$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa File: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (raw, json) Hash identifier: 0r1qT8I3KYKeRC/g+vu3+beTQV2dYBEegiYAXFw3fs8= Subject key identifier: B6:A4:A6:7E:BF:B9:2B:23:B7:40:89:6A:02:6E:45:38:47:9A:2B:1F Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 4B70D9F56017A5F0AA5464A2379D690DC518CF53 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa Signing time: Tue 22 Jul 2025 06:00:01 +0000 ROA not before: Tue 22 Jul 2025 05:55:01 +0000 ROA not after: Tue 21 Jul 2026 06:00:01 +0000 asID: 23951 IP address blocks: 202.152.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:70:d9:f5:60:17:a5:f0:aa:54:64:a2:37:9d:69:0d:c5:18:cf:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Jul 22 05:55:01 2025 GMT Not After : Jul 21 06:00:01 2026 GMT Subject: CN=B6A4A67EBFB92B23B740896A026E4538479A2B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:45:3f:19:1d:b3:99:63:62:76:6e:ed:a7: 39:09:96:20:5f:52:3a:6f:a3:77:e9:e0:18:80:1c: 0f:d1:55:d8:2b:2d:7a:2b:99:43:97:bf:9c:7e:68: 3b:f0:a7:22:c9:54:71:32:7f:65:96:53:e0:d0:30: 40:49:c3:c8:50:89:08:21:c3:dd:f0:12:da:fc:7f: 88:5d:95:e6:53:41:2e:38:0e:6e:fa:2b:90:ed:4a: e3:b3:10:54:ca:28:a5:6d:a8:ea:95:37:8f:51:4f: 2f:6b:69:6c:43:2e:ac:33:d3:a3:e2:16:d6:54:12: 95:d4:1c:ab:d7:19:ea:5f:7a:cb:e7:e4:f8:22:e4: da:e8:2e:c1:aa:73:fd:50:04:54:d2:96:fc:30:d7: b3:e1:ee:11:b0:04:d5:e7:5b:a6:f8:f3:c4:64:57: d8:4a:38:3d:5b:17:74:73:fe:b5:29:1e:8a:bd:40: 35:33:51:d1:b7:71:e7:40:3e:d5:b8:90:db:e8:f8: c4:5a:01:ad:7e:05:0d:29:0c:4f:ab:ff:89:f6:13: c9:7d:29:39:4f:3a:b1:ad:8f:ca:df:1c:7c:9f:e1: c2:f2:a6:3d:24:c6:8d:6a:cd:ee:8b:be:c3:8f:6b: c1:44:aa:46:d7:83:8d:a4:fd:9d:15:4f:6a:66:7f: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:A6:7E:BF:B9:2B:23:B7:40:89:6A:02:6E:45:38:47:9A:2B:1F X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.128.0/19 Signature Algorithm: sha256WithRSAEncryption 18:7a:7e:68:3d:49:4f:73:2b:6d:14:10:77:72:ab:18:f2:18: cb:ed:85:a2:33:bd:26:bc:a9:32:b9:fc:1d:a4:ea:5c:cd:a7: 9f:b2:4d:4b:bf:21:4b:6e:81:aa:c9:08:a5:f3:4b:32:b5:1c: 25:29:90:28:cf:f0:26:9d:28:02:0c:b8:e8:72:d1:08:58:8d: 44:78:43:90:a1:2c:21:57:0e:fc:8e:9a:8e:92:8e:7c:46:43: 1a:ba:c7:32:1f:24:38:50:9d:29:5e:d4:d9:01:1d:ed:30:f1: ac:a6:27:21:7e:f4:ac:8d:7d:61:dd:2e:dc:3b:1f:1f:37:00: e3:4a:93:e3:7b:59:9e:90:c2:67:39:c5:64:62:e7:3f:c2:86: 9c:99:29:72:60:68:5d:01:08:f0:d8:2a:36:f2:94:be:ff:70: 71:2a:bd:7c:eb:df:85:6c:22:c9:1f:55:79:e9:6b:63:6a:ab: 04:aa:9c:61:f4:a5:dd:c1:6c:cf:a5:87:0d:3d:d7:f1:3f:ea: a2:1a:7f:a1:60:9c:82:a5:a2:d3:b5:7a:33:31:0e:d0:85:4c: 23:59:1e:88:eb:93:df:18:24:e5:a3:40:5e:0d:f8:43:5e:7d: 4b:b6:b3:3a:51:87:87:a6:9c:d6:15:50:5d:89:ad:e5:aa:11: 45:0d:75:9e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUS3DZ9WAXpfCqVGSiN51pDcUYz1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTA3MjIwNTU1MDFaFw0yNjA3MjEwNjAwMDFaMDMxMTAvBgNV BAMTKEI2QTRBNjdFQkZCOTJCMjNCNzQwODk2QTAyNkU0NTM4NDc5QTJCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijUU/GR2zmWNidm7tpzkJliBf Ujpvo3fp4BiAHA/RVdgrLXormUOXv5x+aDvwpyLJVHEyf2WWU+DQMEBJw8hQiQgh w93wEtr8f4hdleZTQS44Dm76K5DtSuOzEFTKKKVtqOqVN49RTy9raWxDLqwz06Pi FtZUEpXUHKvXGepfesvn5Pgi5NroLsGqc/1QBFTSlvww17Ph7hGwBNXnW6b488Rk V9hKOD1bF3Rz/rUpHoq9QDUzUdG3cedAPtW4kNvo+MRaAa1+BQ0pDE+r/4n2E8l9 KTlPOrGtj8rfHHyf4cLypj0kxo1qze6LvsOPa8FEqkbXg42k/Z0VT2pmf/hDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtqSmfr+5KyO3QIlqAm5FOEeaKx8wHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i OTMwLTFhYjBiZjAyZGQ1ZC8wLzMyMzAzMjJlMzEzNTMyMmUzMTMyMzgyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzMjMzMzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFypiAMA0GCSqG SIb3DQEBCwUAA4IBAQAYen5oPUlPcyttFBB3cqsY8hjL7YWiM70mvKkyufwdpOpc zaefsk1LvyFLboGqyQil80sytRwlKZAoz/AmnSgCDLjoctEIWI1EeEOQoSwhVw78 jpqOko58RkMauscyHyQ4UJ0pXtTZAR3tMPGspichfvSsjX1h3S7cOx8fNwDjSpPj e1mekMJnOcVkYuc/woacmSlyYGhdAQjw2Co28pS+/3BxKr1869+FbCLJH1V56Wtj aqsEqpxh9KXdwWzPpYcNPdfxP+qiGn+hYJyCpaLTtXozMQ7QhUwjWR6I65PfGCTl o0BeDfhDXn1LtrM6UYeHppzWFVBdia3lqhFFDXWe -----END CERTIFICATE-----Generated at Tue Nov 4 16:48:47 2025 by rpki-client