$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa File: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (raw, json) Hash identifier: 9VqDU3d2jTW23JJ05scMXpgKwNdRFXtjy3WCszDduNE= Subject key identifier: 3B:60:86:8C:52:9F:7C:52:3D:C5:9E:D1:7D:BE:15:26:BE:E9:82:1D Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 0D29D89A4E4B3AD841450E37077FF03CE2983A34 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa Signing time: Wed 23 Jul 2025 15:00:42 +0000 ROA not before: Wed 23 Jul 2025 14:55:42 +0000 ROA not after: Wed 22 Jul 2026 15:00:42 +0000 asID: 4382 IP address blocks: 202.93.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:29:d8:9a:4e:4b:3a:d8:41:45:0e:37:07:7f:f0:3c:e2:98:3a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Jul 23 14:55:42 2025 GMT Not After : Jul 22 15:00:42 2026 GMT Subject: CN=3B60868C529F7C523DC59ED17DBE1526BEE9821D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:55:02:53:de:33:d4:4f:31:8e:7e:d9:c9:65: 23:b3:aa:87:10:fb:21:c9:fc:83:ae:cf:c6:da:32: c6:02:c0:66:cb:0b:61:f2:69:fb:53:da:c9:a6:7e: 09:a3:4c:4e:ec:78:96:34:20:32:aa:f0:51:8c:ef: d8:4d:2f:2c:61:35:fe:a8:a3:06:7b:2c:b8:4b:0b: af:f7:99:44:ed:3d:8b:6d:66:c0:4a:78:e5:96:cb: c2:4e:34:32:60:93:08:95:8a:77:b7:e3:29:29:b7: 4c:03:9a:77:20:da:5a:bd:37:60:00:d9:1b:67:6c: 6e:0d:48:ed:8c:00:70:80:d8:52:50:29:55:98:6e: a9:0f:3e:85:9f:2a:d7:2f:ad:e1:83:cf:c2:be:fe: 4d:28:94:04:0c:4b:8d:2a:6a:fd:ac:bb:1b:51:e6: d4:09:7a:a9:eb:aa:ec:93:57:9e:2c:df:82:87:d8: 41:da:3a:d7:4b:75:6b:ed:41:1d:22:ad:66:0b:a5: 99:f4:06:c8:14:7d:2f:d4:ea:bc:a9:26:49:59:ce: 0a:8e:cb:66:65:95:fa:7d:ef:74:3f:f1:fb:4a:a8: f1:86:a4:3a:09:e0:1d:96:71:d6:fd:e5:7c:dd:a2: 9d:ea:2e:3d:a1:a2:05:8f:35:23:cf:d0:5e:29:26: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:60:86:8C:52:9F:7C:52:3D:C5:9E:D1:7D:BE:15:26:BE:E9:82:1D X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.138.0/24 Signature Algorithm: sha256WithRSAEncryption 42:e2:d4:7f:0c:9a:44:5e:a2:95:9e:06:1f:79:d3:cf:ba:8f: 54:40:ae:f4:e8:b9:75:6c:62:d6:42:d1:4e:66:82:66:96:7d: 53:51:a3:39:92:c8:34:80:7f:ce:f8:66:d4:b7:cb:ed:d4:42: 0e:49:93:ac:74:04:20:ab:e4:51:77:eb:91:a8:33:8a:a8:06: 5d:09:c3:44:27:8e:97:fb:43:41:88:a6:6a:29:0c:e2:7d:70: 84:72:ab:58:c8:73:d7:1c:2d:61:53:c1:ee:57:a7:86:8e:eb: 93:95:7a:86:aa:62:ad:9f:46:6c:10:b9:1d:6c:77:99:fa:6f: ad:f3:e6:3b:27:3b:76:df:27:5f:66:5c:43:46:5b:d5:f9:7f: 04:34:bc:83:fe:73:f2:97:c9:e3:c9:07:47:24:88:a0:60:0c: a2:93:fe:4f:ed:5d:ba:df:e3:ac:3a:da:1e:2d:58:68:4b:78: b9:d8:bb:27:68:0c:e6:17:2b:e3:f7:59:6e:af:7e:55:3b:40: 65:27:38:20:67:23:4e:76:1a:5c:10:0d:e8:09:ab:1a:2c:3f: ff:da:f0:8d:bf:a0:a4:79:56:20:b4:dd:24:0f:52:84:7b:d4: 9d:b9:84:e8:82:72:90:6a:61:d9:77:4b:71:96:67:44:70:27: 46:da:67:00 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDSnYmk5LOthBRQ43B3/wPOKYOjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNTA3MjMxNDU1NDJaFw0yNjA3MjIxNTAwNDJaMDMxMTAvBgNV BAMTKDNCNjA4NjhDNTI5RjdDNTIzREM1OUVEMTdEQkUxNTI2QkVFOTgyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4VQJT3jPUTzGOftnJZSOzqocQ +yHJ/IOuz8baMsYCwGbLC2HyaftT2smmfgmjTE7seJY0IDKq8FGM79hNLyxhNf6o owZ7LLhLC6/3mUTtPYttZsBKeOWWy8JONDJgkwiVine34ykpt0wDmncg2lq9N2AA 2RtnbG4NSO2MAHCA2FJQKVWYbqkPPoWfKtcvreGDz8K+/k0olAQMS40qav2suxtR 5tQJeqnrquyTV54s34KH2EHaOtdLdWvtQR0irWYLpZn0BsgUfS/U6rypJklZzgqO y2Zllfp973Q/8ftKqPGGpDoJ4B2Wcdb95Xzdop3qLj2hogWPNSPP0F4pJkmlAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUO2CGjFKffFI9xZ7Rfb4VJr7pgh0wHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYowDQYJKoZIhvcN AQELBQADggEBAELi1H8MmkReopWeBh9508+6j1RArvTouXVsYtZC0U5mgmaWfVNR ozmSyDSAf874ZtS3y+3UQg5Jk6x0BCCr5FF365GoM4qoBl0Jw0Qnjpf7Q0GIpmop DOJ9cIRyq1jIc9ccLWFTwe5Xp4aO65OVeoaqYq2fRmwQuR1sd5n6b63z5jsnO3bf J19mXENGW9X5fwQ0vIP+c/KXyePJB0ckiKBgDKKT/k/tXbrf46w62h4tWGhLeLnY uydoDOYXK+P3WW6vflU7QGUnOCBnI052GlwQDegJqxosP//a8I2/oKR5ViC03SQP UoR71J25hOiCcpBqYdl3S3GWZ0RwJ0baZwA= -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:56 2025 by rpki-client