$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137372e302f32342d3234203d3e203535363930.roa File: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (raw, json) Hash identifier: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk= Subject key identifier: 7D:00:D1:78:22:F5:2D:C3:9D:CF:6E:7F:1C:C2:DB:58:AA:0E:A5:46 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 3584CF4923FE8706B874D9F7D37F1FC24CE888EE Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137372e302f32342d3234203d3e203535363930.roa Signing time: Tue 11 Mar 2025 11:02:23 +0000 ROA not before: Tue 11 Mar 2025 10:57:23 +0000 ROA not after: Tue 10 Mar 2026 11:02:23 +0000 asID: 55690 IP address blocks: 42.62.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 03:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:84:cf:49:23:fe:87:06:b8:74:d9:f7:d3:7f:1f:c2:4c:e8:88:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Mar 11 10:57:23 2025 GMT Not After : Mar 10 11:02:23 2026 GMT Subject: CN=7D00D17822F52DC39DCF6E7F1CC2DB58AA0EA546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:42:00:d9:d1:09:e6:4e:39:c9:36:90:00:ee: d8:f2:4c:1a:2d:4f:5a:74:ca:df:6b:d1:7c:8b:67: 33:23:db:51:ad:0b:5c:fa:db:37:36:33:73:f3:c7: 76:66:4f:23:1a:c5:d3:b7:4e:94:f7:9b:a0:92:fd: 35:0b:f6:53:62:46:51:a5:5b:97:f8:4c:47:0b:14: d3:40:f9:9a:74:0e:dc:b2:01:cd:b9:26:36:b3:c6: 67:dc:6d:a1:9b:b3:e6:ec:42:ce:43:dc:fc:8a:13: df:9d:1a:7d:f4:c2:ec:9e:1e:d9:5c:96:49:6e:80: 30:8c:fc:3d:3b:00:e0:da:29:cc:36:aa:d3:fc:11: 3c:83:0f:ea:12:cc:31:31:f8:81:f8:c0:3d:12:11: 8d:3b:4f:6a:3e:42:23:f2:b2:3e:b7:a4:89:0c:53: e5:42:e6:f0:45:ea:54:5a:1f:d1:d3:73:9d:cd:7e: ae:ad:02:6d:95:7e:3d:1d:b2:10:a8:03:67:7c:c0: 41:ec:0f:79:3c:a1:b1:fa:70:cb:ed:dc:b4:89:f3: 18:d8:53:3b:ad:51:6a:40:2b:ff:37:41:95:da:71: 40:9d:0f:fd:97:13:0a:ad:2b:62:11:28:f1:db:04: 14:9b:89:3b:38:63:3e:bc:9e:e9:24:38:19:51:57: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:00:D1:78:22:F5:2D:C3:9D:CF:6E:7F:1C:C2:DB:58:AA:0E:A5:46 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137372e302f32342d3234203d3e203535363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.62.177.0/24 Signature Algorithm: sha256WithRSAEncryption be:d7:48:c2:f9:f5:a8:36:90:62:df:1f:0e:91:f0:89:67:f0: 1a:b2:ad:c1:fa:e5:4e:93:78:b0:58:0d:f1:be:17:74:c7:31: 24:8a:e5:e8:fa:c3:ab:1a:39:e0:b5:51:8c:ea:f9:ec:cb:46: 19:b4:50:b4:e0:cc:c1:1f:4e:20:78:45:bf:38:7a:25:3a:68: ba:66:96:45:cc:eb:99:7c:79:bd:76:cb:e4:35:69:dc:ba:09: 2f:08:80:c3:ce:e0:26:45:94:60:b8:db:ef:07:77:83:4d:b9: df:b2:b1:72:a4:75:10:22:62:4e:41:11:29:a6:2c:5c:bb:d9: 13:6f:1a:ae:84:bf:ef:a0:48:ae:ad:84:f1:e1:dc:b0:f6:75: c1:ad:ac:5d:a0:c3:37:de:eb:97:0f:72:f7:66:e2:16:39:b8: de:c2:c0:c6:ee:d6:31:27:fb:65:a7:93:9c:9f:67:2f:ad:02: 24:10:0a:ce:c5:7a:c3:c7:16:e2:22:73:b3:c1:2a:5e:ed:40: 9c:c0:c2:86:7e:9c:42:7a:60:65:71:f2:82:4e:ff:eb:ee:f0: 5c:30:fd:4b:ec:a3:f3:06:b3:f1:19:79:aa:14:f9:f7:91:3f: b8:f6:7d:aa:52:4f:29:28:ca:58:12:93:0a:22:aa:d5:1c:73: 64:db:ec:e8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUNYTPSSP+hwa4dNn3038fwkzoiO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTAzMTExMDU3MjNaFw0yNjAzMTAxMTAyMjNaMDMxMTAvBgNV BAMTKDdEMDBEMTc4MjJGNTJEQzM5RENGNkU3RjFDQzJEQjU4QUEwRUE1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQgDZ0QnmTjnJNpAA7tjyTBot T1p0yt9r0XyLZzMj21GtC1z62zc2M3Pzx3ZmTyMaxdO3TpT3m6CS/TUL9lNiRlGl W5f4TEcLFNNA+Zp0DtyyAc25JjazxmfcbaGbs+bsQs5D3PyKE9+dGn30wuyeHtlc lklugDCM/D07AODaKcw2qtP8ETyDD+oSzDEx+IH4wD0SEY07T2o+QiPysj63pIkM U+VC5vBF6lRaH9HTc53Nfq6tAm2Vfj0dshCoA2d8wEHsD3k8obH6cMvt3LSJ8xjY UzutUWpAK/83QZXacUCdD/2XEwqtK2IRKPHbBBSbiTs4Yz68nukkOBlRV9z/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUfQDReCL1LcOdz25/HMLbWKoOpUYwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3ZjhmNmE0LThkODctNGVmMy1i NGRjLTUyYzI1Y2I1NzdjMi8wLzM0MzIyZTM2MzIyZTMxMzczNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAqPrEwDQYJKoZIhvcN AQELBQADggEBAL7XSML59ag2kGLfHw6R8Iln8BqyrcH65U6TeLBYDfG+F3THMSSK 5ej6w6saOeC1UYzq+ezLRhm0ULTgzMEfTiB4Rb84eiU6aLpmlkXM65l8eb12y+Q1 ady6CS8IgMPO4CZFlGC42+8Hd4NNud+ysXKkdRAiYk5BESmmLFy72RNvGq6Ev++g SK6thPHh3LD2dcGtrF2gwzfe65cPcvdm4hY5uN7CwMbu1jEn+2Wnk5yfZy+tAiQQ Cs7FesPHFuIic7PBKl7tQJzAwoZ+nEJ6YGVx8oJO/+vu8Fww/Uvso/MGs/EZeaoU +feRP7j2fapSTykoylgSkwoiqtUcc2Tb7Og= -----END CERTIFICATE-----Generated at Mon Apr 7 01:10:44 2025 by rpki-client