$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38392e302f32342d3234203d3e203338333230.roa File: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (raw, json) Hash identifier: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU= Subject key identifier: 27:A8:E1:D2:67:40:9F:24:56:49:80:8E:46:1E:EF:E3:74:6C:3A:E8 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 6744D7FD33564187C1E433ECD0C6870FE5EAC5B4 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38392e302f32342d3234203d3e203338333230.roa Signing time: Wed 12 Mar 2025 04:00:00 +0000 ROA not before: Wed 12 Mar 2025 03:55:00 +0000 ROA not after: Wed 11 Mar 2026 04:00:00 +0000 asID: 38320 IP address blocks: 203.173.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 17:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:44:d7:fd:33:56:41:87:c1:e4:33:ec:d0:c6:87:0f:e5:ea:c5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Mar 12 03:55:00 2025 GMT Not After : Mar 11 04:00:00 2026 GMT Subject: CN=27A8E1D267409F245649808E461EEFE3746C3AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:e4:34:f7:8c:3d:9e:fb:0c:10:ec:04:31: 74:1a:a8:26:a7:c6:1b:49:0f:84:be:9b:01:e8:56: 7f:6a:d7:5d:54:3b:3f:ab:8a:8a:5f:82:0c:0c:59: ee:b0:56:2b:a8:86:cc:eb:7c:51:4a:06:a0:12:ff: d2:22:c6:e2:b3:95:dc:98:33:a0:70:51:3f:8b:d8: 27:56:38:2e:dd:76:e1:06:7b:e1:91:3c:91:bd:b2: 50:e1:96:82:c4:35:40:0c:5f:09:fd:1a:b6:e7:63: 56:cf:8d:02:a5:68:d3:ec:df:cd:9b:32:bb:09:84: a6:32:d9:c2:33:33:3c:aa:ad:b3:35:56:81:56:6e: 70:c8:b8:c4:dd:36:a2:bb:ec:6e:8d:7c:1f:3b:39: 94:ad:84:58:75:73:56:8b:d7:3a:a8:5e:45:57:6d: c2:0f:58:5d:c8:90:57:62:b8:48:4c:d8:90:4c:45: 24:17:77:08:11:32:72:1b:4d:f0:29:71:a3:05:cc: d4:ce:1b:13:b6:eb:ab:ab:41:59:e5:3d:9c:5d:54: 83:d0:d6:b4:bc:ac:0a:0a:f6:56:4f:8b:4e:7f:15: 97:37:e3:b1:00:9a:e7:16:9b:13:5b:0b:93:97:15: 65:87:7d:ca:c4:7b:8c:4d:0d:7e:00:5e:ad:67:69: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A8:E1:D2:67:40:9F:24:56:49:80:8E:46:1E:EF:E3:74:6C:3A:E8 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38392e302f32342d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.173.89.0/24 Signature Algorithm: sha256WithRSAEncryption be:54:28:57:a6:e9:04:70:c6:2f:aa:de:7c:a9:78:e1:ac:9d: f2:aa:91:f1:04:cb:f6:62:04:44:66:fb:a4:a7:eb:59:d8:51: e1:bc:0b:c8:39:ea:b2:a7:06:03:d2:0b:9f:7d:b0:f2:70:f0: 58:1c:ef:05:3a:16:d9:d3:39:58:a6:96:94:b3:de:7f:28:91: 29:a2:ab:37:97:1e:51:36:ca:45:23:e5:68:b6:6a:09:f3:b9: 62:3b:5a:f7:af:e4:d0:5b:43:ce:9d:29:c0:d0:07:5e:de:10: 8c:d2:88:2a:01:31:4a:ba:d8:56:4c:91:82:fa:a0:83:88:8b: ee:60:6b:23:2d:27:98:1e:fd:8b:81:c7:0c:d7:1c:30:f4:39: 5f:32:db:e2:d3:72:7e:bb:8c:f1:86:0c:eb:25:a2:e6:e6:0d: a0:0f:74:72:c6:56:dd:61:d7:47:7a:9f:4d:52:1a:5b:a1:c3: 35:ff:13:6f:bf:52:d3:1b:51:33:ec:38:8b:23:0b:b0:67:50: 8f:12:ad:4e:03:88:ba:ef:5e:d2:d6:fb:11:af:45:f9:c4:71: 75:f1:be:3a:61:bd:2f:57:90:98:ba:c4:f6:e9:32:5b:d4:e6: 46:9a:c4:a5:27:da:14:ce:a9:39:fa:d5:5a:c8:60:a4:86:87: e2:d1:83:99 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZ0TX/TNWQYfB5DPs0MaHD+XqxbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAzMTIwMzU1MDBaFw0yNjAzMTEwNDAwMDBaMDMxMTAvBgNV BAMTKDI3QThFMUQyNjc0MDlGMjQ1NjQ5ODA4RTQ2MUVFRkUzNzQ2QzNBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHvuQ094w9nvsMEOwEMXQaqCan xhtJD4S+mwHoVn9q111UOz+riopfggwMWe6wViuohszrfFFKBqAS/9IixuKzldyY M6BwUT+L2CdWOC7dduEGe+GRPJG9slDhloLENUAMXwn9GrbnY1bPjQKlaNPs382b MrsJhKYy2cIzMzyqrbM1VoFWbnDIuMTdNqK77G6NfB87OZSthFh1c1aL1zqoXkVX bcIPWF3IkFdiuEhM2JBMRSQXdwgRMnIbTfApcaMFzNTOGxO266urQVnlPZxdVIPQ 1rS8rAoK9lZPi05/FZc347EAmucWmxNbC5OXFWWHfcrEe4xNDX4AXq1nacV3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJ6jh0mdAnyRWSYCORh7v43RsOugwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMyMzAzMzJlMzEzNzMzMmUzODM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMutWTANBgkqhkiG 9w0BAQsFAAOCAQEAvlQoV6bpBHDGL6refKl44ayd8qqR8QTL9mIERGb7pKfrWdhR 4bwLyDnqsqcGA9ILn32w8nDwWBzvBToW2dM5WKaWlLPefyiRKaKrN5ceUTbKRSPl aLZqCfO5Yjta96/k0FtDzp0pwNAHXt4QjNKIKgExSrrYVkyRgvqgg4iL7mBrIy0n mB79i4HHDNccMPQ5XzLb4tNyfruM8YYM6yWi5uYNoA90csZW3WHXR3qfTVIaW6HD Nf8Tb79S0xtRM+w4iyMLsGdQjxKtTgOIuu9e0tb7Ea9F+cRxdfG+OmG9L1eQmLrE 9ukyW9TmRprEpSfaFM6pOfrVWshgpIaH4tGDmQ== -----END CERTIFICATE-----Generated at Sun Apr 6 07:20:02 2025 by rpki-client