$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa File: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ= Subject key identifier: AA:03:EC:CA:F4:8E:BA:96:2C:1B:3A:F3:5F:B8:39:04:A0:17:85:86 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 5EAF6866A60DE753D2BFFC53544B8827C526BEB4 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa Signing time: Mon 02 Jun 2025 02:02:31 +0000 ROA not before: Mon 02 Jun 2025 01:57:31 +0000 ROA not after: Mon 01 Jun 2026 02:02:31 +0000 asID: 38150 IP address blocks: 180.214.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:af:68:66:a6:0d:e7:53:d2:bf:fc:53:54:4b:88:27:c5:26:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jun 2 01:57:31 2025 GMT Not After : Jun 1 02:02:31 2026 GMT Subject: CN=AA03ECCAF48EBA962C1B3AF35FB83904A0178586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:64:68:e1:29:65:44:e1:66:13:d1:df:ab: b4:9b:6b:69:87:95:8e:92:e8:97:28:1e:6d:1a:3e: 49:8f:a6:89:a0:53:a0:54:a7:0f:07:ae:61:41:c3: ce:ed:04:0e:dd:cd:5f:08:51:2e:66:ee:30:27:e0: e7:36:af:26:7d:1b:c0:9d:6c:19:23:42:5c:03:b8: 40:26:b5:64:6d:f6:cd:40:53:9f:41:db:c1:75:b5: 13:0a:58:0d:2d:ae:6d:f6:73:d7:4b:2e:1d:6b:01: 4f:da:ad:eb:74:37:5c:e3:e3:b5:f2:0f:55:89:4a: 1d:ad:16:f1:c0:b2:d5:e1:da:5b:e4:ea:26:b6:76: 54:84:17:a3:f2:ca:b2:6d:c0:7d:41:ed:51:96:f8: a2:ac:d4:84:3b:dd:1b:7e:e2:35:b6:4d:94:b7:ba: 26:4e:01:4b:25:2d:16:5e:fc:9c:67:56:ba:f6:7e: 4f:2c:d3:a0:71:0e:37:1d:49:31:3d:93:4f:50:6e: 05:fa:7b:07:c8:7a:be:81:36:e2:3a:35:af:38:bc: dd:e7:c7:35:bf:09:9f:15:f5:58:16:bf:5f:76:d3: aa:a9:a0:b9:c2:7f:42:05:f6:d9:b8:0c:64:af:15: 6e:df:77:18:e9:87:21:34:1c:11:a9:f3:92:a0:ad: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:03:EC:CA:F4:8E:BA:96:2C:1B:3A:F3:5F:B8:39:04:A0:17:85:86 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.242.0/24 Signature Algorithm: sha256WithRSAEncryption 17:82:20:98:0d:bf:f0:89:12:d8:56:5a:f5:2a:0c:e3:34:9d: 98:ed:b3:da:bb:9e:a8:03:14:81:c3:1b:e4:b9:43:7c:81:a4: 32:e4:61:ad:43:88:b2:05:7f:af:a0:ad:39:6e:8b:06:23:02: 24:67:55:57:79:8c:b6:3e:82:28:37:01:9e:eb:8d:4d:36:37: 60:3b:7b:fe:1c:68:35:f8:f3:b5:02:dc:79:b6:08:06:21:91: 88:56:93:ce:09:ea:92:da:96:af:1c:08:43:0e:37:35:1a:27: 20:5e:f7:d1:cc:5f:19:49:d6:dc:7e:bc:6b:06:27:36:ff:b8: 72:cf:6c:b9:78:ee:75:14:49:ad:45:44:7a:13:d0:96:50:c2: 85:1e:d0:c3:6b:cf:52:70:25:a1:29:41:60:76:95:93:9e:30: f8:b4:3d:c0:ca:96:f9:9f:14:2c:70:6d:12:04:7c:25:26:a4: 4c:9e:bf:64:11:9f:79:44:9b:97:9b:ef:e8:c9:98:ad:57:d3: ca:e2:81:47:1e:f3:46:19:68:65:2d:59:f5:bc:fc:03:d0:43: 0a:2c:79:fa:de:29:df:84:3f:3e:ec:13:04:62:03:bd:70:8e: 9d:52:01:aa:c3:fb:20:81:08:c5:60:90:da:cd:14:27:dd:53: ed:d4:40:a8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXq9oZqYN51PSv/xTVEuIJ8UmvrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA2MDIwMTU3MzFaFw0yNjA2MDEwMjAyMzFaMDMxMTAvBgNV BAMTKEFBMDNFQ0NBRjQ4RUJBOTYyQzFCM0FGMzVGQjgzOTA0QTAxNzg1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDmRo4SllROFmE9Hfq7Sba2mH lY6S6JcoHm0aPkmPpomgU6BUpw8HrmFBw87tBA7dzV8IUS5m7jAn4Oc2ryZ9G8Cd bBkjQlwDuEAmtWRt9s1AU59B28F1tRMKWA0trm32c9dLLh1rAU/aret0N1zj47Xy D1WJSh2tFvHAstXh2lvk6ia2dlSEF6PyyrJtwH1B7VGW+KKs1IQ73Rt+4jW2TZS3 uiZOAUslLRZe/JxnVrr2fk8s06BxDjcdSTE9k09QbgX6ewfIer6BNuI6Na84vN3n xzW/CZ8V9VgWv19206qpoLnCf0IF9tm4DGSvFW7fdxjphyE0HBGp85KgrRzBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqgPsyvSOupYsGzrzX7g5BKAXhYYwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNbyMA0GCSqG SIb3DQEBCwUAA4IBAQAXgiCYDb/wiRLYVlr1KgzjNJ2Y7bPau56oAxSBwxvkuUN8 gaQy5GGtQ4iyBX+voK05bosGIwIkZ1VXeYy2PoIoNwGe641NNjdgO3v+HGg1+PO1 Atx5tggGIZGIVpPOCeqS2pavHAhDDjc1GicgXvfRzF8ZSdbcfrxrBic2/7hyz2y5 eO51FEmtRUR6E9CWUMKFHtDDa89ScCWhKUFgdpWTnjD4tD3Aypb5nxQscG0SBHwl JqRMnr9kEZ95RJuXm+/oyZitV9PK4oFHHvNGGWhlLVn1vPwD0EMKLHn63infhD8+ 7BMEYgO9cI6dUgGqw/sggQjFYJDazRQn3VPt1ECo -----END CERTIFICATE-----Generated at Thu Jun 5 18:37:11 2025 by rpki-client