$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa File: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (raw, json) Hash identifier: fqCZ9+V4OhrivrL7rJsmVltpUel/D0iJtOWt/NWMlmg= Subject key identifier: 2E:24:15:23:E7:5E:60:4F:04:F5:0C:77:B1:EB:56:A6:DE:0C:A0:5F Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208 Certificate serial: 5CBF777ABDF2779F736D2D99DFC379F96224C3C9 Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa Signing time: Thu 30 May 2024 09:00:02 +0000 ROA not before: Thu 30 May 2024 08:55:02 +0000 ROA not after: Thu 29 May 2025 09:00:02 +0000 asID: 136825 IP address blocks: 123.253.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 23:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bf:77:7a:bd:f2:77:9f:73:6d:2d:99:df:c3:79:f9:62:24:c3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208 Validity Not Before: May 30 08:55:02 2024 GMT Not After : May 29 09:00:02 2025 GMT Subject: CN=2E241523E75E604F04F50C77B1EB56A6DE0CA05F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:24:76:1c:23:c9:49:1e:eb:85:5c:68:c6: aa:84:8a:f6:d4:1c:a1:39:b6:c9:2b:a1:62:70:82: c0:b3:26:2a:e0:f0:2a:73:a6:30:10:71:8d:db:b9: 68:e2:1e:02:db:43:38:bb:3d:58:9d:3b:6f:29:4c: 7b:3c:d3:c2:a9:f0:3f:5e:5d:06:2f:cb:4a:10:c9: 2f:ba:51:b2:81:b8:74:f0:26:9a:e8:86:25:b7:b0: 2f:eb:6d:1c:d9:ce:40:45:d6:96:80:9e:31:09:25: 05:68:7a:9a:12:fc:54:b1:ed:f0:a1:82:cc:8c:c0: db:77:c4:80:39:aa:02:8f:3d:90:09:30:32:e9:f1: b7:a2:2d:fd:d5:b8:e4:d6:d1:76:bc:d0:2f:f7:38: 8a:5b:01:2c:0e:91:92:01:ac:50:12:7e:60:1e:cb: ab:dd:2e:54:1d:62:ae:fc:24:6e:20:64:8f:de:dc: 74:76:38:57:08:d5:7e:0b:f6:de:d6:6c:c6:f7:83: 63:dd:33:10:6f:15:f3:16:fe:b3:7c:ae:b5:4a:e2: 31:2d:20:c9:60:68:36:aa:f3:95:41:58:65:3c:22: eb:90:28:85:3b:e3:e9:e5:0f:97:32:37:07:7e:4f: 0d:56:e5:45:a6:78:7e:05:22:f3:7b:40:48:db:0b: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:24:15:23:E7:5E:60:4F:04:F5:0C:77:B1:EB:56:A6:DE:0C:A0:5F X509v3 Authority Key Identifier: keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.253.248.0/23 Signature Algorithm: sha256WithRSAEncryption 20:14:91:d6:55:21:03:d6:37:a3:00:89:fb:e8:8c:80:b1:66: f6:cd:7b:82:1b:fb:6e:b7:76:c1:c8:01:04:27:ec:28:fb:c3: 83:c5:d7:cd:52:99:b8:69:57:2a:d7:df:1a:bd:ff:b5:89:07: a0:49:cc:03:16:a5:03:a7:be:49:6f:f3:33:e2:56:5b:91:1f: 16:ad:7a:d5:6e:fd:05:d2:c0:34:8e:04:7a:a9:2b:34:96:39: 0e:85:5b:cc:a7:61:a1:1d:06:df:16:2a:6c:8d:57:6e:b2:97: 37:5a:a0:bf:a0:b5:02:2a:6e:f1:2e:c1:ef:b7:90:4e:e9:55: b2:dc:eb:4b:4d:0d:d3:42:f1:07:9b:f2:d3:05:67:94:0a:ce: 10:4c:c0:e3:ab:d9:ea:5d:bf:cd:bf:62:a2:12:d0:8d:67:04: 28:ff:43:e3:bf:bf:e4:c9:3e:8f:b1:be:80:54:7b:bd:47:0b: 92:0b:36:3c:48:a1:90:d9:cc:a9:2c:54:d7:1a:83:31:65:79: 8d:e5:73:c3:dc:4a:da:68:d7:fb:77:92:02:e7:58:25:14:79: 84:54:3a:7a:ad:86:83:2c:e7:ac:8c:73:d7:a4:c6:b9:a6:31: a8:db:a2:67:67:35:b3:f7:c2:9c:3d:e5:77:68:ab:12:9a:75: 70:a9:eb:e6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXL93er3yd59zbS2Z38N5+WIkw8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZE RkY1NjIwODAeFw0yNDA1MzAwODU1MDJaFw0yNTA1MjkwOTAwMDJaMDMxMTAvBgNV BAMTKDJFMjQxNTIzRTc1RTYwNEYwNEY1MEM3N0IxRUI1NkE2REUwQ0EwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspCR2HCPJSR7rhVxoxqqEivbU HKE5tskroWJwgsCzJirg8CpzpjAQcY3buWjiHgLbQzi7PVidO28pTHs808Kp8D9e XQYvy0oQyS+6UbKBuHTwJprohiW3sC/rbRzZzkBF1paAnjEJJQVoepoS/FSx7fCh gsyMwNt3xIA5qgKPPZAJMDLp8beiLf3VuOTW0Xa80C/3OIpbASwOkZIBrFASfmAe y6vdLlQdYq78JG4gZI/e3HR2OFcI1X4L9t7WbMb3g2PdMxBvFfMW/rN8rrVK4jEt IMlgaDaq85VBWGU8IuuQKIU74+nlD5cyNwd+Tw1W5UWmeH4FIvN7QEjbC/GDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQULiQVI+deYE8E9Qx3setWpt4MoF8wHwYDVR0j BBgwFoAUJdeIvSpFDAE1S5q3CCaJX9/1YggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmE3NjY1YS1iNTBiLTRhNDUtYThmOS0wZDY5YmQ3ZDc0M2QvMC8yNUQ3ODhCRDJB NDUwQzAxMzU0QjlBQjcwODI2ODk1RkRGRjU2MjA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZERkY1 NjIwOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2YTc2NjVhLWI1MGItNGE0NS1h OGY5LTBkNjliZDdkNzQzZC8wLzMxMzIzMzJlMzIzNTMzMmUzMjM0MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7/fgwDQYJ KoZIhvcNAQELBQADggEBACAUkdZVIQPWN6MAifvojICxZvbNe4Ib+263dsHIAQQn 7Cj7w4PF181SmbhpVyrX3xq9/7WJB6BJzAMWpQOnvklv8zPiVluRHxatetVu/QXS wDSOBHqpKzSWOQ6FW8ynYaEdBt8WKmyNV26ylzdaoL+gtQIqbvEuwe+3kE7pVbLc 60tNDdNC8Qeb8tMFZ5QKzhBMwOOr2epdv82/YqIS0I1nBCj/Q+O/v+TJPo+xvoBU e71HC5ILNjxIoZDZzKksVNcagzFleY3lc8PcStpo1/t3kgLnWCUUeYRUOnqthoMs 56yMc9ekxrmmMajbomdnNbP3wpw95XdoqxKadXCp6+Y= -----END CERTIFICATE-----Generated at Sun Apr 6 07:11:16 2025 by rpki-client