$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e20313339393732.roa File: 3230322e34372e36372e302f32342d3234203d3e20313339393732.roa (raw, json) Hash identifier: vaQrEnH5vf6cf1uIaBJSWFc5DLz4UCNc+eGkZ94HH38= Subject key identifier: EA:81:67:AE:01:71:56:AE:0D:E7:35:23:D4:CB:6B:8B:16:37:E2:3C Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 689950911092BD5D93B6499A39224F7DE0C1DDDC Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e20313339393732.roa Signing time: Tue 28 Oct 2025 03:02:25 +0000 ROA not before: Tue 28 Oct 2025 02:57:25 +0000 ROA not after: Tue 27 Oct 2026 03:02:25 +0000 asID: 139972 IP address blocks: 202.47.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:99:50:91:10:92:bd:5d:93:b6:49:9a:39:22:4f:7d:e0:c1:dd:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: Oct 28 02:57:25 2025 GMT Not After : Oct 27 03:02:25 2026 GMT Subject: CN=EA8167AE017156AE0DE73523D4CB6B8B1637E23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:40:df:a0:a0:c6:f3:ec:dc:19:13:55:5f: f5:9f:26:cd:c2:c6:24:b5:91:60:64:d2:6a:a4:f3: c5:e0:1a:8f:66:ac:aa:21:54:85:97:5e:d4:f7:6c: 57:7f:94:be:77:93:82:29:42:ae:fb:15:67:1e:70: 14:75:ab:90:36:6c:ed:6c:a3:8a:37:98:05:8d:cf: b4:00:6d:eb:31:a6:04:97:5d:3a:fc:e4:93:34:4b: 77:d9:ca:e7:7c:56:e0:a4:86:5c:b7:de:63:93:26: 30:00:27:11:d5:96:b7:62:4c:54:46:88:87:90:56: 71:48:0f:52:5d:93:17:42:94:1c:c0:68:bc:f6:45: 47:5b:70:1e:29:dd:fb:44:74:3e:95:03:f5:03:1a: 90:29:33:79:6b:1d:b0:33:f3:36:61:18:79:c7:a2: 36:f9:7b:d9:cf:a1:61:b2:19:b5:1d:20:11:7a:d8: 4a:5e:29:61:e0:0e:da:f1:b7:04:2a:54:25:31:20: 57:fd:e6:49:ba:8f:3e:35:b3:f5:ae:1b:32:2a:b9: 56:b5:1e:02:46:68:f8:3e:13:33:d1:e4:63:4b:a7: 2c:3e:07:64:a5:2f:fd:e1:a4:ee:e7:9f:be:73:e5: 25:b4:cd:4b:70:b9:95:76:7a:25:bc:2c:37:19:05: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:67:AE:01:71:56:AE:0D:E7:35:23:D4:CB:6B:8B:16:37:E2:3C X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36372e302f32342d3234203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.67.0/24 Signature Algorithm: sha256WithRSAEncryption 14:3b:50:da:9d:6c:d7:40:e1:3f:6a:83:a2:f7:6c:9f:28:70: 87:9c:b8:69:33:1e:ec:cf:c4:7c:e7:53:1b:eb:22:95:ee:b3: ff:59:bf:63:9b:82:41:54:51:f0:84:a6:90:9e:44:e9:1d:e7: da:cf:c1:f7:bc:60:7f:9b:c9:1a:32:2d:2f:df:db:cd:ae:5a: 7b:19:bb:75:05:d5:80:72:d7:6c:3e:e3:d7:17:4c:21:6f:7d: 76:71:8b:1f:c7:6b:bb:d4:84:44:ec:08:c2:1d:a1:dd:c1:30: 2d:3c:6d:8f:72:ea:53:91:be:b3:77:39:18:38:fe:f7:0d:3e: 88:a7:3e:59:5e:cc:54:96:20:7c:9b:a2:43:cf:c6:03:19:d5: 19:c1:f0:80:8b:a0:16:83:f5:ba:0f:3c:8c:70:6c:92:0e:b1: 11:ef:45:a2:8d:ed:e6:bc:91:09:1e:7e:b4:85:df:13:5d:36: 93:e2:46:54:65:08:29:4c:8e:47:52:28:b1:0c:1f:9c:30:ec: fa:c2:ac:f8:cd:fe:36:58:21:aa:19:f6:52:db:5d:38:c8:6d: 9e:ff:7f:1d:a5:41:f5:eb:77:ea:50:5f:a2:75:4d:b2:b9:d6: e8:b1:ab:d9:0a:aa:5b:0c:ef:b4:7b:6b:03:7e:39:35:50:f4: 3c:b0:53:b3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaJlQkRCSvV2TtkmaOSJPfeDB3dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTEwMjgwMjU3MjVaFw0yNjEwMjcwMzAyMjVaMDMxMTAvBgNV BAMTKEVBODE2N0FFMDE3MTU2QUUwREU3MzUyM0Q0Q0I2QjhCMTYzN0UyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDkDfoKDG8+zcGRNVX/WfJs3C xiS1kWBk0mqk88XgGo9mrKohVIWXXtT3bFd/lL53k4IpQq77FWcecBR1q5A2bO1s o4o3mAWNz7QAbesxpgSXXTr85JM0S3fZyud8VuCkhly33mOTJjAAJxHVlrdiTFRG iIeQVnFID1JdkxdClBzAaLz2RUdbcB4p3ftEdD6VA/UDGpApM3lrHbAz8zZhGHnH ojb5e9nPoWGyGbUdIBF62EpeKWHgDtrxtwQqVCUxIFf95km6jz41s/WuGzIquVa1 HgJGaPg+EzPR5GNLpyw+B2SlL/3hpO7nn75z5SW0zUtwuZV2eiW8LDcZBYEhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6oFnrgFxVq4N5zUj1MtrixY34jwwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMovQzANBgkqhkiG 9w0BAQsFAAOCAQEAFDtQ2p1s10DhP2qDovdsnyhwh5y4aTMe7M/EfOdTG+sile6z /1m/Y5uCQVRR8ISmkJ5E6R3n2s/B97xgf5vJGjItL9/bza5aexm7dQXVgHLXbD7j 1xdMIW99dnGLH8dru9SEROwIwh2h3cEwLTxtj3LqU5G+s3c5GDj+9w0+iKc+WV7M VJYgfJuiQ8/GAxnVGcHwgIugFoP1ug88jHBskg6xEe9Foo3t5ryRCR5+tIXfE102 k+JGVGUIKUyOR1IosQwfnDDs+sKs+M3+Nlghqhn2UttdOMhtnv9/HaVB9et36lBf onVNsrnW6LGr2QqqWwzvtHtrA345NVD0PLBTsw== -----END CERTIFICATE-----Generated at Wed Nov 5 22:12:23 2025 by rpki-client