$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa File: 3230332e3136312e31362e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: 5Sf6B0iCZaKlFZOfJmWn8Cfgb0P7lnHLnPgfB8Z+qoc= Subject key identifier: 32:1B:8A:D8:99:23:47:23:58:CD:DE:FD:DD:55:AB:F9:F0:98:0F:28 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 63BFAEFFE55CCD489BA54033856442F9D89823F1 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa Signing time: Thu 17 Jul 2025 04:03:23 +0000 ROA not before: Thu 17 Jul 2025 03:58:23 +0000 ROA not after: Thu 16 Jul 2026 04:03:23 +0000 asID: 55685 IP address blocks: 203.161.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bf:ae:ff:e5:5c:cd:48:9b:a5:40:33:85:64:42:f9:d8:98:23:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Jul 17 03:58:23 2025 GMT Not After : Jul 16 04:03:23 2026 GMT Subject: CN=321B8AD89923472358CDDEFDDD55ABF9F0980F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:79:d0:b3:b2:19:fa:53:99:9f:01:90:61: 46:09:98:74:b2:ea:22:a7:16:d1:d7:ae:c1:71:db: 9f:42:20:72:41:5c:1e:b2:04:fe:b9:75:f0:2a:d2: 88:a0:a3:90:cc:57:77:e1:0d:8c:61:5e:be:7e:e3: 3f:27:1c:90:1e:a9:18:c3:74:1d:b0:e6:25:bf:52: 62:73:0d:e1:78:4f:d2:95:c9:2b:8b:a5:0e:3a:d4: b6:13:71:d1:5d:ca:84:6e:1d:64:1b:03:6c:02:d3: b0:07:ba:fa:3a:45:60:c8:5c:cc:b7:1f:00:af:26: 62:96:24:4d:a0:97:26:64:17:00:56:97:6d:21:02: 60:ac:ea:23:ce:0c:65:fc:4f:d8:d2:34:34:24:a6: c3:a5:81:83:54:74:50:4c:4c:0d:45:a0:59:9e:6a: c3:31:63:9e:03:b6:38:23:25:1e:cd:0a:00:c9:3a: bc:c4:2b:ef:21:68:ba:5e:ae:49:d1:93:4c:dc:67: a7:e1:6e:59:2c:25:42:1a:67:9d:99:38:bf:a4:37: 9e:38:b6:cd:42:ec:a3:95:a4:08:cc:f9:4c:ed:e1: 18:bd:e2:fe:3c:f5:19:23:e5:cb:35:9f:a0:0d:ef: f6:92:97:e2:1b:f9:74:78:f8:32:f5:85:e1:e5:0d: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1B:8A:D8:99:23:47:23:58:CD:DE:FD:DD:55:AB:F9:F0:98:0F:28 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.16.0/24 Signature Algorithm: sha256WithRSAEncryption 52:dc:62:26:51:5e:5b:81:1b:09:66:17:f2:73:3b:33:fd:a0: b6:5a:c6:29:90:ae:96:2b:22:4d:92:fb:07:c8:1f:be:12:41: 88:7a:43:dc:76:73:3f:28:56:b9:26:b3:bd:8c:4b:9a:b6:8f: ec:6d:65:ce:7d:79:d9:39:23:c6:e7:1c:1d:02:16:18:75:ca: e5:8b:8b:af:c9:a1:7d:cd:ae:33:6d:ba:f9:7d:72:26:7d:9e: b1:34:73:1e:06:f6:f8:08:9b:58:28:b4:2c:42:05:6c:bc:fd: 90:3d:46:7d:b6:c7:14:70:96:02:dc:3a:96:7b:c6:5a:38:80: 8b:30:99:1c:79:dd:e5:af:b0:0e:24:af:a7:ef:a0:b4:eb:bb: 58:da:08:e7:1d:fe:50:fb:5b:91:9d:4c:09:68:0a:ef:40:1f: 38:a8:cb:6a:c3:0d:fd:5c:34:71:41:a6:b4:58:5b:21:5e:54: 1f:4c:06:90:bf:b9:d4:63:09:60:ff:95:8e:c0:8a:bc:45:f1: 4d:c3:96:22:d9:d5:59:fc:e8:e7:32:2d:a2:2d:d9:b3:e5:ad: 0c:bd:01:cc:c7:20:3a:ad:00:e4:f1:37:46:45:5f:86:0a:6d: f8:c8:2c:50:47:b0:9f:46:b4:d8:ac:40:5d:fe:0b:8a:e0:f6: 29:85:a4:78 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUY7+u/+VczUibpUAzhWRC+diYI/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTA3MTcwMzU4MjNaFw0yNjA3MTYwNDAzMjNaMDMxMTAvBgNV BAMTKDMyMUI4QUQ4OTkyMzQ3MjM1OENEREVGRERENTVBQkY5RjA5ODBGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfnnQs7IZ+lOZnwGQYUYJmHSy 6iKnFtHXrsFx259CIHJBXB6yBP65dfAq0oigo5DMV3fhDYxhXr5+4z8nHJAeqRjD dB2w5iW/UmJzDeF4T9KVySuLpQ461LYTcdFdyoRuHWQbA2wC07AHuvo6RWDIXMy3 HwCvJmKWJE2glyZkFwBWl20hAmCs6iPODGX8T9jSNDQkpsOlgYNUdFBMTA1FoFme asMxY54DtjgjJR7NCgDJOrzEK+8haLperknRk0zcZ6fhblksJUIaZ52ZOL+kN544 ts1C7KOVpAjM+Uzt4Ri94v489Rkj5cs1n6AN7/aSl+Ib+XR4+DL1heHlDYYNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMhuK2JkjRyNYzd793VWr+fCYDygwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMzJlMzEzNjMxMmUzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuhEDANBgkqhkiG 9w0BAQsFAAOCAQEAUtxiJlFeW4EbCWYX8nM7M/2gtlrGKZCulisiTZL7B8gfvhJB iHpD3HZzPyhWuSazvYxLmraP7G1lzn152TkjxuccHQIWGHXK5YuLr8mhfc2uM226 +X1yJn2esTRzHgb2+AibWCi0LEIFbLz9kD1GfbbHFHCWAtw6lnvGWjiAizCZHHnd 5a+wDiSvp++gtOu7WNoI5x3+UPtbkZ1MCWgK70AfOKjLasMN/Vw0cUGmtFhbIV5U H0wGkL+51GMJYP+VjsCKvEXxTcOWItnVWfzo5zItoi3Zs+WtDL0BzMcgOq0A5PE3 RkVfhgpt+MgsUEewn0a02KxAXf4LiuD2KYWkeA== -----END CERTIFICATE-----Generated at Thu Aug 7 20:21:06 2025 by rpki-client