$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa File: 3132322e3132382e31362e302f32342d3234203d3e203436303435.roa (raw, json) Hash identifier: sAwAc9IZ0DLVOhouh4zmTpqaxK9YADxytwY1+gNq8u0= Subject key identifier: 55:94:54:07:62:CE:5C:18:73:F3:28:26:1C:19:6D:8D:2F:B5:27:AF Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F Certificate serial: 41364D62E96C1C2D05AA21E94681287019D99B61 Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa Signing time: Tue 20 May 2025 05:02:23 +0000 ROA not before: Tue 20 May 2025 04:57:23 +0000 ROA not after: Tue 19 May 2026 05:02:23 +0000 asID: 46045 IP address blocks: 122.128.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:36:4d:62:e9:6c:1c:2d:05:aa:21:e9:46:81:28:70:19:d9:9b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00EE953FD699788668C724460F4D8D420238194F Validity Not Before: May 20 04:57:23 2025 GMT Not After : May 19 05:02:23 2026 GMT Subject: CN=5594540762CE5C1873F328261C196D8D2FB527AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:9a:9e:a2:1f:7e:9e:67:82:ce:a6:27:7d: e9:2f:fe:e8:03:c4:1c:d1:6c:03:b5:91:47:a1:85: 62:f5:d6:ce:c9:c5:84:1b:05:f0:2f:c5:e2:38:be: 29:e8:7d:d5:7c:27:cb:58:7a:a0:58:c5:27:22:6a: 3d:45:85:b1:66:d8:1a:84:84:37:63:fe:27:51:bc: 3a:64:98:4d:20:25:9f:65:9a:15:c5:fc:77:0d:c6: 6d:44:45:a5:f4:1e:20:f8:bb:73:33:46:08:bd:29: 52:54:33:ea:c3:88:8f:41:11:e2:88:4d:77:d5:fa: 9c:fa:79:52:84:41:20:7c:d3:c4:2f:2e:ae:c2:0f: f9:e3:fd:b5:00:ee:7a:b2:da:2a:44:31:72:14:9a: 2c:49:85:e1:cf:64:60:0f:96:85:d3:74:6c:35:bf: 43:f9:61:a0:3c:f2:27:5f:cd:de:43:98:6f:3b:d1: 71:6f:f6:c1:5d:ba:03:22:da:42:51:29:f8:a9:9f: 63:27:a9:04:14:21:78:c5:76:49:18:af:8b:6d:51: 16:60:68:ab:f6:7a:3c:64:de:42:fe:a5:7d:1c:ac: 19:13:be:6d:9f:c9:86:76:2a:9e:c4:11:b5:36:f5: bb:d7:b2:03:e8:da:d9:40:a5:41:0f:e6:d6:ea:9a: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:94:54:07:62:CE:5C:18:73:F3:28:26:1C:19:6D:8D:2F:B5:27:AF X509v3 Authority Key Identifier: keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e203436303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.16.0/24 Signature Algorithm: sha256WithRSAEncryption 30:df:14:07:2e:17:cb:a2:1b:dd:c6:bb:5e:f6:12:62:be:6c: 0a:0b:d7:79:8b:82:3c:06:4f:6c:64:19:c3:50:b0:b3:cc:44: 1d:eb:df:07:bc:99:1e:85:e1:c1:44:3e:f7:ab:cf:2f:62:d3: 33:51:73:8f:e0:99:aa:0c:e9:31:58:e0:3d:b4:0f:eb:34:8c: d4:f1:7b:fe:48:4a:ef:2c:5c:1e:57:07:6f:e5:5d:25:a9:da: 95:31:38:a3:e8:df:81:8b:60:a3:a4:e2:8f:d3:05:79:5c:a7: aa:3c:d8:34:e9:e3:db:a7:ff:95:05:b5:cb:00:b3:5b:40:80: 68:c8:45:b4:bf:88:56:c6:93:2a:55:2a:80:57:0d:1e:2d:be: e9:0d:fb:d4:cd:3d:7f:83:d7:ce:86:66:61:66:cd:cc:f0:32: b2:d0:ef:c2:8d:e7:bf:d5:cf:ad:3a:64:ac:77:ed:2d:a0:e2: 63:94:bb:2c:a3:63:50:af:5d:0d:bb:f5:d2:8a:a3:25:7f:a2: c7:98:46:f1:10:ac:ea:af:7e:14:e2:53:83:8c:33:15:78:60: 7c:07:ee:4f:df:25:67:98:f1:27:b5:2e:38:55:82:64:12:3a: 9c:44:9e:de:c1:19:79:f5:4e:db:5b:82:24:75:b9:3c:b4:d1: e4:17:a3:f2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQTZNYulsHC0FqiHpRoEocBnZm2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw MjM4MTk0RjAeFw0yNTA1MjAwNDU3MjNaFw0yNjA1MTkwNTAyMjNaMDMxMTAvBgNV BAMTKDU1OTQ1NDA3NjJDRTVDMTg3M0YzMjgyNjFDMTk2RDhEMkZCNTI3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7pqeoh9+nmeCzqYnfekv/ugD xBzRbAO1kUehhWL11s7JxYQbBfAvxeI4vinofdV8J8tYeqBYxSciaj1FhbFm2BqE hDdj/idRvDpkmE0gJZ9lmhXF/HcNxm1ERaX0HiD4u3MzRgi9KVJUM+rDiI9BEeKI TXfV+pz6eVKEQSB808QvLq7CD/nj/bUA7nqy2ipEMXIUmixJheHPZGAPloXTdGw1 v0P5YaA88idfzd5DmG870XFv9sFdugMi2kJRKfipn2MnqQQUIXjFdkkYr4ttURZg aKv2ejxk3kL+pX0crBkTvm2fyYZ2Kp7EEbU29bvXsgPo2tlApUEP5tbqmkLDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVZRUB2LOXBhz8ygmHBltjS+1J68wHwYDVR0j BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2 OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4 MTk0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAEDANBgkqhkiG 9w0BAQsFAAOCAQEAMN8UBy4Xy6Ib3ca7XvYSYr5sCgvXeYuCPAZPbGQZw1Cws8xE HevfB7yZHoXhwUQ+96vPL2LTM1Fzj+CZqgzpMVjgPbQP6zSM1PF7/khK7yxcHlcH b+VdJanalTE4o+jfgYtgo6Tij9MFeVynqjzYNOnj26f/lQW1ywCzW0CAaMhFtL+I VsaTKlUqgFcNHi2+6Q371M09f4PXzoZmYWbNzPAystDvwo3nv9XPrTpkrHftLaDi Y5S7LKNjUK9dDbv10oqjJX+ix5hG8RCs6q9+FOJTg4wzFXhgfAfuT98lZ5jxJ7Uu OFWCZBI6nESe3sEZefVO21uCJHW5PLTR5Bej8g== -----END CERTIFICATE-----Generated at Thu Jun 5 18:27:55 2025 by rpki-client