$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e35382e3234332e302f32342d3234203d3e203435333235.roa File: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (raw, json) Hash identifier: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A= Subject key identifier: 0B:C5:1A:35:1E:BB:1C:36:C3:7A:F1:87:99:6E:3C:30:24:4A:C0:E7 Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 371BB953ADD87DF4511E801413ED207283AB1616 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e35382e3234332e302f32342d3234203d3e203435333235.roa Signing time: Thu 10 Jul 2025 03:37:42 +0000 ROA not before: Thu 10 Jul 2025 03:32:42 +0000 ROA not after: Thu 09 Jul 2026 03:37:42 +0000 asID: 45325 IP address blocks: 202.58.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1b:b9:53:ad:d8:7d:f4:51:1e:80:14:13:ed:20:72:83:ab:16:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Jul 10 03:32:42 2025 GMT Not After : Jul 9 03:37:42 2026 GMT Subject: CN=0BC51A351EBB1C36C37AF187996E3C30244AC0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0b:bf:a8:c8:a5:73:0a:a8:86:47:e0:c2:9d: 4c:3a:ef:94:50:d4:d7:0f:75:2a:76:f7:3a:05:36: 65:b0:3d:1c:a1:4c:4f:b5:31:47:73:17:b9:74:5e: 33:1a:b7:be:65:3b:60:f8:b9:ed:67:8e:b7:a9:c7: 9c:2c:b3:87:c1:86:0a:45:76:2c:ba:59:01:5a:bb: 77:85:56:25:bc:28:3b:0d:3f:41:4a:ee:cb:2e:cc: ba:f3:ef:b6:9b:04:cd:d6:dc:81:a5:d5:14:a7:67: 72:2e:56:7f:f5:71:cd:02:b8:5d:4c:c1:f1:98:6d: 32:73:d9:b6:2f:d1:39:b6:6e:87:61:ff:a9:bd:19: 68:d9:7d:a0:8c:58:84:44:83:7f:4c:48:33:f1:7c: 84:c2:77:8e:5f:b4:86:f9:a5:77:e4:74:da:6e:54: c3:b9:8d:4a:f3:7c:13:75:b5:37:6d:60:fb:83:99: 5a:3f:ae:9a:88:58:3e:d4:63:de:ee:2d:3c:83:fc: 4d:0a:26:1c:23:4b:cb:8d:f9:df:93:9c:73:be:2a: 40:97:e3:10:1e:4b:34:1e:42:cf:35:2f:c9:b4:67: 73:5a:75:83:5d:30:11:9c:6e:1f:8c:0e:76:74:e2: 04:e2:d5:10:aa:89:72:b5:c8:cf:8a:19:86:8e:42: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C5:1A:35:1E:BB:1C:36:C3:7A:F1:87:99:6E:3C:30:24:4A:C0:E7 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e35382e3234332e302f32342d3234203d3e203435333235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.58.243.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d7:d2:96:dd:6d:6b:06:1d:86:94:3e:91:3d:54:3b:bc:66: 56:fc:f6:db:c9:ab:a5:77:bc:67:1c:29:32:d2:db:87:ec:aa: 31:dc:c0:46:12:f7:dd:0d:8d:47:f9:2e:12:ad:59:73:e5:65: a0:5c:d0:ef:36:fe:15:9f:ae:40:67:77:60:58:00:7f:57:33: 40:23:00:93:0b:1d:96:47:e6:be:20:0c:9b:a1:fa:f1:bf:f8: 98:69:d0:5b:f2:bf:fb:32:6e:2b:a9:19:f1:90:e2:bf:a5:b4: 3e:94:2f:b0:5f:0b:1a:60:90:a7:99:3c:85:4b:68:0d:9f:66: ce:8b:f7:62:a2:15:25:27:b6:c7:61:f4:c3:ee:78:86:eb:74: 40:31:17:43:a4:2d:a9:1e:39:56:c8:60:99:2e:f3:57:f7:63: c4:19:1f:85:67:e4:15:52:b0:60:58:30:6d:ab:35:4f:49:eb: 5b:18:e7:be:1f:e1:cf:67:bb:2c:f4:b9:cc:e3:2c:c3:70:6c: 9d:96:3b:2d:46:b7:f1:7d:d0:87:82:fe:3c:75:91:90:d9:90: 47:7b:d3:ed:d0:9a:85:d1:10:7f:fd:35:1d:9a:23:c3:8c:4d: ec:c7:4e:aa:46:b5:f5:bf:05:bd:c5:e2:fa:7a:d5:8e:a3:2a: 8d:ee:5b:20 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNxu5U63YffRRHoAUE+0gcoOrFhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTA3MTAwMzMyNDJaFw0yNjA3MDkwMzM3NDJaMDMxMTAvBgNV BAMTKDBCQzUxQTM1MUVCQjFDMzZDMzdBRjE4Nzk5NkUzQzMwMjQ0QUMwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxC7+oyKVzCqiGR+DCnUw675RQ 1NcPdSp29zoFNmWwPRyhTE+1MUdzF7l0XjMat75lO2D4ue1njrepx5wss4fBhgpF diy6WQFau3eFViW8KDsNP0FK7ssuzLrz77abBM3W3IGl1RSnZ3IuVn/1cc0CuF1M wfGYbTJz2bYv0Tm2bodh/6m9GWjZfaCMWIREg39MSDPxfITCd45ftIb5pXfkdNpu VMO5jUrzfBN1tTdtYPuDmVo/rpqIWD7UY97uLTyD/E0KJhwjS8uN+d+TnHO+KkCX 4xAeSzQeQs81L8m0Z3NadYNdMBGcbh+MDnZ04gTi1RCqiXK1yM+KGYaOQn2tAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUC8UaNR67HDbDevGHmW48MCRKwOcwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMyMzAzMjJlMzUzODJlMzIzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo68zANBgkqhkiG 9w0BAQsFAAOCAQEAcNfSlt1tawYdhpQ+kT1UO7xmVvz228mrpXe8ZxwpMtLbh+yq MdzARhL33Q2NR/kuEq1Zc+VloFzQ7zb+FZ+uQGd3YFgAf1czQCMAkwsdlkfmviAM m6H68b/4mGnQW/K/+zJuK6kZ8ZDiv6W0PpQvsF8LGmCQp5k8hUtoDZ9mzov3YqIV JSe2x2H0w+54hut0QDEXQ6QtqR45VshgmS7zV/djxBkfhWfkFVKwYFgwbas1T0nr Wxjnvh/hz2e7LPS5zOMsw3BsnZY7LUa38X3Qh4L+PHWRkNmQR3vT7dCahdEQf/01 HZojw4xN7MdOqka19b8FvcXi+nrVjqMqje5bIA== -----END CERTIFICATE-----Generated at Fri Jul 25 03:56:48 2025 by rpki-client