$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa File: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (raw, json) Hash identifier: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU= Subject key identifier: C9:0A:68:43:5F:2E:CF:E9:C2:32:47:39:15:1B:75:AA:D0:79:DF:94 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 312B004F8C67EB578D8704883E2A748557E8E4A1 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa Signing time: Fri 03 Oct 2025 04:02:25 +0000 ROA not before: Fri 03 Oct 2025 03:57:25 +0000 ROA not after: Fri 02 Oct 2026 04:02:25 +0000 asID: 152032 IP address blocks: 202.47.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2b:00:4f:8c:67:eb:57:8d:87:04:88:3e:2a:74:85:57:e8:e4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Oct 3 03:57:25 2025 GMT Not After : Oct 2 04:02:25 2026 GMT Subject: CN=C90A68435F2ECFE9C2324739151B75AAD079DF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:aa:cb:50:c9:51:f5:1c:e5:eb:bb:ed:c3: a7:fa:0d:b5:71:96:d0:7e:8f:1e:af:51:7f:52:33: cd:05:1f:c0:cb:3d:ce:49:ff:91:4a:8f:d8:76:bf: bd:1d:9e:50:6a:5b:b0:1c:82:82:e7:48:07:27:7b: 65:f0:8e:ae:5b:77:a9:db:93:40:dd:12:dc:29:d1: d5:45:71:38:84:6c:80:ae:e4:c9:ac:5a:6c:06:21: 05:05:0d:49:77:e2:87:90:c4:90:98:16:3f:f0:4f: b7:80:d2:43:31:f1:cd:6b:3e:69:6f:48:18:d3:c1: d5:7e:64:ca:20:2d:20:9d:d2:33:da:31:a6:aa:20: e4:cd:08:26:a5:d4:40:43:d1:31:6a:48:72:07:72: 19:77:d3:c2:c7:46:6f:11:35:27:1f:80:c1:1e:71: 5b:a3:9a:75:f9:43:74:5d:0a:3b:4c:67:c8:0a:f4: f1:8d:2a:35:72:b7:1d:99:17:3c:cd:e3:1b:8f:7a: 6c:cf:34:01:89:9a:5d:f2:b0:49:ca:9e:40:b6:1f: 7d:9f:ed:a1:73:ef:49:dd:02:44:d4:b7:14:9d:e5: 90:30:b0:fc:a9:04:44:f2:f9:f3:f4:b9:31:9a:0f: 30:1c:44:c4:ae:1b:e6:75:b3:f9:54:df:43:a8:2e: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:68:43:5F:2E:CF:E9:C2:32:47:39:15:1B:75:AA:D0:79:DF:94 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.184.0/24 Signature Algorithm: sha256WithRSAEncryption a7:e3:09:ff:36:16:d2:55:d9:96:42:10:14:60:a5:0d:58:c4: 68:f3:74:6b:5c:33:27:7d:93:b2:e4:9c:fd:dd:51:82:89:63: d8:d7:65:79:a0:df:d3:55:12:b7:2f:95:ae:60:34:ce:b8:cc: 9a:50:2a:c4:ac:9c:a2:a6:54:ef:71:1e:d2:4d:b2:52:f7:4f: 69:fb:90:54:e1:ff:0b:5d:cf:2a:08:00:3a:ad:d4:5b:30:e8: 4c:47:78:17:5b:b8:c0:97:97:d5:7e:2f:f4:37:a1:79:b4:86: ce:51:33:54:57:46:48:ac:45:e0:f8:26:c0:5e:7e:96:c8:39: 45:63:04:91:3d:df:02:d5:02:f5:97:5b:6b:81:c7:31:31:8b: 14:1c:34:75:34:97:79:5b:34:da:b8:93:2d:13:06:50:68:95: 50:eb:91:f5:25:a9:28:e8:a7:ef:7e:a3:d7:8b:71:10:4b:aa: da:01:c1:7d:86:2e:1a:4b:3e:a4:3c:af:62:b7:02:56:20:11: cf:77:5b:e4:98:67:0b:2f:d3:e6:28:5e:0e:bb:37:71:72:dc: 4b:7b:cc:b7:3f:6f:d0:12:56:ad:45:dd:ea:64:30:4c:bf:09: 47:48:bb:67:0a:be:1e:41:46:bd:90:76:33:07:dd:5a:58:b8: f3:77:aa:15 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMSsAT4xn61eNhwSIPip0hVfo5KEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNTEwMDMwMzU3MjVaFw0yNjEwMDIwNDAyMjVaMDMxMTAvBgNV BAMTKEM5MEE2ODQzNUYyRUNGRTlDMjMyNDczOTE1MUI3NUFBRDA3OURGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkqrLUMlR9Rzl67vtw6f6DbVx ltB+jx6vUX9SM80FH8DLPc5J/5FKj9h2v70dnlBqW7AcgoLnSAcne2Xwjq5bd6nb k0DdEtwp0dVFcTiEbICu5MmsWmwGIQUFDUl34oeQxJCYFj/wT7eA0kMx8c1rPmlv SBjTwdV+ZMogLSCd0jPaMaaqIOTNCCal1EBD0TFqSHIHchl308LHRm8RNScfgMEe cVujmnX5Q3RdCjtMZ8gK9PGNKjVytx2ZFzzN4xuPemzPNAGJml3ysEnKnkC2H32f 7aFz70ndAkTUtxSd5ZAwsPypBETy+fP0uTGaDzAcRMSuG+Z1s/lU30OoLiI/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyQpoQ18uz+nCMkc5FRt1qtB535QwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNWZkZjZjLTBkMDEtNDkyYi04 MDA0LWE0OGVlNWExMjQ3NC8wLzMyMzAzMjJlMzQzNzJlMzEzODM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyi+4MA0GCSqG SIb3DQEBCwUAA4IBAQCn4wn/NhbSVdmWQhAUYKUNWMRo83RrXDMnfZOy5Jz93VGC iWPY12V5oN/TVRK3L5WuYDTOuMyaUCrErJyiplTvcR7STbJS909p+5BU4f8LXc8q CAA6rdRbMOhMR3gXW7jAl5fVfi/0N6F5tIbOUTNUV0ZIrEXg+CbAXn6WyDlFYwSR Pd8C1QL1l1trgccxMYsUHDR1NJd5WzTauJMtEwZQaJVQ65H1Jako6KfvfqPXi3EQ S6raAcF9hi4aSz6kPK9itwJWIBHPd1vkmGcLL9PmKF4OuzdxctxLe8y3P2/QElat Rd3qZDBMvwlHSLtnCr4eQUa9kHYzB91aWLjzd6oV -----END CERTIFICATE-----Generated at Tue Nov 4 16:50:06 2025 by rpki-client