$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31302e302f32342d3234203d3e203137363731.roa File: 3230322e35322e31302e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: BsaEGsDIb4NpxVBD+sRt/VyT26f80s0GzmcuTCzJC/Y= Subject key identifier: F3:98:D8:4E:55:EE:B9:AB:55:40:B8:C0:0A:B2:04:FB:E3:75:82:D2 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 4A3C1DB0250F0FDF0AE7E28F239484896E376C86 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31302e302f32342d3234203d3e203137363731.roa Signing time: Thu 15 May 2025 11:00:02 +0000 ROA not before: Thu 15 May 2025 10:55:02 +0000 ROA not after: Thu 14 May 2026 11:00:02 +0000 asID: 17671 IP address blocks: 202.52.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3c:1d:b0:25:0f:0f:df:0a:e7:e2:8f:23:94:84:89:6e:37:6c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 15 10:55:02 2025 GMT Not After : May 14 11:00:02 2026 GMT Subject: CN=F398D84E55EEB9AB5540B8C00AB204FBE37582D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:22:a1:78:fd:5c:ef:0d:55:0b:b5:74:9f: e1:b2:0f:6c:b8:e9:45:47:04:3f:cc:79:6d:51:7a: 77:f6:a5:23:1b:fb:b2:fc:9d:1f:c3:04:86:f9:ca: a0:d2:75:19:39:14:06:f0:fc:39:fd:cc:5f:91:f3: e2:19:ae:2d:3a:c1:94:05:7c:fd:0d:e9:c2:16:43: b7:95:d2:ba:be:1a:ac:7d:3f:d9:dd:d5:e3:8c:d3: b9:9d:a4:ee:ed:ec:22:56:7f:92:dd:ff:d0:fd:b3: 65:01:db:b8:a9:e4:4f:2e:30:b2:f9:49:7a:3e:2a: 48:d5:3e:93:83:a5:f0:cd:8d:8d:95:de:a4:c7:20: be:7f:26:44:0c:1e:14:76:d2:19:62:af:37:a4:d7: 49:76:98:41:f8:6a:9d:38:e4:da:89:d3:2f:e6:d3: ea:d1:3f:47:a7:4d:1f:67:38:33:72:13:5e:ee:4e: 11:00:bc:de:30:06:f8:32:39:4e:31:ab:3b:74:b8: 8d:17:2d:5f:f0:26:7b:fa:32:8c:73:f0:8b:b7:a5: ce:20:c1:45:ca:20:de:aa:e0:0c:1b:f6:8c:ce:1a: 28:45:f5:c6:a7:55:7a:99:8e:c9:c0:56:b9:2e:b3: bf:76:95:9c:58:14:55:1c:ab:6e:2e:8c:54:39:7b: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:98:D8:4E:55:EE:B9:AB:55:40:B8:C0:0A:B2:04:FB:E3:75:82:D2 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31302e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.10.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:f2:9a:d5:a1:eb:cc:13:27:76:3d:2f:8a:eb:ce:97:00:76: 4e:d6:9d:89:2b:c1:d8:b9:84:f2:6e:91:45:f3:7d:be:ee:8d: 15:bd:a1:65:d6:6f:85:3f:38:a7:b7:b9:16:30:f0:a0:9d:4c: ab:d5:ac:3f:02:fd:70:47:33:1b:ff:ae:b4:43:0d:99:c2:ea: 77:17:f7:f0:14:36:b5:29:29:b9:4a:47:7e:f9:05:8b:af:bd: 77:4e:18:87:46:c3:98:fe:ac:43:ae:fb:c2:54:0d:7e:01:cb: bf:53:89:a3:35:87:39:65:37:82:24:7f:05:02:15:31:5b:a3: 8b:db:7d:c6:88:bd:29:b9:99:db:75:5f:34:ad:42:15:60:eb: 64:ae:f6:71:6c:6e:d4:e1:e6:85:a4:e5:42:0a:47:bc:7d:c7: 04:3b:e9:95:1c:a5:4b:37:ae:41:f3:97:87:2e:2e:4f:f2:f3: 46:75:8b:9d:c3:bb:b2:13:82:30:1a:78:3b:0e:0b:13:8d:16: 0b:90:e1:ff:ea:d0:28:05:b4:0f:cd:1f:95:9d:20:aa:65:3b: 96:91:10:0c:9d:55:30:66:79:db:8e:92:44:cb:c9:51:22:ef: 3d:22:03:d3:ed:c2:0b:76:6a:47:2c:c0:88:d7:65:28:e5:c9: 98:08:7b:50 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSjwdsCUPD98K5+KPI5SEiW43bIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTUxMDU1MDJaFw0yNjA1MTQxMTAwMDJaMDMxMTAvBgNV BAMTKEYzOThEODRFNTVFRUI5QUI1NTQwQjhDMDBBQjIwNEZCRTM3NTgyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcqiKheP1c7w1VC7V0n+GyD2y4 6UVHBD/MeW1Renf2pSMb+7L8nR/DBIb5yqDSdRk5FAbw/Dn9zF+R8+IZri06wZQF fP0N6cIWQ7eV0rq+Gqx9P9nd1eOM07mdpO7t7CJWf5Ld/9D9s2UB27ip5E8uMLL5 SXo+KkjVPpODpfDNjY2V3qTHIL5/JkQMHhR20hlirzek10l2mEH4ap045NqJ0y/m 0+rRP0enTR9nODNyE17uThEAvN4wBvgyOU4xqzt0uI0XLV/wJnv6Moxz8Iu3pc4g wUXKIN6q4Awb9ozOGihF9canVXqZjsnAVrkus792lZxYFFUcq24ujFQ5e12zAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU85jYTlXuuatVQLjACrIE++N1gtIwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzUzMjJlMzEzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNAowDQYJKoZIhvcN AQELBQADggEBABrymtWh68wTJ3Y9L4rrzpcAdk7WnYkrwdi5hPJukUXzfb7ujRW9 oWXWb4U/OKe3uRYw8KCdTKvVrD8C/XBHMxv/rrRDDZnC6ncX9/AUNrUpKblKR375 BYuvvXdOGIdGw5j+rEOu+8JUDX4By79TiaM1hzllN4IkfwUCFTFbo4vbfcaIvSm5 mdt1XzStQhVg62Su9nFsbtTh5oWk5UIKR7x9xwQ76ZUcpUs3rkHzl4cuLk/y80Z1 i53Du7ITgjAaeDsOCxONFguQ4f/q0CgFtA/NH5WdIKplO5aREAydVTBmeduOkkTL yVEi7z0iA9Ptwgt2akcswIjXZSjlyZgIe1A= -----END CERTIFICATE-----Generated at Mon Oct 27 19:52:29 2025 by rpki-client