$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa File: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (raw, json) Hash identifier: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk= Subject key identifier: D8:C2:ED:44:A9:2F:76:A2:C6:D1:E3:42:60:2F:BE:56:2A:EA:90:6A Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 327AA785D972B10DAB620FCE5998942DAD65436E Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa Signing time: Mon 10 Mar 2025 05:00:01 +0000 ROA not before: Mon 10 Mar 2025 04:55:01 +0000 ROA not after: Mon 09 Mar 2026 05:00:01 +0000 asID: 136873 IP address blocks: 223.25.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 13:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7a:a7:85:d9:72:b1:0d:ab:62:0f:ce:59:98:94:2d:ad:65:43:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Mar 10 04:55:01 2025 GMT Not After : Mar 9 05:00:01 2026 GMT Subject: CN=D8C2ED44A92F76A2C6D1E342602FBE562AEA906A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:d5:a3:f9:7a:ac:17:02:eb:5e:6b:98:87: b8:de:8d:ed:a4:a4:d8:2c:b5:6c:24:b0:b6:76:db: 24:96:01:c0:52:76:fd:7d:70:05:9f:52:2a:d7:e2: 47:0f:6b:a6:57:3b:29:87:0f:45:fb:bc:9d:90:44: 37:30:54:46:1c:d6:22:5a:e0:de:ac:fa:8a:fc:57: 46:c5:ee:1b:1d:38:7e:6d:06:15:0f:0f:d8:c0:32: b4:bf:62:49:75:0b:c3:4f:3c:5e:c6:c7:38:60:c0: c3:6c:52:78:84:4a:45:53:b4:69:a9:53:62:fc:87: 83:5b:a3:4c:29:f8:1f:d1:77:5e:d7:f2:e0:13:ba: e4:08:eb:af:35:eb:25:ac:55:22:c6:fd:7f:79:c0: a9:d8:05:a5:58:e7:d9:75:b9:67:f8:2c:a5:d5:ac: 71:70:1e:61:3d:2b:62:2f:f9:ea:35:ea:e4:5f:64: 7c:ef:19:6d:5a:9d:79:fe:68:80:fe:5a:2b:3e:f3: 15:bf:5c:63:db:ac:bf:23:04:c2:d4:c8:59:22:f0: e4:18:e1:38:1b:7f:d7:11:c8:20:62:50:97:be:f6: a2:a8:5d:0e:c0:52:02:13:79:9b:40:0e:de:37:b3: a5:b8:3d:93:d4:74:e2:29:4c:60:a0:13:8f:b6:e3: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C2:ED:44:A9:2F:76:A2:C6:D1:E3:42:60:2F:BE:56:2A:EA:90:6A X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.110.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:78:1b:25:e4:bd:23:9b:5f:2c:b0:ae:cf:e5:ec:59:08:ac: 2c:b8:94:6d:42:3f:54:07:51:f4:1b:99:1b:e7:70:4a:9d:4d: 8c:81:bd:2c:19:57:a9:9d:8f:c7:4c:29:7b:25:39:47:b0:2d: 2b:b4:fa:a2:63:53:4e:5f:bc:b2:29:53:3c:8f:60:e7:08:61: 38:36:99:20:ac:b7:2a:ef:9a:35:cc:3c:80:de:b7:1e:f1:17: e8:73:4d:76:b4:fe:92:9b:1b:f1:59:68:4f:39:dd:21:ef:a6: 2b:7e:dd:3f:be:32:25:89:69:b1:98:70:84:28:00:02:ea:11: d4:8d:4d:d5:b6:07:3a:8c:12:4b:1d:45:31:19:76:b1:22:f8: c9:4c:fc:48:06:04:72:9b:96:f0:0c:c3:73:f5:a0:df:ca:85: 80:87:9a:04:ae:c9:3a:db:b7:80:d5:8c:22:0b:d9:04:ab:79: e0:c6:76:96:37:26:ce:1c:31:ae:d4:e8:b0:83:3c:5d:78:02: 42:4e:f9:f6:24:1f:7d:b1:5c:95:56:f8:f5:eb:ac:c3:cd:55: e7:80:d5:91:02:cd:a3:7b:08:10:f9:47:e6:60:e3:e5:37:63: fd:bf:3b:de:fb:49:1d:16:c1:7b:b0:26:c1:8e:41:0b:9a:52: 47:d3:0a:67 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMnqnhdlysQ2rYg/OWZiULa1lQ24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNTAzMTAwNDU1MDFaFw0yNjAzMDkwNTAwMDFaMDMxMTAvBgNV BAMTKEQ4QzJFRDQ0QTkyRjc2QTJDNkQxRTM0MjYwMkZCRTU2MkFFQTkwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ONWj+XqsFwLrXmuYh7jeje2k pNgstWwksLZ22ySWAcBSdv19cAWfUirX4kcPa6ZXOymHD0X7vJ2QRDcwVEYc1iJa 4N6s+or8V0bF7hsdOH5tBhUPD9jAMrS/Ykl1C8NPPF7GxzhgwMNsUniESkVTtGmp U2L8h4Nbo0wp+B/Rd17X8uATuuQI66816yWsVSLG/X95wKnYBaVY59l1uWf4LKXV rHFwHmE9K2Iv+eo16uRfZHzvGW1anXn+aID+Wis+8xW/XGPbrL8jBMLUyFki8OQY 4Tgbf9cRyCBiUJe+9qKoXQ7AUgITeZtADt43s6W4PZPUdOIpTGCgE4+248orAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2MLtRKkvdqLG0eNCYC++VirqkGowHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xluMA0GCSqG SIb3DQEBCwUAA4IBAQAqeBsl5L0jm18ssK7P5exZCKwsuJRtQj9UB1H0G5kb53BK nU2Mgb0sGVepnY/HTCl7JTlHsC0rtPqiY1NOX7yyKVM8j2DnCGE4NpkgrLcq75o1 zDyA3rce8Rfoc012tP6SmxvxWWhPOd0h76Yrft0/vjIliWmxmHCEKAAC6hHUjU3V tgc6jBJLHUUxGXaxIvjJTPxIBgRym5bwDMNz9aDfyoWAh5oErsk627eA1YwiC9kE q3ngxnaWNybOHDGu1OiwgzxdeAJCTvn2JB99sVyVVvj166zDzVXngNWRAs2jewgQ +UfmYOPlN2P9vzve+0kdFsF7sCbBjkELmlJH0wpn -----END CERTIFICATE-----Generated at Sun Apr 6 11:10:48 2025 by rpki-client