$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa File: 3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: DoP/aUwAimGpRleEX7aBuWS+d7HXnrkI1SMe0W5vLKQ= Subject key identifier: 2D:AA:21:4E:A1:AB:C2:B3:84:9B:BA:6B:EA:AF:3A:53:F0:2E:0C:C6 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 1CB3F7F8281812E253590DE7D389D722FD84B8C9 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 06:00:01 +0000 ROA not before: Fri 26 Sep 2025 05:55:01 +0000 ROA not after: Fri 25 Sep 2026 06:00:01 +0000 asID: 18059 IP address blocks: 203.134.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b3:f7:f8:28:18:12:e2:53:59:0d:e7:d3:89:d7:22:fd:84:b8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 05:55:01 2025 GMT Not After : Sep 25 06:00:01 2026 GMT Subject: CN=2DAA214EA1ABC2B3849BBA6BEAAF3A53F02E0CC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:71:a5:73:57:5f:c2:99:86:ba:a3:d2:f8:b6: 8f:c5:9f:52:42:d5:ba:85:89:f9:6f:2f:21:08:df: fc:65:a2:d0:4b:2c:a9:d0:59:ec:aa:73:d5:72:9e: 24:76:2b:10:3f:f4:db:ab:04:1e:a6:fe:07:0e:22: 47:6e:7c:ac:0e:64:e7:c3:e9:0a:ed:97:47:f9:6e: 43:c7:47:66:58:c0:29:4e:0c:88:68:33:45:fc:dd: 6c:94:a2:b1:ff:4d:31:b8:91:82:ac:a9:3b:f7:64: ad:a6:13:54:70:67:a3:9e:ac:6e:76:ac:fc:e9:1a: ef:6a:00:dc:f4:b3:d1:cf:7a:e2:6e:e6:41:e2:0c: 04:72:ca:12:b1:93:d5:89:d0:be:7c:69:4a:98:00: ac:7b:9f:6c:cf:f3:86:03:16:f2:2f:5e:a5:7f:d8: 29:d4:b2:91:4c:f8:2a:44:01:4b:76:0b:19:f1:4e: f6:db:b7:e7:e5:db:f1:48:63:af:e9:01:19:3a:3b: 55:4f:02:c6:04:68:34:e5:f4:35:c6:5f:2b:c6:ed: e7:8b:6d:66:38:ef:1d:63:3c:79:4e:2f:ea:15:d5: b4:4d:54:35:be:9c:00:f9:b5:3f:fb:cc:bf:77:72: 32:ba:01:c5:98:30:8f:94:b2:70:ea:0c:3a:6f:26: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AA:21:4E:A1:AB:C2:B3:84:9B:BA:6B:EA:AF:3A:53:F0:2E:0C:C6 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.134.233.0/24 Signature Algorithm: sha256WithRSAEncryption 54:b2:78:b7:a4:57:72:93:ae:ab:af:59:21:d5:28:aa:76:76: 39:4e:b2:09:f7:91:41:06:49:14:00:30:d8:30:21:3a:b9:f5: 46:80:56:9a:26:65:70:68:d8:1c:6b:58:f2:eb:b0:6d:e9:23: 3e:d5:c7:6d:a3:04:4b:11:f9:95:52:6a:79:eb:65:69:ef:25: 88:58:7b:bc:b0:b7:53:fa:4f:b1:28:a2:73:ea:e8:ed:96:d2: ce:86:36:7c:c5:a4:52:38:f9:b0:37:b3:f1:0e:e3:a0:c4:c6: e2:ae:45:5c:74:a7:8b:9d:e4:7e:12:08:b8:5a:06:2e:96:5b: 7a:8d:a1:85:d8:f5:8e:4c:b4:de:32:a1:d0:26:62:17:98:d0: 1f:fc:6a:da:b0:57:c8:64:39:42:c8:fe:a7:a4:ed:d0:ae:e8: bb:56:69:77:3a:b7:b4:87:9f:e8:32:bc:11:f8:8e:a2:63:e8: 6b:8c:84:e5:82:84:7b:a3:44:83:be:dd:27:fb:f6:93:39:1a: 31:59:4c:c3:de:61:85:0b:e2:a4:b4:10:e5:0f:f3:1f:97:e9: 52:54:64:e0:58:1c:99:3a:b8:13:86:6a:90:42:98:2c:9f:86: 32:26:03:e1:e5:90:13:aa:a5:fb:10:a0:a7:08:20:8d:2d:fe: 4a:5c:1d:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHLP3+CgYEuJTWQ3n04nXIv2EuMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwNTU1MDFaFw0yNjA5MjUwNjAwMDFaMDMxMTAvBgNV BAMTKDJEQUEyMTRFQTFBQkMyQjM4NDlCQkE2QkVBQUYzQTUzRjAyRTBDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3caVzV1/CmYa6o9L4to/Fn1JC 1bqFiflvLyEI3/xlotBLLKnQWeyqc9VyniR2KxA/9NurBB6m/gcOIkdufKwOZOfD 6Qrtl0f5bkPHR2ZYwClODIhoM0X83WyUorH/TTG4kYKsqTv3ZK2mE1RwZ6OerG52 rPzpGu9qANz0s9HPeuJu5kHiDARyyhKxk9WJ0L58aUqYAKx7n2zP84YDFvIvXqV/ 2CnUspFM+CpEAUt2CxnxTvbbt+fl2/FIY6/pARk6O1VPAsYEaDTl9DXGXyvG7eeL bWY47x1jPHlOL+oV1bRNVDW+nAD5tT/7zL93cjK6AcWYMI+UsnDqDDpvJuRZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULaohTqGrwrOEm7pr6q86U/AuDMYwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4bpMA0GCSqG SIb3DQEBCwUAA4IBAQBUsni3pFdyk66rr1kh1SiqdnY5TrIJ95FBBkkUADDYMCE6 ufVGgFaaJmVwaNgca1jy67Bt6SM+1cdtowRLEfmVUmp562Vp7yWIWHu8sLdT+k+x KKJz6ujtltLOhjZ8xaRSOPmwN7PxDuOgxMbirkVcdKeLneR+Egi4WgYullt6jaGF 2PWOTLTeMqHQJmIXmNAf/GrasFfIZDlCyP6npO3Qrui7Vml3Ore0h5/oMrwR+I6i Y+hrjITlgoR7o0SDvt0n+/aTORoxWUzD3mGFC+KktBDlD/Mfl+lSVGTgWByZOrgT hmqQQpgsn4YyJgPh5ZATqqX7EKCnCCCNLf5KXB1R -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:42 2025 by rpki-client