$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38322e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: 9TJpLgLS7LUO5wsdFqczCLAa4nlbwR69+ZuGz4M7mRY= Subject key identifier: AE:3A:97:42:AA:4B:93:E4:CF:18:00:65:C1:EC:71:DB:76:60:D4:7C Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 08EB2E1DA35E8D6AE08611BFC4B44147EC30C3D9 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38322e302f32342d3234203d3e203233363935.roa Signing time: Tue 19 Aug 2025 17:00:01 +0000 ROA not before: Tue 19 Aug 2025 16:55:01 +0000 ROA not after: Tue 18 Aug 2026 17:00:01 +0000 asID: 23695 IP address blocks: 202.173.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:eb:2e:1d:a3:5e:8d:6a:e0:86:11:bf:c4:b4:41:47:ec:30:c3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Aug 19 16:55:01 2025 GMT Not After : Aug 18 17:00:01 2026 GMT Subject: CN=AE3A9742AA4B93E4CF180065C1EC71DB7660D47C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:e6:7b:c2:a7:5b:1d:a7:07:37:4d:eb:da: fa:d9:95:f1:fd:e5:38:4c:a7:a7:1d:8a:f0:9d:8f: b0:0d:af:57:98:a4:36:30:4c:a3:73:2d:22:47:77: 7e:28:e3:1c:c9:13:64:2d:a3:7e:ae:91:a3:ca:bf: 4b:f4:e6:61:49:c2:73:71:9d:e0:50:94:3b:63:a3: a5:cf:f6:61:f9:e0:f4:71:7e:e1:ab:2a:7c:4b:4f: 6e:a7:6d:51:58:a5:61:fe:fa:9a:31:ad:3b:19:54: d2:28:c0:c1:41:c4:9c:9f:35:2f:97:dd:68:b0:72: f1:93:07:32:27:ef:cf:74:8c:b3:60:25:90:3b:3b: 79:f3:3e:ec:f2:7d:55:3b:ee:40:6c:b5:47:75:ed: 38:46:c9:dd:6c:f8:97:4e:eb:ae:04:25:a5:5c:20: 76:fc:bd:ef:93:79:4e:66:95:73:a2:2b:e4:1e:b2: 6c:9c:6f:24:7f:d7:ae:30:2e:05:3a:2d:24:44:af: d2:09:7e:97:8c:fb:f8:d8:ab:11:74:fd:61:65:be: c1:e9:81:53:56:b9:e9:b6:52:01:1c:16:71:14:58: 1f:15:51:aa:e4:40:bb:90:47:dd:b3:24:78:19:cd: 5b:30:63:0c:de:78:17:55:17:75:95:39:3e:c3:ca: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3A:97:42:AA:4B:93:E4:CF:18:00:65:C1:EC:71:DB:76:60:D4:7C X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38322e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.82.0/24 Signature Algorithm: sha256WithRSAEncryption 91:35:f6:b0:37:95:fd:e4:61:16:09:29:f2:82:a7:cd:5c:c5: 8e:64:50:41:ad:49:a1:87:40:a0:aa:97:e7:9b:13:67:6a:0d: 9d:01:1c:d8:7c:22:98:55:d6:15:58:2d:b9:bd:56:fe:a0:40: 9a:5e:cb:0f:dc:db:bb:03:3e:42:6d:0c:c1:79:11:c0:ff:25: e2:5e:89:b9:8b:f7:21:b5:98:67:eb:25:5c:a1:3f:e3:13:1e: 85:9c:6b:56:0e:91:aa:7d:4d:c9:5b:a8:67:f5:ec:ac:fa:58: ea:14:b4:de:1f:3e:fd:f7:fe:77:32:79:61:5d:aa:85:65:62: a3:1b:30:14:e8:b1:5d:6a:83:43:82:01:88:38:51:5a:cc:46: f5:4f:1b:08:6d:f3:2c:fa:7b:20:64:bd:8a:1c:5c:af:45:1a: 83:f4:61:7c:e2:a3:ff:1c:6f:d0:b2:b8:60:a2:da:c6:41:97: 86:d1:ba:3c:c4:f3:5c:aa:c5:4b:dd:6a:34:32:2d:c2:45:da: c9:b6:20:00:d8:e5:82:ac:fc:a2:51:71:b8:d7:d0:f2:fa:40: a5:25:c7:12:12:91:46:0c:de:c0:f9:88:56:2f:35:b4:60:42: c2:27:02:ec:cb:b7:3a:6f:0b:c0:4e:c2:ce:2b:9d:20:ec:e1: 8c:42:d2:12 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCOsuHaNejWrghhG/xLRBR+www9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA4MTkxNjU1MDFaFw0yNjA4MTgxNzAwMDFaMDMxMTAvBgNV BAMTKEFFM0E5NzQyQUE0QjkzRTRDRjE4MDA2NUMxRUM3MURCNzY2MEQ0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJOZ7wqdbHacHN03r2vrZlfH9 5ThMp6cdivCdj7ANr1eYpDYwTKNzLSJHd34o4xzJE2Qto36ukaPKv0v05mFJwnNx neBQlDtjo6XP9mH54PRxfuGrKnxLT26nbVFYpWH++poxrTsZVNIowMFBxJyfNS+X 3WiwcvGTBzIn7890jLNgJZA7O3nzPuzyfVU77kBstUd17ThGyd1s+JdO664EJaVc IHb8ve+TeU5mlXOiK+QesmycbyR/164wLgU6LSREr9IJfpeM+/jYqxF0/WFlvsHp gVNWuem2UgEcFnEUWB8VUarkQLuQR92zJHgZzVswYwzeeBdVF3WVOT7DyivnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUrjqXQqpLk+TPGABlwexx23Zg1HwwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzODMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtUjANBgkqhkiG 9w0BAQsFAAOCAQEAkTX2sDeV/eRhFgkp8oKnzVzFjmRQQa1JoYdAoKqX55sTZ2oN nQEc2HwimFXWFVgtub1W/qBAml7LD9zbuwM+Qm0MwXkRwP8l4l6JuYv3IbWYZ+sl XKE/4xMehZxrVg6Rqn1NyVuoZ/XsrPpY6hS03h8+/ff+dzJ5YV2qhWVioxswFOix XWqDQ4IBiDhRWsxG9U8bCG3zLPp7IGS9ihxcr0Uag/RhfOKj/xxv0LK4YKLaxkGX htG6PMTzXKrFS91qNDItwkXaybYgANjlgqz8olFxuNfQ8vpApSXHEhKRRgzewPmI Vi81tGBCwicC7Mu3Om8LwE7CziudIOzhjELSEg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:15 2025 by rpki-client