$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39332e302f32342d3234203d3e203233363935.roa File: 3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (raw, json) Hash identifier: HqyHWbtOd5kjnZpc1shELfkBvMAEJDpjVjZ/6MOE3xA= Subject key identifier: 3A:06:8C:A1:E4:E5:AF:59:64:6A:59:19:9D:F9:35:46:31:2B:B2:D5 Certificate issuer: /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Certificate serial: 1139094BE05013F4105FA436FAA05B7A1E25FC54 Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39332e302f32342d3234203d3e203233363935.roa Signing time: Tue 12 Aug 2025 04:02:26 +0000 ROA not before: Tue 12 Aug 2025 03:57:26 +0000 ROA not after: Tue 11 Aug 2026 04:02:26 +0000 asID: 23695 IP address blocks: 202.173.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:39:09:4b:e0:50:13:f4:10:5f:a4:36:fa:a0:5b:7a:1e:25:fc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C Validity Not Before: Aug 12 03:57:26 2025 GMT Not After : Aug 11 04:02:26 2026 GMT Subject: CN=3A068CA1E4E5AF59646A59199DF93546312BB2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:04:4a:1f:b9:8a:c9:b4:8d:38:0a:03:be: 1b:8b:cf:61:a7:cc:03:36:7c:20:df:b8:c4:55:4b: 2f:5d:be:1c:07:33:26:bb:21:57:21:74:e5:79:27: e8:eb:7c:05:e8:8a:0d:72:c4:2c:b3:17:de:79:41: 9b:96:fe:48:ea:97:e6:ee:02:c5:18:40:ed:0e:ee: 4a:0c:b5:90:4b:65:f3:cf:34:cb:6b:11:7e:99:b2: a9:be:2c:98:69:ae:10:a6:d5:da:f5:4d:58:42:ae: 42:6b:77:c4:66:46:88:06:7f:29:66:09:38:33:49: ae:6c:54:96:f2:63:4c:5e:89:a1:92:c9:a8:48:81: 2a:29:67:8f:33:7a:cf:71:cf:e8:cb:74:cf:03:28: 97:59:f8:ad:86:60:5d:5b:19:f0:af:e5:4a:46:0c: a9:7b:63:a0:6c:46:29:08:cf:96:b4:74:9c:fc:27: 45:bb:38:8d:7a:68:81:d2:df:f2:7a:e2:78:e3:89: 83:94:28:40:fe:8e:60:74:09:44:81:a8:8a:4b:a1: 70:c8:a0:d9:31:3d:a0:9e:65:2e:60:91:ce:8d:ba: 87:8f:6d:3b:1f:37:4e:6c:74:3e:56:34:27:a2:fa: 6e:18:1d:32:be:19:b2:82:ee:4d:68:c2:46:d6:d1: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:06:8C:A1:E4:E5:AF:59:64:6A:59:19:9D:F9:35:46:31:2B:B2:D5 X509v3 Authority Key Identifier: keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39332e302f32342d3234203d3e203233363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.93.0/24 Signature Algorithm: sha256WithRSAEncryption 90:75:d2:12:aa:6e:b1:be:06:c3:a6:40:38:6a:20:60:e4:b1: 55:bd:d4:ab:37:8f:8b:c8:d9:b4:1d:8b:c8:cf:8b:8b:44:84: b8:66:56:df:75:67:f6:ae:2c:09:a6:de:b3:11:c8:7e:e7:c8: 23:fb:ad:e2:0d:74:39:cd:98:29:7e:82:fd:fc:47:e5:f5:ed: 21:6e:30:d9:af:23:0f:c3:02:78:ed:19:ae:8b:f4:3b:02:90: f7:82:9f:4f:c0:05:08:f0:4f:ea:b7:b1:9e:e7:91:08:40:c7: e3:57:ac:42:f5:36:08:05:ba:e3:48:c1:39:78:31:36:ac:ac: 6c:76:5c:3b:32:1c:6f:63:55:a5:59:8e:fe:12:31:cb:1b:a2: ee:09:88:8c:b8:3b:69:21:aa:18:85:54:ea:ee:7b:12:76:48: de:37:28:8d:63:06:80:0a:99:cb:7a:ee:e8:1b:fb:6a:77:90: 26:e7:ce:98:53:37:69:bf:9d:dc:d5:08:68:82:ff:3e:b5:fb: a0:2c:90:cc:bb:36:dd:c6:ac:ad:89:fa:90:ad:ff:94:14:fe: 28:f1:20:4f:b2:ed:b1:bb:56:f7:27:07:6d:4a:f2:5b:44:41: 20:a3:40:53:dc:f5:1f:0e:ac:9f:72:a0:0e:eb:9e:5c:df:cc: 4f:07:c4:cd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUETkJS+BQE/QQX6Q2+qBbeh4l/FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRB RTRFMkQ4QzAeFw0yNTA4MTIwMzU3MjZaFw0yNjA4MTEwNDAyMjZaMDMxMTAvBgNV BAMTKDNBMDY4Q0ExRTRFNUFGNTk2NDZBNTkxOTlERjkzNTQ2MzEyQkIyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cgRKH7mKybSNOAoDvhuLz2Gn zAM2fCDfuMRVSy9dvhwHMya7IVchdOV5J+jrfAXoig1yxCyzF955QZuW/kjql+bu AsUYQO0O7koMtZBLZfPPNMtrEX6Zsqm+LJhprhCm1dr1TVhCrkJrd8RmRogGfylm CTgzSa5sVJbyY0xeiaGSyahIgSopZ48zes9xz+jLdM8DKJdZ+K2GYF1bGfCv5UpG DKl7Y6BsRikIz5a0dJz8J0W7OI16aIHS3/J64njjiYOUKED+jmB0CUSBqIpLoXDI oNkxPaCeZS5gkc6NuoePbTsfN05sdD5WNCei+m4YHTK+GbKC7k1owkbW0VyFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOgaMoeTlr1lkalkZnfk1RjErstUwHwYDVR0j BBgwFoAUQeCTJvaM4BE2NerK9ONzlK5OLYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjBmMmJkOS00MmFlLTQ0OWEtOGQ1Ny1iMjZkYTA0ZDdlZTEvMC80MUUwOTMyNkY2 OENFMDExMzYzNUVBQ0FGNEUzNzM5NEFFNEUyRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFFMDkzMjZGNjhDRTAxMTM2MzVFQUNBRjRFMzczOTRBRTRF MkQ4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04 ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzOTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtXTANBgkqhkiG 9w0BAQsFAAOCAQEAkHXSEqpusb4Gw6ZAOGogYOSxVb3UqzePi8jZtB2LyM+Li0SE uGZW33Vn9q4sCabesxHIfufII/ut4g10Oc2YKX6C/fxH5fXtIW4w2a8jD8MCeO0Z rov0OwKQ94KfT8AFCPBP6rexnueRCEDH41esQvU2CAW640jBOXgxNqysbHZcOzIc b2NVpVmO/hIxyxui7gmIjLg7aSGqGIVU6u57EnZI3jcojWMGgAqZy3ru6Bv7aneQ JufOmFM3ab+d3NUIaIL/PrX7oCyQzLs23casrYn6kK3/lBT+KPEgT7LtsbtW9ycH bUryW0RBIKNAU9z1Hw6sn3KgDuueXN/MTwfEzQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:06 2025 by rpki-client