$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa File: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (raw, json) Hash identifier: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo= Subject key identifier: A6:E0:3D:8F:91:CD:00:96:5D:34:29:90:29:FD:1B:4D:79:55:94:46 Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 217DE7D5350683CB82E48C1F56E8EFD07B99F742 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa Signing time: Mon 02 Jun 2025 02:04:50 +0000 ROA not before: Mon 02 Jun 2025 01:59:50 +0000 ROA not after: Mon 01 Jun 2026 02:04:50 +0000 asID: 9785 IP address blocks: 202.69.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 05:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7d:e7:d5:35:06:83:cb:82:e4:8c:1f:56:e8:ef:d0:7b:99:f7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Jun 2 01:59:50 2025 GMT Not After : Jun 1 02:04:50 2026 GMT Subject: CN=A6E03D8F91CD00965D34299029FD1B4D79559446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:ce:dc:c5:bb:cf:db:90:75:82:e4:0e:ae: e1:6b:60:63:37:34:38:b1:66:aa:2b:3f:3b:2d:aa: 8c:f5:29:92:1a:88:45:24:4d:63:59:bb:20:8c:6b: fd:70:10:54:f2:fe:07:f1:d5:27:f0:eb:70:29:f8: fb:20:12:b8:ff:24:e4:bf:1c:d1:81:3a:4e:3b:bc: fd:66:84:c5:8d:0d:82:17:f3:31:27:21:3e:e5:09: d9:1f:3c:04:5d:3c:de:5d:27:1a:fd:2b:b7:c4:83: a7:f3:77:57:02:a0:2c:ed:e0:6a:63:9a:35:3b:b5: 1d:ee:01:93:c5:3e:04:40:0d:47:fe:7c:8f:cd:cf: eb:4b:2f:60:40:7b:16:df:39:d5:ba:fa:47:51:a4: ab:76:e6:c4:3c:c2:e7:dc:65:3a:16:45:6e:95:a4: 62:93:df:68:42:86:fb:d4:e0:97:92:fd:5e:ad:29: eb:86:73:d1:d1:b3:d0:db:7f:33:13:f2:ff:e9:84: 1c:0b:29:59:b3:3c:f8:4a:c7:de:25:14:1a:96:f3: 3f:5a:f5:a9:4e:00:a8:40:48:80:15:ff:7c:a8:54: 1f:3a:aa:b7:53:fd:a0:54:df:39:41:0a:63:94:f0: 69:73:ab:44:4c:15:3f:9a:42:7d:b0:33:a1:c1:8c: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E0:3D:8F:91:CD:00:96:5D:34:29:90:29:FD:1B:4D:79:55:94:46 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e36392e39362e302f32302d3234203d3e2039373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.69.96.0/20 Signature Algorithm: sha256WithRSAEncryption 4a:c2:06:98:61:fa:ae:91:fd:5c:fc:8a:8a:d3:6d:59:2e:42: c3:0a:2b:12:9e:c5:5f:58:5d:24:d8:fc:28:e0:1c:4f:8c:53: ad:c7:0a:f9:9a:5a:ee:99:47:fb:d2:30:f9:d7:bd:f6:2d:b2: 11:a1:b7:2f:c6:f3:c8:4c:78:15:30:7d:03:28:9f:cc:62:88: 60:ad:ae:67:3b:15:97:8a:4f:e4:80:2d:9b:77:ac:2a:2b:69: 31:ec:53:bc:06:c1:78:e1:26:7a:56:e2:63:82:d0:eb:a5:fe: d4:00:58:95:59:01:b9:c1:68:76:3e:2b:98:6f:ae:a2:58:7e: 8b:a8:da:c4:d3:76:4e:08:c8:84:a1:0c:4e:d1:6f:05:03:9a: 50:5b:26:77:01:c7:d1:6f:de:a1:63:1c:b0:2c:68:a4:0e:97: 6e:5c:57:43:c4:d3:d5:0b:f6:a3:3a:21:e9:51:c6:6a:c8:34: 54:34:0c:a4:7e:8c:ee:2d:42:c7:97:5a:12:45:2b:c8:f5:3b: 30:d2:14:b7:fc:c5:d8:6a:f4:a1:1b:6a:0d:9c:7d:d0:d5:a3: a2:7b:7c:cd:84:2e:89:5f:27:13:22:c4:ea:7c:58:cf:1d:5d: 42:b7:fc:f4:dc:9f:01:e2:21:34:98:03:98:69:2c:84:f5:5d: 19:3e:76:32 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUIX3n1TUGg8uC5IwfVujv0HuZ90IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNTA2MDIwMTU5NTBaFw0yNjA2MDEwMjA0NTBaMDMxMTAvBgNV BAMTKEE2RTAzRDhGOTFDRDAwOTY1RDM0Mjk5MDI5RkQxQjRENzk1NTk0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOk87cxbvP25B1guQOruFrYGM3 NDixZqorPzstqoz1KZIaiEUkTWNZuyCMa/1wEFTy/gfx1Sfw63Ap+PsgErj/JOS/ HNGBOk47vP1mhMWNDYIX8zEnIT7lCdkfPARdPN5dJxr9K7fEg6fzd1cCoCzt4Gpj mjU7tR3uAZPFPgRADUf+fI/Nz+tLL2BAexbfOdW6+kdRpKt25sQ8wufcZToWRW6V pGKT32hChvvU4JeS/V6tKeuGc9HRs9DbfzMT8v/phBwLKVmzPPhKx94lFBqW8z9a 9alOAKhASIAV/3yoVB86qrdT/aBU3zlBCmOU8Glzq0RMFT+aQn2wM6HBjFQ1AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUpuA9j5HNAJZdNCmQKf0bTXlVlEYwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvMzIzMDMyMmUzNjM5MmUzOTM2MmUzMDJmMzIzMDJk MzIzNDIwM2QzZTIwMzkzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKRWAwDQYJKoZIhvcNAQEL BQADggEBAErCBphh+q6R/Vz8iorTbVkuQsMKKxKexV9YXSTY/CjgHE+MU63HCvma Wu6ZR/vSMPnXvfYtshGhty/G88hMeBUwfQMon8xiiGCtrmc7FZeKT+SALZt3rCor aTHsU7wGwXjhJnpW4mOC0Oul/tQAWJVZAbnBaHY+K5hvrqJYfouo2sTTdk4IyISh DE7RbwUDmlBbJncBx9Fv3qFjHLAsaKQOl25cV0PE09UL9qM6IelRxmrINFQ0DKR+ jO4tQseXWhJFK8j1OzDSFLf8xdhq9KEbag2cfdDVo6J7fM2ELolfJxMixOp8WM8d XUK3/PTcnwHiITSYA5hpLIT1XRk+djI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:22:59 2025 by rpki-client