tc2PNd+Du51a4IJ8J+p+O2FFLx9xxmglSzgsF67S+ZJGL7XpFvgZnTswsMvGSf tAGo+DxxIbWDvfukPd1bJ6iMkrj41v/d776Nc1I2KayPBdKFmpB8pNBOFBChAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUuY9b+qoyh8BetraU53xL0PJr944wHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05 Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMjJlMzEzODMwMmUzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzNzM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKtAcwDQYJKoZIhvcN AQELBQADggEBALSzt2fMQPANVPD3n6vzzy2j5/jRagwjyQe/Z63VfOUuGwU2U2KY dmSYrQM4VmV9IkPMlB2J6RTBkXTMlr74v9ZFqv+/dDCZ0sBvFLHGhrV1Q49SffQ4 Tvmrh8ZYLzq7Cy5hqyrvIslbwo44TtVaSH2Zn84yRDZXIoz6u8DZ2iSjMIdXy0tF 69g6E4nw0/WOwTBvcMtGTOgxrrg3iPXWMV0tTulLEJwevo7Klmz89lL2oIJIyd53 NE0sex3k97OHL5Df1Qb8Wpnd2YNnAwmPdYRgoLgd9cJygUjnC9RzQ14wBbcurlfM l2rBouyZ3f1bwU12vxb4977fMXqmEI2Psxo= -----END CERTIFICATE-----Generated at Sat Oct 25 16:20:26 2025 by rpki-client