$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa File: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (raw, json) Hash identifier: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ= Subject key identifier: 79:69:B6:BF:A6:CE:8E:F2:BA:64:C1:80:69:0A:A4:CA:9E:88:7A:43 Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647 Certificate serial: 34B4A1051BAF0D42D8BCE26FD804DDBA3ECE935B Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa Signing time: Wed 03 Sep 2025 16:00:02 +0000 ROA not before: Wed 03 Sep 2025 15:55:02 +0000 ROA not after: Wed 02 Sep 2026 16:00:02 +0000 asID: 46061 IP address blocks: 202.52.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 03:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b4:a1:05:1b:af:0d:42:d8:bc:e2:6f:d8:04:dd:ba:3e:ce:93:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647 Validity Not Before: Sep 3 15:55:02 2025 GMT Not After : Sep 2 16:00:02 2026 GMT Subject: CN=7969B6BFA6CE8EF2BA64C180690AA4CA9E887A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:00:f1:d5:66:64:32:cc:a1:a0:c6:9a:c7:c5: 73:e7:56:a8:e3:43:24:a1:e6:d3:82:b3:f9:ed:00: ab:e4:70:a4:85:57:6a:c2:cf:0d:db:aa:cd:93:92: 06:ec:53:c5:9a:54:93:4c:28:ac:bf:8a:f7:cb:d7: d0:00:37:39:79:ac:68:96:3a:a0:d1:b7:a0:f1:ad: 5c:bb:1c:77:95:b3:62:13:8b:ed:43:29:fe:98:71: 1e:11:18:ce:61:cf:eb:ae:9b:8b:13:4a:98:98:2e: 2a:a3:15:37:85:77:08:b3:41:e0:af:d4:a3:4e:0b: a8:4e:75:f7:c9:ce:53:3b:88:b2:b2:84:e3:9d:95: a5:01:64:21:67:39:15:c4:41:a5:24:22:a7:b1:4a: 50:9f:c0:73:cd:ce:0e:71:4d:14:bd:3f:83:dd:39: 7f:15:a9:f3:63:1e:bf:97:38:0c:c2:9b:e2:a6:d3: ad:c6:97:3f:f1:a9:2a:f3:a4:96:6e:81:5c:b7:ee: f5:d1:9b:89:f5:85:4a:ca:c6:1e:f4:96:e7:8c:d8: 71:d5:0c:7b:23:03:69:50:f9:35:09:f9:6e:b4:e0: f3:ac:d9:79:de:25:27:b3:a9:c5:de:66:49:c7:d6: 9c:76:58:70:98:36:00:6f:49:70:67:82:17:41:81: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:69:B6:BF:A6:CE:8E:F2:BA:64:C1:80:69:0A:A4:CA:9E:88:7A:43 X509v3 Authority Key Identifier: keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.140.0/24 Signature Algorithm: sha256WithRSAEncryption 57:94:b7:a8:9f:e5:9c:ee:93:39:9d:87:f8:e2:1e:1b:6b:63: 48:f6:bd:98:87:a0:77:e6:2e:75:4d:6d:7c:62:5c:14:9d:9e: 68:8a:15:4a:3a:51:fd:d8:a3:4d:48:fc:33:27:c6:96:93:24: c2:4c:da:c4:ca:cd:16:44:5e:42:e4:60:53:1c:47:77:4b:c9: 21:78:ae:43:ca:53:ed:cf:d1:89:4b:0f:7d:fd:07:89:66:62: b8:63:12:79:68:6e:78:fd:79:c2:15:10:ec:cb:b8:45:18:95: dc:28:08:15:34:9b:c7:2a:a1:98:22:da:89:01:45:5d:87:ae: 3a:7f:d3:7f:e0:65:39:40:12:bc:e0:ec:a2:ca:97:77:1a:89: e6:0b:80:ea:77:99:b2:f4:13:b5:1f:65:fd:3f:3c:01:16:e0: ca:89:c7:31:2b:c4:e6:5a:ea:79:75:e5:9e:3a:4a:3a:8e:e4: 64:66:35:83:32:d9:c7:ec:16:4a:ee:d9:7a:77:d0:f6:e5:57: 07:00:26:d2:dd:69:9a:73:a6:0a:5f:fc:34:2c:81:d6:a6:e2: d8:5d:1d:37:0d:28:35:7c:b2:91:39:7b:55:d0:34:52:2f:67: 38:43:e5:c2:84:53:bc:98:57:64:0e:1f:1c:c0:d7:8b:5f:a8: 83:da:a8:2f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNLShBRuvDULYvOJv2ATduj7Ok1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3 RjY4QTY0NzAeFw0yNTA5MDMxNTU1MDJaFw0yNjA5MDIxNjAwMDJaMDMxMTAvBgNV BAMTKDc5NjlCNkJGQTZDRThFRjJCQTY0QzE4MDY5MEFBNENBOUU4ODdBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUAPHVZmQyzKGgxprHxXPnVqjj QySh5tOCs/ntAKvkcKSFV2rCzw3bqs2TkgbsU8WaVJNMKKy/ivfL19AANzl5rGiW OqDRt6DxrVy7HHeVs2ITi+1DKf6YcR4RGM5hz+uum4sTSpiYLiqjFTeFdwizQeCv 1KNOC6hOdffJzlM7iLKyhOOdlaUBZCFnORXEQaUkIqexSlCfwHPNzg5xTRS9P4Pd OX8VqfNjHr+XOAzCm+Km063Glz/xqSrzpJZugVy37vXRm4n1hUrKxh70lueM2HHV DHsjA2lQ+TUJ+W604POs2XneJSezqcXeZknH1px2WHCYNgBvSXBnghdBgfeRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUeWm2v6bOjvK6ZMGAaQqkyp6IekMwHwYDVR0j BBgwFoAUZnB4vaCT+EBA8wFtF5yrpn9opkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzMyNmY0ZS02NjA1LTQ5NmEtYjlmOC1kNmU3N2IyOWJjYzYvMC82NjcwNzhCREEw OTNGODQwNDBGMzAxNkQxNzlDQUJBNjdGNjhBNjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3RjY4 QTY0Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMzI2ZjRlLTY2MDUtNDk2YS1i OWY4LWQ2ZTc3YjI5YmNjNi8wLzMyMzAzMjJlMzUzMjJlMzEzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo0jDANBgkqhkiG 9w0BAQsFAAOCAQEAV5S3qJ/lnO6TOZ2H+OIeG2tjSPa9mIegd+YudU1tfGJcFJ2e aIoVSjpR/dijTUj8MyfGlpMkwkzaxMrNFkReQuRgUxxHd0vJIXiuQ8pT7c/RiUsP ff0HiWZiuGMSeWhueP15whUQ7Mu4RRiV3CgIFTSbxyqhmCLaiQFFXYeuOn/Tf+Bl OUASvODsosqXdxqJ5guA6neZsvQTtR9l/T88ARbgyonHMSvE5lrqeXXlnjpKOo7k ZGY1gzLZx+wWSu7ZenfQ9uVXBwAm0t1pmnOmCl/8NCyB1qbi2F0dNw0oNXyykTl7 VdA0Ui9nOEPlwoRTvJhXZA4fHMDXi1+og9qoLw== -----END CERTIFICATE-----Generated at Mon Sep 8 09:30:26 2025 by rpki-client