$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37302e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: AOmv/SETLNpCT8mPfARWIldWEmKwNYJ3UgZ9KZMV5ok= Subject key identifier: 36:0B:A2:C1:C8:7D:DB:01:F5:D9:75:BB:FD:AC:EF:F4:B9:81:81:C6 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 6E245A2609DBAB9605F7C06D994FD9BCB1C84591 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 12:02:08 +0000 ROA not before: Sat 17 May 2025 11:57:08 +0000 ROA not after: Sat 16 May 2026 12:02:08 +0000 asID: 17671 IP address blocks: 202.47.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:24:5a:26:09:db:ab:96:05:f7:c0:6d:99:4f:d9:bc:b1:c8:45:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 11:57:08 2025 GMT Not After : May 16 12:02:08 2026 GMT Subject: CN=360BA2C1C87DDB01F5D975BBFDACEFF4B98181C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c0:0b:b0:4e:15:ae:b7:e0:56:45:ba:0f:1a: 95:e4:0a:75:2a:e5:f4:2c:20:1b:d7:d5:45:36:0e: 7e:f0:b5:a7:5d:ef:3d:06:d2:30:78:73:e0:f3:52: 0d:09:6d:a0:ae:ac:89:ac:a1:1d:aa:d7:c4:67:91: 14:7e:4d:15:d7:17:3f:23:51:3c:24:62:61:8f:60: 66:fe:12:53:bd:2f:87:b9:01:02:ae:f4:0c:48:79: dd:3d:bd:cc:4d:bd:8f:4a:4e:83:0e:69:95:27:7d: d2:10:81:67:06:8b:78:c3:35:44:80:df:9d:0c:42: ba:e9:e5:09:fe:9a:c3:e8:ae:dd:68:5c:af:ed:45: 99:48:0d:35:c1:d2:63:f0:84:7a:2c:56:6f:91:0c: d3:5e:0d:90:c5:08:06:75:56:11:aa:af:8c:1c:e3: 4e:3d:30:55:f2:c0:00:ea:41:b4:24:06:a8:9f:40: 40:51:fb:e9:34:dc:74:b4:e6:14:35:66:c7:bc:66: cc:37:2e:b5:d4:21:22:34:e0:4c:80:b4:47:fc:ce: 61:25:c7:9d:c0:0c:e7:75:b8:52:a9:67:db:36:ba: 6d:89:e3:88:41:be:ea:8b:15:80:4c:66:91:c0:fd: 57:d7:75:35:2e:c7:09:7c:58:45:7c:0b:d6:d6:47: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:A2:C1:C8:7D:DB:01:F5:D9:75:BB:FD:AC:EF:F4:B9:81:81:C6 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37302e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.70.0/24 Signature Algorithm: sha256WithRSAEncryption 51:12:5c:08:d9:ee:f7:82:86:81:ab:c0:60:bf:12:b0:10:7a: 19:5b:20:18:79:7e:20:ad:6a:f7:31:da:c4:23:d2:a0:1a:c5: 10:0d:d6:c0:fd:f4:93:a0:17:cf:f6:e6:52:1a:12:0a:18:94: 22:ff:b6:55:2e:8f:72:32:be:8f:db:ed:16:23:88:87:6d:79: af:12:67:b7:0b:5e:4d:28:0d:46:b1:70:c0:04:e8:65:c8:27: e0:51:5f:8f:cc:78:f6:9f:23:bf:c4:e0:2d:78:cc:49:df:2e: 38:a8:f4:2e:72:b0:44:0b:a1:e3:2f:fc:d7:e3:85:5a:73:d9: 9c:62:3c:1d:52:61:fe:be:5b:a3:5f:ae:7c:10:54:ff:18:30: 1f:88:1d:8f:62:90:15:bb:41:31:3c:85:09:41:48:e3:1d:06: 00:bb:57:d8:e7:c7:5f:c2:12:1f:a4:d0:4c:7e:fd:c0:b6:b5: f6:2d:70:4d:cc:42:7e:14:92:fc:b5:15:a2:2a:bc:48:b4:ea: f2:ad:08:60:bc:fc:1b:78:40:3a:2a:ad:a1:59:79:eb:54:b5: 55:70:0d:2f:b7:43:14:a2:5c:c9:54:6a:57:36:39:21:7b:d0: 7d:93:0d:7d:ed:59:ba:ab:b0:6f:a0:6e:ef:bb:78:c4:6d:9b: b8:da:54:e8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUbiRaJgnbq5YF98BtmU/ZvLHIRZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMTU3MDhaFw0yNjA1MTYxMjAyMDhaMDMxMTAvBgNV BAMTKDM2MEJBMkMxQzg3RERCMDFGNUQ5NzVCQkZEQUNFRkY0Qjk4MTgxQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfwAuwThWut+BWRboPGpXkCnUq 5fQsIBvX1UU2Dn7wtadd7z0G0jB4c+DzUg0JbaCurImsoR2q18RnkRR+TRXXFz8j UTwkYmGPYGb+ElO9L4e5AQKu9AxIed09vcxNvY9KToMOaZUnfdIQgWcGi3jDNUSA 350MQrrp5Qn+msPort1oXK/tRZlIDTXB0mPwhHosVm+RDNNeDZDFCAZ1VhGqr4wc 4049MFXywADqQbQkBqifQEBR++k03HS05hQ1Zse8Zsw3LrXUISI04EyAtEf8zmEl x53ADOd1uFKpZ9s2um2J44hBvuqLFYBMZpHA/VfXdTUuxwl8WEV8C9bWRy6xAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUNguiwch92wH12XW7/azv9LmBgcYwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0YwDQYJKoZIhvcN AQELBQADggEBAFESXAjZ7veChoGrwGC/ErAQehlbIBh5fiCtavcx2sQj0qAaxRAN 1sD99JOgF8/25lIaEgoYlCL/tlUuj3Iyvo/b7RYjiIdtea8SZ7cLXk0oDUaxcMAE 6GXIJ+BRX4/MePafI7/E4C14zEnfLjio9C5ysEQLoeMv/NfjhVpz2ZxiPB1SYf6+ W6NfrnwQVP8YMB+IHY9ikBW7QTE8hQlBSOMdBgC7V9jnx1/CEh+k0Ex+/cC2tfYt cE3MQn4Ukvy1FaIqvEi06vKtCGC8/Bt4QDoqraFZeetUtVVwDS+3QxSiXMlUalc2 OSF70H2TDX3tWbqrsG+gbu+7eMRtm7jaVOg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:49 2025 by rpki-client