$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa File: 3230322e3134352e382e302f32312d3234203d3e203535363835.roa (raw, json) Hash identifier: xbeFKkqwQqNOarIPyTpGLDkiA46lf68o/jLqsxxslAs= Subject key identifier: EF:ED:AF:79:C9:42:02:48:2E:8B:8A:17:89:E9:23:1A:F2:37:F1:1E Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 488882EBB3A5E348574F7BAF2AF670667E937CD6 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa Signing time: Mon 02 Jun 2025 02:04:46 +0000 ROA not before: Mon 02 Jun 2025 01:59:46 +0000 ROA not after: Mon 01 Jun 2026 02:04:46 +0000 asID: 55685 IP address blocks: 202.145.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:88:82:eb:b3:a5:e3:48:57:4f:7b:af:2a:f6:70:66:7e:93:7c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Jun 2 01:59:46 2025 GMT Not After : Jun 1 02:04:46 2026 GMT Subject: CN=EFEDAF79C94202482E8B8A1789E9231AF237F11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:34:41:42:c6:ee:92:98:9d:da:3b:75:93: 3e:f4:9e:55:4d:9c:f6:3c:39:ff:17:fe:b2:66:76: a2:b5:f7:7f:b7:7d:12:21:22:49:2d:f9:04:13:1b: ed:c2:8d:03:93:38:08:cc:39:02:60:82:7b:ab:71: 0a:7b:88:37:aa:5d:93:8d:e7:bf:e5:22:e3:ad:b9: e6:57:5a:7c:55:d5:28:13:e2:57:d8:e2:22:2a:33: 24:7f:c4:a3:0d:10:6a:2a:22:d1:a8:84:37:f5:ae: f0:d5:fa:10:d8:ac:d6:93:7f:58:01:55:33:8b:57: 29:88:16:b0:ba:8f:04:53:c3:62:59:97:43:be:81: f4:44:4d:ec:0c:9b:de:eb:d1:3e:e0:f0:99:97:af: d7:2d:57:97:7e:78:f5:d6:bd:d9:76:e8:eb:86:d8: 4f:09:29:4b:86:7b:3d:57:6b:eb:bc:43:55:0f:49: 94:8d:02:88:1f:ec:8f:07:85:b5:c4:77:52:ba:0a: a7:2d:b5:f7:a2:34:25:f6:9b:9d:8e:22:75:32:b7: 34:1c:af:33:35:f3:ae:a9:d2:f8:f3:a8:36:12:1b: 96:62:7d:e2:d6:b5:41:45:9a:9f:06:44:47:c4:9d: 56:52:29:bc:ea:12:68:6f:b8:1a:6d:51:2a:56:65: d7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:ED:AF:79:C9:42:02:48:2E:8B:8A:17:89:E9:23:1A:F2:37:F1:1E X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.145.8.0/21 Signature Algorithm: sha256WithRSAEncryption 75:08:f8:71:60:67:bd:27:8b:66:ad:9e:4b:7f:94:de:1d:fc: d0:40:71:ef:80:c5:3e:82:d0:dc:64:e2:46:64:aa:4a:9b:62: 21:53:3e:62:b9:e3:91:1a:d1:60:80:57:77:b1:16:db:e1:45: 8a:02:6b:c3:60:46:13:78:10:9e:0d:fd:97:79:75:2c:af:5e: 67:6c:6d:41:86:40:fe:b1:42:bd:83:6d:2f:fb:1a:dd:87:33: 1a:ed:b5:cb:5b:51:0d:0d:f2:15:50:8e:9d:4e:3e:00:02:e0: c5:a6:80:dc:e9:47:35:f0:15:53:f0:2e:5e:4c:e7:2b:d9:cc: e4:28:19:ff:84:6e:5b:c1:31:b7:25:e8:8a:8f:fa:dc:5a:ad: e9:a5:e6:58:e0:5f:84:81:bc:f1:db:f7:10:13:f1:87:4d:38: 37:d2:f9:62:a7:22:14:68:b4:10:f0:7c:7d:1d:93:dd:e1:af: dd:7e:cc:d8:82:f9:15:84:91:36:14:d8:6f:f1:b4:46:d5:bf: 5e:e4:83:ca:da:f9:f9:b9:af:7d:35:5d:ed:ff:26:82:51:6c: 8d:35:2f:29:55:59:90:6e:2e:e3:ce:31:fb:39:b5:7c:6e:12: 67:02:55:bc:7a:85:b1:1f:e6:b4:ef:12:41:91:e0:44:cc:3e: 02:97:af:3c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSIiC67Ol40hXT3uvKvZwZn6TfNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTA2MDIwMTU5NDZaFw0yNjA2MDEwMjA0NDZaMDMxMTAvBgNV BAMTKEVGRURBRjc5Qzk0MjAyNDgyRThCOEExNzg5RTkyMzFBRjIzN0YxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ezRBQsbukpid2jt1kz70nlVN nPY8Of8X/rJmdqK193+3fRIhIkkt+QQTG+3CjQOTOAjMOQJggnurcQp7iDeqXZON 57/lIuOtueZXWnxV1SgT4lfY4iIqMyR/xKMNEGoqItGohDf1rvDV+hDYrNaTf1gB VTOLVymIFrC6jwRTw2JZl0O+gfRETewMm97r0T7g8JmXr9ctV5d+ePXWvdl26OuG 2E8JKUuGez1Xa+u8Q1UPSZSNAogf7I8HhbXEd1K6CqcttfeiNCX2m52OInUytzQc rzM1866p0vjzqDYSG5ZifeLWtUFFmp8GREfEnVZSKbzqEmhvuBptUSpWZddLAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU7+2veclCAkgui4oXiekjGvI38R4wHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMjJlMzEzNDM1MmUzODJlMzAyZjMyMzEy ZDMyMzQyMDNkM2UyMDM1MzUzNjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKkQgwDQYJKoZIhvcN AQELBQADggEBAHUI+HFgZ70ni2atnkt/lN4d/NBAce+AxT6C0Nxk4kZkqkqbYiFT PmK545Ea0WCAV3exFtvhRYoCa8NgRhN4EJ4N/Zd5dSyvXmdsbUGGQP6xQr2DbS/7 Gt2HMxrttctbUQ0N8hVQjp1OPgAC4MWmgNzpRzXwFVPwLl5M5yvZzOQoGf+EblvB Mbcl6IqP+txareml5ljgX4SBvPHb9xAT8YdNODfS+WKnIhRotBDwfH0dk93hr91+ zNiC+RWEkTYU2G/xtEbVv17kg8ra+fm5r301Xe3/JoJRbI01LylVWZBuLuPOMfs5 tXxuEmcCVbx6hbEf5rTvEkGR4ETMPgKXrzw= -----END CERTIFICATE-----Generated at Sat Jun 7 06:02:39 2025 by rpki-client