$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa File: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (raw, json) Hash identifier: vA7wUsbitPXQ/g+uEYWZCPKwK0C5BXMnrLidIFEb1Os= Subject key identifier: 2B:EB:8B:B1:68:34:AB:06:A2:B1:DB:3D:1E:54:84:E3:53:28:54:60 Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Certificate serial: 1B7233A9AE034EA40F1BF57894D37E086E5E903B Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa Signing time: Wed 02 Apr 2025 17:00:02 +0000 ROA not before: Wed 02 Apr 2025 16:55:02 +0000 ROA not after: Wed 01 Apr 2026 17:00:02 +0000 asID: 58381 IP address blocks: 163.53.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 00:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:72:33:a9:ae:03:4e:a4:0f:1b:f5:78:94:d3:7e:08:6e:5e:90:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Validity Not Before: Apr 2 16:55:02 2025 GMT Not After : Apr 1 17:00:02 2026 GMT Subject: CN=2BEB8BB16834AB06A2B1DB3D1E5484E353285460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:42:dc:9c:51:8f:9d:fb:7b:83:45:09:5f: da:32:82:c3:fb:20:00:d0:1b:e6:81:96:82:1f:92: 7e:21:25:72:81:bf:99:de:f2:52:a5:ef:7c:5f:f9: 09:ad:dd:a5:dc:fc:c3:eb:5f:7d:ac:6d:d1:62:f2: 20:32:d0:e9:76:a0:25:5f:f0:6c:dd:fc:16:ef:03: 36:cb:ec:44:25:79:56:6f:28:3d:dd:33:0c:b4:da: d8:5c:4c:2e:f1:de:56:6d:d2:f2:c8:73:ef:7a:dc: df:5c:c6:d6:d2:44:4b:cd:74:ee:88:aa:4e:38:26: d9:9f:12:cc:c3:c5:c7:b4:a3:46:fa:7e:ab:38:20: 2a:cd:d8:d1:4a:82:76:6e:6a:e2:fd:1a:e4:38:69: 21:1c:6e:d3:22:75:f9:13:3a:3a:b6:ca:cd:b0:92: ee:5d:26:56:a9:a1:64:24:ca:e7:81:18:47:88:9a: f2:27:ef:f5:a5:2e:4c:ab:6f:54:6a:17:79:f7:9a: 68:96:1c:20:09:b9:6f:bb:d0:72:58:26:e1:5e:77: c0:ee:08:6d:16:8b:12:31:ec:ef:1a:25:1d:ac:e9: ef:1e:e9:de:d0:f1:e8:77:18:0b:23:cb:e7:b6:90: af:67:13:5c:de:c8:cb:64:db:df:ec:40:22:75:82: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EB:8B:B1:68:34:AB:06:A2:B1:DB:3D:1E:54:84:E3:53:28:54:60 X509v3 Authority Key Identifier: keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.53.193.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:04:a9:6a:58:ab:f9:90:67:b7:72:34:17:28:fe:ab:0f:4c: 6f:5e:36:41:a2:e8:3a:53:cb:d2:64:ef:3e:b1:e9:cc:40:bd: 87:f9:5e:13:63:ab:58:73:79:b3:24:1f:ae:17:92:f0:54:42: 5c:cb:a6:28:d5:31:1d:9d:ab:24:ae:fa:95:7b:db:e0:d6:06: c9:5c:41:94:99:87:b1:8c:56:2e:65:57:2c:5e:74:12:d7:ec: 2d:a7:29:c1:9a:04:3c:98:d0:93:b2:81:ed:a1:25:ab:a3:f8: 04:83:b9:06:d9:ee:40:12:57:a8:41:23:5a:d6:e4:67:a5:13: c8:41:25:fc:48:93:4d:a6:30:a1:4f:8d:42:24:27:b7:e5:d1: 9a:66:3a:7a:3c:ad:b7:60:63:07:ed:12:b2:a5:97:3e:05:de: 49:0f:92:b6:cf:57:dc:9e:51:23:3e:71:ce:23:f4:1f:66:65: 8d:0c:c0:66:03:40:a6:89:41:c1:45:ed:03:99:b9:c6:70:df: 1a:83:e0:d3:13:63:8a:b6:4a:7a:61:f7:7b:69:92:5e:93:6a: 7c:ef:68:b6:d4:af:60:4d:a0:fd:f7:e2:28:c8:e7:69:45:92: d8:7a:e4:d6:3e:06:f0:aa:84:f7:f8:ed:31:1a:d2:a7:7e:7d: 81:ed:b7:e7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG3Izqa4DTqQPG/V4lNN+CG5ekDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5 OERCRUI5ODAeFw0yNTA0MDIxNjU1MDJaFw0yNjA0MDExNzAwMDJaMDMxMTAvBgNV BAMTKDJCRUI4QkIxNjgzNEFCMDZBMkIxREIzRDFFNTQ4NEUzNTMyODU0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj9ELcnFGPnft7g0UJX9oygsP7 IADQG+aBloIfkn4hJXKBv5ne8lKl73xf+Qmt3aXc/MPrX32sbdFi8iAy0Ol2oCVf 8Gzd/BbvAzbL7EQleVZvKD3dMwy02thcTC7x3lZt0vLIc+963N9cxtbSREvNdO6I qk44JtmfEszDxce0o0b6fqs4ICrN2NFKgnZuauL9GuQ4aSEcbtMidfkTOjq2ys2w ku5dJlapoWQkyueBGEeImvIn7/WlLkyrb1RqF3n3mmiWHCAJuW+70HJYJuFed8Du CG0WixIx7O8aJR2s6e8e6d7Q8eh3GAsjy+e2kK9nE1zeyMtk29/sQCJ1ghULAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUK+uLsWg0qwaisds9HlSE41MoVGAwHwYDVR0j BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC RUI5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzOGQyNzU1LTM4MGQtNDc3ZS1i ZjI1LTBhZjI5MDI2YmQ3MC8wLzMxMzYzMzJlMzUzMzJlMzEzOTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKM1wTANBgkqhkiG 9w0BAQsFAAOCAQEAXwSpalir+ZBnt3I0Fyj+qw9Mb142QaLoOlPL0mTvPrHpzEC9 h/leE2OrWHN5syQfrheS8FRCXMumKNUxHZ2rJK76lXvb4NYGyVxBlJmHsYxWLmVX LF50EtfsLacpwZoEPJjQk7KB7aElq6P4BIO5BtnuQBJXqEEjWtbkZ6UTyEEl/EiT TaYwoU+NQiQnt+XRmmY6ejytt2BjB+0SsqWXPgXeSQ+Sts9X3J5RIz5xziP0H2Zl jQzAZgNApolBwUXtA5m5xnDfGoPg0xNjirZKemH3e2mSXpNqfO9ottSvYE2g/ffi KMjnaUWS2Hrk1j4G8KqE9/jtMRrSp359ge235w== -----END CERTIFICATE-----Generated at Thu Apr 10 13:40:07 2025 by rpki-client