$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa File: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: hBeqiHGxmy6NCMgmNV6p5ha99Si74kGBcjRNx7S7+Rw= Subject key identifier: EA:B3:8C:6C:77:6A:47:4C:2D:D0:66:D2:09:58:FF:BD:20:EF:8C:6F Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 3FC1581C897032C40FBCC7C31B17E6C8EAA6B1E8 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa Signing time: Tue 04 Mar 2025 09:22:47 +0000 ROA not before: Tue 04 Mar 2025 09:17:47 +0000 ROA not after: Tue 03 Mar 2026 09:22:47 +0000 asID: 45298 IP address blocks: 202.43.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 23:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c1:58:1c:89:70:32:c4:0f:bc:c7:c3:1b:17:e6:c8:ea:a6:b1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Mar 4 09:17:47 2025 GMT Not After : Mar 3 09:22:47 2026 GMT Subject: CN=EAB38C6C776A474C2DD066D20958FFBD20EF8C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:d4:cb:e0:50:0a:0b:20:40:e9:9a:09:d5: 0a:08:ca:2f:9a:7f:e9:ea:27:b7:f7:5c:04:b9:ef: c1:bf:cc:88:e4:be:95:f6:a2:9b:7e:34:2d:ab:91: 00:3b:24:38:93:00:f5:ba:aa:70:06:52:e6:a8:91: 43:b8:c7:b6:a1:33:a5:9f:4a:a1:a4:40:d3:ba:e2: 0d:99:53:8a:ef:bd:df:b8:66:ff:2d:18:18:d1:94: 53:e1:4d:ef:a6:88:62:c0:fa:d9:40:8b:bb:87:55: 44:14:0b:11:a5:04:e9:71:0c:3c:42:9e:63:79:20: 27:d5:e6:79:b6:e6:9b:2b:41:1b:d0:cd:f9:49:52: 08:d7:68:59:43:f0:61:15:f5:e5:6b:f7:63:34:8b: 7f:85:b2:e4:0a:dc:46:a5:61:5f:98:14:0a:04:6f: da:16:a0:33:83:3c:fb:e8:2e:1e:f0:88:7b:f1:ae: 1c:9e:24:21:b5:13:64:b3:4f:85:ca:26:4c:67:99: 77:3a:0f:86:6c:2a:15:9f:20:98:1c:da:96:aa:c3: 46:e0:a9:23:50:1a:f7:bb:10:93:a6:ad:78:76:47: f0:a3:07:91:87:75:c2:94:81:f0:39:86:e5:a0:cf: dd:b7:9e:0b:69:b3:78:14:07:f1:6e:00:1e:13:c8: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B3:8C:6C:77:6A:47:4C:2D:D0:66:D2:09:58:FF:BD:20:EF:8C:6F X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.73.0/24 Signature Algorithm: sha256WithRSAEncryption 91:11:1f:05:ef:44:ce:98:ed:85:52:2c:ed:60:a3:c2:29:db: 26:f8:19:c3:9a:64:c1:8f:41:ec:db:9d:cd:30:b0:53:a7:16: 54:f0:a9:6d:8e:2e:52:37:6c:94:e8:ab:86:92:1d:38:1a:c3: 22:03:db:4a:ff:3a:d2:e4:4d:44:83:51:bd:fc:90:01:0e:e6: 57:46:79:60:30:fe:49:25:46:55:ad:11:e7:45:0f:f5:b6:c8: 43:ac:80:24:3c:ef:9e:50:6c:6c:c2:fb:1c:c4:da:c6:33:c6: 05:f1:04:3c:61:eb:33:c2:ad:17:89:77:92:9e:c1:fd:bc:e7: a4:c8:1b:de:9c:12:fe:b3:58:bb:da:3f:f1:d3:69:85:58:43: d6:60:4f:ec:4a:30:7f:df:dc:24:b0:fe:66:58:45:55:74:ba: d1:34:dc:ff:2e:ad:a6:1b:67:18:65:cf:41:53:2e:f3:26:d8: 32:bf:74:cc:a6:81:5d:26:4c:3d:0c:0b:c3:41:9a:98:29:33: 02:89:91:69:9c:ca:fc:4c:c5:93:8d:6c:c4:c1:59:21:4f:58: b0:50:f0:6b:1b:e2:ad:04:c4:21:73:04:e4:89:73:9b:eb:bf: 2a:75:95:c4:8d:95:a7:05:b9:6b:06:6e:52:65:d2:f3:19:06: cf:e8:1b:e2 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUP8FYHIlwMsQPvMfDGxfmyOqmsegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTAzMDQwOTE3NDdaFw0yNjAzMDMwOTIyNDdaMDMxMTAvBgNV BAMTKEVBQjM4QzZDNzc2QTQ3NEMyREQwNjZEMjA5NThGRkJEMjBFRjhDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVNTL4FAKCyBA6ZoJ1QoIyi+a f+nqJ7f3XAS578G/zIjkvpX2opt+NC2rkQA7JDiTAPW6qnAGUuaokUO4x7ahM6Wf SqGkQNO64g2ZU4rvvd+4Zv8tGBjRlFPhTe+miGLA+tlAi7uHVUQUCxGlBOlxDDxC nmN5ICfV5nm25psrQRvQzflJUgjXaFlD8GEV9eVr92M0i3+FsuQK3EalYV+YFAoE b9oWoDODPPvoLh7wiHvxrhyeJCG1E2SzT4XKJkxnmXc6D4ZsKhWfIJgc2paqw0bg qSNQGve7EJOmrXh2R/CjB5GHdcKUgfA5huWgz923ngtps3gUB/FuAB4TyLZdAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU6rOMbHdqR0wt0GbSCVj/vSDvjG8wHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMyMzAzMjJlMzQzMzJlMzczMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMjM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKK0kwDQYJKoZIhvcN AQELBQADggEBAJERHwXvRM6Y7YVSLO1go8Ip2yb4GcOaZMGPQezbnc0wsFOnFlTw qW2OLlI3bJToq4aSHTgawyID20r/OtLkTUSDUb38kAEO5ldGeWAw/kklRlWtEedF D/W2yEOsgCQ8755QbGzC+xzE2sYzxgXxBDxh6zPCrReJd5Kewf2856TIG96cEv6z WLvaP/HTaYVYQ9ZgT+xKMH/f3CSw/mZYRVV0utE03P8uraYbZxhlz0FTLvMm2DK/ dMymgV0mTD0MC8NBmpgpMwKJkWmcyvxMxZONbMTBWSFPWLBQ8Gsb4q0ExCFzBOSJ c5vrvyp1lcSNlacFuWsGblJl0vMZBs/oG+I= -----END CERTIFICATE-----Generated at Mon Apr 7 01:10:36 2025 by rpki-client