$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33352e302f32342d3234203d3e203538343837.roa File: 3230322e31302e33352e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: vmk5hunDESN8vOvL6W88fmk4goDHn/1O8OmmUKbXwCI= Subject key identifier: C3:7F:29:52:6D:0A:8B:54:8B:3B:AD:18:C8:D8:F6:22:D4:29:F7:17 Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 011C86331E31BAC193F27FDC1B17584C58F3A802 Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33352e302f32342d3234203d3e203538343837.roa Signing time: Thu 13 Mar 2025 10:00:45 +0000 ROA not before: Thu 13 Mar 2025 09:55:45 +0000 ROA not after: Thu 12 Mar 2026 10:00:45 +0000 asID: 58487 IP address blocks: 202.10.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 12:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1c:86:33:1e:31:ba:c1:93:f2:7f:dc:1b:17:58:4c:58:f3:a8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Mar 13 09:55:45 2025 GMT Not After : Mar 12 10:00:45 2026 GMT Subject: CN=C37F29526D0A8B548B3BAD18C8D8F622D429F717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:79:57:d6:d7:76:6b:0f:ab:f1:a6:d6:b9: 75:20:0d:fc:36:bb:f8:f5:52:21:0e:bc:ad:d3:cd: 13:a3:f5:d2:e6:12:e6:77:34:02:df:a9:0d:db:79: 00:36:b4:2b:0f:70:a1:d4:51:2a:e8:0a:b6:9b:e1: 10:c7:b5:30:e1:1f:85:77:bc:df:39:4b:1e:5d:f0: 96:d4:83:33:1a:fa:92:10:f2:12:58:47:ed:4a:69: 88:6a:e7:74:d5:2b:68:3b:51:bd:b0:09:5f:01:43: df:8a:9c:38:f7:dc:8c:39:81:75:e2:1b:ac:ef:71: 0b:5f:d0:66:6d:b5:5a:83:2c:46:85:57:21:4c:b6: b4:d8:6c:53:6b:7c:72:63:35:bd:5c:c4:bd:f0:d8: 6f:24:c4:5c:17:08:a0:ad:72:5f:57:4b:98:bf:05: d8:d9:fd:81:ae:3f:e2:75:13:85:15:cc:24:e8:5c: 51:e4:7f:67:ea:18:25:82:a3:58:33:e3:99:de:98: e2:35:6c:66:29:e7:fb:b9:05:86:3c:ec:8b:ed:36: 76:9a:45:64:50:dd:9e:9e:39:ab:3f:46:6a:80:36: d9:d3:76:0d:f6:ae:76:05:9e:75:0e:6a:c4:18:7a: 1a:f8:b4:5a:f3:32:b7:6d:8f:c3:ab:13:0e:e7:07: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7F:29:52:6D:0A:8B:54:8B:3B:AD:18:C8:D8:F6:22:D4:29:F7:17 X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33352e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.35.0/24 Signature Algorithm: sha256WithRSAEncryption 96:88:12:ea:1e:8a:90:1e:ba:c8:20:fe:bb:36:ef:8e:5b:c8: c6:f5:a5:a2:72:1f:63:4e:01:12:02:ca:0c:69:f9:4c:a9:5f: e7:4f:8b:28:e5:2f:da:ba:f4:f9:a9:36:d4:bc:1e:58:2b:2d: de:4f:ac:0c:bf:87:81:a8:72:9e:5c:2d:66:c1:bf:38:bc:22: ba:02:32:39:f4:92:e2:3f:1d:5d:74:f8:73:26:c4:a3:e6:48: 34:d4:3a:49:5b:1b:62:92:0e:44:13:5a:33:38:9b:9c:30:fe: 8e:d5:66:79:f9:ca:71:8e:d3:26:6a:31:27:e7:e1:03:fa:bf: 39:10:4c:ac:93:2b:c6:48:6a:41:f4:03:48:20:99:c1:7b:8b: 3a:6c:3b:04:5d:26:f4:ba:c9:1a:34:8d:97:86:ca:79:4c:44: 07:20:e6:bb:8f:3e:5c:c9:19:98:e7:de:d6:7f:99:2d:db:58: e5:06:f9:d3:e7:d7:6d:16:17:4e:07:95:1f:4b:c4:3e:17:91: b6:ac:66:01:d0:8f:de:d4:59:64:3a:2d:30:1e:3a:6e:52:db: 59:3b:28:3f:73:e3:91:d4:f5:5c:7a:0b:70:7f:36:ba:f7:32: 36:f2:71:e8:ec:ff:cd:62:84:52:0b:38:c9:30:83:03:b9:ec: 5a:12:bb:a9 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUARyGMx4xusGT8n/cGxdYTFjzqAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNTAzMTMwOTU1NDVaFw0yNjAzMTIxMDAwNDVaMDMxMTAvBgNV BAMTKEMzN0YyOTUyNkQwQThCNTQ4QjNCQUQxOEM4RDhGNjIyRDQyOUY3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3HlX1td2aw+r8abWuXUgDfw2 u/j1UiEOvK3TzROj9dLmEuZ3NALfqQ3beQA2tCsPcKHUUSroCrab4RDHtTDhH4V3 vN85Sx5d8JbUgzMa+pIQ8hJYR+1KaYhq53TVK2g7Ub2wCV8BQ9+KnDj33Iw5gXXi G6zvcQtf0GZttVqDLEaFVyFMtrTYbFNrfHJjNb1cxL3w2G8kxFwXCKCtcl9XS5i/ BdjZ/YGuP+J1E4UVzCToXFHkf2fqGCWCo1gz45nemOI1bGYp5/u5BYY87IvtNnaa RWRQ3Z6eOas/RmqANtnTdg32rnYFnnUOasQYehr4tFrzMrdtj8OrEw7nB7qnAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUw38pUm0Ki1SLO60YyNj2ItQp9xcwHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiMwDQYJKoZIhvcN AQELBQADggEBAJaIEuoeipAeusgg/rs2745byMb1paJyH2NOARICygxp+UypX+dP iyjlL9q69PmpNtS8HlgrLd5PrAy/h4Gocp5cLWbBvzi8IroCMjn0kuI/HV10+HMm xKPmSDTUOklbG2KSDkQTWjM4m5ww/o7VZnn5ynGO0yZqMSfn4QP6vzkQTKyTK8ZI akH0A0ggmcF7izpsOwRdJvS6yRo0jZeGynlMRAcg5ruPPlzJGZjn3tZ/mS3bWOUG +dPn120WF04HlR9LxD4XkbasZgHQj97UWWQ6LTAeOm5S21k7KD9z45HU9Vx6C3B/ Nrr3Mjbycejs/81ihFILOMkwgwO57FoSu6k= -----END CERTIFICATE-----Generated at Sun Apr 6 07:07:49 2025 by rpki-client