$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa File: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (raw, json) Hash identifier: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI= Subject key identifier: DE:52:F5:5D:27:C6:6B:01:38:62:3A:46:AB:A1:B4:BA:6C:E6:B1:E8 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 37405E3DF81054C2A030116F8A91AC121D38884C Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa Signing time: Tue 11 Mar 2025 11:02:23 +0000 ROA not before: Tue 11 Mar 2025 10:57:23 +0000 ROA not after: Tue 10 Mar 2026 11:02:23 +0000 asID: 55690 IP address blocks: 42.62.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:40:5e:3d:f8:10:54:c2:a0:30:11:6f:8a:91:ac:12:1d:38:88:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Mar 11 10:57:23 2025 GMT Not After : Mar 10 11:02:23 2026 GMT Subject: CN=DE52F55D27C66B0138623A46ABA1B4BA6CE6B1E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:ab:25:0f:2c:9c:af:4c:7a:f4:5c:a8:d0: 88:00:ba:f6:2c:5a:fd:ee:32:39:6d:2f:84:12:f5: 99:96:a1:b3:1c:cf:f1:c3:03:02:36:aa:8c:4a:c9: 13:87:37:29:76:2c:ba:04:3b:d7:4b:98:08:7d:6a: 14:5f:23:48:cd:5f:a9:3a:c6:8a:f3:32:3f:e4:f2: 7e:36:41:2f:56:70:ab:08:42:51:a0:d0:25:3b:d8: 8c:b1:c8:6c:d5:3d:1e:87:23:22:bd:6b:39:cf:39: f6:39:45:80:d7:75:fb:84:d7:32:c0:6c:16:f6:b1: 32:39:20:f3:74:26:df:73:dd:7d:0a:91:fd:5e:bb: 63:4c:9c:19:6e:9e:36:51:ad:71:9f:b3:ae:98:83: 5d:e9:45:75:b1:e3:f0:06:e2:09:6a:b1:04:bf:2e: ef:cc:f3:b8:db:4c:89:71:4b:cd:d7:a6:c2:77:47: a3:a3:9f:80:5f:90:b3:64:ad:33:48:fe:99:b7:be: 7f:11:ab:33:43:a8:fe:18:b4:b3:a2:1b:06:94:b4: 10:96:b2:91:f8:22:06:be:d5:9b:5d:29:3a:e1:b2: 7b:f4:c2:a7:45:f0:77:c4:0e:06:e9:61:7c:b7:6f: 06:cc:53:87:5a:43:a9:ee:13:2f:4f:17:55:62:35: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:52:F5:5D:27:C6:6B:01:38:62:3A:46:AB:A1:B4:BA:6C:E6:B1:E8 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137392e302f32342d3234203d3e203535363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.62.179.0/24 Signature Algorithm: sha256WithRSAEncryption 86:3c:1e:4c:32:35:1b:8a:2f:ff:be:26:fb:ef:ed:23:a4:f4: 0d:d3:17:89:ea:92:b0:43:da:2e:a0:07:2b:e2:46:4e:b8:cb: af:d3:86:19:2d:ca:75:d8:17:81:8c:d2:58:34:34:2d:b0:43: 1b:a8:37:a7:0f:d7:42:f4:33:ee:b4:0f:a0:d5:1a:0e:06:11: 93:6f:5f:be:17:12:a1:88:7c:0d:0d:8d:fd:78:2d:e4:34:af: 24:66:f4:ee:00:2c:30:f5:c4:cb:15:32:db:08:8c:83:91:3a: c6:05:4c:77:23:91:a0:86:39:30:44:df:cd:41:d2:10:3e:3b: 40:83:86:0f:5d:f5:f5:ab:8d:9b:7b:7b:b1:89:b4:c4:58:12: 50:fd:86:cc:a6:e8:b4:80:f2:79:ba:5c:ff:7f:e8:f7:98:bf: c6:75:66:14:66:c7:00:6b:dc:28:31:b2:9f:19:30:68:9e:85: 05:14:04:d7:21:30:b5:5e:14:d9:70:59:00:b4:b5:01:78:17: 15:fb:da:b6:c6:e6:e9:b0:6f:4e:2f:3d:fa:21:f9:f4:73:e6: 53:93:9c:5f:7b:88:83:dc:54:7c:2c:31:11:34:32:92:57:4a: ff:17:94:88:21:1e:bb:dc:6a:9a:c8:78:2f:9f:20:cf:1a:41: 14:59:ca:57 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUN0BePfgQVMKgMBFvipGsEh04iEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTAzMTExMDU3MjNaFw0yNjAzMTAxMTAyMjNaMDMxMTAvBgNV BAMTKERFNTJGNTVEMjdDNjZCMDEzODYyM0E0NkFCQTFCNEJBNkNFNkIxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9KslDyycr0x69Fyo0IgAuvYs Wv3uMjltL4QS9ZmWobMcz/HDAwI2qoxKyROHNyl2LLoEO9dLmAh9ahRfI0jNX6k6 xorzMj/k8n42QS9WcKsIQlGg0CU72IyxyGzVPR6HIyK9aznPOfY5RYDXdfuE1zLA bBb2sTI5IPN0Jt9z3X0Kkf1eu2NMnBlunjZRrXGfs66Yg13pRXWx4/AG4glqsQS/ Lu/M87jbTIlxS83XpsJ3R6Ojn4BfkLNkrTNI/pm3vn8RqzNDqP4YtLOiGwaUtBCW spH4Iga+1ZtdKTrhsnv0wqdF8HfEDgbpYXy3bwbMU4daQ6nuEy9PF1ViNWypAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU3lL1XSfGawE4YjpGq6G0umzmsegwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3ZjhmNmE0LThkODctNGVmMy1i NGRjLTUyYzI1Y2I1NzdjMi8wLzM0MzIyZTM2MzIyZTMxMzczOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAqPrMwDQYJKoZIhvcN AQELBQADggEBAIY8HkwyNRuKL/++Jvvv7SOk9A3TF4nqkrBD2i6gByviRk64y6/T hhktynXYF4GM0lg0NC2wQxuoN6cP10L0M+60D6DVGg4GEZNvX74XEqGIfA0Njf14 LeQ0ryRm9O4ALDD1xMsVMtsIjIOROsYFTHcjkaCGOTBE381B0hA+O0CDhg9d9fWr jZt7e7GJtMRYElD9hsym6LSA8nm6XP9/6PeYv8Z1ZhRmxwBr3Cgxsp8ZMGiehQUU BNchMLVeFNlwWQC0tQF4FxX72rbG5umwb04vPfoh+fRz5lOTnF97iIPcVHwsMRE0 MpJXSv8XlIghHrvcaprIeC+fIM8aQRRZylc= -----END CERTIFICATE-----Generated at Tue Apr 8 23:41:39 2025 by rpki-client