$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS24203.roa File: AS24203.roa (raw, json) Hash identifier: hVsD/NK6Sh6TO37YZKucDITZphb7CwX/7dZXhk+pywY= Subject key identifier: 52:E9:CB:EB:27:78:20:FB:81:CC:F3:89:AE:71:95:A6:8D:71:42:1D Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 65E90121180194ADDBE4BCF884E9D9B23A37ED8A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS24203.roa Signing time: Wed 27 Aug 2025 01:24:26 +0000 ROA not before: Wed 27 Aug 2025 01:19:26 +0000 ROA not after: Wed 26 Aug 2026 01:24:26 +0000 asID: 24203 IP address blocks: 157.85.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e9:01:21:18:01:94:ad:db:e4:bc:f8:84:e9:d9:b2:3a:37:ed:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Aug 27 01:19:26 2025 GMT Not After : Aug 26 01:24:26 2026 GMT Subject: CN=52E9CBEB277820FB81CCF389AE7195A68D71421D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:13:92:43:3a:3f:33:b4:4b:41:3f:ef:76:74: e7:d4:4a:0e:4b:ff:56:d7:8c:30:c2:23:f7:1f:ab: c8:fc:b5:1f:db:4d:9a:cb:f4:cf:64:54:93:3b:9e: 44:da:6a:33:a3:de:45:2f:94:dc:c7:23:ac:34:ca: 80:1f:52:66:3c:a1:24:02:ff:3d:f4:ba:15:c7:11: b8:90:e4:5b:b9:8b:5c:40:2d:fb:3b:f6:d9:20:62: d3:35:15:d1:dd:f6:c7:c2:8b:60:0f:2d:5c:78:dd: 8e:bc:7f:59:45:01:28:52:ba:55:bb:5b:89:9a:19: 36:d1:25:a4:2e:c3:f0:da:dc:ba:16:8d:79:0f:fa: 7c:fc:90:e0:e6:b6:e1:24:0e:9a:6b:1d:66:06:76: 5c:aa:e5:ba:3b:0b:cb:67:fe:61:31:00:89:6c:ca: 6d:e4:b4:9f:fa:c3:20:60:e4:25:b8:7e:b0:f2:59: cc:2b:c5:68:2a:da:af:25:67:26:e1:cb:fe:63:2e: 59:fa:b5:30:b9:31:08:c5:f4:0b:56:6c:69:61:df: bc:8e:3c:eb:30:2b:3c:39:27:29:fc:44:c5:72:c9: 9a:6f:cd:2a:1b:be:bc:97:8e:46:67:f9:62:57:55: 8e:e0:cc:f8:a5:87:59:c7:14:b5:ef:39:25:a4:a7: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E9:CB:EB:27:78:20:FB:81:CC:F3:89:AE:71:95:A6:8D:71:42:1D X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS24203.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.85.192.0/19 Signature Algorithm: sha256WithRSAEncryption 3f:ec:55:e8:52:30:83:b9:36:2e:20:c9:c3:e6:62:c7:59:38: c7:c7:23:7d:b9:0c:a3:80:f0:d0:ed:c2:c4:0c:da:c8:a7:11: 5f:2b:20:ea:eb:a0:cb:2b:e3:d5:7d:2c:94:9e:5f:72:c5:a1: 74:df:64:08:ea:eb:20:b6:ce:57:7d:28:f3:f4:93:4a:ca:b5: 21:33:16:14:e7:d2:52:d4:23:15:ec:73:4e:1c:49:a0:6c:e6: 5a:a8:9e:62:66:8a:6d:b4:21:7e:2f:78:5f:10:39:4c:39:3e: 9b:39:25:84:ad:f1:3e:64:71:86:19:7e:13:a2:37:0a:4d:1e: 9a:b7:81:1c:62:93:cc:a6:36:03:f7:77:3c:df:be:1a:17:cf: fb:d2:44:91:f8:87:02:b8:86:3a:c9:a9:b7:f8:61:7f:3e:b4: c5:62:2e:d7:2c:ee:49:67:0f:3b:0e:58:b7:0a:59:0b:6a:4f: e4:95:a7:8b:86:0c:23:0f:aa:e1:49:de:a4:25:fb:cd:d8:92: d6:16:91:19:ba:b9:80:87:2a:af:fe:27:83:6a:aa:77:f2:42: b0:cd:ff:1e:1f:e9:08:d4:b3:b6:e7:3a:54:6a:5d:21:5f:34: da:ef:ac:c7:7f:28:7a:ae:f5:f7:01:3f:0b:73:0a:75:0b:c5: 2d:36:3e:68 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUZekBIRgBlK3b5Lz4hOnZsjo37YowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDgyNzAxMTkyNloX DTI2MDgyNjAxMjQyNlowMzExMC8GA1UEAxMoNTJFOUNCRUIyNzc4MjBGQjgxQ0NG Mzg5QUU3MTk1QTY4RDcxNDIxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcTkkM6PzO0S0E/73Z059RKDkv/VteMMMIj9x+ryPy1H9tNmsv0z2RUkzue RNpqM6PeRS+U3McjrDTKgB9SZjyhJAL/PfS6FccRuJDkW7mLXEAt+zv22SBi0zUV 0d32x8KLYA8tXHjdjrx/WUUBKFK6VbtbiZoZNtElpC7D8NrcuhaNeQ/6fPyQ4Oa2 4SQOmmsdZgZ2XKrlujsLy2f+YTEAiWzKbeS0n/rDIGDkJbh+sPJZzCvFaCraryVn JuHL/mMuWfq1MLkxCMX0C1ZsaWHfvI486zArPDknKfxExXLJmm/NKhu+vJeORmf5 YldVjuDM+KWHWccUte85JaSnoBcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBRS6cvr J3gg+4HM84mucZWmjXFCHTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG 1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT b082dUZCdFEuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS9BUzI0MjAzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFnVXAMA0GCSqGSIb3DQEBCwUAA4IBAQA/7FXoUjCDuTYuIMnD5mLH WTjHxyN9uQyjgPDQ7cLEDNrIpxFfKyDq66DLK+PVfSyUnl9yxaF032QI6usgts5X fSjz9JNKyrUhMxYU59JS1CMV7HNOHEmgbOZaqJ5iZopttCF+L3hfEDlMOT6bOSWE rfE+ZHGGGX4TojcKTR6at4EcYpPMpjYD93c8374aF8/70kSR+IcCuIY6yam3+GF/ PrTFYi7XLO5JZw87Dli3ClkLak/klaeLhgwjD6rhSd6kJfvN2JLWFpEZurmAhyqv /ieDaqp38kKwzf8eH+kI1LO25zpUal0hXzTa76zHfyh6rvX3AT8Lcwp1C8UtNj5o -----END CERTIFICATE-----Generated at Sat Sep 6 09:33:23 2025 by rpki-client