$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa File: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (raw, json) Hash identifier: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34= Subject key identifier: 08:72:E1:40:2F:C6:88:9C:5C:9A:D5:53:EC:11:C5:D8:A7:6A:36:3F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 4C8FF8BEA0133962EEE2AC670055752BA9D55251 Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa Signing time: Mon 02 Jun 2025 02:02:38 +0000 ROA not before: Mon 02 Jun 2025 01:57:38 +0000 ROA not after: Mon 01 Jun 2026 02:02:38 +0000 asID: 131745 IP address blocks: 210.247.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8f:f8:be:a0:13:39:62:ee:e2:ac:67:00:55:75:2b:a9:d5:52:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Jun 2 01:57:38 2025 GMT Not After : Jun 1 02:02:38 2026 GMT Subject: CN=0872E1402FC6889C5C9AD553EC11C5D8A76A363F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:22:74:37:26:05:e1:59:b0:45:67:a1:af: 02:fd:0e:01:09:7f:89:e4:75:a4:21:46:eb:41:2d: 67:f5:b3:b8:c7:8b:db:d0:7c:71:8c:50:db:b4:7e: 10:7a:92:12:e2:40:66:c3:e0:00:79:ff:86:15:34: 14:3d:3a:e6:b1:31:ed:16:8a:c7:c0:e0:94:4a:e1: ee:1c:00:b6:cb:97:33:80:05:2e:46:32:68:26:34: 4f:ee:1b:9b:e2:8c:cd:fd:2b:44:f5:f2:1c:f7:5a: 87:37:f3:48:68:8c:ac:31:6c:35:8d:48:d2:87:71: cf:6d:2c:4c:bc:a3:29:f3:d4:77:cd:eb:ba:ae:9b: 72:54:ab:e7:27:32:6b:68:56:de:9c:62:7f:14:65: 48:29:12:b4:4f:6e:6e:dc:90:d8:64:03:50:83:f5: ac:1f:39:bc:13:d2:59:f7:4a:b1:4d:f7:c0:29:e4: c7:6f:5e:60:a8:df:1d:f4:d8:67:86:4e:05:37:35: df:64:fd:40:0e:1a:f3:af:da:c8:a8:2f:14:82:8b: 9f:15:e9:86:62:44:bb:9b:4a:48:05:13:f9:3b:08: 36:19:3b:e1:2a:28:55:34:d3:1b:e1:cc:e3:27:af: 66:d7:ba:0e:0c:66:0c:30:98:1b:c9:85:0d:1f:3d: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:72:E1:40:2F:C6:88:9C:5C:9A:D5:53:EC:11:C5:D8:A7:6A:36:3F X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.247.244.0/24 Signature Algorithm: sha256WithRSAEncryption 18:a1:91:8e:f4:dd:64:64:28:7f:18:4b:ee:3b:34:dd:42:a6: cd:e2:d9:59:fb:f5:7c:ac:c3:8b:eb:52:65:c5:01:d4:2a:53: 05:f3:7f:d8:70:5d:7b:08:cd:f7:68:43:7a:5c:8a:78:d5:4a: 7c:2f:45:8c:3a:5b:52:b2:6d:3f:0f:ba:33:67:c9:ca:07:bf: 4b:18:18:ce:ea:45:8e:8a:db:bb:72:c9:98:b2:62:82:56:43: c9:40:9a:b8:68:7a:0d:65:27:51:fb:a5:4b:5d:39:f0:b0:45: 67:10:5d:11:8f:3b:ca:51:13:59:22:fc:4d:ad:7c:99:39:aa: 72:bf:5a:87:b6:d5:3b:31:6d:b4:1d:c1:10:af:a5:3f:d0:cc: 3d:ab:01:47:6a:bd:a0:e1:a5:20:21:3c:86:29:ce:f8:ca:36: cf:0d:bd:41:78:24:2a:0b:93:86:fe:22:ad:20:f4:28:35:ef: 24:80:a2:7b:2c:2f:7d:d0:9b:0f:d0:9f:cd:40:0a:69:ad:2f: f5:2c:54:60:f2:ef:d2:4b:d7:78:cf:8e:52:f8:9c:f5:2c:bf: 44:47:77:8f:11:59:51:50:db:34:04:59:7c:47:a0:7c:84:31: 6a:f2:29:15:65:bd:f4:61:b5:1e:55:8e:4a:e0:0f:4f:c7:6b: 45:f3:cb:1a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTI/4vqATOWLu4qxnAFV1K6nVUlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNTA2MDIwMTU3MzhaFw0yNjA2MDEwMjAyMzhaMDMxMTAvBgNV BAMTKDA4NzJFMTQwMkZDNjg4OUM1QzlBRDU1M0VDMTFDNUQ4QTc2QTM2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuICJ0NyYF4VmwRWehrwL9DgEJ f4nkdaQhRutBLWf1s7jHi9vQfHGMUNu0fhB6khLiQGbD4AB5/4YVNBQ9OuaxMe0W isfA4JRK4e4cALbLlzOABS5GMmgmNE/uG5vijM39K0T18hz3Woc380hojKwxbDWN SNKHcc9tLEy8oynz1HfN67qum3JUq+cnMmtoVt6cYn8UZUgpErRPbm7ckNhkA1CD 9awfObwT0ln3SrFN98Ap5MdvXmCo3x302GeGTgU3Nd9k/UAOGvOv2sioLxSCi58V 6YZiRLubSkgFE/k7CDYZO+EqKFU00xvhzOMnr2bXug4MZgwwmBvJhQ0fPZvbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUCHLhQC/GiJxcmtVT7BHF2KdqNj8wHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzEzMDJlMzIzNDM3MmUzMjM0MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS9/QwDQYJ KoZIhvcNAQELBQADggEBABihkY703WRkKH8YS+47NN1Cps3i2Vn79Xysw4vrUmXF AdQqUwXzf9hwXXsIzfdoQ3pcinjVSnwvRYw6W1KybT8PujNnycoHv0sYGM7qRY6K 27tyyZiyYoJWQ8lAmrhoeg1lJ1H7pUtdOfCwRWcQXRGPO8pRE1ki/E2tfJk5qnK/ Woe21TsxbbQdwRCvpT/QzD2rAUdqvaDhpSAhPIYpzvjKNs8NvUF4JCoLk4b+Iq0g 9Cg17ySAonssL33Qmw/Qn81ACmmtL/UsVGDy79JL13jPjlL4nPUsv0RHd48RWVFQ 2zQEWXxHoHyEMWryKRVlvfRhtR5VjkrgD0/Ha0Xzyxo= -----END CERTIFICATE-----Generated at Thu Jun 5 19:19:38 2025 by rpki-client