$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa File: 3230322e31302e34332e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: IPymeFIY4vvBiI4EHDBGEvCTCNOLIzPbdabJg4HBCFk= Subject key identifier: C0:88:53:D8:95:2F:18:04:C6:B3:E1:5F:AF:B3:D3:68:A0:A1:81:9D Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 06D2D98649F8BB66683AC9826395CBB39B72419C Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa Signing time: Thu 13 Mar 2025 11:02:23 +0000 ROA not before: Thu 13 Mar 2025 10:57:23 +0000 ROA not after: Thu 12 Mar 2026 11:02:23 +0000 asID: 58487 IP address blocks: 202.10.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 12:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d2:d9:86:49:f8:bb:66:68:3a:c9:82:63:95:cb:b3:9b:72:41:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Mar 13 10:57:23 2025 GMT Not After : Mar 12 11:02:23 2026 GMT Subject: CN=C08853D8952F1804C6B3E15FAFB3D368A0A1819D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:f4:50:83:5c:6d:b3:35:10:ae:19:23:6b: b7:4d:08:e9:2e:b1:d1:df:29:02:ca:c2:60:86:5a: f3:80:58:44:6d:06:e3:b2:28:93:01:e4:1d:1b:c4: f8:83:a6:23:63:05:7d:1a:d8:d7:17:57:cc:0f:0c: c9:d7:5d:c0:7e:18:68:41:37:63:c5:bf:c2:7c:2a: 21:d2:bc:6c:32:04:5a:64:86:69:f2:86:05:34:5c: eb:1d:03:79:02:33:96:f7:4f:ba:95:3a:1f:9f:74: a8:27:29:1d:0c:da:f1:e2:21:e6:5e:3d:5c:1e:99: 72:c8:2d:f7:b8:bc:79:82:3d:12:d2:15:20:43:02: fe:cf:46:ab:05:4e:b6:40:9c:97:14:3c:b0:05:80: 85:12:b0:c6:b5:53:59:3f:22:2a:66:f3:be:d0:a1: eb:41:b0:70:aa:5e:e6:f3:d7:c7:47:d8:18:56:60: 7e:9a:85:bc:03:dc:1b:7f:0f:5e:6b:72:1b:2e:63: ec:71:95:d2:a3:26:fa:9e:b3:a0:11:3d:bc:21:ae: 57:db:cc:a4:b9:bd:76:04:77:dc:30:36:3f:72:25: c2:4e:46:36:79:7e:32:0e:5b:7e:03:64:b0:84:81: c1:56:1b:26:83:d8:23:e3:a4:fc:0f:89:41:a1:fa: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:88:53:D8:95:2F:18:04:C6:B3:E1:5F:AF:B3:D3:68:A0:A1:81:9D X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.43.0/24 Signature Algorithm: sha256WithRSAEncryption c3:99:fd:2d:91:d5:2d:63:0c:48:f5:5a:da:39:64:0e:09:f9: 72:2d:42:ff:4a:db:5e:bb:1d:b9:72:06:9b:92:dd:aa:7e:3a: 4b:80:53:0d:f4:11:d2:d9:7f:1d:4e:ec:74:6b:cb:91:2f:5a: 06:90:de:f8:69:c4:7f:5f:c1:70:5b:e7:bb:41:89:6d:33:ca: b7:c0:72:a9:fb:54:2d:fb:a9:0e:a8:c5:2e:c1:f5:25:9f:c9: 06:b5:06:dd:b9:a0:03:c5:64:eb:ea:08:a4:ba:de:6f:76:a4: 0f:21:17:f1:06:f5:bb:58:7a:ca:41:83:66:d5:3f:8c:36:8f: 62:ee:4e:cf:d7:e6:14:7f:84:44:6e:f5:c3:0f:5d:c5:b2:d3: 3c:81:5d:53:91:31:f2:a4:2f:85:45:83:9c:69:a7:9a:5a:1f: 4d:47:6b:f8:50:2c:8e:f5:2b:fa:e1:a8:2f:c1:45:d3:2a:93: 9c:8b:c6:d7:57:65:8c:c0:25:82:34:3c:97:1b:25:0f:91:b4: e2:a3:f8:e7:0e:24:9c:93:dd:25:03:8e:cd:72:28:b7:b5:5a: d8:1e:28:ec:65:5e:63:04:30:e4:98:a4:94:32:c4:55:49:85: be:bb:45:4d:d1:05:c5:ab:b2:c0:6f:b7:4f:49:df:79:6c:e7: 72:08:36:56 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUBtLZhkn4u2ZoOsmCY5XLs5tyQZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNTAzMTMxMDU3MjNaFw0yNjAzMTIxMTAyMjNaMDMxMTAvBgNV BAMTKEMwODg1M0Q4OTUyRjE4MDRDNkIzRTE1RkFGQjNEMzY4QTBBMTgxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpfRQg1xtszUQrhkja7dNCOku sdHfKQLKwmCGWvOAWERtBuOyKJMB5B0bxPiDpiNjBX0a2NcXV8wPDMnXXcB+GGhB N2PFv8J8KiHSvGwyBFpkhmnyhgU0XOsdA3kCM5b3T7qVOh+fdKgnKR0M2vHiIeZe PVwemXLILfe4vHmCPRLSFSBDAv7PRqsFTrZAnJcUPLAFgIUSsMa1U1k/Iipm877Q oetBsHCqXubz18dH2BhWYH6ahbwD3Bt/D15rchsuY+xxldKjJvqes6ARPbwhrlfb zKS5vXYEd9wwNj9yJcJORjZ5fjIOW34DZLCEgcFWGyaD2CPjpPwPiUGh+uIZAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUwIhT2JUvGATGs+Ffr7PTaKChgZ0wHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiswDQYJKoZIhvcN AQELBQADggEBAMOZ/S2R1S1jDEj1Wto5ZA4J+XItQv9K2167HblyBpuS3ap+OkuA Uw30EdLZfx1O7HRry5EvWgaQ3vhpxH9fwXBb57tBiW0zyrfAcqn7VC37qQ6oxS7B 9SWfyQa1Bt25oAPFZOvqCKS63m92pA8hF/EG9btYespBg2bVP4w2j2LuTs/X5hR/ hERu9cMPXcWy0zyBXVORMfKkL4VFg5xpp5paH01Ha/hQLI71K/rhqC/BRdMqk5yL xtdXZYzAJYI0PJcbJQ+RtOKj+OcOJJyT3SUDjs1yKLe1WtgeKOxlXmMEMOSYpJQy xFVJhb67RU3RBcWrssBvt09J33ls53IINlY= -----END CERTIFICATE-----Generated at Sun Apr 6 07:08:07 2025 by rpki-client