$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa File: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: ICLKoH8LfO9RPqo2cawJT61bywbgOJprlh0DKtnFRUE= Subject key identifier: 9F:97:E3:E8:AE:C0:B3:FE:BC:4C:F6:A6:A8:61:7A:94:43:7E:8E:9A Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 0C310DBD95744F03D019BE6458C7B72BFB134476 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa Signing time: Wed 26 Feb 2025 01:00:03 +0000 ROA not before: Wed 26 Feb 2025 00:55:03 +0000 ROA not after: Wed 25 Feb 2026 01:00:03 +0000 asID: 45298 IP address blocks: 203.209.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Mar 2025 03:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:31:0d:bd:95:74:4f:03:d0:19:be:64:58:c7:b7:2b:fb:13:44:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Feb 26 00:55:03 2025 GMT Not After : Feb 25 01:00:03 2026 GMT Subject: CN=9F97E3E8AEC0B3FEBC4CF6A6A8617A94437E8E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e5:56:fa:7e:b8:14:db:2c:17:bb:6c:e2:eb: 86:1e:c2:6e:0c:08:c8:2e:4c:7f:12:62:6c:0c:8a: 4d:ab:f2:52:bd:19:31:02:e2:2b:df:a6:ac:cd:89: ce:27:e8:c9:3e:a1:f0:97:16:91:3f:6f:00:6a:e2: 97:5a:6a:82:df:f9:88:82:51:5b:ab:98:6c:8c:36: 58:da:6f:88:9a:ad:a4:f2:b3:4c:55:4c:7f:7a:d6: 1a:5d:f7:7c:59:33:6a:87:aa:db:33:eb:69:5f:fc: 36:03:b3:2b:8a:39:f2:fa:4c:d0:e4:88:04:b2:2f: f7:db:76:f5:08:50:be:ee:c2:2a:3c:29:cf:83:24: a2:21:d3:5f:4a:8e:47:e9:a8:dd:81:1f:48:9a:47: a9:22:8f:a6:4a:4e:f4:a1:88:a6:36:d9:79:cc:cb: 58:c2:cc:f2:8f:7b:cc:0e:ec:0b:4e:7d:0f:26:ed: eb:4c:28:87:93:f9:26:08:82:01:bd:f7:22:19:3c: d4:2a:71:f2:01:7e:80:04:8b:8e:b6:58:b2:fc:80: 88:67:d3:9d:bd:8f:4c:c8:ca:d9:45:cd:65:3f:fb: 59:74:32:dd:35:29:3a:79:db:3c:25:40:2d:27:6c: 10:f5:40:49:7f:ee:4e:57:33:f4:4a:a6:97:99:d8: 60:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:97:E3:E8:AE:C0:B3:FE:BC:4C:F6:A6:A8:61:7A:94:43:7E:8E:9A X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.209.190.0/24 Signature Algorithm: sha256WithRSAEncryption 80:25:67:2d:48:1b:7c:10:a5:bd:cb:a9:8a:17:69:79:cb:38: b7:8e:f3:4a:0c:54:03:50:13:1a:d8:13:bc:7f:7d:b2:a0:f7: bf:de:6c:61:32:ca:12:16:76:c0:6b:81:e8:a5:5d:79:6f:26: d9:e4:58:6c:fb:78:73:57:63:d4:22:80:2d:58:0a:ee:0d:c8: a6:f2:83:ad:ff:3b:e5:55:6e:e1:9e:3e:0a:70:b3:7a:ad:eb: 65:7b:7d:73:cc:dc:db:ae:38:d4:6c:c0:5a:9b:16:ef:84:66: 41:ed:f0:02:87:55:08:c1:04:98:f9:06:79:84:a1:28:f0:38: 08:1a:41:0b:b4:20:0b:6c:f9:2e:74:89:4d:80:e7:af:8b:5e: ab:66:c2:e5:67:be:db:f9:e7:04:5b:f5:42:08:00:2c:f6:59: 87:82:87:f9:7f:22:0d:81:ee:40:aa:a5:b1:c3:dc:57:74:64: db:04:c0:3d:e5:32:62:00:44:58:dc:ed:5c:06:01:14:10:72: aa:f9:e9:70:7a:2a:20:09:2d:2f:4b:7b:c5:11:29:f1:7d:06: 66:80:16:20:f8:92:1d:aa:3b:c1:5e:f2:23:37:c7:55:6e:a9: 7b:d4:43:13:d2:62:36:a0:c3:44:97:41:fb:b7:c8:58:2e:dd: e4:90:f8:6b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDDENvZV0TwPQGb5kWMe3K/sTRHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTAyMjYwMDU1MDNaFw0yNjAyMjUwMTAwMDNaMDMxMTAvBgNV BAMTKDlGOTdFM0U4QUVDMEIzRkVCQzRDRjZBNkE4NjE3QTk0NDM3RThFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65Vb6frgU2ywXu2zi64Yewm4M CMguTH8SYmwMik2r8lK9GTEC4ivfpqzNic4n6Mk+ofCXFpE/bwBq4pdaaoLf+YiC UVurmGyMNljab4iaraTys0xVTH961hpd93xZM2qHqtsz62lf/DYDsyuKOfL6TNDk iASyL/fbdvUIUL7uwio8Kc+DJKIh019KjkfpqN2BH0iaR6kij6ZKTvShiKY22XnM y1jCzPKPe8wO7AtOfQ8m7etMKIeT+SYIggG99yIZPNQqcfIBfoAEi462WLL8gIhn 0529j0zIytlFzWU/+1l0Mt01KTp52zwlQC0nbBD1QEl/7k5XM/RKppeZ2GDbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUn5fj6K7As/68TPamqGF6lEN+jpowHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMyMzAzMzJlMzIzMDM5MmUzMTM5MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy9G+MA0GCSqG SIb3DQEBCwUAA4IBAQCAJWctSBt8EKW9y6mKF2l5yzi3jvNKDFQDUBMa2BO8f32y oPe/3mxhMsoSFnbAa4HopV15bybZ5Fhs+3hzV2PUIoAtWAruDcim8oOt/zvlVW7h nj4KcLN6retle31zzNzbrjjUbMBamxbvhGZB7fACh1UIwQSY+QZ5hKEo8DgIGkEL tCALbPkudIlNgOevi16rZsLlZ77b+ecEW/VCCAAs9lmHgof5fyINge5AqqWxw9xX dGTbBMA95TJiAERY3O1cBgEUEHKq+elweiogCS0vS3vFESnxfQZmgBYg+JIdqjvB XvIjN8dVbql71EMT0mI2oMNEl0H7t8hYLt3kkPhr -----END CERTIFICATE-----Generated at Tue Mar 11 05:03:01 2025 by rpki-client