$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa File: 3230322e3135342e33322e302f32332d3234203d3e2034343334.roa (raw, json) Hash identifier: pMd4eDdEkhnUdJLoDzXpUzpPwYHKSmcWxXYsb8lhMxE= Subject key identifier: BA:16:E6:2D:56:E2:7A:56:4E:A2:6A:76:15:A5:CB:6A:6D:78:DC:8D Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 2FB6684DF7E4135C1ADD46391BA22C21F42EB810 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa Signing time: Wed 23 Jul 2025 11:02:23 +0000 ROA not before: Wed 23 Jul 2025 10:57:23 +0000 ROA not after: Wed 22 Jul 2026 11:02:23 +0000 asID: 4434 IP address blocks: 202.154.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 10:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b6:68:4d:f7:e4:13:5c:1a:dd:46:39:1b:a2:2c:21:f4:2e:b8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Jul 23 10:57:23 2025 GMT Not After : Jul 22 11:02:23 2026 GMT Subject: CN=BA16E62D56E27A564EA26A7615A5CB6A6D78DC8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:d9:9f:dc:2e:2b:05:b8:9c:0a:26:f4:7d: e0:08:d9:1c:b2:83:97:c4:c3:5f:87:2a:46:67:f8: 95:e0:af:65:ae:08:4d:b4:d5:c5:2f:7c:53:6d:f3: 5e:c8:79:df:e7:c9:9d:83:85:24:f4:20:b4:af:6a: 07:14:e5:f4:53:e3:c3:b3:19:72:8b:37:44:48:e9: c6:5e:76:b7:2d:5b:1c:89:9b:23:03:42:77:49:ce: fb:90:4d:8e:ed:aa:cc:c0:dd:38:31:de:e6:2c:23: aa:91:cf:31:10:52:b3:0a:6c:1e:37:a2:89:14:b7: 51:dd:82:4f:14:3f:ea:67:fa:66:82:46:40:80:5f: 45:87:36:9c:49:26:72:0c:35:f4:93:d9:52:57:70: dd:16:e5:bf:93:47:3d:b7:a9:bd:87:e9:34:4e:73: af:67:3d:13:89:aa:18:76:39:b5:24:bc:ae:35:ea: b5:46:0d:e2:7f:d3:9d:c8:f6:04:f1:46:58:50:31: 04:d5:e0:96:8b:db:f4:11:5b:9a:3a:b5:1c:7c:44: be:a0:a0:89:9b:4f:b9:ef:b0:3d:14:4a:2c:07:9c: e8:5a:85:dc:ce:30:77:65:2a:4c:09:f1:30:fb:03: 11:42:85:93:ce:87:0a:39:5d:79:31:8e:39:18:dd: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:16:E6:2D:56:E2:7A:56:4E:A2:6A:76:15:A5:CB:6A:6D:78:DC:8D X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.32.0/23 Signature Algorithm: sha256WithRSAEncryption 97:50:16:14:0d:cf:dc:33:bf:af:68:48:46:6d:b7:98:9f:cc: 3e:d1:16:ce:a1:be:ef:87:3d:a2:80:16:87:e4:a3:e8:53:b6: 24:16:ed:3f:b9:0b:ea:1c:68:46:7a:0e:a3:9a:3b:bc:40:9a: 63:5f:22:df:ba:06:86:63:08:bd:98:62:c1:b2:1c:a0:f9:06: 96:6b:09:a7:17:9c:e9:47:65:44:ac:1a:d6:3e:89:cb:ba:03: 1f:27:c2:a1:07:bc:ed:17:75:19:b0:f5:54:b8:27:9d:4f:f8: c0:9e:7e:88:66:f4:58:fb:52:22:31:74:32:5a:25:da:3b:c5: 8d:2f:e8:1e:ec:17:51:5d:39:b0:bd:dd:8b:76:35:c7:27:cb: 5f:ca:28:b2:96:4a:c7:7e:1b:36:e3:11:9e:0c:bf:04:68:eb: ef:91:23:58:da:62:25:4f:5f:64:d6:1f:8e:f0:ef:ab:f2:32: 41:a4:82:46:73:01:d6:b2:c1:35:72:22:24:38:4d:b0:b9:35: 13:c9:03:4d:eb:f9:50:f3:d3:8e:83:3f:93:14:88:be:5e:78: 61:0a:76:1f:7e:88:65:97:b0:b1:4f:5f:8f:04:83:63:28:29: 1a:51:dd:ac:c6:a0:4b:92:22:51:ce:2d:fa:11:30:8e:7c:09: 55:ee:40:28 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUL7ZoTffkE1wa3UY5G6IsIfQuuBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTA3MjMxMDU3MjNaFw0yNjA3MjIxMTAyMjNaMDMxMTAvBgNV BAMTKEJBMTZFNjJENTZFMjdBNTY0RUEyNkE3NjE1QTVDQjZBNkQ3OERDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIstmf3C4rBbicCib0feAI2Ryy g5fEw1+HKkZn+JXgr2WuCE201cUvfFNt817Ied/nyZ2DhST0ILSvagcU5fRT48Oz GXKLN0RI6cZedrctWxyJmyMDQndJzvuQTY7tqszA3Tgx3uYsI6qRzzEQUrMKbB43 ookUt1Hdgk8UP+pn+maCRkCAX0WHNpxJJnIMNfST2VJXcN0W5b+TRz23qb2H6TRO c69nPROJqhh2ObUkvK416rVGDeJ/053I9gTxRlhQMQTV4JaL2/QRW5o6tRx8RL6g oImbT7nvsD0USiwHnOhahdzOMHdlKkwJ8TD7AxFChZPOhwo5XXkxjjkY3UHzAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUuhbmLVbielZOomp2FaXLam143I0wHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMzMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmiAwDQYJKoZIhvcN AQELBQADggEBAJdQFhQNz9wzv69oSEZtt5ifzD7RFs6hvu+HPaKAFofko+hTtiQW 7T+5C+ocaEZ6DqOaO7xAmmNfIt+6BoZjCL2YYsGyHKD5BpZrCacXnOlHZUSsGtY+ icu6Ax8nwqEHvO0XdRmw9VS4J51P+MCefohm9Fj7UiIxdDJaJdo7xY0v6B7sF1Fd ObC93Yt2Nccny1/KKLKWSsd+GzbjEZ4MvwRo6++RI1jaYiVPX2TWH47w76vyMkGk gkZzAdaywTVyIiQ4TbC5NRPJA03r+VDz046DP5MUiL5eeGEKdh9+iGWXsLFPX48E g2MoKRpR3azGoEuSIlHOLfoRMI58CVXuQCg= -----END CERTIFICATE-----Generated at Wed Oct 29 07:41:22 2025 by rpki-client