$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e392e302f32342d3234203d3e203137363731.roa File: 3230322e35322e392e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: rqqsP9o/TpuDPorLMjHWSKKkcJUIMoRD9zeQV33gc+I= Subject key identifier: 9B:F3:C8:9D:7B:BA:71:8E:EC:EB:B3:32:44:D9:7E:F8:38:7F:C0:6A Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 68DFEF51B66EE2A8C8C297966411561F4D4545BF Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e392e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 12:02:09 +0000 ROA not before: Sat 17 May 2025 11:57:09 +0000 ROA not after: Sat 16 May 2026 12:02:09 +0000 asID: 17671 IP address blocks: 202.52.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 04:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:df:ef:51:b6:6e:e2:a8:c8:c2:97:96:64:11:56:1f:4d:45:45:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 11:57:09 2025 GMT Not After : May 16 12:02:09 2026 GMT Subject: CN=9BF3C89D7BBA718EECEBB33244D97EF8387FC06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:fc:7f:f4:37:b5:63:6a:bf:cf:07:8c:25: 74:f9:f3:0a:34:cc:07:d4:3c:6f:a4:31:5b:e4:45: 44:9e:67:a1:db:d7:7f:16:b3:fb:7e:d3:82:e4:95: c6:ba:ac:a6:b6:64:c1:e4:1e:44:4b:7c:78:43:66: 84:ad:9f:be:c2:dc:a0:00:18:be:54:64:ff:23:43: 48:c6:da:24:d8:1a:84:0d:67:1b:24:3c:50:4e:a7: 94:dc:44:23:13:c4:18:aa:32:4d:4a:4e:26:dd:ab: 1b:3b:e3:4d:73:a6:f7:c8:44:43:3b:71:af:46:0c: 81:fe:98:98:ec:48:91:2f:a7:44:0d:4a:b2:26:15: e1:db:60:d9:af:e5:0c:19:68:20:6b:ce:79:9b:86: 61:de:c5:82:6f:00:22:96:cf:4d:e7:46:85:ee:7e: 11:22:e1:3a:11:73:25:33:ac:7b:b8:68:62:3e:e8: 05:84:fb:be:e0:4c:6c:b5:50:94:4f:f5:f6:9c:90: a2:77:00:3a:be:66:fd:87:b8:19:48:04:e7:83:92: 19:73:30:a5:d2:03:5a:43:27:a4:41:5c:eb:09:cb: 78:32:9d:3e:86:eb:d8:83:ac:29:e7:19:b1:c7:44: f0:5d:a8:cc:cd:d9:ea:17:3b:a4:47:fa:59:f8:5a: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F3:C8:9D:7B:BA:71:8E:EC:EB:B3:32:44:D9:7E:F8:38:7F:C0:6A X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e392e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.9.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:36:6e:92:f6:c1:ee:9c:67:ee:08:11:73:52:82:53:c4:6c: 9b:50:fd:4e:e7:5e:1d:e8:f0:1a:1d:08:b5:4a:b2:46:27:6c: cc:7a:a9:33:62:ba:59:81:2b:b8:a4:be:d3:2d:50:7c:0d:18: 08:33:0d:1c:f2:c4:8c:02:6f:b7:54:ad:84:26:b1:77:db:e2: 94:bf:a2:03:2c:6c:fe:ec:ba:5e:ce:49:ed:a9:64:8e:1a:e8: ca:34:ea:f8:a2:16:24:b0:ef:eb:05:ad:a7:13:1b:7e:03:61: 47:72:90:6d:d6:65:7b:f8:24:7c:5b:84:b0:dc:16:8c:bd:ab: 81:59:1b:b6:0a:66:48:f7:42:e3:ee:42:6f:8f:79:ff:f3:fd: fd:b2:e1:a3:4e:5b:ca:41:3a:1b:fd:b6:b3:91:cd:39:e4:4f: eb:0a:bd:7c:a5:9a:7a:66:41:76:04:67:fe:7d:70:bb:0c:dc: 51:11:30:8d:24:c1:1c:6a:20:6b:ef:ef:e0:59:36:1f:d7:6e: 0e:22:bb:d1:fd:83:93:5b:ef:ed:a6:c3:5d:79:b2:56:98:2b: 28:cc:01:7f:79:bb:45:38:71:39:71:0e:3a:55:c7:a3:32:5a: 4e:2e:33:11:57:5b:bc:52:56:56:07:06:27:30:7e:fe:36:5e: 62:02:24:68 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUaN/vUbZu4qjIwpeWZBFWH01FRb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMTU3MDlaFw0yNjA1MTYxMjAyMDlaMDMxMTAvBgNV BAMTKDlCRjNDODlEN0JCQTcxOEVFQ0VCQjMzMjQ0RDk3RUY4Mzg3RkMwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5/x/9De1Y2q/zweMJXT58wo0 zAfUPG+kMVvkRUSeZ6Hb138Ws/t+04Lklca6rKa2ZMHkHkRLfHhDZoStn77C3KAA GL5UZP8jQ0jG2iTYGoQNZxskPFBOp5TcRCMTxBiqMk1KTibdqxs7401zpvfIREM7 ca9GDIH+mJjsSJEvp0QNSrImFeHbYNmv5QwZaCBrznmbhmHexYJvACKWz03nRoXu fhEi4ToRcyUzrHu4aGI+6AWE+77gTGy1UJRP9fackKJ3ADq+Zv2HuBlIBOeDkhlz MKXSA1pDJ6RBXOsJy3gynT6G69iDrCnnGbHHRPBdqMzN2eoXO6RH+ln4WtuPAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUm/PInXu6cY7s67MyRNl++Dh/wGowHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNlYmYxMTYtZmUyYS00OTFiLWFh YzgtMjIwZWFkMGI1NGUyLzAvMzIzMDMyMmUzNTMyMmUzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNAkwDQYJKoZIhvcNAQEL BQADggEBAJ02bpL2we6cZ+4IEXNSglPEbJtQ/U7nXh3o8BodCLVKskYnbMx6qTNi ulmBK7ikvtMtUHwNGAgzDRzyxIwCb7dUrYQmsXfb4pS/ogMsbP7sul7OSe2pZI4a 6Mo06viiFiSw7+sFracTG34DYUdykG3WZXv4JHxbhLDcFoy9q4FZG7YKZkj3QuPu Qm+Pef/z/f2y4aNOW8pBOhv9trORzTnkT+sKvXylmnpmQXYEZ/59cLsM3FERMI0k wRxqIGvv7+BZNh/Xbg4iu9H9g5Nb7+2mw115slaYKyjMAX95u0U4cTlxDjpVx6My Wk4uMxFXW7xSVlYHBicwfv42XmICJGg= -----END CERTIFICATE-----Generated at Sat Jun 7 17:24:14 2025 by rpki-client