$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa File: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (raw, json) Hash identifier: V8XIKsuHM3AcbKg6tSx3WP5UFaD99XoTgjHedx3ebJM= Subject key identifier: B0:E6:05:80:06:C9:70:F8:AF:A0:53:0F:99:F3:09:92:4B:8B:5E:D8 Certificate issuer: /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE Certificate serial: 4FCBF6B61FEA944AD7FCA1D7A42D98B6A3DC85F5 Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa Signing time: Mon 02 Jun 2025 02:02:55 +0000 ROA not before: Mon 02 Jun 2025 01:57:55 +0000 ROA not after: Mon 01 Jun 2026 02:02:55 +0000 asID: 18153 IP address blocks: 202.72.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:cb:f6:b6:1f:ea:94:4a:d7:fc:a1:d7:a4:2d:98:b6:a3:dc:85:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE Validity Not Before: Jun 2 01:57:55 2025 GMT Not After : Jun 1 02:02:55 2026 GMT Subject: CN=B0E6058006C970F8AFA0530F99F309924B8B5ED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:63:ce:e4:52:69:d0:b0:20:3e:1d:e0:b5: bc:0d:b2:6b:95:c3:eb:f4:97:22:a4:ff:d6:0a:6e: de:5e:9f:d0:20:51:e0:b3:29:df:90:be:77:8a:e2: 9e:2a:41:fa:a5:8e:53:04:c7:ee:6e:86:60:c2:ac: 81:ad:72:65:ad:b5:89:f2:d6:7c:a0:90:5b:65:67: 12:cf:7d:b8:6c:87:9a:ee:cd:17:bd:3d:c2:96:6e: f6:0c:02:cb:26:9e:ef:77:77:e9:34:ea:62:c2:4b: e5:d2:06:52:37:eb:eb:c6:2c:e5:ea:cf:6b:3b:2b: b0:0f:71:cc:dc:17:fe:72:03:d1:cf:df:a5:61:9e: c8:b4:0b:84:86:93:a8:3c:0e:a8:89:af:8b:88:4c: 92:5f:6d:7c:fa:04:6c:dc:72:53:12:91:4b:d4:ae: 19:3a:ba:16:99:2f:af:0d:f1:fe:90:ee:5d:43:05: 3e:6b:28:a0:71:0e:fc:6d:02:37:d7:01:99:ff:f0: ac:ed:8c:63:81:9c:25:23:b8:99:85:33:9f:bf:0f: 84:b5:33:cf:3a:92:73:4e:a6:a1:f3:8a:f7:3d:c1: 11:20:e3:08:fd:9b:61:ea:94:90:54:f8:fd:cf:c4: 56:4a:5e:97:cb:c6:de:89:b4:a9:13:b8:42:d4:ac: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E6:05:80:06:C9:70:F8:AF:A0:53:0F:99:F3:09:92:4B:8B:5E:D8 X509v3 Authority Key Identifier: keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.72.195.0/24 Signature Algorithm: sha256WithRSAEncryption 66:9e:51:91:02:10:ed:71:25:7f:89:a1:a6:f5:5f:a7:d2:f7: 83:f1:a9:6c:7a:6d:ac:3d:de:54:60:55:d1:76:11:91:23:bd: ee:eb:5c:85:c8:7a:2e:9f:62:69:c2:2b:53:85:69:09:48:6c: b7:87:d6:52:1b:39:db:4b:2d:4e:35:ec:9a:e1:76:34:02:42: 15:67:ef:44:85:8a:fd:93:bc:2e:93:8e:d0:28:6a:b9:93:71: f8:26:29:77:3a:e0:55:64:78:0e:5d:75:bd:be:8b:9d:4d:e4: fe:6b:69:39:99:0d:c2:31:48:84:4d:f5:d5:f7:19:fa:95:08: 4e:8b:f5:8d:d1:de:28:2b:07:1b:b2:b5:a8:87:6c:60:bc:a4: 39:f1:5f:c9:f2:b7:b4:58:75:0e:41:cb:ba:0a:d7:a1:33:37: ab:08:b9:ee:2b:af:74:d4:ee:0b:74:2d:cc:11:0e:d0:07:81: d3:56:fb:51:ec:dc:60:6d:95:2d:bb:2e:0d:cc:43:2d:d7:4c: d7:ef:48:31:a0:65:7f:90:da:4b:95:1d:a5:d5:a4:52:72:cb: 73:4a:c1:3e:de:59:47:0f:fb:33:9c:45:49:24:9c:98:69:25: 6c:16:1b:d5:fa:22:22:92:ca:3f:8e:b0:c0:e9:ca:0f:47:e8: 31:56:e7:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUT8v2th/qlErX/KHXpC2YtqPchfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4 Rjc4ODFFRTAeFw0yNTA2MDIwMTU3NTVaFw0yNjA2MDEwMjAyNTVaMDMxMTAvBgNV BAMTKEIwRTYwNTgwMDZDOTcwRjhBRkEwNTMwRjk5RjMwOTkyNEI4QjVFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdWPO5FJp0LAgPh3gtbwNsmuV w+v0lyKk/9YKbt5en9AgUeCzKd+QvneK4p4qQfqljlMEx+5uhmDCrIGtcmWttYny 1nygkFtlZxLPfbhsh5ruzRe9PcKWbvYMAssmnu93d+k06mLCS+XSBlI36+vGLOXq z2s7K7APcczcF/5yA9HP36Vhnsi0C4SGk6g8DqiJr4uITJJfbXz6BGzcclMSkUvU rhk6uhaZL68N8f6Q7l1DBT5rKKBxDvxtAjfXAZn/8KztjGOBnCUjuJmFM5+/D4S1 M886knNOpqHzivc9wREg4wj9m2HqlJBU+P3PxFZKXpfLxt6JtKkTuELUrOBRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsOYFgAbJcPivoFMPmfMJkkuLXtgwHwYDVR0j BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0 MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4 ODFFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04 NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzEzOTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMxMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIwzANBgkqhkiG 9w0BAQsFAAOCAQEAZp5RkQIQ7XElf4mhpvVfp9L3g/GpbHptrD3eVGBV0XYRkSO9 7utchch6Lp9iacIrU4VpCUhst4fWUhs520stTjXsmuF2NAJCFWfvRIWK/ZO8LpOO 0ChquZNx+CYpdzrgVWR4Dl11vb6LnU3k/mtpOZkNwjFIhE311fcZ+pUITov1jdHe KCsHG7K1qIdsYLykOfFfyfK3tFh1DkHLugrXoTM3qwi57iuvdNTuC3QtzBEO0AeB 01b7UezcYG2VLbsuDcxDLddM1+9IMaBlf5DaS5UdpdWkUnLLc0rBPt5ZRw/7M5xF SSScmGklbBYb1foiIpLKP46wwOnKD0foMVbnNw== -----END CERTIFICATE-----Generated at Thu Jun 5 19:01:56 2025 by rpki-client