$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32302e302f32342d3234203d3e203436303435.roa File: 3132322e3132382e32302e302f32342d3234203d3e203436303435.roa (raw, json) Hash identifier: FgOjY7TNj+vVOTY+T0f+/7XZ2PEhUJFN/481ZR8iBC4= Subject key identifier: 6A:E8:EA:DE:5D:60:B4:D0:D9:A8:88:53:4F:3F:5C:DB:4B:09:90:6D Certificate issuer: /CN=00EE953FD699788668C724460F4D8D420238194F Certificate serial: 6D0B858687A83348E9A3FCD81DC74CBD235372B2 Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32302e302f32342d3234203d3e203436303435.roa Signing time: Tue 20 May 2025 07:02:58 +0000 ROA not before: Tue 20 May 2025 06:57:58 +0000 ROA not after: Tue 19 May 2026 07:02:58 +0000 asID: 46045 IP address blocks: 122.128.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0b:85:86:87:a8:33:48:e9:a3:fc:d8:1d:c7:4c:bd:23:53:72:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00EE953FD699788668C724460F4D8D420238194F Validity Not Before: May 20 06:57:58 2025 GMT Not After : May 19 07:02:58 2026 GMT Subject: CN=6AE8EADE5D60B4D0D9A888534F3F5CDB4B09906D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:1d:af:e1:46:26:3b:41:e0:6a:5b:77:36: d2:78:c9:0b:59:3f:33:f3:20:c2:9e:af:93:a8:c3: 5c:89:1b:b3:a4:f9:d3:12:ce:4e:ad:46:05:0d:b4: 46:65:04:92:57:72:b8:97:45:f4:5f:2b:7b:04:cf: 16:54:f5:f3:22:a1:79:69:81:27:d6:ce:b7:95:d5: e5:d6:c0:76:fd:da:fe:6b:8a:df:cc:b7:a9:39:e4: 42:84:78:b8:df:de:6c:f8:31:9b:19:ce:9f:37:aa: 6a:ab:44:87:a1:0b:d0:f5:03:60:04:e5:32:c9:e7: 79:85:ce:9b:1b:b2:e7:5e:41:99:d5:c7:ad:2d:b6: e6:99:35:94:84:53:8b:1f:a9:59:1f:63:ed:74:92: 89:29:d2:04:a8:c3:58:fb:8c:a6:9c:92:77:cc:5d: 50:88:5a:76:42:ae:ec:29:9a:f4:95:ee:de:25:48: 41:cf:4d:67:8a:ea:69:9e:53:08:85:80:09:66:f2: e5:9a:ab:3b:d8:db:3a:22:e0:e8:52:6e:d6:28:91: 05:94:44:c9:3f:70:df:1c:24:84:28:7d:6d:29:c1: eb:6a:26:ed:d8:ba:b6:b1:54:40:12:31:f9:a2:c4: 2b:57:b5:0e:69:76:f5:0f:e1:ea:58:0c:da:7a:54: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E8:EA:DE:5D:60:B4:D0:D9:A8:88:53:4F:3F:5C:DB:4B:09:90:6D X509v3 Authority Key Identifier: keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32302e302f32342d3234203d3e203436303435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.128.20.0/24 Signature Algorithm: sha256WithRSAEncryption a5:9c:9c:21:98:b2:32:0a:49:da:04:b8:c0:54:8c:55:b4:ca: 2d:81:fe:38:9f:1e:66:6c:05:6d:1c:fb:0f:2f:95:73:02:f3: 66:74:f8:6e:e2:6a:38:93:ee:21:8b:23:a7:d7:5f:f5:c9:87: 6d:20:06:7a:5f:e6:73:a0:95:22:04:cf:b7:0f:4b:53:38:67: d6:50:7a:b9:6d:9b:97:45:89:4b:f0:11:16:7b:8b:9a:ef:43: d2:dd:a8:2d:cb:4a:ad:32:0f:ed:e6:74:1b:5b:13:a2:fe:65: c6:77:4f:bd:c2:94:3c:fa:9a:5b:0a:45:b6:ea:2b:65:1a:24: ee:69:fd:2e:55:25:f5:af:31:5f:00:ba:9b:a3:59:ec:6f:62: 86:15:80:b9:db:a2:9c:d7:8c:39:c8:71:0e:10:57:68:8f:ec: 1e:32:44:7d:b7:ee:fa:75:2e:aa:61:1b:c8:46:54:91:cc:ac: 6f:65:39:0e:77:8f:47:09:e0:8e:5b:cd:0d:9f:a2:be:5e:f7: 9a:13:be:24:d6:0f:33:ff:eb:2e:42:cb:f1:8a:e5:46:3d:db: 6e:19:14:fe:fb:51:d6:4d:74:37:1e:fb:24:b5:d5:cb:5c:28: e1:5c:72:23:d8:77:e0:0f:d7:56:25:b2:f4:a5:ce:b9:fe:fe: 9a:15:16:f9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbQuFhoeoM0jpo/zYHcdMvSNTcrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw MjM4MTk0RjAeFw0yNTA1MjAwNjU3NThaFw0yNjA1MTkwNzAyNThaMDMxMTAvBgNV BAMTKDZBRThFQURFNUQ2MEI0RDBEOUE4ODg1MzRGM0Y1Q0RCNEIwOTkwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNh2v4UYmO0Hgalt3NtJ4yQtZ PzPzIMKer5Oow1yJG7Ok+dMSzk6tRgUNtEZlBJJXcriXRfRfK3sEzxZU9fMioXlp gSfWzreV1eXWwHb92v5rit/Mt6k55EKEeLjf3mz4MZsZzp83qmqrRIehC9D1A2AE 5TLJ53mFzpsbsudeQZnVx60ttuaZNZSEU4sfqVkfY+10kokp0gSow1j7jKacknfM XVCIWnZCruwpmvSV7t4lSEHPTWeK6mmeUwiFgAlm8uWaqzvY2zoi4OhSbtYokQWU RMk/cN8cJIQofW0pwetqJu3YuraxVEASMfmixCtXtQ5pdvUP4epYDNp6VD57AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUaujq3l1gtNDZqIhTTz9c20sJkG0wHwYDVR0j BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2 OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4 MTk0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAFDANBgkqhkiG 9w0BAQsFAAOCAQEApZycIZiyMgpJ2gS4wFSMVbTKLYH+OJ8eZmwFbRz7Dy+VcwLz ZnT4buJqOJPuIYsjp9df9cmHbSAGel/mc6CVIgTPtw9LUzhn1lB6uW2bl0WJS/AR FnuLmu9D0t2oLctKrTIP7eZ0G1sTov5lxndPvcKUPPqaWwpFtuorZRok7mn9LlUl 9a8xXwC6m6NZ7G9ihhWAuduinNeMOchxDhBXaI/sHjJEfbfu+nUuqmEbyEZUkcys b2U5DnePRwngjlvNDZ+ivl73mhO+JNYPM//rLkLL8YrlRj3bbhkU/vtR1k10Nx77 JLXVy1wo4VxyI9h34A/XViWy9KXOuf7+mhUW+Q== -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:02 2025 by rpki-client