$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230352e302f32342d3234203d3e20313430303331.roa File: 3230322e3136322e3230352e302f32342d3234203d3e20313430303331.roa (raw, json) Hash identifier: glP5xIO+xXHN8TiCbO37T/lY2mhdC3xilVB45GE0pzQ= Subject key identifier: 5C:DB:52:99:AB:C2:5F:75:73:BC:F7:54:33:BC:8F:3E:AC:02:EA:A4 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 15FD71242B87178DC251178AAF1CF298E089E382 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230352e302f32342d3234203d3e20313430303331.roa Signing time: Fri 28 Feb 2025 05:02:48 +0000 ROA not before: Fri 28 Feb 2025 04:57:48 +0000 ROA not after: Fri 27 Feb 2026 05:02:48 +0000 asID: 140031 IP address blocks: 202.162.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 12:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:fd:71:24:2b:87:17:8d:c2:51:17:8a:af:1c:f2:98:e0:89:e3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Feb 28 04:57:48 2025 GMT Not After : Feb 27 05:02:48 2026 GMT Subject: CN=5CDB5299ABC25F7573BCF75433BC8F3EAC02EAA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:37:5f:7f:15:72:ca:2c:e0:c5:af:dc:7d: 86:9a:f4:03:27:44:28:8a:b9:81:dc:9d:6b:01:89: 5b:e0:a5:e1:fd:59:59:e8:aa:25:69:88:a1:e6:b4: 05:95:88:2f:19:c2:8d:17:65:c5:0f:fc:fd:3f:03: 90:04:dd:80:b4:2a:ec:4b:46:2a:84:32:9e:b4:a5: 93:94:46:14:e2:b1:d2:0a:e0:76:96:cc:ca:f6:88: 83:0f:1b:90:c6:1b:1f:b2:a7:b0:bd:ee:d5:59:a0: ab:34:87:2f:a9:93:46:e0:3d:7f:f7:ee:e1:3f:72: d0:0f:46:f8:8c:9f:92:84:1a:5b:29:f9:20:a8:80: 0f:de:4f:10:c2:fc:d7:08:5c:cf:17:32:10:7f:3c: 90:a0:10:58:ff:be:b2:e5:66:6d:b9:ae:64:e6:4b: a5:52:4a:75:a5:44:9d:0e:c5:a7:a2:35:4a:49:bc: d4:65:1f:d1:9d:e4:4e:20:85:57:57:6b:05:bb:97: ad:b3:19:32:fb:4b:6b:94:11:dc:ff:15:81:02:02: 65:ad:6f:6a:73:c6:6a:45:58:d2:eb:bd:10:e4:a6: 58:c4:9d:12:7e:b8:cc:4c:2e:6e:2e:00:8d:43:63: af:b0:37:ee:6a:16:00:86:8a:c6:4e:17:97:e7:99: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DB:52:99:AB:C2:5F:75:73:BC:F7:54:33:BC:8F:3E:AC:02:EA:A4 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230352e302f32342d3234203d3e20313430303331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.205.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:26:45:db:63:46:07:da:df:d0:b1:38:f0:dc:10:25:1e:dd: 6d:b3:5e:fd:1e:ba:a6:1d:74:40:0a:17:0c:76:d3:02:21:1b: 74:82:85:26:50:14:c0:77:58:a1:9e:e1:b9:43:32:00:6b:af: 70:24:87:25:2c:9f:1c:86:6c:ab:26:e8:31:a4:0f:79:c4:c2: d5:c9:34:e5:36:1f:26:19:fc:b7:a7:db:8a:4e:b5:1f:47:38: 6e:59:42:25:bd:73:7f:55:a2:7b:30:a0:e5:6c:da:12:68:99: 80:1b:6a:aa:0e:ce:23:d0:41:f8:49:29:41:2c:a5:b0:ab:c4: 7b:ff:7f:ed:7c:ea:19:8c:b6:42:64:10:31:fb:14:4d:5e:d5: 60:df:16:35:0a:e2:0a:18:9e:b8:ec:fb:c0:60:21:56:6e:1d: fc:2a:1c:3a:98:cd:44:79:6a:66:31:89:03:e3:c7:15:42:5a: f0:b0:27:9f:fe:9b:84:f2:f5:2f:a4:11:3d:20:95:b0:91:89: c6:1d:59:74:4d:3a:70:c7:04:b9:9a:a0:e0:33:1a:b2:59:56: f8:bf:ab:5c:89:a5:a0:64:a1:db:36:16:77:0c:73:f1:25:8b: c7:41:90:64:c0:17:d8:43:24:23:d8:4c:af:86:63:30:d0:44: 4a:1c:30:b4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFf1xJCuHF43CUReKrxzymOCJ44IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTAyMjgwNDU3NDhaFw0yNjAyMjcwNTAyNDhaMDMxMTAvBgNV BAMTKDVDREI1Mjk5QUJDMjVGNzU3M0JDRjc1NDMzQkM4RjNFQUMwMkVBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJqzdffxVyyizgxa/cfYaa9AMn RCiKuYHcnWsBiVvgpeH9WVnoqiVpiKHmtAWViC8Zwo0XZcUP/P0/A5AE3YC0KuxL RiqEMp60pZOURhTisdIK4HaWzMr2iIMPG5DGGx+yp7C97tVZoKs0hy+pk0bgPX/3 7uE/ctAPRviMn5KEGlsp+SCogA/eTxDC/NcIXM8XMhB/PJCgEFj/vrLlZm25rmTm S6VSSnWlRJ0OxaeiNUpJvNRlH9Gd5E4ghVdXawW7l62zGTL7S2uUEdz/FYECAmWt b2pzxmpFWNLrvRDkpljEnRJ+uMxMLm4uAI1DY6+wN+5qFgCGisZOF5fnmfEdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXNtSmavCX3VzvPdUM7yPPqwC6qQwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzAzMjJlMzEzNjMyMmUzMjMwMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKos0wDQYJ KoZIhvcNAQELBQADggEBAEomRdtjRgfa39CxOPDcECUe3W2zXv0euqYddEAKFwx2 0wIhG3SChSZQFMB3WKGe4blDMgBrr3AkhyUsnxyGbKsm6DGkD3nEwtXJNOU2HyYZ /Len24pOtR9HOG5ZQiW9c39VonswoOVs2hJomYAbaqoOziPQQfhJKUEspbCrxHv/ f+186hmMtkJkEDH7FE1e1WDfFjUK4goYnrjs+8BgIVZuHfwqHDqYzUR5amYxiQPj xxVCWvCwJ5/+m4Ty9S+kET0glbCRicYdWXRNOnDHBLmaoOAzGrJZVvi/q1yJpaBk ods2FncMc/Eli8dBkGTAF9hDJCPYTK+GYzDQREocMLQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:05 2025 by rpki-client