$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa File: 3230322e34372e37382e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: qXBEjFFBwy4hNLKWOABBNUB74G+pyKFh72GB53OO+Yw= Subject key identifier: 5B:B6:1C:B0:62:65:01:67:59:D8:A8:D8:52:E9:F5:18:9D:20:7D:B9 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 69D103AFA0670305933B31EF67A818F8A1F61482 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 12:02:10 +0000 ROA not before: Sat 17 May 2025 11:57:10 +0000 ROA not after: Sat 16 May 2026 12:02:10 +0000 asID: 17671 IP address blocks: 202.47.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d1:03:af:a0:67:03:05:93:3b:31:ef:67:a8:18:f8:a1:f6:14:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 11:57:10 2025 GMT Not After : May 16 12:02:10 2026 GMT Subject: CN=5BB61CB06265016759D8A8D852E9F5189D207DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:1f:32:f6:28:d4:59:5e:85:95:46:0b:bb: f8:bc:fa:15:38:5e:49:21:f2:00:cf:b8:77:ce:29: ef:bf:8e:d6:3f:78:83:17:b1:38:40:5c:a8:5b:76: 3c:cf:7e:7c:ce:9e:d4:64:14:a4:2d:f6:56:07:2e: 7c:d8:21:8d:35:fb:d7:ea:cd:09:64:2d:b3:c0:69: 3c:50:4c:5f:19:09:04:71:1b:80:d3:79:d9:6c:36: 32:dd:f2:b8:0c:cd:8b:04:0a:c3:d5:03:7b:93:f9: 7a:4f:0a:4c:de:24:8c:02:0a:56:79:39:f1:3e:da: 2e:65:33:9e:74:e6:7d:35:61:86:50:f3:d8:7e:ef: 07:8c:75:29:f6:af:c2:ca:c3:e1:c5:33:8b:5b:04: e4:71:3d:5d:1e:5a:52:ab:32:c1:70:74:7a:c2:7a: 00:3d:a8:87:dd:66:64:e5:0c:48:dc:54:71:62:3a: e0:0d:93:a5:3a:c0:75:74:af:c3:cb:e4:2a:36:28: d3:12:11:7d:46:d6:48:b5:d4:d9:54:77:23:9e:89: c0:98:ae:b2:1d:a2:e6:24:4d:07:56:19:58:dc:3d: ee:ee:61:33:ae:22:d2:69:ae:27:32:67:df:0d:1e: 8a:63:85:53:a5:6f:d5:06:26:84:63:7a:26:d9:aa: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B6:1C:B0:62:65:01:67:59:D8:A8:D8:52:E9:F5:18:9D:20:7D:B9 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37382e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.78.0/24 Signature Algorithm: sha256WithRSAEncryption b8:d9:f4:9b:db:0f:23:d0:50:e0:c8:8a:51:88:b2:ab:96:48: 25:df:d5:58:00:4f:f7:0e:3f:05:15:f1:43:9e:f4:01:f5:c1: c0:04:94:eb:4f:87:a9:1a:32:d6:dc:56:1c:18:b3:b9:01:2f: 07:4d:de:92:86:1b:5f:25:84:77:0d:2c:52:c2:68:83:b6:b0: a0:05:f3:6a:08:d0:ff:e4:87:8d:7e:55:bb:00:d4:61:ed:74: 2e:87:56:a8:41:ff:a5:74:e6:f8:a6:2e:0b:f5:21:56:24:4d: 9e:09:62:58:c5:b9:a3:16:02:3f:04:b0:a8:08:ae:5e:dc:62: 8d:88:1f:2b:97:02:00:6c:62:eb:cd:0e:3e:a3:f6:f8:23:d6: f5:bb:27:2c:ba:7a:71:bf:d3:33:c2:bb:be:2e:72:76:9f:71: ad:df:6a:d4:f4:22:b6:b1:7e:e1:5c:07:89:f5:ba:87:fa:8c: 66:21:5f:34:19:21:17:33:cf:34:fc:d2:25:d6:a8:cf:17:a6: de:7f:7c:60:05:e8:f3:f4:99:5d:0a:8c:b5:1f:33:8d:fe:6d: 4e:83:3c:14:f3:27:b6:ea:4e:49:42:b9:75:76:c5:4f:a8:82: c4:bb:2a:84:b1:7a:9a:d4:82:e2:1a:76:74:34:70:45:fc:47: 13:de:ff:a9 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUadEDr6BnAwWTOzHvZ6gY+KH2FIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMTU3MTBaFw0yNjA1MTYxMjAyMTBaMDMxMTAvBgNV BAMTKDVCQjYxQ0IwNjI2NTAxNjc1OUQ4QThEODUyRTlGNTE4OUQyMDdEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIB8y9ijUWV6FlUYLu/i8+hU4 Xkkh8gDPuHfOKe+/jtY/eIMXsThAXKhbdjzPfnzOntRkFKQt9lYHLnzYIY01+9fq zQlkLbPAaTxQTF8ZCQRxG4DTedlsNjLd8rgMzYsECsPVA3uT+XpPCkzeJIwCClZ5 OfE+2i5lM5505n01YYZQ89h+7weMdSn2r8LKw+HFM4tbBORxPV0eWlKrMsFwdHrC egA9qIfdZmTlDEjcVHFiOuANk6U6wHV0r8PL5Co2KNMSEX1G1ki11NlUdyOeicCY rrIdouYkTQdWGVjcPe7uYTOuItJpricyZ98NHopjhVOlb9UGJoRjeibZqqeTAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUW7YcsGJlAWdZ2KjYUun1GJ0gfbkwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL04wDQYJKoZIhvcN AQELBQADggEBALjZ9JvbDyPQUODIilGIsquWSCXf1VgAT/cOPwUV8UOe9AH1wcAE lOtPh6kaMtbcVhwYs7kBLwdN3pKGG18lhHcNLFLCaIO2sKAF82oI0P/kh41+VbsA 1GHtdC6HVqhB/6V05vimLgv1IVYkTZ4JYljFuaMWAj8EsKgIrl7cYo2IHyuXAgBs YuvNDj6j9vgj1vW7Jyy6enG/0zPCu74ucnafca3fatT0IraxfuFcB4n1uof6jGYh XzQZIRczzzT80iXWqM8Xpt5/fGAF6PP0mV0KjLUfM43+bU6DPBTzJ7bqTklCuXV2 xU+ogsS7KoSxeprUguIadnQ0cEX8RxPe/6k= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:15 2025 by rpki-client