$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: U7zsrHiqdt1Qo1B6xfxOyIpSIT6Eg44KAPPrNmLrIG4= Subject key identifier: 20:D5:43:93:8B:82:4C:CB:8D:3A:88:67:68:F7:4D:30:3D:E3:86:F5 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 1686C8BD09E8559FEBBE90FD340B3FC389B54D3B Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa Signing time: Tue 10 Jun 2025 03:40:17 +0000 ROA not before: Tue 10 Jun 2025 03:35:17 +0000 ROA not after: Tue 09 Jun 2026 03:40:17 +0000 asID: 63859 IP address blocks: 202.152.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:86:c8:bd:09:e8:55:9f:eb:be:90:fd:34:0b:3f:c3:89:b5:4d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Jun 10 03:35:17 2025 GMT Not After : Jun 9 03:40:17 2026 GMT Subject: CN=20D543938B824CCB8D3A886768F74D303DE386F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:cd:5f:4a:54:53:51:d0:c5:78:b8:e0:12: 12:55:8c:81:2b:cd:0e:fb:7c:e9:c3:3f:40:d1:8e: c1:58:8e:78:ee:db:c4:9d:c7:b4:d4:17:f7:e3:87: 48:b3:51:5b:97:49:ce:90:3f:be:08:f8:20:36:c0: 8a:1a:c1:ec:db:51:b5:97:b3:5e:9f:4e:76:37:8f: 5d:29:3f:dd:7d:f8:1d:b5:e8:bf:89:83:29:6a:ac: 38:b1:1e:00:af:b8:90:be:67:e7:8c:ca:6f:df:43: d6:4f:09:be:36:25:28:3b:f5:4c:08:94:88:ed:57: 2f:80:f4:e8:b1:70:47:58:07:99:68:d2:57:1a:a5: 21:d7:ac:ae:2f:5b:57:7e:40:b6:9d:69:48:bd:6e: ad:7b:f5:b4:3e:3b:72:5c:62:26:61:ba:5c:5c:3c: 0b:e3:1f:2d:00:f6:bc:52:9c:d8:8b:57:f0:1f:d9: 0a:17:37:a1:9b:93:14:ca:6e:7c:b2:16:d1:a7:50: 49:f0:06:ac:41:5a:7e:d1:e5:d4:84:ad:98:d8:54: 78:1d:5c:df:4a:cd:ed:85:bd:e3:7c:2b:1b:34:25: 31:26:e1:6c:8e:86:2f:b4:27:33:ca:59:d7:d0:b9: 6f:24:94:42:0b:ae:ee:93:03:3f:f5:01:ee:b3:b3: c5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:43:93:8B:82:4C:CB:8D:3A:88:67:68:F7:4D:30:3D:E3:86:F5 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230302e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.200.0/24 Signature Algorithm: sha256WithRSAEncryption 08:01:58:f2:fd:4d:e0:fd:fe:a5:56:02:d4:52:97:73:a4:31: f3:10:98:fd:bf:73:dc:2d:f7:3e:60:cf:a4:ae:5c:e5:22:03: 71:b1:21:81:34:76:c6:8d:c5:c2:3d:46:7e:14:92:bf:5a:ee: e1:23:59:a7:b8:54:bc:eb:a3:5e:b6:13:e8:68:3e:7b:7b:7a: 01:f2:95:60:c6:2d:68:c5:fa:29:f0:bf:0a:85:b5:37:b3:12: a4:ed:81:a8:69:1a:fa:64:b9:cd:46:86:08:e2:79:6b:ac:6f: 40:3b:ae:c2:93:20:1e:cc:bc:d2:51:05:37:a5:68:52:2f:35: 84:0c:db:d4:9e:37:74:d1:2a:0e:53:4c:50:12:57:a8:36:16: 50:68:74:96:7e:45:90:0c:4d:76:3b:7a:52:46:bb:cd:2f:1c: f7:2b:e4:ff:49:23:78:dc:27:7f:42:75:82:8a:d5:5a:1b:3a: d9:e1:19:48:35:ca:a6:6a:3d:b7:8d:41:7c:c9:e3:4c:f3:e2: c8:77:cd:5f:40:34:3c:60:af:34:9f:8d:14:3d:85:e7:99:fa: 87:8b:97:41:9e:f4:f6:ac:36:86:f6:71:c6:f1:a2:4c:80:92: 55:6e:5d:d9:5b:d9:74:23:c8:ac:4a:6b:4e:1e:cb:26:98:24: f9:34:d7:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFobIvQnoVZ/rvpD9NAs/w4m1TTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA2MTAwMzM1MTdaFw0yNjA2MDkwMzQwMTdaMDMxMTAvBgNV BAMTKDIwRDU0MzkzOEI4MjRDQ0I4RDNBODg2NzY4Rjc0RDMwM0RFMzg2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMM1fSlRTUdDFeLjgEhJVjIEr zQ77fOnDP0DRjsFYjnju28Sdx7TUF/fjh0izUVuXSc6QP74I+CA2wIoawezbUbWX s16fTnY3j10pP919+B216L+JgylqrDixHgCvuJC+Z+eMym/fQ9ZPCb42JSg79UwI lIjtVy+A9OixcEdYB5lo0lcapSHXrK4vW1d+QLadaUi9bq179bQ+O3JcYiZhulxc PAvjHy0A9rxSnNiLV/Af2QoXN6GbkxTKbnyyFtGnUEnwBqxBWn7R5dSErZjYVHgd XN9Kze2FveN8Kxs0JTEm4WyOhi+0JzPKWdfQuW8klEILru6TAz/1Ae6zs8VlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUINVDk4uCTMuNOohnaPdNMD3jhvUwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjIMA0GCSqG SIb3DQEBCwUAA4IBAQAIAVjy/U3g/f6lVgLUUpdzpDHzEJj9v3PcLfc+YM+krlzl IgNxsSGBNHbGjcXCPUZ+FJK/Wu7hI1mnuFS866NethPoaD57e3oB8pVgxi1oxfop 8L8KhbU3sxKk7YGoaRr6ZLnNRoYI4nlrrG9AO67CkyAezLzSUQU3pWhSLzWEDNvU njd00SoOU0xQEleoNhZQaHSWfkWQDE12O3pSRrvNLxz3K+T/SSN43Cd/QnWCitVa GzrZ4RlINcqmaj23jUF8yeNM8+LId81fQDQ8YK80n40UPYXnmfqHi5dBnvT2rDaG 9nHG8aJMgJJVbl3ZW9l0I8isSmtOHssmmCT5NNdm -----END CERTIFICATE-----Generated at Sun Oct 26 22:54:00 2025 by rpki-client