$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa File: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (raw, json) Hash identifier: xtjpkayX42ahjTFsnuY46Hlm9SoehvE8O0HLSPjq06w= Subject key identifier: DE:43:A0:11:28:02:E1:1B:A3:24:38:AD:DF:BA:19:4D:87:9D:AE:6C Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 3BD3BE132A872CA771F373F288225788D28A1932 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa Signing time: Fri 27 Dec 2024 13:00:00 +0000 ROA not before: Fri 27 Dec 2024 12:55:00 +0000 ROA not after: Fri 26 Dec 2025 13:00:00 +0000 asID: 56241 IP address blocks: 203.99.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 15:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d3:be:13:2a:87:2c:a7:71:f3:73:f2:88:22:57:88:d2:8a:19:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Dec 27 12:55:00 2024 GMT Not After : Dec 26 13:00:00 2025 GMT Subject: CN=DE43A0112802E11BA32438ADDFBA194D879DAE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ac:25:92:91:c8:78:7c:01:80:3a:90:21:f2: 83:e1:e4:ef:57:d0:00:7d:31:1f:ef:ff:ba:14:2d: c2:70:f3:8f:ef:46:ee:59:7f:55:bb:38:48:05:52: 4b:3c:88:b4:6f:c8:89:1e:fb:07:b5:68:e4:68:b3: 00:90:a2:b0:cc:4e:78:e1:74:91:b7:86:1a:90:2f: dd:94:0d:88:41:51:71:6e:35:87:13:bb:2e:2e:5d: 25:47:b5:53:16:43:85:cc:7b:e3:af:36:5e:78:0e: 4e:c0:31:a9:39:ff:16:53:46:57:39:f6:37:bd:6a: 5d:60:a8:f7:2d:0d:6d:7b:7b:8b:ec:fb:ac:5a:72: 79:ed:7c:61:fe:90:8d:e1:7d:05:42:4d:c4:09:3c: 80:7b:ab:80:85:a8:67:ae:8f:58:cf:e8:bd:dc:0d: e3:f1:1c:e3:d0:25:97:33:40:cc:2c:4a:22:f9:dc: c4:6b:b3:25:c7:b4:e8:c2:57:5c:ff:05:56:5e:28: 85:6b:b3:9a:09:83:76:05:14:c5:9d:02:c0:53:0c: 1c:42:e7:6c:a7:16:02:ea:cd:05:41:41:9e:6e:c1: 8d:fc:d4:18:da:83:5d:49:ea:32:4f:29:ed:c1:50: 92:85:38:a3:ee:45:56:89:50:59:68:99:c0:cf:88: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:43:A0:11:28:02:E1:1B:A3:24:38:AD:DF:BA:19:4D:87:9D:AE:6C X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.101.0/24 Signature Algorithm: sha256WithRSAEncryption bf:9b:7a:e0:36:9d:f2:64:31:87:54:d6:61:65:86:f9:6d:66: 83:ef:6b:bb:01:ee:15:e7:84:97:cd:4c:78:00:86:b8:22:64: 93:e6:27:74:d8:5a:5a:48:71:bd:91:09:e3:4e:38:17:56:36: 77:b0:9f:12:62:48:0f:72:90:cf:85:17:3c:26:e8:ed:0d:6d: 1c:a4:a4:a2:a1:17:03:12:1b:32:cf:ab:34:78:58:96:4a:a3: c8:4a:10:89:f7:78:59:c2:8a:63:4b:01:6e:c1:f3:a5:01:ea: 47:65:a7:8a:a4:43:e5:66:1b:5b:9b:98:59:65:2c:0c:36:4d: 4c:c5:6b:e9:d4:45:ea:71:b0:d8:8a:73:ab:23:1f:3d:5e:4e: ef:7d:96:53:33:de:fd:72:b3:e9:74:f6:a1:79:97:44:a1:94: c8:96:0a:0d:1d:d9:e2:00:da:a9:6b:f3:74:4f:40:e2:13:c2: a8:ee:83:5f:97:ab:fe:80:34:ce:08:ab:2e:17:2b:15:2f:48: 0d:31:9a:8a:83:b4:9e:a4:bf:ba:c7:23:93:05:2d:f3:d2:9e: 71:71:46:fd:02:f0:09:32:17:fc:17:75:dd:b3:7a:5b:df:c3: 33:55:09:08:42:72:95:61:fa:bd:fe:f2:75:ac:04:0d:c6:3a: 8a:90:eb:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUO9O+EyqHLKdx83PyiCJXiNKKGTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNDEyMjcxMjU1MDBaFw0yNTEyMjYxMzAwMDBaMDMxMTAvBgNV BAMTKERFNDNBMDExMjgwMkUxMUJBMzI0MzhBRERGQkExOTREODc5REFFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYrCWSkch4fAGAOpAh8oPh5O9X 0AB9MR/v/7oULcJw84/vRu5Zf1W7OEgFUks8iLRvyIke+we1aORoswCQorDMTnjh dJG3hhqQL92UDYhBUXFuNYcTuy4uXSVHtVMWQ4XMe+OvNl54Dk7AMak5/xZTRlc5 9je9al1gqPctDW17e4vs+6xacnntfGH+kI3hfQVCTcQJPIB7q4CFqGeuj1jP6L3c DePxHOPQJZczQMwsSiL53MRrsyXHtOjCV1z/BVZeKIVrs5oJg3YFFMWdAsBTDBxC 52ynFgLqzQVBQZ5uwY381Bjag11J6jJPKe3BUJKFOKPuRVaJUFlomcDPiOAfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU3kOgESgC4RujJDit37oZTYedrmwwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzEzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtjZTANBgkqhkiG 9w0BAQsFAAOCAQEAv5t64Dad8mQxh1TWYWWG+W1mg+9ruwHuFeeEl81MeACGuCJk k+YndNhaWkhxvZEJ4044F1Y2d7CfEmJID3KQz4UXPCbo7Q1tHKSkoqEXAxIbMs+r NHhYlkqjyEoQifd4WcKKY0sBbsHzpQHqR2WniqRD5WYbW5uYWWUsDDZNTMVr6dRF 6nGw2IpzqyMfPV5O732WUzPe/XKz6XT2oXmXRKGUyJYKDR3Z4gDaqWvzdE9A4hPC qO6DX5er/oA0zgirLhcrFS9IDTGaioO0nqS/uscjkwUt89KecXFG/QLwCTIX/Bd1 3bN6W9/DM1UJCEJylWH6vf7ydawEDcY6ipDrYA== -----END CERTIFICATE-----Generated at Mon Apr 7 10:50:58 2025 by rpki-client