$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa File: 3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa (raw, json) Hash identifier: HtOZDFXmEy8XFFiOkAZ9ZIRYwWqK5PwKBq1Ab/MmyTw= Subject key identifier: 11:9A:D7:DB:BA:94:F5:1C:22:64:B1:0D:F9:B4:D5:D8:A2:BD:27:1A Certificate issuer: /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Certificate serial: 3F446813A4D3ECA9D12D87B4E28449CEDF08AA68 Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa Signing time: Mon 02 Jun 2025 02:01:36 +0000 ROA not before: Mon 02 Jun 2025 01:56:36 +0000 ROA not after: Mon 01 Jun 2026 02:01:36 +0000 asID: 38513 IP address blocks: 125.213.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:44:68:13:a4:d3:ec:a9:d1:2d:87:b4:e2:84:49:ce:df:08:aa:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Validity Not Before: Jun 2 01:56:36 2025 GMT Not After : Jun 1 02:01:36 2026 GMT Subject: CN=119AD7DBBA94F51C2264B10DF9B4D5D8A2BD271A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:bb:3c:bd:ce:7f:15:d3:7a:2e:ca:e4:95: d4:98:1c:95:7c:8e:ff:ff:9a:cb:21:63:b4:1c:7e: c4:d5:93:06:25:a3:ff:6e:d4:69:7a:ee:0d:f1:57: 17:63:43:fd:d6:f0:04:9d:26:45:d0:88:14:c7:2d: d5:36:aa:af:27:6c:bd:c1:e7:6b:79:58:00:d6:b3: 38:66:f3:5d:1c:14:e2:f8:b6:3a:6e:5c:d0:c4:fa: be:92:f2:08:45:c6:09:2d:06:a8:5e:8f:d0:2d:b7: 0f:74:06:f7:3a:95:2f:44:b3:2f:98:2d:49:86:3e: f0:bc:37:85:a6:33:1d:5c:3b:09:bb:02:b6:e5:48: 67:4e:11:a0:71:c5:46:51:fb:7b:db:4c:51:d4:d9: 28:8e:51:1f:f0:0d:57:d2:c8:f4:e0:c7:1d:d5:a3: 67:be:54:94:4a:57:cd:8f:e0:5a:2e:88:bc:18:ed: 64:21:44:fb:c4:0c:db:c0:b1:39:7b:c5:5f:ab:9f: 0c:1e:11:9f:12:70:b7:34:4b:bd:ff:bd:54:3f:24: aa:34:f0:52:b0:28:f0:70:4f:78:2e:15:6d:36:0d: 18:ef:63:cd:23:fc:68:42:62:a8:eb:cc:a3:62:7d: d7:4f:b4:cb:80:0a:39:62:fd:e5:fa:76:c0:20:2b: 44:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9A:D7:DB:BA:94:F5:1C:22:64:B1:0D:F9:B4:D5:D8:A2:BD:27:1A X509v3 Authority Key Identifier: keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f32342d3234203d3e203338353133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.213.128.0/24 Signature Algorithm: sha256WithRSAEncryption b4:34:3c:a1:0a:97:00:3a:4e:5b:95:d0:8c:8c:db:2f:8e:2e: de:a0:6c:4d:84:81:f3:66:e6:90:dc:c5:43:b6:79:e9:75:c7: a8:59:d4:c6:28:e0:19:83:7f:a3:e0:12:d2:0c:c2:54:8c:f2: 3c:b1:d7:7d:ec:4b:5a:8c:9a:e6:49:a7:ea:22:7b:be:1f:9e: a2:63:e1:4c:53:9c:88:66:9c:02:8b:9d:60:94:84:42:28:a1: ad:7b:38:50:43:79:f8:9c:64:f3:19:b3:a3:b1:38:a2:51:57: 13:33:17:df:de:b0:d6:e6:8b:8b:90:55:ee:ee:90:79:ad:b0: 85:1b:90:90:b9:40:70:c0:c5:4a:66:f2:d2:fb:5a:88:54:6e: ae:08:69:32:3d:12:34:d2:50:0a:56:b3:90:ee:1a:64:29:f4: 32:e9:f9:61:f6:01:8f:63:fc:db:af:08:5a:e2:b1:b7:b9:82: 29:ea:82:9d:c5:7b:69:ee:50:09:8d:58:64:dd:b5:69:8a:54: 9d:5c:74:23:36:42:39:94:42:99:53:fc:da:50:bd:31:eb:0a: e4:86:c9:c3:0a:aa:27:38:87:ff:82:90:99:2d:2d:b1:ef:9d: 31:4d:02:9b:42:e4:b4:f3:1d:01:72:56:9a:b4:ee:45:19:48: 18:d2:9f:df -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP0RoE6TT7KnRLYe04oRJzt8IqmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD RjY2NzUyQjAeFw0yNTA2MDIwMTU2MzZaFw0yNjA2MDEwMjAxMzZaMDMxMTAvBgNV BAMTKDExOUFEN0RCQkE5NEY1MUMyMjY0QjEwREY5QjRENUQ4QTJCRDI3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUE7s8vc5/FdN6LsrkldSYHJV8 jv//msshY7QcfsTVkwYlo/9u1Gl67g3xVxdjQ/3W8ASdJkXQiBTHLdU2qq8nbL3B 52t5WADWszhm810cFOL4tjpuXNDE+r6S8ghFxgktBqhej9Attw90Bvc6lS9Esy+Y LUmGPvC8N4WmMx1cOwm7ArblSGdOEaBxxUZR+3vbTFHU2SiOUR/wDVfSyPTgxx3V o2e+VJRKV82P4FouiLwY7WQhRPvEDNvAsTl7xV+rnwweEZ8ScLc0S73/vVQ/JKo0 8FKwKPBwT3guFW02DRjvY80j/GhCYqjrzKNifddPtMuACjli/eX6dsAgK0TFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEZrX27qU9RwiZLEN+bTV2KK9JxowHwYDVR0j BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2 QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2 NzUyQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04 NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzIzNTJlMzIzMTMzMmUzMTMyMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfdWAMA0GCSqG SIb3DQEBCwUAA4IBAQC0NDyhCpcAOk5bldCMjNsvji7eoGxNhIHzZuaQ3MVDtnnp dceoWdTGKOAZg3+j4BLSDMJUjPI8sdd97EtajJrmSafqInu+H56iY+FMU5yIZpwC i51glIRCKKGtezhQQ3n4nGTzGbOjsTiiUVcTMxff3rDW5ouLkFXu7pB5rbCFG5CQ uUBwwMVKZvLS+1qIVG6uCGkyPRI00lAKVrOQ7hpkKfQy6flh9gGPY/zbrwha4rG3 uYIp6oKdxXtp7lAJjVhk3bVpilSdXHQjNkI5lEKZU/zaUL0x6wrkhsnDCqonOIf/ gpCZLS2x750xTQKbQuS08x0BclaatO5FGUgY0p/f -----END CERTIFICATE-----Generated at Thu Jun 5 19:15:54 2025 by rpki-client