$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa File: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (raw, json) Hash identifier: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM= Subject key identifier: D4:73:42:D6:8E:36:81:29:5E:F4:9D:DD:58:61:4E:DC:19:25:6C:27 Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Certificate serial: 66737726C6D88C82E6D3740F0263E553B5CAF7EC Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa Signing time: Thu 04 Sep 2025 03:01:27 +0000 ROA not before: Thu 04 Sep 2025 02:56:27 +0000 ROA not after: Thu 03 Sep 2026 03:01:27 +0000 asID: 139371 IP address blocks: 203.142.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 12:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:73:77:26:c6:d8:8c:82:e6:d3:74:0f:02:63:e5:53:b5:ca:f7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Validity Not Before: Sep 4 02:56:27 2025 GMT Not After : Sep 3 03:01:27 2026 GMT Subject: CN=D47342D68E3681295EF49DDD58614EDC19256C27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:2c:6a:01:02:c3:94:02:48:83:f5:5b:d6: cb:96:d6:40:88:be:a4:47:1b:3f:91:af:17:63:1a: 06:fe:91:96:01:02:55:10:a0:1f:b2:c8:4c:d9:6c: 1b:27:5e:4f:da:3e:e3:e3:67:ef:56:c4:3f:d2:fb: a6:21:80:8e:6f:7c:51:f2:21:a3:6c:b0:10:a1:ea: fb:b9:7a:04:d9:e5:0e:cd:58:ae:f8:e5:87:b1:38: 1a:2f:50:92:bf:1a:cf:4b:f7:37:fe:9d:07:c5:a6: c5:1e:2f:d8:a9:ad:6f:f6:fd:fa:9b:7a:cf:87:48: 68:a9:25:fb:04:f5:a9:88:ed:fc:a4:aa:77:3f:a4: 46:aa:29:5f:3c:21:4d:d0:56:74:ee:ca:05:73:45: 2d:2d:56:a6:01:ba:24:82:7e:4b:75:b3:61:d0:30: 28:39:12:27:c2:a5:eb:6d:b7:5a:53:a7:a1:74:81: c9:00:66:2c:9d:93:31:8b:20:e4:64:96:a9:16:0b: 76:48:79:4d:3c:e5:df:8e:dc:a6:58:a9:3a:73:7d: b2:d5:4f:39:51:5e:d6:1d:1b:e2:63:23:c0:3d:74: 27:ad:dd:00:85:7d:12:bd:3d:2a:39:8e:72:3d:c0: 05:91:b1:66:d0:c5:11:eb:ee:5b:14:4c:12:bc:b1: 84:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:73:42:D6:8E:36:81:29:5E:F4:9D:DD:58:61:4E:DC:19:25:6C:27 X509v3 Authority Key Identifier: keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.142.26.0/24 Signature Algorithm: sha256WithRSAEncryption b5:db:bc:0a:41:75:a2:0e:51:ed:8a:26:e2:44:f9:fc:a8:ca: 73:69:71:7b:f9:a3:b5:40:4f:62:6b:35:5c:10:46:19:84:28: 7d:81:bc:1d:4a:65:bd:e1:e4:33:4a:c4:dc:06:42:3c:be:0c: 6b:2d:28:35:b7:77:aa:c6:99:2e:52:cf:1d:b3:fa:ab:fa:85: 60:49:8e:7a:55:a6:81:97:5d:f4:f8:ba:0f:47:53:bc:3b:2d: 5c:53:79:36:82:c5:c1:81:9a:09:a8:06:18:b3:07:a4:e6:ce: 32:75:33:a5:6e:01:38:b6:c5:35:63:51:bd:02:8f:9f:1d:65: 0a:94:2e:b0:09:f1:a7:a5:55:1e:1f:ad:34:f9:48:24:94:6e: bb:b2:9c:b8:b1:a8:c1:bd:ef:e3:fc:5c:6f:96:05:21:f6:7d: 1a:d3:6c:0a:01:a7:cf:84:1a:07:93:d3:76:7e:15:64:73:7f: 36:99:52:2a:ae:2e:2d:2c:ed:8a:d3:b5:6f:35:73:fe:f6:88: ab:d0:0c:fd:70:2a:d5:35:1c:e4:ad:d9:c3:c1:de:a9:c4:c4: ce:f5:0c:fe:c7:85:80:e5:b2:99:88:d5:c2:32:65:6b:a4:c9: 39:c0:c4:0d:85:dd:67:59:f0:25:dd:bf:88:2b:af:fb:24:d2: 8c:b5:ae:5c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZnN3JsbYjILm03QPAmPlU7XK9+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0Yz OEQwMEYwNDAeFw0yNTA5MDQwMjU2MjdaFw0yNjA5MDMwMzAxMjdaMDMxMTAvBgNV BAMTKEQ0NzM0MkQ2OEUzNjgxMjk1RUY0OURERDU4NjE0RURDMTkyNTZDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxCxqAQLDlAJIg/Vb1suW1kCI vqRHGz+RrxdjGgb+kZYBAlUQoB+yyEzZbBsnXk/aPuPjZ+9WxD/S+6YhgI5vfFHy IaNssBCh6vu5egTZ5Q7NWK745YexOBovUJK/Gs9L9zf+nQfFpsUeL9iprW/2/fqb es+HSGipJfsE9amI7fykqnc/pEaqKV88IU3QVnTuygVzRS0tVqYBuiSCfkt1s2HQ MCg5EifCpettt1pTp6F0gckAZiydkzGLIORklqkWC3ZIeU085d+O3KZYqTpzfbLV TzlRXtYdG+JjI8A9dCet3QCFfRK9PSo5jnI9wAWRsWbQxRHr7lsUTBK8sYQhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1HNC1o42gSle9J3dWGFO3BklbCcwHwYDVR0j BBgwFoAUmPTGV1z491akS//UYaCaPzjQDwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMC85OEY0QzY1NzVD RjhGNzU2QTQ0QkZGRDQ2MUEwOUEzRjM4RDAwRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOThGNEM2NTc1Q0Y4Rjc1NkE0NEJGRkQ0NjFBMDlBM0YzOEQw MEYwNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZGI2YzRmLTlmZGYtNDdmNi1i MjRjLTAzM2ZlM2E0NGQ1MC8wLzMyMzAzMzJlMzEzNDMyMmUzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzMzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy44aMA0GCSqG SIb3DQEBCwUAA4IBAQC127wKQXWiDlHtiibiRPn8qMpzaXF7+aO1QE9iazVcEEYZ hCh9gbwdSmW94eQzSsTcBkI8vgxrLSg1t3eqxpkuUs8ds/qr+oVgSY56VaaBl130 +LoPR1O8Oy1cU3k2gsXBgZoJqAYYswek5s4ydTOlbgE4tsU1Y1G9Ao+fHWUKlC6w CfGnpVUeH600+UgklG67spy4sajBve/j/FxvlgUh9n0a02wKAafPhBoHk9N2fhVk c382mVIqri4tLO2K07VvNXP+9oir0Az9cCrVNRzkrdnDwd6pxMTO9Qz+x4WA5bKZ iNXCMmVrpMk5wMQNhd1nWfAl3b+IK6/7JNKMta5c -----END CERTIFICATE-----Generated at Mon Sep 8 12:35:35 2025 by rpki-client