$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa File: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (raw, json) Hash identifier: 00zAGq2eLWsvWs2a+krin13Pm+hBFevjOucl7POsp+g= Subject key identifier: 81:27:DD:C8:EC:82:1A:EC:48:C9:CB:BF:22:8C:91:AE:4B:45:E5:4B Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 5A92F2428E234FF53C300C2544471176DBE2811C Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa Signing time: Thu 15 May 2025 09:00:34 +0000 ROA not before: Thu 15 May 2025 08:55:34 +0000 ROA not after: Thu 14 May 2026 09:00:34 +0000 asID: 10137 IP address blocks: 203.99.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:92:f2:42:8e:23:4f:f5:3c:30:0c:25:44:47:11:76:db:e2:81:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: May 15 08:55:34 2025 GMT Not After : May 14 09:00:34 2026 GMT Subject: CN=8127DDC8EC821AEC48C9CBBF228C91AE4B45E54B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3a:f1:32:06:93:8d:5a:c6:1d:bc:53:0a:83: 9b:51:ab:31:72:39:45:cf:47:5e:5f:ec:d8:9b:d6: 96:26:7b:06:fd:91:50:93:84:53:e6:96:cb:a6:b6: d4:00:7c:c4:46:c2:fc:1f:dd:b1:44:1d:f3:be:1b: 59:44:40:29:ca:07:af:a1:54:16:c9:25:a4:cf:9b: 3a:d5:ef:38:c7:66:92:6e:de:a2:b3:af:d1:51:f2: 70:0e:eb:cd:c5:b6:da:0a:45:e1:90:c0:f9:f3:98: 7c:0e:a0:49:d3:19:17:fd:32:38:5e:2e:4b:5d:d8: fd:57:80:39:af:4c:69:8c:8c:a4:c7:d6:92:12:7d: da:75:63:43:b2:ce:88:3e:55:55:ce:bb:2f:f8:4d: 14:4f:40:0e:18:ef:73:99:94:f1:5e:6a:0b:ee:c4: 65:ef:81:2f:2e:8c:d2:d4:29:af:e9:72:11:79:0e: 2f:d1:2d:44:b4:18:97:41:1a:9c:4f:56:1e:92:9e: 92:e8:05:6a:ae:6e:f7:f5:67:4d:df:47:aa:65:f1: 19:7f:d7:49:70:98:79:cd:3c:f4:91:9c:69:b6:fe: 01:38:4b:fe:e1:00:c1:01:6e:85:e9:8e:ae:e3:93: 21:0c:ac:8a:9c:3c:67:4b:c9:29:63:a6:2d:10:75: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:27:DD:C8:EC:82:1A:EC:48:C9:CB:BF:22:8C:91:AE:4B:45:E5:4B X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.111.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:9a:d4:d3:f5:cb:95:02:10:cd:b1:41:bb:a1:ce:db:5f:b0: 32:12:45:69:d9:c5:e1:ae:b0:0d:95:08:82:59:7f:49:e1:f3: 99:ac:a2:2e:23:92:2a:07:82:16:6e:ff:6f:67:ba:c4:73:ed: 94:6f:95:e6:6a:90:96:c8:90:8f:0e:72:53:fc:9d:94:6b:73: 49:29:29:17:c6:76:f8:97:d1:e8:d8:e8:5e:d2:5e:e3:20:2d: dd:f1:0e:4c:40:8c:58:78:bf:b1:1f:16:c0:f4:39:01:29:98: 0c:98:ae:60:2b:bf:95:59:07:9c:a1:c0:37:7e:da:d0:49:6a: a6:7c:d2:db:e1:db:ff:81:cc:a5:b9:c0:c6:be:3b:c3:4d:6b: 54:a4:e8:95:7b:b7:f9:28:e3:84:0b:ab:7f:b0:83:bb:9c:8e: 6b:4e:40:8c:8d:fc:ae:d6:49:7a:c3:f3:14:47:f8:23:81:aa: ff:83:f0:56:8d:86:d7:3e:c3:7e:30:b3:37:16:68:25:24:a8: 20:d3:6c:10:d3:90:34:20:40:27:6f:7e:01:6d:b0:d2:57:1f: ef:ec:d0:21:b9:26:4a:ca:6f:26:4e:1f:cf:46:b6:68:8e:80: 1e:a7:31:86:dc:b5:71:41:f3:75:3e:d8:ec:c4:91:75:be:d2: 63:c6:97:13 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUWpLyQo4jT/U8MAwlREcRdtvigRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTA1MTUwODU1MzRaFw0yNjA1MTQwOTAwMzRaMDMxMTAvBgNV BAMTKDgxMjdEREM4RUM4MjFBRUM0OEM5Q0JCRjIyOEM5MUFFNEI0NUU1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrOvEyBpONWsYdvFMKg5tRqzFy OUXPR15f7Nib1pYmewb9kVCThFPmlsumttQAfMRGwvwf3bFEHfO+G1lEQCnKB6+h VBbJJaTPmzrV7zjHZpJu3qKzr9FR8nAO683FttoKReGQwPnzmHwOoEnTGRf9Mjhe Lktd2P1XgDmvTGmMjKTH1pISfdp1Y0Oyzog+VVXOuy/4TRRPQA4Y73OZlPFeagvu xGXvgS8ujNLUKa/pchF5Di/RLUS0GJdBGpxPVh6SnpLoBWqubvf1Z03fR6pl8Rl/ 10lwmHnNPPSRnGm2/gE4S/7hAMEBboXpjq7jkyEMrIqcPGdLySljpi0QdezHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgSfdyOyCGuxIycu/IoyRrktF5UswHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzEzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMDMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtjbzANBgkqhkiG 9w0BAQsFAAOCAQEALZrU0/XLlQIQzbFBu6HO21+wMhJFadnF4a6wDZUIgll/SeHz mayiLiOSKgeCFm7/b2e6xHPtlG+V5mqQlsiQjw5yU/ydlGtzSSkpF8Z2+JfR6Njo XtJe4yAt3fEOTECMWHi/sR8WwPQ5ASmYDJiuYCu/lVkHnKHAN37a0ElqpnzS2+Hb /4HMpbnAxr47w01rVKTolXu3+SjjhAurf7CDu5yOa05AjI38rtZJesPzFEf4I4Gq /4PwVo2G1z7DfjCzNxZoJSSoINNsENOQNCBAJ29+AW2w0lcf7+zQIbkmSspvJk4f z0a2aI6AHqcxhty1cUHzdT7Y7MSRdb7SY8aXEw== -----END CERTIFICATE-----Generated at Sun Jun 8 06:07:23 2025 by rpki-client