$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa File: 3230322e31302e34362e302f32342d3234203d3e203538343837.roa (raw, json) Hash identifier: Dk232DynCkmrZBXmUPs/XaQ3rhJnt/TRi48HRxBA1w8= Subject key identifier: A9:30:1D:4D:17:BF:22:CD:F4:34:7A:8E:89:6E:47:BB:F8:94:38:2B Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Certificate serial: 3E5356755A1DF0E38BE8FADA7D75AA7E3F817AF7 Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa Signing time: Thu 13 Mar 2025 11:02:23 +0000 ROA not before: Thu 13 Mar 2025 10:57:23 +0000 ROA not after: Thu 12 Mar 2026 11:02:23 +0000 asID: 58487 IP address blocks: 202.10.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 12:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:53:56:75:5a:1d:f0:e3:8b:e8:fa:da:7d:75:aa:7e:3f:81:7a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E Validity Not Before: Mar 13 10:57:23 2025 GMT Not After : Mar 12 11:02:23 2026 GMT Subject: CN=A9301D4D17BF22CDF4347A8E896E47BBF894382B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:7e:0c:ea:8f:5e:67:71:87:ac:d7:b6:65: 5e:e7:8c:f6:e5:e1:a7:d0:2f:dd:93:89:15:86:a7: 09:fa:6e:b9:9a:53:b1:c3:c4:3a:10:dd:b7:fc:a5: d3:b8:ec:c2:0b:d0:02:8c:8d:0e:e2:0f:06:24:90: 65:85:a7:8e:cc:96:ac:aa:6d:39:3a:08:3a:d9:1c: 8e:dc:a3:87:64:bc:f5:81:49:cf:60:1d:76:be:a3: bf:55:a2:4b:d3:68:7b:43:37:71:a1:57:9d:af:a5: ad:4c:1f:82:70:40:e6:fe:b6:6d:6b:ee:a4:c4:fa: 4a:bf:20:d3:d2:3a:2a:33:78:17:61:57:d6:ad:96: 7a:d8:17:1b:fd:8f:d5:c3:59:74:44:70:ee:29:40: 28:48:91:1a:a8:15:c2:b7:2c:74:f8:b9:2f:b7:15: ce:fb:7b:f3:90:bb:e6:6d:bc:27:d3:4b:c7:df:87: 2b:e8:70:92:16:d3:1d:00:cf:69:ac:6b:a2:0d:bc: 67:67:80:37:a6:f6:62:23:cf:29:c0:ec:7a:b6:06: ee:26:6b:9e:ee:43:4b:0d:e1:74:9a:e8:b4:d5:75: 8f:10:35:aa:9e:d9:e7:ae:bc:80:04:78:52:03:19: a3:f0:fe:f1:b4:92:b4:26:94:de:99:70:95:66:53: 51:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:30:1D:4D:17:BF:22:CD:F4:34:7A:8E:89:6E:47:BB:F8:94:38:2B X509v3 Authority Key Identifier: keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.46.0/24 Signature Algorithm: sha256WithRSAEncryption 58:7d:e5:92:2b:ba:ea:df:2b:3f:1f:e3:ac:ce:d1:a8:55:14: e7:4c:aa:99:e9:ff:99:14:36:7f:a7:c6:86:6c:99:60:2e:0a: 79:a9:2e:85:e6:4c:36:88:61:12:b8:3e:f0:b6:cb:37:25:5a: 8e:77:d0:c9:fc:96:28:ee:a0:d2:e7:6a:81:df:cd:d5:2c:53: f2:6f:aa:00:eb:2c:7c:7d:32:57:22:af:99:3f:b0:b8:f3:d8: 23:78:37:e6:cd:06:50:6a:c8:23:dc:a9:2a:92:5b:13:88:6f: 76:f7:1a:7c:f5:0c:73:fc:72:14:0a:83:7e:18:90:a6:ca:59: 86:54:69:cd:1e:a7:5c:62:b2:79:49:5f:4e:fe:44:1a:ae:86: 7d:b0:cd:30:ea:dc:f4:99:1a:57:70:e5:13:c3:54:e9:4a:25: 6e:8a:9c:37:77:9a:ad:82:6e:4a:11:a4:ec:f4:a6:48:29:f5: 38:63:d3:7a:1a:61:2b:54:6f:9a:f4:84:22:f1:ab:00:fa:b6: 5b:21:21:1a:0c:0f:3a:7b:7d:ac:65:77:0c:35:e1:07:b3:30: ba:b8:8f:f3:98:ef:8f:cc:d9:28:e8:9a:1e:71:cc:55:96:be: cc:3e:2b:93:6a:9f:f3:30:8c:50:22:10:d1:9a:8d:10:a3:52: 1e:e9:36:d3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUPlNWdVod8OOL6PrafXWqfj+BevcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5 MkFBQkU2RTAeFw0yNTAzMTMxMDU3MjNaFw0yNjAzMTIxMTAyMjNaMDMxMTAvBgNV BAMTKEE5MzAxRDREMTdCRjIyQ0RGNDM0N0E4RTg5NkU0N0JCRjg5NDM4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5S34M6o9eZ3GHrNe2ZV7njPbl 4afQL92TiRWGpwn6brmaU7HDxDoQ3bf8pdO47MIL0AKMjQ7iDwYkkGWFp47Mlqyq bTk6CDrZHI7co4dkvPWBSc9gHXa+o79VokvTaHtDN3GhV52vpa1MH4JwQOb+tm1r 7qTE+kq/INPSOiozeBdhV9atlnrYFxv9j9XDWXREcO4pQChIkRqoFcK3LHT4uS+3 Fc77e/OQu+ZtvCfTS8ffhyvocJIW0x0Az2msa6INvGdngDem9mIjzynA7Hq2Bu4m a57uQ0sN4XSa6LTVdY8QNaqe2eeuvIAEeFIDGaPw/vG0krQmlN6ZcJVmU1HJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUqTAdTRe/Is30NHqOiW5Hu/iUOCswHwYDVR0j BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05 N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCi4wDQYJKoZIhvcN AQELBQADggEBAFh95ZIruurfKz8f46zO0ahVFOdMqpnp/5kUNn+nxoZsmWAuCnmp LoXmTDaIYRK4PvC2yzclWo530Mn8lijuoNLnaoHfzdUsU/JvqgDrLHx9Mlcir5k/ sLjz2CN4N+bNBlBqyCPcqSqSWxOIb3b3Gnz1DHP8chQKg34YkKbKWYZUac0ep1xi snlJX07+RBquhn2wzTDq3PSZGldw5RPDVOlKJW6KnDd3mq2CbkoRpOz0pkgp9Thj 03oaYStUb5r0hCLxqwD6tlshIRoMDzp7faxldww14QezMLq4j/OY74/M2Sjomh5x zFWWvsw+K5Nqn/MwjFAiENGajRCjUh7pNtM= -----END CERTIFICATE-----Generated at Sun Apr 6 07:08:01 2025 by rpki-client