$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa File: 3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: LniFmcCfNPpia3b8RrXlp4dA/fuwpVEi3LctYWEuorI= Subject key identifier: D7:33:99:51:6B:8D:4B:9F:54:63:BC:C0:50:1C:02:08:AB:C6:3F:A7 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 53DD44BF04205175A9BC6C79E690EE5C86CA3D99 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa Signing time: Fri 25 Jul 2025 06:01:30 +0000 ROA not before: Fri 25 Jul 2025 05:56:30 +0000 ROA not after: Fri 24 Jul 2026 06:01:30 +0000 asID: 23679 IP address blocks: 202.162.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:dd:44:bf:04:20:51:75:a9:bc:6c:79:e6:90:ee:5c:86:ca:3d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jul 25 05:56:30 2025 GMT Not After : Jul 24 06:01:30 2026 GMT Subject: CN=D73399516B8D4B9F5463BCC0501C0208ABC63FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:e8:a3:c0:25:a3:1c:da:16:d3:6a:d2:eb: 9e:1e:cc:23:af:74:84:02:e7:8e:66:bc:19:ce:2d: ca:8b:e7:f0:2d:81:39:27:6f:ae:62:47:27:2d:70: 35:cd:27:3d:9c:49:d7:90:79:c9:54:a7:39:9b:2b: e2:9f:1e:88:f6:d7:a0:cd:76:21:99:b7:87:65:df: 42:ff:69:ef:4d:b6:c8:3d:ef:81:c0:7a:25:37:ac: 20:24:0a:f6:42:6c:5d:8d:6f:cb:f9:6d:e1:42:d1: 29:8e:f9:5f:82:15:f5:d0:7d:c6:a0:00:1e:24:4c: b7:77:33:1b:f6:1a:e7:16:4d:e8:a7:b7:ec:ce:27: 22:dd:95:2f:fc:6e:87:a6:9e:4e:99:f2:c2:0c:ce: 12:39:ec:a8:23:bc:dd:3d:f5:90:42:0e:98:f7:b5: 9e:cd:b6:5b:b0:8b:6a:6a:d9:6b:53:d3:ae:08:89: 52:d1:d5:d5:ed:f9:be:ab:ca:50:e6:f1:38:2c:5a: de:3a:a7:69:f1:aa:2f:19:52:c7:17:be:de:32:04: 1c:74:48:ac:5c:ee:d8:31:81:6e:be:b9:78:db:34: 42:62:2e:3a:1d:16:9c:48:f6:68:70:71:b8:b5:39: 6d:c5:a7:75:4a:88:0d:1a:24:f6:fa:68:10:36:65: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:33:99:51:6B:8D:4B:9F:54:63:BC:C0:50:1C:02:08:AB:C6:3F:A7 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.202.0/24 Signature Algorithm: sha256WithRSAEncryption 45:7d:85:a2:62:30:eb:56:e4:25:59:3b:d4:16:21:ec:cc:15: c1:dd:fa:d5:9f:37:ca:c2:35:c9:8e:d1:1a:74:3d:c4:ff:a1: b2:75:50:af:61:25:ea:28:e1:b3:0d:6d:0c:62:0e:c4:5a:aa: 3a:3e:e2:a9:cc:7e:b1:7f:e0:8b:7c:6c:75:56:2a:31:5a:5b: 8a:47:29:66:00:58:dc:a3:04:1b:d4:ad:e5:4b:c2:52:2c:5c: df:d8:59:41:a8:81:2e:ba:66:95:f5:38:38:bc:00:8c:cf:02: 3c:4e:f2:ae:05:4c:91:06:4a:e8:9e:c9:49:37:a2:e3:04:21: 7f:b1:5e:c4:33:c4:a7:5e:fc:73:f9:fe:1a:d6:6f:d2:7e:0e: b6:f2:92:a9:f9:1d:fe:93:9b:4a:c4:15:6a:ca:29:74:94:c9: 31:ab:e4:b1:6b:6a:0f:98:61:d6:4d:1c:2f:11:a6:75:87:03: 90:5a:83:d9:67:0e:f5:1f:fc:9f:ff:a5:3d:9b:1d:4d:b9:00: f7:a6:cc:bb:b1:07:92:85:aa:0f:1d:79:8d:93:05:d6:a2:a2: 18:1d:e6:fd:e8:70:88:88:fb:b8:d4:bd:5d:0b:ce:38:a8:d0: cf:3a:12:e4:df:2a:c9:55:90:57:69:26:f4:27:79:a5:94:3c: d3:2d:24:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUU91EvwQgUXWpvGx55pDuXIbKPZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTA3MjUwNTU2MzBaFw0yNjA3MjQwNjAxMzBaMDMxMTAvBgNV BAMTKEQ3MzM5OTUxNkI4RDRCOUY1NDYzQkNDMDUwMUMwMjA4QUJDNjNGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW1uijwCWjHNoW02rS654ezCOv dIQC545mvBnOLcqL5/AtgTknb65iRyctcDXNJz2cSdeQeclUpzmbK+KfHoj216DN diGZt4dl30L/ae9Ntsg974HAeiU3rCAkCvZCbF2Nb8v5beFC0SmO+V+CFfXQfcag AB4kTLd3Mxv2GucWTeint+zOJyLdlS/8boemnk6Z8sIMzhI57KgjvN099ZBCDpj3 tZ7Ntluwi2pq2WtT064IiVLR1dXt+b6rylDm8TgsWt46p2nxqi8ZUscXvt4yBBx0 SKxc7tgxgW6+uXjbNEJiLjodFpxI9mhwcbi1OW3Fp3VKiA0aJPb6aBA2Zf8/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1zOZUWuNS59UY7zAUBwCCKvGP6cwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzAzMjJlMzEzNjMyMmUzMjMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqLKMA0GCSqG SIb3DQEBCwUAA4IBAQBFfYWiYjDrVuQlWTvUFiHszBXB3frVnzfKwjXJjtEadD3E /6GydVCvYSXqKOGzDW0MYg7EWqo6PuKpzH6xf+CLfGx1VioxWluKRylmAFjcowQb 1K3lS8JSLFzf2FlBqIEuumaV9Tg4vACMzwI8TvKuBUyRBkronslJN6LjBCF/sV7E M8SnXvxz+f4a1m/Sfg628pKp+R3+k5tKxBVqyil0lMkxq+Sxa2oPmGHWTRwvEaZ1 hwOQWoPZZw71H/yf/6U9mx1NuQD3psy7sQeShaoPHXmNkwXWoqIYHeb96HCIiPu4 1L1dC844qNDPOhLk3yrJVZBXaSb0J3mllDzTLSQP -----END CERTIFICATE-----Generated at Fri Aug 8 19:23:57 2025 by rpki-client