$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa File: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ= Subject key identifier: 89:7E:92:3F:7F:9F:28:79:B3:9A:72:78:A5:8A:05:DB:D1:06:D8:AB Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 348666938BF22240C1A594CBA0CE1859B6DB7413 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa Signing time: Mon 02 Jun 2025 02:02:31 +0000 ROA not before: Mon 02 Jun 2025 01:57:31 +0000 ROA not after: Mon 01 Jun 2026 02:02:31 +0000 asID: 38150 IP address blocks: 180.214.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:86:66:93:8b:f2:22:40:c1:a5:94:cb:a0:ce:18:59:b6:db:74:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jun 2 01:57:31 2025 GMT Not After : Jun 1 02:02:31 2026 GMT Subject: CN=897E923F7F9F2879B39A7278A58A05DBD106D8AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:63:96:8a:d8:f7:c0:58:da:3e:10:3f:37: e1:ae:7c:47:d1:83:a5:d2:6d:ac:30:52:7e:09:8b: 22:73:54:c8:ca:e5:bd:6d:78:68:1a:04:f5:46:bf: 0a:ca:d0:04:90:65:3a:fa:c3:41:83:6c:bc:b6:da: d1:30:b5:44:f4:c2:99:47:94:5d:86:3f:fd:ce:b7: e6:37:db:37:21:68:23:b8:fd:77:9d:eb:bb:5d:8b: c3:35:da:1c:e7:0e:ad:85:6a:ea:c4:1a:a3:29:d8: 4c:1d:09:26:41:0e:74:bb:47:82:68:21:1d:d8:76: 17:1c:79:1a:80:e3:e3:c8:07:08:19:f3:ec:06:ca: 43:90:c0:88:f5:f1:27:84:aa:ea:e7:c4:bc:1c:1c: 5b:a4:05:07:06:d3:83:c5:d3:7d:ae:34:f3:37:4e: 5e:a1:71:2b:fe:2b:49:24:c4:95:91:fd:a4:2f:47: 9a:22:42:50:34:a1:99:2c:65:c1:a3:9c:44:de:f0: 83:e0:d7:02:1d:ab:3f:b0:2f:cc:57:74:7b:73:f3: 20:98:82:c6:37:9c:8c:b3:c1:f4:5c:fd:dc:1c:61: 1b:ac:89:eb:9e:21:c0:8a:86:aa:ee:b3:82:4c:50: ea:07:d8:db:bc:0f:07:65:8c:4d:b3:11:eb:a6:b7: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7E:92:3F:7F:9F:28:79:B3:9A:72:78:A5:8A:05:DB:D1:06:D8:AB X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.254.0/24 Signature Algorithm: sha256WithRSAEncryption b3:4a:13:ae:1c:ac:40:82:a1:55:4e:5a:3d:23:fc:ee:be:3b: 17:1f:a0:6c:83:fd:54:69:c6:ba:4a:af:e2:d2:9f:6c:c3:dc: d1:04:6c:b4:8c:f3:e3:e4:d1:cd:a1:22:88:e5:86:93:94:5c: a1:96:b8:29:ec:ac:39:ac:ae:c0:64:51:5c:15:0f:e0:27:e6: d2:85:74:58:03:08:14:4b:73:d5:66:44:a1:d5:96:ef:9e:1f: 59:1b:b9:7c:f1:2e:f7:04:5f:4d:d4:bc:89:fa:fa:05:1a:59: 5a:11:26:87:19:02:cb:13:3e:f0:d1:03:40:70:c2:29:12:fe: 68:61:b9:16:ad:93:33:b7:2b:a6:69:b1:b8:84:38:3b:fc:24: 3c:13:39:85:31:31:3c:67:31:22:0d:0d:a2:81:d8:86:db:e6: a6:dc:5d:67:9e:5e:02:3b:c6:a4:3a:a4:8b:54:47:9e:30:3f: 34:1e:ef:d4:f7:4a:8c:68:c6:51:30:ab:33:4c:8b:1c:40:1a: ac:c8:54:32:2f:e0:07:d3:40:73:85:73:13:fa:28:64:1a:c3: 70:6a:7b:c5:91:6b:74:96:5d:0f:1d:32:ae:aa:57:ed:bf:23: 90:6a:b2:ec:7b:20:bc:6e:35:c4:ba:39:a6:f9:a4:c8:2e:1b: 01:a3:77:81 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNIZmk4vyIkDBpZTLoM4YWbbbdBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA2MDIwMTU3MzFaFw0yNjA2MDEwMjAyMzFaMDMxMTAvBgNV BAMTKDg5N0U5MjNGN0Y5RjI4NzlCMzlBNzI3OEE1OEEwNURCRDEwNkQ4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZGOWitj3wFjaPhA/N+GufEfR g6XSbawwUn4JiyJzVMjK5b1teGgaBPVGvwrK0ASQZTr6w0GDbLy22tEwtUT0wplH lF2GP/3Ot+Y32zchaCO4/Xed67tdi8M12hznDq2FaurEGqMp2EwdCSZBDnS7R4Jo IR3YdhcceRqA4+PIBwgZ8+wGykOQwIj18SeEqurnxLwcHFukBQcG04PF032uNPM3 Tl6hcSv+K0kkxJWR/aQvR5oiQlA0oZksZcGjnETe8IPg1wIdqz+wL8xXdHtz8yCY gsY3nIyzwfRc/dwcYRusieueIcCKhqrus4JMUOoH2Nu8DwdljE2zEeumt0xlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiX6SP3+fKHmzmnJ4pYoF29EG2KswHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNb+MA0GCSqG SIb3DQEBCwUAA4IBAQCzShOuHKxAgqFVTlo9I/zuvjsXH6Bsg/1Uaca6Sq/i0p9s w9zRBGy0jPPj5NHNoSKI5YaTlFyhlrgp7Kw5rK7AZFFcFQ/gJ+bShXRYAwgUS3PV ZkSh1Zbvnh9ZG7l88S73BF9N1LyJ+voFGllaESaHGQLLEz7w0QNAcMIpEv5oYbkW rZMztyumabG4hDg7/CQ8EzmFMTE8ZzEiDQ2igdiG2+am3F1nnl4CO8akOqSLVEee MD80Hu/U90qMaMZRMKszTIscQBqsyFQyL+AH00BzhXMT+ihkGsNwanvFkWt0ll0P HTKuqlftvyOQarLseyC8bjXEujmm+aTILhsBo3eB -----END CERTIFICATE-----Generated at Thu Jun 5 18:37:14 2025 by rpki-client