$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234342e302f32342d3234203d3e203435323938.roa File: 3138322e31362e3234342e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: dInQPRjkGOWRH1BIDOtz9jdXpBLceJN8qrYrHJtpPKc= Subject key identifier: 38:A4:6F:67:4A:A5:13:3E:E0:F1:60:04:98:BF:FB:CC:61:3A:5D:8D Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 4ABDA081CC5558A38E98C3D87B837E491722FA0E Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234342e302f32342d3234203d3e203435323938.roa Signing time: Tue 25 Feb 2025 04:00:48 +0000 ROA not before: Tue 25 Feb 2025 03:55:48 +0000 ROA not after: Tue 24 Feb 2026 04:00:48 +0000 asID: 45298 IP address blocks: 182.16.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 23:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bd:a0:81:cc:55:58:a3:8e:98:c3:d8:7b:83:7e:49:17:22:fa:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Feb 25 03:55:48 2025 GMT Not After : Feb 24 04:00:48 2026 GMT Subject: CN=38A46F674AA5133EE0F1600498BFFBCC613A5D8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:3e:2a:54:44:07:59:d3:2c:ff:0e:71:aa: 60:2a:9a:94:b6:06:27:38:5c:bf:d1:a2:92:c1:dc: de:33:0a:ca:61:31:7c:cb:f2:21:69:14:2d:cc:08: 5c:96:4a:b7:df:da:36:aa:bd:26:f9:b7:ea:7b:60: b6:95:74:e8:80:2c:c0:8f:30:a6:12:0b:8a:43:d0: a2:a8:d1:e3:92:c1:13:32:11:d0:65:f8:db:65:a5: 62:3c:fb:9d:00:07:a6:c3:3f:7a:d5:92:bd:30:f6: 17:fb:b4:34:55:da:70:ac:1d:a6:ec:2c:c6:22:b2: 26:4c:c2:93:49:c8:af:65:08:6d:1a:cd:d5:73:0f: d0:3e:b3:32:7a:64:90:11:91:8a:5c:f5:b9:2a:02: de:b2:80:47:a0:e8:5e:ea:e3:6b:da:33:b5:db:c6: e0:2a:01:e4:46:4c:e9:d0:88:1d:d1:37:9a:66:60: fd:cd:02:ba:fb:1d:46:f8:0c:cf:98:b7:6b:2b:09: 6c:b0:fa:b7:c7:fe:36:32:d3:93:75:74:ef:bf:6f: f7:44:5e:e7:3b:9e:f6:50:f3:c7:5c:dc:45:dd:b9: af:dc:da:9f:99:9d:1a:86:dc:91:c9:ba:1c:c3:d6: 3e:37:d8:cf:39:5f:5a:f8:03:51:fa:9d:9f:4d:c7: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:6F:67:4A:A5:13:3E:E0:F1:60:04:98:BF:FB:CC:61:3A:5D:8D X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234342e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.16.244.0/24 Signature Algorithm: sha256WithRSAEncryption 20:7c:6d:20:bb:5a:41:0c:7a:bf:78:e9:dc:5b:a9:4a:6f:70: f8:04:55:99:13:23:cb:da:8d:75:03:0c:36:90:14:62:1d:e6: bc:b2:6f:18:fb:05:36:1e:19:42:46:61:e7:92:07:05:30:5a: 79:1a:59:34:dc:63:b5:6b:64:1b:35:42:6f:3b:58:5b:56:0f: 08:7d:ae:1b:5a:9f:6b:6f:3f:42:44:7c:35:ce:3f:36:e1:24: 8d:c8:de:f8:ce:d7:7f:a0:4e:c0:8f:d4:4f:f8:9e:ea:a8:7a: 95:c7:9e:9a:a0:bc:3e:a9:9d:5c:78:d0:dc:cc:1c:19:50:bf: 7b:fd:7a:90:73:81:2f:8a:5f:2b:e2:dc:65:f8:24:5d:cc:79: 2b:c5:c2:37:73:30:a1:4f:2d:7f:80:ec:e3:59:92:0b:60:a9: 61:8d:0d:59:5d:00:6b:2a:3a:cd:14:e6:be:eb:b3:4f:92:9b: 2a:b3:01:bb:ab:60:c1:32:0a:f8:7f:a1:2f:df:c2:66:e2:40: 53:76:c2:35:46:95:e4:b8:f9:e3:22:b6:a9:96:a6:cb:8d:8e: 9c:c2:8f:c9:36:f8:cb:6f:ca:f4:a9:e6:eb:a7:d3:89:1e:71: 99:55:3a:09:11:fa:57:7c:03:58:1c:2c:1f:e6:13:14:09:c3: 9f:ab:22:cc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSr2ggcxVWKOOmMPYe4N+SRci+g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTAyMjUwMzU1NDhaFw0yNjAyMjQwNDAwNDhaMDMxMTAvBgNV BAMTKDM4QTQ2RjY3NEFBNTEzM0VFMEYxNjAwNDk4QkZGQkNDNjEzQTVEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdz4qVEQHWdMs/w5xqmAqmpS2 Bic4XL/RopLB3N4zCsphMXzL8iFpFC3MCFyWSrff2jaqvSb5t+p7YLaVdOiALMCP MKYSC4pD0KKo0eOSwRMyEdBl+NtlpWI8+50AB6bDP3rVkr0w9hf7tDRV2nCsHabs LMYisiZMwpNJyK9lCG0azdVzD9A+szJ6ZJARkYpc9bkqAt6ygEeg6F7q42vaM7Xb xuAqAeRGTOnQiB3RN5pmYP3NArr7HUb4DM+Yt2srCWyw+rfH/jYy05N1dO+/b/dE Xuc7nvZQ88dc3EXdua/c2p+ZnRqG3JHJuhzD1j432M85X1r4A1H6nZ9Nx3L9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOKRvZ0qlEz7g8WAEmL/7zGE6XY0wHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzgzMjJlMzEzNjJlMzIzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYQ9DANBgkqhkiG 9w0BAQsFAAOCAQEAIHxtILtaQQx6v3jp3FupSm9w+ARVmRMjy9qNdQMMNpAUYh3m vLJvGPsFNh4ZQkZh55IHBTBaeRpZNNxjtWtkGzVCbztYW1YPCH2uG1qfa28/QkR8 Nc4/NuEkjcje+M7Xf6BOwI/UT/ie6qh6lceemqC8PqmdXHjQ3MwcGVC/e/16kHOB L4pfK+LcZfgkXcx5K8XCN3MwoU8tf4Ds41mSC2CpYY0NWV0Aayo6zRTmvuuzT5Kb KrMBu6tgwTIK+H+hL9/CZuJAU3bCNUaV5Lj54yK2qZamy42OnMKPyTb4y2/K9Knm 66fTiR5xmVU6CRH6V3wDWBwsH+YTFAnDn6sizA== -----END CERTIFICATE-----Generated at Mon Apr 7 01:12:59 2025 by rpki-client