$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137352e302f32342d3234203d3e203137373639.roa File: 3230322e35352e3137352e302f32342d3234203d3e203137373639.roa (raw, json) Hash identifier: 6C+M2mKjL0ChxPYmBY/5rPDruxQaFvTx4uNnx5SBd5k= Subject key identifier: EC:D0:62:04:FE:93:DA:53:23:A3:1A:FF:F4:84:4F:75:3B:4F:78:27 Certificate issuer: /CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Certificate serial: 50B05672DD58FAC8E97DC6ECC27931C7DEE001A1 Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137352e302f32342d3234203d3e203137373639.roa Signing time: Fri 29 Aug 2025 07:00:02 +0000 ROA not before: Fri 29 Aug 2025 06:55:02 +0000 ROA not after: Fri 28 Aug 2026 07:00:02 +0000 asID: 17769 IP address blocks: 202.55.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b0:56:72:dd:58:fa:c8:e9:7d:c6:ec:c2:79:31:c7:de:e0:01:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09 Validity Not Before: Aug 29 06:55:02 2025 GMT Not After : Aug 28 07:00:02 2026 GMT Subject: CN=ECD06204FE93DA5323A31AFFF4844F753B4F7827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:fe:e9:12:14:3f:33:03:0f:25:4f:72:1f: a9:28:00:0f:53:86:a3:72:b5:7c:84:5e:6a:91:ed: f2:c2:06:21:1d:1e:f2:ce:62:5c:e2:23:73:08:ae: 53:09:74:d1:75:a7:a2:f1:d9:e2:e1:95:40:7f:c9: 4d:2a:66:83:99:d9:a3:07:41:00:90:c0:6a:03:26: 3c:ee:4d:66:7f:de:dc:ec:b3:c9:c0:f9:86:43:5c: 3d:73:49:5e:f7:d7:75:8d:aa:a5:35:c0:37:63:92: 74:6b:8f:e7:5f:9d:80:6d:3f:06:f6:77:ab:2c:d1: 77:cf:6a:e0:3e:42:8c:96:31:2d:91:69:63:c5:3e: 92:55:9a:40:b7:4e:b7:6a:af:18:a1:16:73:10:04: 80:78:c3:78:e6:28:56:fe:e2:22:ad:56:ea:9c:7f: 22:e6:8b:01:36:16:06:5d:07:cf:3a:b6:6e:bb:e1: c4:9c:ca:a2:7b:8c:4f:0f:30:d3:b8:88:78:27:3a: 87:f8:b3:16:07:2d:2c:be:4d:de:be:0c:cb:29:73: 17:72:a6:6b:63:fb:89:be:80:59:9b:13:5d:d4:cf: a0:ab:26:0d:6c:90:6a:7e:a8:bb:8b:bd:7c:c7:4e: 84:da:37:b8:ac:73:f0:6c:44:7f:bc:93:d5:ce:e2: bc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:62:04:FE:93:DA:53:23:A3:1A:FF:F4:84:4F:75:3B:4F:78:27 X509v3 Authority Key Identifier: keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3137352e302f32342d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.55.175.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:c9:65:c6:a4:9c:ef:02:69:63:5c:32:35:1c:9a:67:b0:fb: bb:c6:27:61:67:e3:6d:ca:a7:31:3b:d6:00:c7:a3:ac:b1:63: 95:c8:dc:d0:ad:d8:35:05:d4:4f:3b:c3:c6:7d:3f:ae:79:2c: fe:51:55:f5:ea:0c:fb:8a:62:27:b8:86:99:89:f2:4c:02:ad: 46:ee:d1:5f:cc:69:92:db:d9:af:38:5e:6a:ba:d7:e2:3b:f8: 34:ff:9c:b9:2e:79:bc:38:a8:e6:ae:ee:1f:5a:b0:3a:f2:4e: 97:b0:fd:0a:d8:d2:cd:0e:75:9d:df:99:a0:29:ab:3a:cf:87: b8:91:4b:e9:2e:45:b2:54:e6:bf:f7:d5:68:c7:c4:51:cd:e2: 92:a2:23:e2:e8:f2:3d:1f:1b:3b:fc:68:76:27:c0:7b:2b:fd: 42:fa:a9:ce:01:52:b4:91:14:31:66:4e:d0:93:54:78:2a:8a: 5f:08:e4:ee:c6:d0:a9:5f:48:2d:61:33:06:54:be:8b:d8:07: a3:e2:21:f8:b0:25:67:ee:1f:62:91:b9:8c:3c:d0:12:9c:54: b7:1c:af:65:51:5e:03:44:ea:5e:75:78:3e:51:95:10:04:76: 45:e0:97:9d:54:70:73:e9:0b:d1:a1:a1:2c:d9:da:aa:c6:be: 74:c6:30:df -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUULBWct1Y+sjpfcbswnkxx97gAaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MTE2NkQ0OTUzOTY0OTA2M0FGOEY0OTNGNTFDQjFB Q0UwQUIwOTAeFw0yNTA4MjkwNjU1MDJaFw0yNjA4MjgwNzAwMDJaMDMxMTAvBgNV BAMTKEVDRDA2MjA0RkU5M0RBNTMyM0EzMUFGRkY0ODQ0Rjc1M0I0Rjc4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4v7pEhQ/MwMPJU9yH6koAA9T hqNytXyEXmqR7fLCBiEdHvLOYlziI3MIrlMJdNF1p6Lx2eLhlUB/yU0qZoOZ2aMH QQCQwGoDJjzuTWZ/3tzss8nA+YZDXD1zSV7313WNqqU1wDdjknRrj+dfnYBtPwb2 d6ss0XfPauA+QoyWMS2RaWPFPpJVmkC3TrdqrxihFnMQBIB4w3jmKFb+4iKtVuqc fyLmiwE2FgZdB886tm674cScyqJ7jE8PMNO4iHgnOof4sxYHLSy+Td6+DMspcxdy pmtj+4m+gFmbE13Uz6CrJg1skGp+qLuLvXzHToTaN7isc/BsRH+8k9XO4rzdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7NBiBP6T2lMjoxr/9IRPdTtPeCcwHwYDVR0j BBgwFoAUxFEWbUlTlkkGOvj0k/UcsazgqwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzBkYzE0MC02Y2Q0LTRhNTktYjI1Yy0zYTE0MTg1MWM5ZWMvMC9DNDUxMTY2RDQ5 NTM5NjQ5MDYzQUY4RjQ5M0Y1MUNCMUFDRTBBQjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1MTE2NkQ0OTUzOTY0OTA2M0FGOEY0OTNGNTFDQjFBQ0Uw QUIwOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzMGRjMTQwLTZjZDQtNGE1OS1i MjVjLTNhMTQxODUxYzllYy8wLzMyMzAzMjJlMzUzNTJlMzEzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo3rzANBgkqhkiG 9w0BAQsFAAOCAQEAPsllxqSc7wJpY1wyNRyaZ7D7u8YnYWfjbcqnMTvWAMejrLFj lcjc0K3YNQXUTzvDxn0/rnks/lFV9eoM+4piJ7iGmYnyTAKtRu7RX8xpktvZrzhe arrX4jv4NP+cuS55vDio5q7uH1qwOvJOl7D9CtjSzQ51nd+ZoCmrOs+HuJFL6S5F slTmv/fVaMfEUc3ikqIj4ujyPR8bO/xodifAeyv9QvqpzgFStJEUMWZO0JNUeCqK Xwjk7sbQqV9ILWEzBlS+i9gHo+Ih+LAlZ+4fYpG5jDzQEpxUtxyvZVFeA0TqXnV4 PlGVEAR2ReCXnVRwc+kL0aGhLNnaqsa+dMYw3w== -----END CERTIFICATE-----Generated at Mon Sep 8 09:56:48 2025 by rpki-client