$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233362e302f32342d3234203d3e203138303539.roa File: 3230332e3133342e3233362e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: 1fvH2dH/H9I3ft9Jxtbtn9oljtNe/A13akM9gaOTr1A= Subject key identifier: F2:17:65:01:F8:E5:D3:4B:82:5C:D1:B0:FB:A8:6D:63:DE:09:55:58 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 445F3036D7949105B4841B3BF38FEEC684BE2D2A Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233362e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 06:00:01 +0000 ROA not before: Fri 26 Sep 2025 05:55:01 +0000 ROA not after: Fri 25 Sep 2026 06:00:01 +0000 asID: 18059 IP address blocks: 203.134.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5f:30:36:d7:94:91:05:b4:84:1b:3b:f3:8f:ee:c6:84:be:2d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 05:55:01 2025 GMT Not After : Sep 25 06:00:01 2026 GMT Subject: CN=F2176501F8E5D34B825CD1B0FBA86D63DE095558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:82:ab:3c:f2:bf:4c:19:14:d3:4e:f3:20:1f: 45:cd:82:5c:fe:71:31:f8:25:70:69:73:36:84:81: 60:db:b4:2e:0d:d8:4c:dc:15:93:20:8c:24:c3:12: c2:be:a5:a9:69:98:c0:a0:58:2c:42:66:a9:1f:24: 94:d7:26:f2:06:64:06:dc:14:0a:b5:42:37:52:2a: 62:6b:e2:07:42:83:72:7f:5b:55:42:e4:f3:b1:ef: d5:af:af:01:fd:fb:07:75:78:a4:6c:cc:58:08:14: c0:51:af:e8:77:cd:7d:26:bd:db:1b:64:33:e0:0e: c6:70:5e:67:b0:8d:eb:e1:4b:99:7e:96:18:cb:c8: 16:ea:f4:08:ab:22:56:b6:6d:ca:71:cf:9c:e8:02: 99:6c:7a:e9:e6:28:29:37:55:79:40:40:6c:4b:fa: 2c:eb:f6:10:47:83:f8:af:ae:71:7a:75:dd:f6:40: 4a:c2:0e:a7:71:2e:3e:ee:b5:70:c7:f5:22:01:6a: 82:2c:59:dd:c8:e4:0c:c1:09:11:45:e2:8a:16:6d: a0:0b:25:d7:b5:62:8e:4c:a5:8e:6a:bf:aa:07:2f: 41:6e:06:02:88:6f:fc:b3:7a:02:38:5c:2f:79:a9: 6c:ac:d6:80:f9:bb:e6:01:f5:ea:2d:81:0c:8a:e0: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:17:65:01:F8:E5:D3:4B:82:5C:D1:B0:FB:A8:6D:63:DE:09:55:58 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233362e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.134.236.0/24 Signature Algorithm: sha256WithRSAEncryption 85:1f:a3:fb:99:bb:6a:e9:2c:60:82:f1:09:c5:76:32:2c:80: b5:db:d2:4e:10:16:98:7c:4c:eb:93:de:2b:61:1a:77:b2:87: 8e:20:44:47:21:fa:b5:5f:be:88:38:fe:40:9d:34:dd:8f:f5: f7:b7:86:e6:cd:b8:43:e5:ee:9d:36:73:01:07:40:34:eb:90: a1:e8:7d:46:df:c1:a2:c9:bd:38:1b:ca:80:34:ae:bb:44:36: 27:46:c0:a2:26:9f:d5:db:c8:68:96:9e:a1:09:45:f9:05:0e: 20:fc:c6:f4:cb:a8:97:9d:6d:55:fb:5c:47:b7:70:6c:f4:19: 82:3c:c6:16:d1:61:6a:cb:98:6d:fb:ce:75:97:c3:ff:39:86: 2c:dc:e0:21:e5:4f:d8:bd:ad:a2:3b:02:7f:2f:40:2a:0e:43: 8d:5f:57:c9:09:1c:ac:48:29:9d:cb:cc:d5:9d:63:ad:c6:fb: e4:03:e5:d9:2e:a9:87:e8:a8:1a:57:4d:57:3c:25:5a:62:6d: be:9c:46:42:e3:f5:f1:1d:b4:9b:8d:8a:29:73:3b:a1:cd:5e: b6:df:dc:d6:fd:78:e9:9d:80:d7:fe:2f:07:b5:9e:a1:d4:39: af:c6:68:ef:d5:fe:08:13:22:0e:5a:4f:02:9e:32:35:f4:6f: 82:e8:ce:43 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURF8wNteUkQW0hBs784/uxoS+LSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwNTU1MDFaFw0yNjA5MjUwNjAwMDFaMDMxMTAvBgNV BAMTKEYyMTc2NTAxRjhFNUQzNEI4MjVDRDFCMEZCQTg2RDYzREUwOTU1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfgqs88r9MGRTTTvMgH0XNglz+ cTH4JXBpczaEgWDbtC4N2EzcFZMgjCTDEsK+palpmMCgWCxCZqkfJJTXJvIGZAbc FAq1QjdSKmJr4gdCg3J/W1VC5POx79WvrwH9+wd1eKRszFgIFMBRr+h3zX0mvdsb ZDPgDsZwXmewjevhS5l+lhjLyBbq9AirIla2bcpxz5zoAplseunmKCk3VXlAQGxL +izr9hBHg/ivrnF6dd32QErCDqdxLj7utXDH9SIBaoIsWd3I5AzBCRFF4ooWbaAL Jde1Yo5MpY5qv6oHL0FuBgKIb/yzegI4XC95qWys1oD5u+YB9eotgQyK4HKxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8hdlAfjl00uCXNGw+6htY94JVVgwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4bsMA0GCSqG SIb3DQEBCwUAA4IBAQCFH6P7mbtq6SxggvEJxXYyLIC129JOEBaYfEzrk94rYRp3 soeOIERHIfq1X76IOP5AnTTdj/X3t4bmzbhD5e6dNnMBB0A065Ch6H1G38Giyb04 G8qANK67RDYnRsCiJp/V28holp6hCUX5BQ4g/Mb0y6iXnW1V+1xHt3Bs9BmCPMYW 0WFqy5ht+851l8P/OYYs3OAh5U/Yva2iOwJ/L0AqDkONX1fJCRysSCmdy8zVnWOt xvvkA+XZLqmH6KgaV01XPCVaYm2+nEZC4/XxHbSbjYopczuhzV6239zW/XjpnYDX /i8HtZ6h1Dmvxmjv1f4IEyIOWk8CnjI19G+C6M5D -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:20 2025 by rpki-client