$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e342e302f32342d3234203d3e203234323030.roa File: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (raw, json) Hash identifier: aPtODejZ83CWdVDiKww6DVNDrHJed0ktroNcqSgEID0= Subject key identifier: D4:B7:CA:52:E1:AA:07:92:E5:0F:11:AB:FA:C8:A5:A4:DD:4A:37:08 Certificate issuer: /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Certificate serial: 3F4F34FA54DB3B1E59224E35C9440277E3564638 Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e342e302f32342d3234203d3e203234323030.roa Signing time: Mon 23 Dec 2024 08:35:32 +0000 ROA not before: Mon 23 Dec 2024 08:30:32 +0000 ROA not after: Mon 22 Dec 2025 08:35:32 +0000 asID: 24200 IP address blocks: 202.133.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 16:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4f:34:fa:54:db:3b:1e:59:22:4e:35:c9:44:02:77:e3:56:46:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Validity Not Before: Dec 23 08:30:32 2024 GMT Not After : Dec 22 08:35:32 2025 GMT Subject: CN=D4B7CA52E1AA0792E50F11ABFAC8A5A4DD4A3708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:6c:8e:a7:dd:cd:4c:91:8d:75:ea:fb:ee: f1:22:34:d7:75:28:9f:b6:e5:88:24:11:e4:bd:9f: 9e:72:51:5b:ff:74:16:db:ea:a7:5c:b7:60:a7:73: a9:ca:3a:d7:1a:d4:f7:2c:67:54:21:57:8d:f8:fb: c1:c9:2b:e8:44:01:89:68:45:5f:54:47:e3:3e:28: e4:3c:ec:c3:0d:aa:3c:52:95:6c:98:fc:69:b4:ea: d4:8c:0a:79:69:5c:ad:50:f6:d5:06:22:9c:3d:6f: 7c:6e:3f:fd:e0:79:f7:a1:11:fd:af:23:76:a0:e4: 53:8b:7c:f9:a4:5e:d4:45:48:de:70:4e:25:2c:11: a2:83:33:a9:a5:12:05:ab:8b:ba:21:f2:ae:74:e1: bb:bd:a5:66:f2:f1:cb:61:58:6c:83:03:3c:55:d5: fd:fe:c8:aa:a2:99:e9:99:42:d7:60:97:c9:b1:bd: 49:9d:e8:cd:f5:c3:4b:7b:6d:11:5a:08:40:e5:2e: 48:26:5c:59:72:e0:7f:dc:3d:69:8b:04:1e:33:10: 05:32:13:dc:68:a8:98:66:d8:15:62:c8:6f:96:6c: ef:de:96:eb:4c:5a:d9:1a:90:71:06:d1:81:4a:73: bd:f6:19:50:7f:05:b2:28:7b:7b:5c:95:a3:dd:c0: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:CA:52:E1:AA:07:92:E5:0F:11:AB:FA:C8:A5:A4:DD:4A:37:08 X509v3 Authority Key Identifier: keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e342e302f32342d3234203d3e203234323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.133.4.0/24 Signature Algorithm: sha256WithRSAEncryption c3:2e:0b:cd:97:ab:fb:08:44:90:a2:2f:48:9d:cc:75:7d:6e: 13:7e:e5:91:c2:5c:a0:c7:fb:d9:12:32:57:77:01:2f:98:4a: bc:15:18:4b:81:68:5c:6e:69:8c:10:a0:8f:c1:e2:af:8b:24: d7:9b:c5:46:5e:58:28:39:9a:7d:4c:72:e3:84:0e:f9:74:0e: c4:9d:d5:c5:8e:61:ac:6c:54:19:7c:87:10:07:75:d5:23:71: eb:66:37:8b:5c:67:eb:3f:c3:8b:f5:75:f3:b7:84:0d:a8:33: fc:35:64:e4:77:8b:c8:23:b3:53:bf:cc:f7:e3:8c:01:8c:49: 3b:79:58:ec:96:75:e5:20:76:01:ce:f2:a2:5b:9c:09:f1:f1: b7:3a:7e:62:19:53:a3:99:19:30:a8:dc:48:39:e9:6d:cb:3e: ee:b3:a5:c6:4d:7c:59:12:6f:7c:95:c0:8e:be:64:a3:b4:36: ef:ab:e3:53:e7:79:05:1e:9d:83:db:17:91:3a:f5:b5:5e:f2: 49:4a:d1:1b:7f:0e:15:55:01:7a:2b:8c:34:ac:03:38:1a:18: 24:0d:cd:e6:b0:ee:73:df:c8:e3:cb:72:0d:7f:29:e0:b2:ea: a9:26:b1:70:25:65:7d:99:cc:ed:9f:e5:31:62:8f:1c:29:aa: 6d:9b:84:bd -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUP080+lTbOx5ZIk41yUQCd+NWRjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4 QkE3QkU0MDAeFw0yNDEyMjMwODMwMzJaFw0yNTEyMjIwODM1MzJaMDMxMTAvBgNV BAMTKEQ0QjdDQTUyRTFBQTA3OTJFNTBGMTFBQkZBQzhBNUE0REQ0QTM3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3myOp93NTJGNder77vEiNNd1 KJ+25YgkEeS9n55yUVv/dBbb6qdct2Cnc6nKOtca1PcsZ1QhV434+8HJK+hEAYlo RV9UR+M+KOQ87MMNqjxSlWyY/Gm06tSMCnlpXK1Q9tUGIpw9b3xuP/3gefehEf2v I3ag5FOLfPmkXtRFSN5wTiUsEaKDM6mlEgWri7oh8q504bu9pWby8cthWGyDAzxV 1f3+yKqimemZQtdgl8mxvUmd6M31w0t7bRFaCEDlLkgmXFly4H/cPWmLBB4zEAUy E9xoqJhm2BViyG+WbO/elutMWtkakHEG0YFKc732GVB/BbIoe3tclaPdwFp1AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU1LfKUuGqB5LlDxGr+silpN1KNwgwHwYDVR0j BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3 QkU0MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNjY5ZWE0LWU4MmYtNDZjMy04 ZGQzLTJlOTg4MTU5YjIwMi8wLzMyMzAzMjJlMzEzMzMzMmUzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzQzMjMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKhQQwDQYJKoZIhvcN AQELBQADggEBAMMuC82Xq/sIRJCiL0idzHV9bhN+5ZHCXKDH+9kSMld3AS+YSrwV GEuBaFxuaYwQoI/B4q+LJNebxUZeWCg5mn1McuOEDvl0DsSd1cWOYaxsVBl8hxAH ddUjcetmN4tcZ+s/w4v1dfO3hA2oM/w1ZOR3i8gjs1O/zPfjjAGMSTt5WOyWdeUg dgHO8qJbnAnx8bc6fmIZU6OZGTCo3Eg56W3LPu6zpcZNfFkSb3yVwI6+ZKO0Nu+r 41PneQUenYPbF5E69bVe8klK0Rt/DhVVAXorjDSsAzgaGCQNzeaw7nPfyOPLcg1/ KeCy6qkmsXAlZX2ZzO2f5TFijxwpqm2bhL0= -----END CERTIFICATE-----Generated at Sun Apr 6 19:05:06 2025 by rpki-client