$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa File: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (raw, json) Hash identifier: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4= Subject key identifier: CF:C0:89:3F:B5:BA:93:4B:75:B2:78:B4:60:92:6F:93:AF:1E:DA:DD Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 4306B7A97E710250A2AB33C2E0B3DA4A5F510FFE Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa Signing time: Wed 12 Mar 2025 04:00:00 +0000 ROA not before: Wed 12 Mar 2025 03:55:00 +0000 ROA not after: Wed 11 Mar 2026 04:00:00 +0000 asID: 139460 IP address blocks: 203.173.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 04:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:06:b7:a9:7e:71:02:50:a2:ab:33:c2:e0:b3:da:4a:5f:51:0f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Mar 12 03:55:00 2025 GMT Not After : Mar 11 04:00:00 2026 GMT Subject: CN=CFC0893FB5BA934B75B278B460926F93AF1EDADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:88:4c:79:f5:f2:23:3f:16:49:6b:9a:d6:b7: 62:68:c9:2f:27:17:97:6f:df:50:90:67:5e:e7:1f: 4f:8e:5e:b0:06:8c:c5:52:a0:57:d5:78:9d:82:b1: a9:d2:f4:ed:c7:5d:c3:58:2c:5c:e8:11:52:69:10: ce:98:c1:d5:a8:a4:09:22:21:f7:a5:7b:8c:f9:9b: 01:ac:35:4f:af:93:d2:18:a0:8f:7b:42:b9:e6:d3: 86:4c:67:a3:83:68:91:43:89:e0:d2:c1:1b:64:44: 12:5f:35:6c:49:3b:11:71:90:d1:73:39:df:fb:65: 02:bd:d4:8d:3d:b4:6a:71:0c:23:48:24:ce:69:15: 8f:20:bf:08:c8:a9:27:f5:6b:0f:8e:b7:f6:a2:2a: 10:00:c8:f4:35:02:69:71:2b:ed:42:1a:4d:4b:73: 8f:d3:83:be:76:22:fa:0e:e8:bb:0b:1d:d6:ef:6c: 82:2c:7b:5a:e2:96:a7:99:fb:9b:6f:f2:df:eb:2a: 8d:be:cd:65:14:ee:31:cc:03:83:64:fc:0e:6f:12: 66:9e:11:b4:bc:f0:df:b2:71:f3:e0:16:ca:ca:c2: 71:cd:58:3f:f7:9d:6e:61:27:07:76:b4:7a:19:bc: 20:f2:39:7b:a3:cf:56:c6:24:69:c0:ca:c9:13:12: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C0:89:3F:B5:BA:93:4B:75:B2:78:B4:60:92:6F:93:AF:1E:DA:DD X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.173.88.0/24 Signature Algorithm: sha256WithRSAEncryption 00:5a:3d:d8:1d:31:e0:eb:d3:19:7e:84:fa:0c:3d:f0:01:fe: 8c:99:a0:69:dd:e3:82:d6:ba:3c:20:6f:c4:6f:b7:45:26:41: 4b:0b:43:46:66:08:83:1e:e3:b5:47:48:a0:0c:13:84:85:80: af:24:cb:50:a3:c2:03:84:3a:4e:b7:ad:e4:3a:ec:68:55:74: 9f:39:bc:c1:da:31:ba:48:88:49:67:d6:6a:40:4d:27:f7:57: fa:f3:7f:6c:6d:80:e0:59:13:8c:49:4b:d5:fa:97:53:9e:28: 54:09:9f:23:9a:f4:aa:2a:92:75:ce:86:ad:2c:9d:da:14:9e: 9c:85:ea:08:5c:a1:c5:0b:22:05:66:27:0f:b7:cf:aa:86:c3: bb:2b:28:41:e5:15:99:5e:63:7c:29:a0:a1:ac:ac:de:19:a3: 5d:a7:bd:97:94:73:a4:4f:27:13:e3:75:dc:60:9a:fa:a1:1b: c4:2d:bb:db:98:50:60:47:5f:a3:ae:bd:05:b9:14:cc:03:91: f6:c4:35:f9:a1:88:2f:60:2f:b7:14:84:1c:0c:ce:42:e4:35: 72:6a:cb:3a:77:3f:d9:5f:5c:3a:76:a2:44:57:ba:21:6d:17: 01:4a:77:6d:f2:de:63:8d:48:10:14:63:05:9a:81:0b:a8:64: ff:30:7f:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQwa3qX5xAlCiqzPC4LPaSl9RD/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAzMTIwMzU1MDBaFw0yNjAzMTEwNDAwMDBaMDMxMTAvBgNV BAMTKENGQzA4OTNGQjVCQTkzNEI3NUIyNzhCNDYwOTI2RjkzQUYxRURBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2iEx59fIjPxZJa5rWt2JoyS8n F5dv31CQZ17nH0+OXrAGjMVSoFfVeJ2CsanS9O3HXcNYLFzoEVJpEM6YwdWopAki Ifele4z5mwGsNU+vk9IYoI97Qrnm04ZMZ6ODaJFDieDSwRtkRBJfNWxJOxFxkNFz Od/7ZQK91I09tGpxDCNIJM5pFY8gvwjIqSf1aw+Ot/aiKhAAyPQ1AmlxK+1CGk1L c4/Tg752IvoO6LsLHdbvbIIse1rilqeZ+5tv8t/rKo2+zWUU7jHMA4Nk/A5vEmae EbS88N+ycfPgFsrKwnHNWD/3nW5hJwd2tHoZvCDyOXujz1bGJGnAyskTEv7tAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUz8CJP7W6k0t1sni0YJJvk68e2t0wHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMyMzAzMzJlMzEzNzMzMmUzODM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy61YMA0GCSqG SIb3DQEBCwUAA4IBAQAAWj3YHTHg69MZfoT6DD3wAf6MmaBp3eOC1ro8IG/Eb7dF JkFLC0NGZgiDHuO1R0igDBOEhYCvJMtQo8IDhDpOt63kOuxoVXSfObzB2jG6SIhJ Z9ZqQE0n91f6839sbYDgWROMSUvV+pdTnihUCZ8jmvSqKpJ1zoatLJ3aFJ6cheoI XKHFCyIFZicPt8+qhsO7KyhB5RWZXmN8KaChrKzeGaNdp72XlHOkTycT43XcYJr6 oRvELbvbmFBgR1+jrr0FuRTMA5H2xDX5oYgvYC+3FIQcDM5C5DVyass6dz/ZX1w6 dqJEV7ohbRcBSndt8t5jjUgQFGMFmoELqGT/MH8t -----END CERTIFICATE-----Generated at Thu Apr 10 05:07:18 2025 by rpki-client