$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203234353238.roa File: 3230322e39312e33302e302f32342d3234203d3e203234353238.roa (raw, json) Hash identifier: SRVdqccofthtkv2uwfSLIsY2tVzjR9tDeypT6l5PKBc= Subject key identifier: C9:03:94:39:8D:D1:0F:F7:4D:DC:4F:DC:A5:D3:FA:37:5C:39:31:E0 Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 0BAA3C99BEDCC6464828966568F2B8A993E7B5FF Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203234353238.roa Signing time: Sun 18 May 2025 05:00:00 +0000 ROA not before: Sun 18 May 2025 04:55:00 +0000 ROA not after: Sun 17 May 2026 05:00:00 +0000 asID: 24528 IP address blocks: 202.91.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:aa:3c:99:be:dc:c6:46:48:28:96:65:68:f2:b8:a9:93:e7:b5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: May 18 04:55:00 2025 GMT Not After : May 17 05:00:00 2026 GMT Subject: CN=C90394398DD10FF74DDC4FDCA5D3FA375C3931E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:da:64:bd:ac:73:74:7c:42:00:84:09:bd: 7d:ac:13:c9:8f:a9:ca:48:9d:eb:b2:03:c6:c6:08: 8c:b9:5c:38:a1:0b:05:03:36:8e:15:9b:2c:24:e4: 2c:c3:4a:fe:d9:d9:a1:6a:d1:37:fe:a9:26:45:e6: e3:66:76:0b:8d:28:79:99:3b:1c:cb:4f:73:cb:65: a3:83:5b:df:5d:c8:14:ab:8c:25:a6:54:45:f9:4d: 4e:5b:71:cd:86:f8:28:64:a6:0d:9d:1f:77:d6:10: 38:33:ec:fe:90:52:71:ba:41:20:2a:0e:b7:c8:12: 9e:95:f8:7c:88:d6:ea:e9:1e:4a:2f:7d:c9:18:e9: dc:71:3e:7a:2f:0d:84:4a:e2:90:fc:d0:45:48:44: b1:f2:45:6e:12:1b:e2:4e:a6:4c:0d:57:2a:dd:68: 97:fa:a3:f5:4b:eb:c8:d0:a6:c1:2e:ec:e9:60:82: d1:c0:ef:4d:a7:07:0f:37:49:b1:5a:42:b4:ee:b5: 93:bd:31:40:75:bf:91:ea:90:93:6f:08:9c:e8:e9: c1:5f:d9:4d:8c:0b:25:3e:36:fb:71:e5:43:77:14: 41:39:22:d1:5c:40:ba:6e:9f:28:39:e5:fd:3d:c2: 85:86:21:63:f9:10:85:55:76:47:e5:f2:99:a7:b3: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:94:39:8D:D1:0F:F7:4D:DC:4F:DC:A5:D3:FA:37:5C:39:31:E0 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e33302e302f32342d3234203d3e203234353238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.30.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ff:1f:fc:ae:63:2c:db:28:36:0f:4b:fc:00:7a:0b:80:35: 05:2e:7a:14:81:02:e7:79:87:fd:96:09:53:c6:d9:46:a1:fe: d6:52:e5:c3:a0:49:b5:39:92:13:7f:e9:4a:66:7c:40:36:3c: 40:d8:1a:2e:7d:2c:96:24:03:a3:04:e4:a6:ee:ea:77:b1:98: 9d:1f:61:d1:b7:94:b2:70:91:13:c1:3d:10:fc:5a:d6:ce:ed: d9:a1:3b:9c:26:fd:ec:5b:99:e0:cd:9c:04:7b:fb:9b:82:e3: 01:aa:43:92:e5:5d:f5:70:ac:3a:63:25:b2:20:a2:3d:4b:b9: 59:4f:80:3f:33:75:2b:0b:a1:b3:c6:af:8d:43:2f:92:42:7d: 06:52:41:f6:ca:e5:ca:2b:df:17:2b:fa:24:c2:f0:66:4e:43: 92:74:2a:25:eb:20:1f:e8:b6:d1:29:2d:bc:45:d1:cc:81:21: 75:a3:44:f3:81:d0:a3:91:f0:8e:c2:66:ff:71:18:f6:56:81: b1:46:ad:26:23:17:70:07:4a:87:88:9f:72:72:1a:d2:2b:e7: 0f:67:14:fe:10:02:e6:1a:83:b5:2b:e1:e9:13:2f:b1:5e:e0: a5:e7:4a:5f:78:a6:89:99:ec:dc:4c:49:18:99:6f:8c:e0:84: 9f:86:1b:53 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUC6o8mb7cxkZIKJZlaPK4qZPntf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNTA1MTgwNDU1MDBaFw0yNjA1MTcwNTAwMDBaMDMxMTAvBgNV BAMTKEM5MDM5NDM5OEREMTBGRjc0RERDNEZEQ0E1RDNGQTM3NUMzOTMxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jdpkvaxzdHxCAIQJvX2sE8mP qcpIneuyA8bGCIy5XDihCwUDNo4Vmywk5CzDSv7Z2aFq0Tf+qSZF5uNmdguNKHmZ OxzLT3PLZaODW99dyBSrjCWmVEX5TU5bcc2G+Chkpg2dH3fWEDgz7P6QUnG6QSAq DrfIEp6V+HyI1urpHkovfckY6dxxPnovDYRK4pD80EVIRLHyRW4SG+JOpkwNVyrd aJf6o/VL68jQpsEu7OlggtHA702nBw83SbFaQrTutZO9MUB1v5HqkJNvCJzo6cFf 2U2MCyU+Nvtx5UN3FEE5ItFcQLpunyg55f09woWGIWP5EIVVdkfl8pmns8PPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUyQOUOY3RD/dN3E/cpdP6N1w5MeAwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMyMzAzMjJlMzkzMTJlMzMzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzQzNTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWx4wDQYJKoZIhvcN AQELBQADggEBAEX/H/yuYyzbKDYPS/wAeguANQUuehSBAud5h/2WCVPG2Uah/tZS 5cOgSbU5khN/6UpmfEA2PEDYGi59LJYkA6ME5Kbu6nexmJ0fYdG3lLJwkRPBPRD8 WtbO7dmhO5wm/exbmeDNnAR7+5uC4wGqQ5LlXfVwrDpjJbIgoj1LuVlPgD8zdSsL obPGr41DL5JCfQZSQfbK5cor3xcr+iTC8GZOQ5J0KiXrIB/ottEpLbxF0cyBIXWj RPOB0KOR8I7CZv9xGPZWgbFGrSYjF3AHSoeIn3JyGtIr5w9nFP4QAuYag7Ur4ekT L7Fe4KXnSl94pomZ7NxMSRiZb4zghJ+GG1M= -----END CERTIFICATE-----Generated at Sat Jun 7 23:14:33 2025 by rpki-client