$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37312e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: HSD+rz78f30+7qMkNj8RIXAP7toiDue03fxCDLpd1gQ= Subject key identifier: EA:DE:28:D4:63:2A:0D:0F:F6:25:40:A5:6F:5A:2A:7F:00:B4:4C:16 Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 41B6D06FAEF762D4A127CA760B38FA8DAADEA621 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37312e302f32342d3234203d3e203233363935.roa Signing time: Wed 30 Jul 2025 04:02:55 +0000 ROA not before: Wed 30 Jul 2025 03:57:55 +0000 ROA not after: Wed 29 Jul 2026 04:02:55 +0000 asID: 23695 IP address blocks: 202.173.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b6:d0:6f:ae:f7:62:d4:a1:27:ca:76:0b:38:fa:8d:aa:de:a6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Jul 30 03:57:55 2025 GMT Not After : Jul 29 04:02:55 2026 GMT Subject: CN=EADE28D4632A0D0FF62540A56F5A2A7F00B44C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:b4:74:c5:9a:0c:49:fd:75:50:72:f4:a8: 39:0b:26:0f:37:06:d7:0c:f6:97:fe:13:d2:07:05: 5d:eb:84:60:7b:76:9c:c1:3a:c0:4c:5c:8a:9c:a5: ec:b5:b0:b0:f0:4b:eb:10:fc:91:85:65:96:6d:e2: 81:de:03:24:cc:92:9a:44:1c:84:ef:18:f5:3e:95: 5e:cc:17:6b:9e:a1:6a:6d:0d:ff:01:ed:da:00:61: 09:79:ca:30:eb:d0:de:49:e7:46:20:66:31:8a:77: 9a:7e:ea:f3:f5:10:37:2e:08:e4:e9:9d:26:5c:0a: 19:86:41:e4:fc:1b:33:96:4c:fb:0c:d1:ee:17:3a: fc:a9:6f:24:3a:de:12:c0:15:fb:2a:52:b1:a9:f1: 07:78:7f:24:18:ab:e5:99:4e:76:65:66:c8:b2:8a: 8c:0c:a3:00:90:97:08:f8:fa:c5:1e:ca:12:35:58: ba:60:08:59:0a:6a:f3:c5:87:0b:24:22:bf:2f:aa: 08:2d:70:d6:83:37:61:f0:a0:29:dc:86:1c:98:b3: 73:d0:63:7d:1b:4b:5a:7a:b9:d4:33:f0:2d:91:4f: 8d:ce:94:58:f7:84:8d:77:87:7e:23:f9:5d:dc:f6: 7f:27:c0:fd:2c:77:f9:78:ee:60:66:57:e4:24:bb: fe:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DE:28:D4:63:2A:0D:0F:F6:25:40:A5:6F:5A:2A:7F:00:B4:4C:16 X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37312e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.71.0/24 Signature Algorithm: sha256WithRSAEncryption 75:c2:4a:aa:cd:ee:8a:e6:0a:89:98:37:3b:7e:eb:d3:f5:07: db:b1:99:69:8c:82:14:0f:78:9a:1a:37:1f:50:bd:93:f4:5c: 1f:62:16:b5:c9:ff:c2:bb:79:be:9a:fc:ca:90:7d:6e:03:fe: b8:39:db:73:1e:47:e1:30:c8:4f:7b:bd:9c:a2:a5:4e:dd:5b: 33:70:ee:78:64:26:df:ca:40:a1:e7:91:35:ff:5b:9a:dc:cc: 3b:7d:9d:37:18:85:f4:31:db:5f:f6:0f:05:1a:c5:bf:34:7b: 59:8b:68:eb:c1:a0:a4:fa:c3:f1:6d:5e:cf:ff:18:86:5b:71: 4b:8a:06:3d:57:ac:0b:64:73:5f:f2:19:de:7b:dc:f7:11:e3: 57:3e:46:4f:1d:82:0e:5f:d1:6e:1e:8c:03:aa:7c:16:a8:8b: d6:90:e7:62:39:80:50:66:99:dc:af:29:99:a3:f6:5e:d5:05: e0:ed:f9:76:84:0a:b7:48:ee:ce:f0:ce:4b:4b:c0:4c:53:38: fc:1b:ab:0e:fe:59:18:40:e0:8f:43:fa:0c:21:ec:b8:49:5c: 8c:b4:e8:e7:2e:8b:87:eb:fb:8c:16:3a:49:59:a8:85:fa:f9: 3a:e0:ee:42:35:db:f0:00:8e:69:d9:d1:a7:8e:0f:c5:27:34: 4e:69:a1:86 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQbbQb673YtShJ8p2Czj6jarepiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA3MzAwMzU3NTVaFw0yNjA3MjkwNDAyNTVaMDMxMTAvBgNV BAMTKEVBREUyOEQ0NjMyQTBEMEZGNjI1NDBBNTZGNUEyQTdGMDBCNDRDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhLR0xZoMSf11UHL0qDkLJg83 BtcM9pf+E9IHBV3rhGB7dpzBOsBMXIqcpey1sLDwS+sQ/JGFZZZt4oHeAyTMkppE HITvGPU+lV7MF2ueoWptDf8B7doAYQl5yjDr0N5J50YgZjGKd5p+6vP1EDcuCOTp nSZcChmGQeT8GzOWTPsM0e4XOvypbyQ63hLAFfsqUrGp8Qd4fyQYq+WZTnZlZsiy iowMowCQlwj4+sUeyhI1WLpgCFkKavPFhwskIr8vqggtcNaDN2HwoCnchhyYs3PQ Y30bS1p6udQz8C2RT43OlFj3hI13h34j+V3c9n8nwP0sd/l47mBmV+Qku/61AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6t4o1GMqDQ/2JUClb1oqfwC0TBYwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtRzANBgkqhkiG 9w0BAQsFAAOCAQEAdcJKqs3uiuYKiZg3O37r0/UH27GZaYyCFA94mho3H1C9k/Rc H2IWtcn/wrt5vpr8ypB9bgP+uDnbcx5H4TDIT3u9nKKlTt1bM3DueGQm38pAoeeR Nf9bmtzMO32dNxiF9DHbX/YPBRrFvzR7WYto68GgpPrD8W1ez/8YhltxS4oGPVes C2RzX/IZ3nvc9xHjVz5GTx2CDl/Rbh6MA6p8FqiL1pDnYjmAUGaZ3K8pmaP2XtUF 4O35doQKt0juzvDOS0vATFM4/BurDv5ZGEDgj0P6DCHsuElcjLTo5y6Lh+v7jBY6 SVmohfr5OuDuQjXb8ACOadnRp44PxSc0Tmmhhg== -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:05 2025 by rpki-client