$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: 8jqzos5S6OkN9Ee6v+YzMqAqC0wNC8Krr96CfUxfSYE= Subject key identifier: DD:EF:D9:99:D1:C1:D5:F4:67:5F:59:50:7F:46:07:C4:93:5B:F0:4C Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 272EE647DBA7A9F0AA4241CAF35A07584EA901CF Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa Signing time: Tue 12 Aug 2025 04:02:24 +0000 ROA not before: Tue 12 Aug 2025 03:57:24 +0000 ROA not after: Tue 11 Aug 2026 04:02:24 +0000 asID: 23695 IP address blocks: 202.173.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2e:e6:47:db:a7:a9:f0:aa:42:41:ca:f3:5a:07:58:4e:a9:01:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Aug 12 03:57:24 2025 GMT Not After : Aug 11 04:02:24 2026 GMT Subject: CN=DDEFD999D1C1D5F4675F59507F4607C4935BF04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:d1:b3:bc:20:98:d7:a1:af:7b:08:29:8a: 27:cb:79:cd:74:36:8e:79:f2:6e:bb:ce:ad:9b:19: f0:80:57:40:ef:05:4f:83:f9:a6:eb:9d:ad:cc:53: 93:30:eb:f7:0a:1a:86:9b:0c:85:83:8b:6a:95:08: ae:d4:49:7b:74:16:2a:49:98:e7:52:b8:5b:22:b9: b0:e5:a4:ff:82:53:08:47:57:89:c5:e2:6c:7a:90: b0:d3:00:7a:16:2a:05:16:19:b1:82:ee:45:88:29: 9b:ac:32:66:9f:04:74:d6:d3:73:09:b3:fc:a3:71: 20:cd:31:ab:1b:22:f0:28:35:b2:ed:3f:89:33:3c: 28:ca:a8:bc:1a:7d:0b:6e:b4:a2:df:0b:11:45:2e: e7:81:25:81:42:70:77:33:48:1b:8e:1d:3a:90:d9: 1d:5e:07:71:d8:06:8b:dc:0b:c2:46:b1:18:45:6e: 47:f5:de:35:71:fe:c7:1a:0f:c0:3d:8e:0c:76:42: 72:98:6b:fc:97:8c:95:64:cd:87:2d:c1:40:5d:32: 33:67:44:ee:20:b8:85:8c:3f:37:ae:80:69:ae:74: 53:21:7a:81:50:5d:f6:80:03:e2:2e:4c:87:4c:32: d4:d8:43:48:d2:6a:dc:50:9b:13:6f:ca:25:4f:b1: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EF:D9:99:D1:C1:D5:F4:67:5F:59:50:7F:46:07:C4:93:5B:F0:4C X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.66.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ec:68:3f:6f:2c:95:30:40:63:b1:46:f4:46:9f:7d:98:de: 91:63:41:53:74:00:fd:6f:4f:e8:7e:f2:28:17:23:56:c5:63: b2:d3:22:64:df:a3:6c:b5:36:d1:bc:bb:5c:e0:42:d7:86:a6: 8b:6e:72:91:2f:52:8c:8e:c8:6a:e0:46:fd:b6:a9:62:67:ec: a9:0e:cc:a5:da:b8:39:fa:33:2c:df:b4:6c:7e:c8:4a:db:68: 8a:2e:43:2e:b1:5f:b6:95:6a:f6:fc:2c:e0:0a:01:46:da:bd: a2:9d:70:6e:79:a4:66:ed:10:cf:05:67:65:78:89:c1:7e:7e: 90:ce:f7:3f:8d:00:1f:88:ef:47:8c:40:0f:60:cf:a5:b0:06: 9c:0d:1b:e7:da:6b:9f:71:53:d9:25:c3:08:b0:68:7b:b8:61: 51:a8:e4:19:a2:a5:f8:bf:28:fb:09:2b:76:6d:34:a6:48:24: cd:ca:02:ed:a6:d2:f4:fb:ab:8d:ff:b3:e7:b9:33:af:3f:3e: a2:23:e1:d4:5c:a6:34:99:a4:d6:5c:6f:52:d6:12:7a:97:a1: 14:55:8a:2c:c9:2f:32:a8:a2:f2:51:49:d3:d7:ba:59:44:c3: 85:ae:fc:e2:e8:7d:d8:e9:21:4a:28:9a:04:32:b6:c3:d7:1d: cf:ea:38:d7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJy7mR9unqfCqQkHK81oHWE6pAc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA4MTIwMzU3MjRaFw0yNjA4MTEwNDAyMjRaMDMxMTAvBgNV BAMTKERERUZEOTk5RDFDMUQ1RjQ2NzVGNTk1MDdGNDYwN0M0OTM1QkYwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLx9GzvCCY16GvewgpiifLec10 No558m67zq2bGfCAV0DvBU+D+abrna3MU5Mw6/cKGoabDIWDi2qVCK7USXt0FipJ mOdSuFsiubDlpP+CUwhHV4nF4mx6kLDTAHoWKgUWGbGC7kWIKZusMmafBHTW03MJ s/yjcSDNMasbIvAoNbLtP4kzPCjKqLwafQtutKLfCxFFLueBJYFCcHczSBuOHTqQ 2R1eB3HYBovcC8JGsRhFbkf13jVx/scaD8A9jgx2QnKYa/yXjJVkzYctwUBdMjNn RO4guIWMPzeugGmudFMheoFQXfaAA+IuTIdMMtTYQ0jSatxQmxNvyiVPsbvjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU3e/ZmdHB1fRnX1lQf0YHxJNb8EwwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtQjANBgkqhkiG 9w0BAQsFAAOCAQEAB+xoP28slTBAY7FG9EaffZjekWNBU3QA/W9P6H7yKBcjVsVj stMiZN+jbLU20by7XOBC14ami25ykS9SjI7IauBG/bapYmfsqQ7Mpdq4OfozLN+0 bH7ISttoii5DLrFftpVq9vws4AoBRtq9op1wbnmkZu0QzwVnZXiJwX5+kM73P40A H4jvR4xAD2DPpbAGnA0b59prn3FT2SXDCLBoe7hhUajkGaKl+L8o+wkrdm00pkgk zcoC7abS9Purjf+z57kzrz8+oiPh1FymNJmk1lxvUtYSepehFFWKLMkvMqii8lFJ 09e6WUTDha784uh92OkhSiiaBDK2w9cdz+o41w== -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:08 2025 by rpki-client