$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e322e302f32332d3234203d3e2034343334.roa File: 3230322e3135342e322e302f32332d3234203d3e2034343334.roa (raw, json) Hash identifier: prehUBKAJRsXNRzub7IjmH4pzZvSPoY6oCS3XrResb0= Subject key identifier: 24:AD:04:13:61:AD:20:E8:39:94:53:78:04:9F:52:3B:B6:9F:5A:80 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 3C994A56D27589F0D1E518A3764E945B9C5C4566 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e322e302f32332d3234203d3e2034343334.roa Signing time: Wed 23 Jul 2025 11:02:25 +0000 ROA not before: Wed 23 Jul 2025 10:57:25 +0000 ROA not after: Wed 22 Jul 2026 11:02:25 +0000 asID: 4434 IP address blocks: 202.154.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 01:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:99:4a:56:d2:75:89:f0:d1:e5:18:a3:76:4e:94:5b:9c:5c:45:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Jul 23 10:57:25 2025 GMT Not After : Jul 22 11:02:25 2026 GMT Subject: CN=24AD041361AD20E839945378049F523BB69F5A80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:de:bb:7e:b5:7d:2b:14:3c:0a:81:5e:a5: 61:e2:ec:16:ae:fa:5d:d5:3f:7f:fc:bc:27:0c:6f: 5e:76:05:e3:fe:15:6f:23:64:87:bc:30:09:56:02: 66:b9:0d:eb:10:45:dc:9d:2b:0d:c5:bc:70:f8:48: cc:ca:5d:72:4e:27:10:f5:3c:6e:72:79:e6:d7:57: 05:72:05:ac:be:07:35:5a:c4:74:54:61:09:b8:0e: 42:5a:6e:33:4b:63:b2:8a:30:33:44:df:33:b9:22: c2:ba:d5:ec:66:38:ee:74:9a:3d:a6:09:e4:3d:73: d5:7c:84:6b:be:d2:dc:97:cf:37:4d:32:46:23:4d: 5f:41:e6:0d:56:18:54:95:cc:3d:51:ad:69:78:b7: e2:da:45:1d:29:91:fa:0b:87:82:75:b5:7f:c6:de: 5d:91:c8:f5:8f:e2:11:aa:42:72:d0:82:ba:1f:75: 8a:2e:7a:5f:27:0b:fd:5d:f2:87:b6:a1:a9:da:ec: f7:72:1e:62:98:28:92:3a:21:fd:c6:26:ff:2a:80: 2a:2f:dd:42:4e:0c:48:32:49:f6:6b:1c:2e:ba:d2: f3:90:47:d3:45:af:00:08:04:f6:66:2d:a2:5d:a0: ed:1e:87:5b:13:f7:93:46:bd:1a:04:66:89:72:d7: a4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AD:04:13:61:AD:20:E8:39:94:53:78:04:9F:52:3B:B6:9F:5A:80 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e322e302f32332d3234203d3e2034343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.2.0/23 Signature Algorithm: sha256WithRSAEncryption 75:86:78:59:30:d8:7a:ec:99:a2:86:29:59:af:b7:15:26:50: f8:cd:db:2e:9d:e1:1e:65:a5:04:9d:b2:3b:85:86:b3:15:0b: f9:64:23:6d:60:97:65:ac:8c:97:82:de:e9:6b:eb:2d:9e:45: e7:b2:ed:01:42:a3:8c:b1:e5:c0:66:36:3a:fc:05:62:c1:dd: 7f:e0:67:16:63:70:ce:a9:28:34:91:a5:d4:dc:c6:3b:35:57: 97:42:bf:4b:f9:33:9e:2a:61:e6:77:99:c3:38:3c:bc:0b:02: f3:60:ce:93:5b:3b:d5:6a:3a:1b:90:f1:f0:c9:1d:81:c4:a3: c9:1b:bc:29:d7:2b:c0:e0:7c:81:90:e6:28:81:2a:88:81:09: 3e:d7:0f:dd:51:fd:36:04:a3:c0:b4:77:7c:3f:0a:ab:b0:ef: 6d:1b:68:af:66:1b:74:5f:2b:20:b6:23:d7:d1:30:3c:9b:94: 23:36:78:0d:66:f4:a9:99:fd:f8:29:9c:4c:ec:68:fc:05:99: ec:4e:c2:b4:ff:5b:67:5f:9e:a5:da:35:59:9b:3b:70:56:4c: 55:dc:97:99:a8:26:b8:1c:08:a7:23:70:ed:41:69:1d:f2:b2: e8:66:e4:39:40:0e:91:41:c2:84:1c:c2:81:46:8b:33:99:1e: f9:3a:c2:b3 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUPJlKVtJ1ifDR5Rijdk6UW5xcRWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTA3MjMxMDU3MjVaFw0yNjA3MjIxMTAyMjVaMDMxMTAvBgNV BAMTKDI0QUQwNDEzNjFBRDIwRTgzOTk0NTM3ODA0OUY1MjNCQjY5RjVBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQW967frV9KxQ8CoFepWHi7Bau +l3VP3/8vCcMb152BeP+FW8jZIe8MAlWAma5DesQRdydKw3FvHD4SMzKXXJOJxD1 PG5yeebXVwVyBay+BzVaxHRUYQm4DkJabjNLY7KKMDNE3zO5IsK61exmOO50mj2m CeQ9c9V8hGu+0tyXzzdNMkYjTV9B5g1WGFSVzD1RrWl4t+LaRR0pkfoLh4J1tX/G 3l2RyPWP4hGqQnLQgrofdYouel8nC/1d8oe2oana7PdyHmKYKJI6If3GJv8qgCov 3UJODEgySfZrHC660vOQR9NFrwAIBPZmLaJdoO0eh1sT95NGvRoEZoly16TpAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUJK0EE2GtIOg5lFN4BJ9SO7afWoAwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMwYzE0YTktM2E3Ny00OWUyLTkx OTQtNDhkMDkxMzQ1OGIyLzAvMzIzMDMyMmUzMTM1MzQyZTMyMmUzMDJmMzIzMzJk MzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmgIwDQYJKoZIhvcNAQEL BQADggEBAHWGeFkw2HrsmaKGKVmvtxUmUPjN2y6d4R5lpQSdsjuFhrMVC/lkI21g l2WsjJeC3ulr6y2eReey7QFCo4yx5cBmNjr8BWLB3X/gZxZjcM6pKDSRpdTcxjs1 V5dCv0v5M54qYeZ3mcM4PLwLAvNgzpNbO9VqOhuQ8fDJHYHEo8kbvCnXK8DgfIGQ 5iiBKoiBCT7XD91R/TYEo8C0d3w/Cquw720baK9mG3RfKyC2I9fRMDyblCM2eA1m 9KmZ/fgpnEzsaPwFmexOwrT/W2dfnqXaNVmbO3BWTFXcl5moJrgcCKcjcO1BaR3y suhm5DlADpFBwoQcwoFGizOZHvk6wrM= -----END CERTIFICATE-----Generated at Thu Aug 7 20:12:32 2025 by rpki-client