$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37352e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: +Vrx8uQFpKOMJHRuDx9FRLmIAy1v6fBAIwmY0BDeKSQ= Subject key identifier: F5:A8:70:71:B2:94:2C:D0:19:70:91:E5:CA:25:0A:14:5C:2F:32:0F Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 47223CCB902CCC4EBD6F120044634E7BCEF4EC2F Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 11:02:27 +0000 ROA not before: Sat 17 May 2025 10:57:27 +0000 ROA not after: Sat 16 May 2026 11:02:27 +0000 asID: 17671 IP address blocks: 202.47.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:22:3c:cb:90:2c:cc:4e:bd:6f:12:00:44:63:4e:7b:ce:f4:ec:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 10:57:27 2025 GMT Not After : May 16 11:02:27 2026 GMT Subject: CN=F5A87071B2942CD0197091E5CA250A145C2F320F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:b6:df:d1:79:f6:48:38:11:25:03:a3:26: 4a:f3:b9:32:53:92:59:b4:c2:7c:36:17:d6:7b:8a: 9f:e2:ff:bb:06:a7:d2:91:7f:6b:1a:1f:c6:4e:05: 6a:c4:a2:25:cd:c1:b9:6e:f9:de:f4:73:a4:eb:83: c1:f6:e6:f7:b2:00:6e:ea:97:ef:70:d6:16:ce:1a: de:52:7d:2c:d1:3b:7a:b3:a6:74:65:e7:06:27:e2: 87:5d:b4:86:22:c0:19:6c:d4:79:7e:81:d8:0a:fe: f5:e0:56:bd:53:55:39:f9:30:0f:75:67:a1:cd:0e: 28:bd:e8:33:2a:81:01:4e:34:15:64:80:35:84:1d: ef:23:6d:9c:ce:35:95:47:cb:09:ba:9b:9b:45:c4: c2:eb:c3:68:b1:92:ab:73:26:be:47:db:80:f1:ff: ed:3e:63:6d:e1:dc:86:48:11:a5:53:07:f5:e3:30: d3:cb:92:33:1a:89:31:da:e1:28:37:3f:fd:39:e4: ca:21:3f:47:36:c0:ee:93:dc:b4:a3:e6:2c:3b:e1: 30:6d:6c:67:1a:e8:79:6f:f6:3d:f5:f4:03:09:2d: 31:b1:10:fa:6d:92:4b:39:30:1a:a8:e5:24:8a:78: 00:ad:d0:f3:70:44:4d:bf:b8:9a:a6:1a:20:bb:55: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A8:70:71:B2:94:2C:D0:19:70:91:E5:CA:25:0A:14:5C:2F:32:0F X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37352e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.75.0/24 Signature Algorithm: sha256WithRSAEncryption 12:22:3f:ec:85:38:11:57:36:dc:01:04:2f:88:4d:06:59:5b: db:a3:85:22:ee:82:95:3a:35:7e:50:57:d4:7b:ba:05:1f:5c: ac:30:82:9f:85:37:e6:49:c0:a9:ac:b4:c9:da:9a:ea:e8:ba: 0b:5b:99:fe:b3:0d:04:93:14:fe:d6:0d:1e:6a:42:59:f3:94: b5:d7:9e:02:70:55:db:d8:94:a8:6d:14:2d:3a:09:50:a9:7c: 08:de:e8:cc:e1:9d:bc:bb:95:76:ab:01:88:6f:34:2f:74:ea: e5:f1:2d:01:47:9f:ef:94:8e:a1:d1:40:02:e5:5a:6d:91:7f: a9:2f:ac:1d:18:ee:a8:6c:dd:2a:5f:71:07:c8:e1:9b:0f:ff: 50:f0:db:bb:ef:5e:8c:b6:f4:c9:80:11:74:18:aa:9f:8a:89: 20:aa:c2:e9:57:a1:c4:52:a4:fd:2a:8e:56:5c:32:79:80:37: 27:49:90:fe:9d:83:1b:e4:2a:75:ad:8d:c9:33:27:22:97:78: 0f:4b:4a:18:51:aa:ef:39:34:96:a3:05:e5:4e:96:8b:62:38: b8:ff:69:b8:e7:20:82:ce:01:68:df:ce:85:f4:eb:06:79:ea: f2:18:83:c0:1d:d8:45:6d:02:26:06:14:6f:a6:6b:e8:0e:82: 3e:c7:74:40 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIURyI8y5AszE69bxIARGNOe8707C8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMDU3MjdaFw0yNjA1MTYxMTAyMjdaMDMxMTAvBgNV BAMTKEY1QTg3MDcxQjI5NDJDRDAxOTcwOTFFNUNBMjUwQTE0NUMyRjMyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH17bf0Xn2SDgRJQOjJkrzuTJT klm0wnw2F9Z7ip/i/7sGp9KRf2saH8ZOBWrEoiXNwblu+d70c6Trg8H25veyAG7q l+9w1hbOGt5SfSzRO3qzpnRl5wYn4oddtIYiwBls1Hl+gdgK/vXgVr1TVTn5MA91 Z6HNDii96DMqgQFONBVkgDWEHe8jbZzONZVHywm6m5tFxMLrw2ixkqtzJr5H24Dx /+0+Y23h3IZIEaVTB/XjMNPLkjMaiTHa4Sg3P/055MohP0c2wO6T3LSj5iw74TBt bGca6Hlv9j319AMJLTGxEPptkks5MBqo5SSKeACt0PNwRE2/uJqmGiC7VU6vAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU9ahwcbKULNAZcJHlyiUKFFwvMg8wHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0swDQYJKoZIhvcN AQELBQADggEBABIiP+yFOBFXNtwBBC+ITQZZW9ujhSLugpU6NX5QV9R7ugUfXKww gp+FN+ZJwKmstMnamurougtbmf6zDQSTFP7WDR5qQlnzlLXXngJwVdvYlKhtFC06 CVCpfAje6Mzhnby7lXarAYhvNC906uXxLQFHn++UjqHRQALlWm2Rf6kvrB0Y7qhs 3SpfcQfI4ZsP/1Dw27vvXoy29MmAEXQYqp+KiSCqwulXocRSpP0qjlZcMnmANydJ kP6dgxvkKnWtjckzJyKXeA9LShhRqu85NJajBeVOlotiOLj/abjnIILOAWjfzoX0 6wZ56vIYg8Ad2EVtAiYGFG+ma+gOgj7HdEA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:15 2025 by rpki-client