$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa File: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0= Subject key identifier: EA:7F:8B:6B:1D:D9:F9:1F:E1:14:7E:AF:89:96:93:F7:CE:A2:CF:8E Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 1F94567150BF3D86B76BD0CC695A15457BB95CC4 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa Signing time: Mon 02 Jun 2025 02:02:32 +0000 ROA not before: Mon 02 Jun 2025 01:57:32 +0000 ROA not after: Mon 01 Jun 2026 02:02:32 +0000 asID: 38150 IP address blocks: 180.214.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:94:56:71:50:bf:3d:86:b7:6b:d0:cc:69:5a:15:45:7b:b9:5c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jun 2 01:57:32 2025 GMT Not After : Jun 1 02:02:32 2026 GMT Subject: CN=EA7F8B6B1DD9F91FE1147EAF899693F7CEA2CF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:4e:03:29:ba:31:03:bb:2a:19:d8:7b:0c: 57:9d:b8:cb:5b:7d:bc:c7:7b:1a:3f:c5:6d:47:3b: 6f:37:be:8b:7f:ce:e2:43:7d:da:89:c6:79:4e:a5: a5:b3:bb:01:5d:74:2a:27:c6:55:df:5f:d6:54:98: 64:2e:d8:2f:55:47:7a:cc:65:2d:ff:b1:e3:bb:5e: 70:8a:c1:fa:e3:34:43:89:21:d4:2b:79:f9:08:b6: 7e:41:e5:6e:2a:a8:92:dd:e2:90:05:c8:bb:4d:fe: 15:eb:60:00:00:67:44:4c:b2:ba:76:3c:e6:21:eb: e9:7b:cf:cf:d4:2a:64:c9:1c:5f:ef:77:8a:1b:00: d6:a0:a6:ed:c4:36:09:7f:75:03:ca:85:e7:42:c4: e1:eb:51:84:37:22:bf:6b:91:c1:75:e1:d9:a9:8a: 16:5c:da:fb:61:fb:22:f7:3c:32:83:d3:47:1b:55: 02:fc:f4:e6:dc:61:ed:bf:cb:92:86:16:f3:e9:96: cb:18:93:61:f9:fd:f8:c3:fb:fd:8f:02:74:1d:db: 5b:3d:03:7f:f3:00:00:39:72:94:b0:00:ac:1c:d7: 4b:b8:76:12:39:3d:8e:7d:09:d4:6d:67:ca:15:44: ca:eb:c1:56:c1:32:0c:49:74:1a:0f:67:84:28:db: 27:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7F:8B:6B:1D:D9:F9:1F:E1:14:7E:AF:89:96:93:F7:CE:A2:CF:8E X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.248.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:48:63:6f:e3:ed:f8:f6:8a:e8:02:6f:b2:c7:4a:f4:85:e2: 45:28:96:85:c3:75:c8:06:66:78:f7:2e:42:d0:1f:a7:9a:ef: 65:a0:73:92:48:4f:16:54:18:70:fa:3f:b5:9f:5d:4a:a3:21: ca:4f:9b:fa:45:76:d1:2a:df:1a:0d:d3:55:5c:e3:68:fa:9d: 22:28:76:e0:a5:6b:1e:aa:1a:70:bf:6c:9d:41:aa:d5:36:d5: 16:3d:b0:7a:fb:22:6a:0c:62:0b:58:cf:73:86:b4:9b:ab:61: ca:89:1e:fa:38:5b:5c:e3:91:01:b6:50:86:69:8e:e1:b1:a3: ba:bc:74:9f:b9:56:7f:52:1d:90:9c:b4:49:23:9b:cf:15:6e: 87:07:57:37:1c:40:25:ca:69:3d:55:2e:66:42:1f:ee:8b:7b: d9:3c:71:fd:5a:0a:1b:47:04:97:c3:e7:4f:6c:3a:4f:93:d4: e9:f4:49:5d:07:f2:5d:c8:c3:47:b6:4a:44:99:b3:a1:06:e0: 9b:e0:1b:df:f8:86:47:8e:b1:26:bb:4d:2a:2a:fd:c4:a0:44: fa:85:62:07:33:90:4e:ce:05:54:1c:58:5b:b8:0b:ec:e9:f1: 2c:af:33:92:5c:c7:81:cb:d7:7a:0f:eb:f0:65:c9:43:be:4f: 5e:8f:07:89 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUH5RWcVC/PYa3a9DMaVoVRXu5XMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA2MDIwMTU3MzJaFw0yNjA2MDEwMjAyMzJaMDMxMTAvBgNV BAMTKEVBN0Y4QjZCMUREOUY5MUZFMTE0N0VBRjg5OTY5M0Y3Q0VBMkNGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLE04DKboxA7sqGdh7DFeduMtb fbzHexo/xW1HO283vot/zuJDfdqJxnlOpaWzuwFddConxlXfX9ZUmGQu2C9VR3rM ZS3/seO7XnCKwfrjNEOJIdQrefkItn5B5W4qqJLd4pAFyLtN/hXrYAAAZ0RMsrp2 POYh6+l7z8/UKmTJHF/vd4obANagpu3ENgl/dQPKhedCxOHrUYQ3Ir9rkcF14dmp ihZc2vth+yL3PDKD00cbVQL89ObcYe2/y5KGFvPplssYk2H5/fjD+/2PAnQd21s9 A3/zAAA5cpSwAKwc10u4dhI5PY59CdRtZ8oVRMrrwVbBMgxJdBoPZ4Qo2yfHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6n+Lax3Z+R/hFH6viZaT986iz44wHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNb4MA0GCSqG SIb3DQEBCwUAA4IBAQBPSGNv4+349oroAm+yx0r0heJFKJaFw3XIBmZ49y5C0B+n mu9loHOSSE8WVBhw+j+1n11KoyHKT5v6RXbRKt8aDdNVXONo+p0iKHbgpWseqhpw v2ydQarVNtUWPbB6+yJqDGILWM9zhrSbq2HKiR76OFtc45EBtlCGaY7hsaO6vHSf uVZ/Uh2QnLRJI5vPFW6HB1c3HEAlymk9VS5mQh/ui3vZPHH9WgobRwSXw+dPbDpP k9Tp9EldB/JdyMNHtkpEmbOhBuCb4Bvf+IZHjrEmu00qKv3EoET6hWIHM5BOzgVU HFhbuAvs6fEsrzOSXMeBy9d6D+vwZclDvk9ejweJ -----END CERTIFICATE-----Generated at Sat Jun 7 04:49:25 2025 by rpki-client