$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e32382e302f32332d3234203d3e20313338383731.roa File: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (raw, json) Hash identifier: gpotogkgRPqhq+iXjlc72dawBwQqgtK3y2i6zL2CYVg= Subject key identifier: B9:17:B1:91:B2:21:FC:73:98:30:27:69:74:4A:A8:51:3C:B8:27:98 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 3942838F2FCA4DD7E51EF68C1A449B56FB6D3325 Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e32382e302f32332d3234203d3e20313338383731.roa Signing time: Fri 24 Oct 2025 11:02:27 +0000 ROA not before: Fri 24 Oct 2025 10:57:27 +0000 ROA not after: Fri 23 Oct 2026 11:02:27 +0000 asID: 138871 IP address blocks: 202.75.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:42:83:8f:2f:ca:4d:d7:e5:1e:f6:8c:1a:44:9b:56:fb:6d:33:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Oct 24 10:57:27 2025 GMT Not After : Oct 23 11:02:27 2026 GMT Subject: CN=B917B191B221FC7398302769744AA8513CB82798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:a5:72:10:ff:8e:f1:22:ba:d8:b9:0a:86: b1:03:86:3e:cc:c2:c8:71:95:eb:06:0b:01:17:c1: a9:4c:d7:ab:3c:3b:c4:a9:60:36:df:3d:8a:e1:63: 79:95:98:e2:5c:53:e0:58:17:57:1f:c1:52:62:1f: fe:d0:34:27:f2:27:53:11:a3:de:63:ed:22:ab:7e: a4:8f:1b:2a:d2:e2:19:e1:4d:c4:c0:8f:46:74:d7: eb:d6:34:e3:17:a3:69:d0:dc:b9:39:f2:b1:76:a6: 4e:d3:2b:03:8f:b0:9c:08:8c:45:65:fd:47:29:70: 22:c5:11:47:cf:20:19:81:e2:ab:42:90:04:28:45: de:8a:b1:33:51:7a:26:a6:48:3d:57:ea:26:4a:91: 65:73:2d:d3:2d:47:17:91:e1:0a:54:1d:02:00:4d: f7:cf:c5:44:20:c4:88:9e:c6:7a:58:b0:a8:e0:71: 00:8f:a0:76:db:38:51:e7:2b:41:f5:7a:18:c0:1d: b8:5e:12:27:57:6c:a3:fb:64:ef:16:dd:78:55:b4: 9d:af:da:c0:0e:17:58:d4:1a:33:33:56:91:ec:24: 97:1c:77:c6:76:ba:94:ed:21:cb:47:02:6a:82:f8: b1:d3:e5:23:a3:41:03:b7:ea:23:6b:9e:fb:89:84: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:17:B1:91:B2:21:FC:73:98:30:27:69:74:4A:A8:51:3C:B8:27:98 X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/3230322e37352e32382e302f32332d3234203d3e20313338383731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.75.28.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:0e:49:e4:d8:0f:37:59:49:80:4f:ad:cd:99:a1:8d:88:b8: 72:69:73:19:9b:cd:4d:9f:ea:f3:d4:0f:eb:2a:2e:4f:6a:19: f8:fa:e5:40:22:31:5e:75:36:da:c8:0b:2f:87:4f:ac:27:13: aa:54:e3:48:b6:64:35:28:9a:25:6f:5e:8a:d6:b9:4b:cc:0a: 5d:a9:08:8b:ea:4d:d0:27:0f:88:57:53:25:36:f0:b6:60:b4: 33:6f:f2:85:68:7d:e9:45:37:42:52:ed:84:a1:19:06:26:6a: fd:aa:9b:a0:c0:da:11:e7:55:00:a9:50:e2:d0:15:3d:09:02: b2:67:38:c9:90:f2:06:3c:40:27:86:e0:cd:a9:de:99:87:3e: 83:c8:e5:f4:b8:bb:53:5c:7a:10:b3:97:b9:25:88:2d:5a:ff: 1e:f0:c1:c2:23:15:09:c9:ce:92:1b:a5:e4:ba:cb:95:f7:6e: 77:b6:ed:b6:a6:cc:c4:91:3e:cc:c5:3b:2d:ee:4f:40:69:43: 67:2d:fa:45:de:33:7e:4f:62:5a:5b:4c:68:f4:da:93:ce:01: e5:4b:37:a6:d6:fb:bf:18:48:d0:c5:4e:35:d0:1c:48:dc:52: 6b:22:bc:f9:00:a5:52:fb:f8:0e:bb:d0:13:9e:ec:5e:0c:06: 6c:b7:db:fa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOUKDjy/KTdflHvaMGkSbVvttMyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTEwMjQxMDU3MjdaFw0yNjEwMjMxMTAyMjdaMDMxMTAvBgNV BAMTKEI5MTdCMTkxQjIyMUZDNzM5ODMwMjc2OTc0NEFBODUxM0NCODI3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVr6VyEP+O8SK62LkKhrEDhj7M wshxlesGCwEXwalM16s8O8SpYDbfPYrhY3mVmOJcU+BYF1cfwVJiH/7QNCfyJ1MR o95j7SKrfqSPGyrS4hnhTcTAj0Z01+vWNOMXo2nQ3Lk58rF2pk7TKwOPsJwIjEVl /UcpcCLFEUfPIBmB4qtCkAQoRd6KsTNReiamSD1X6iZKkWVzLdMtRxeR4QpUHQIA TffPxUQgxIiexnpYsKjgcQCPoHbbOFHnK0H1ehjAHbheEidXbKP7ZO8W3XhVtJ2v 2sAOF1jUGjMzVpHsJJccd8Z2upTtIctHAmqC+LHT5SOjQQO36iNrnvuJhGvzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUuRexkbIh/HOYMCdpdEqoUTy4J5gwHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0NTQ3MTA0LTkzOWUtNDBlMy04 ZmM4LTQyNTIyNjQyMDQ0Yi8wLzMyMzAzMjJlMzczNTJlMzIzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzODM4MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcpLHDANBgkqhkiG 9w0BAQsFAAOCAQEAXQ5J5NgPN1lJgE+tzZmhjYi4cmlzGZvNTZ/q89QP6youT2oZ +PrlQCIxXnU22sgLL4dPrCcTqlTjSLZkNSiaJW9eita5S8wKXakIi+pN0CcPiFdT JTbwtmC0M2/yhWh96UU3QlLthKEZBiZq/aqboMDaEedVAKlQ4tAVPQkCsmc4yZDy BjxAJ4bgzanemYc+g8jl9Li7U1x6ELOXuSWILVr/HvDBwiMVCcnOkhul5LrLlfdu d7bttqbMxJE+zMU7Le5PQGlDZy36Rd4zfk9iWltMaPTak84B5Us3ptb7vxhI0MVO NdAcSNxSayK8+QClUvv4DrvQE57sXgwGbLfb+g== -----END CERTIFICATE-----Generated at Wed Nov 5 13:48:07 2025 by rpki-client