$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa File: 3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa (raw, json) Hash identifier: 5amV64UjC0JF6r/w8omeOHv9ivuPJRMb5ZoL5FJE140= Subject key identifier: 3F:5E:FF:97:6B:8A:49:8A:E0:0C:AA:65:A5:A8:E3:A4:66:B9:B2:EE Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 6C61E630DF7532F5315C1193B4B1869B580647C7 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa Signing time: Tue 20 May 2025 06:00:00 +0000 ROA not before: Tue 20 May 2025 05:55:00 +0000 ROA not after: Tue 19 May 2026 06:00:00 +0000 asID: 38143 IP address blocks: 202.169.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 12:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:61:e6:30:df:75:32:f5:31:5c:11:93:b4:b1:86:9b:58:06:47:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: May 20 05:55:00 2025 GMT Not After : May 19 06:00:00 2026 GMT Subject: CN=3F5EFF976B8A498AE00CAA65A5A8E3A466B9B2EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:f8:88:c4:7f:e4:8c:e5:c7:70:6a:a3:6e: a9:fb:02:47:6a:56:2e:59:3a:77:66:45:2a:44:d0: 1c:ef:2d:2c:c8:8b:73:be:eb:fd:bf:64:db:8c:2b: 15:74:bc:43:e5:86:12:cc:d7:38:49:2c:c2:fd:83: 9a:f3:96:39:50:21:65:40:b9:31:bd:d5:24:67:95: 3e:ed:8c:5a:a0:5b:70:1a:ae:44:b6:33:2a:89:70: f8:08:4b:d7:2f:b6:14:fc:14:4e:d4:ec:40:d7:19: 4f:4a:1c:68:3f:37:a5:e5:bb:ff:d2:b4:99:7a:b6: 02:09:a6:20:f0:37:4e:dc:56:e4:5e:ed:8f:9b:fb: 0c:31:8a:9f:a3:e1:44:5a:71:20:83:4a:c5:10:db: c5:f6:1e:ec:fd:f6:6d:e3:c4:78:b3:23:0f:4e:67: 90:1e:73:3e:88:23:86:ad:6f:d5:fc:77:9f:6a:3b: d2:09:16:2b:06:61:5b:d0:93:da:b7:c8:c1:0f:a9: ee:51:5b:98:a8:46:bb:bb:c4:33:9e:33:b3:5c:a6: d2:60:e0:db:52:59:51:44:4b:ef:d4:13:ce:99:5a: 49:d7:a7:fc:9f:34:c2:96:c2:6d:27:4b:d9:56:2b: a3:ef:b1:92:fb:c9:f6:01:4a:de:2e:9d:40:05:98: 64:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5E:FF:97:6B:8A:49:8A:E0:0C:AA:65:A5:A8:E3:A4:66:B9:B2:EE X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234322e302f32342d3234203d3e203338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.242.0/24 Signature Algorithm: sha256WithRSAEncryption 60:d0:cb:af:9e:77:f1:ad:4c:d7:06:9a:40:ff:6e:34:f2:27: e8:9e:ed:8f:7f:02:0e:aa:77:89:f7:ab:b2:d1:75:d4:1a:1b: f9:1b:14:1b:c8:1b:b3:f7:d5:7b:46:ad:10:13:d9:b0:5c:96: 1b:4e:d8:85:1b:a7:6d:38:13:a2:d1:79:18:a5:fd:d8:e4:2f: b6:fd:20:77:59:9d:55:8e:23:59:46:58:56:3b:43:c8:19:96: 93:82:80:4b:3f:5f:e7:ba:31:30:a0:a3:ff:7f:40:d3:f4:3b: f3:15:50:cf:91:17:1a:fc:84:55:b3:47:80:39:49:cb:ad:cb: ce:af:5e:89:7c:05:33:ad:ca:e5:a5:e5:23:2d:7f:43:99:b2: 8b:40:04:9e:a5:e4:37:f0:af:ff:98:e1:c7:35:e5:7e:a4:f9: 20:67:12:3e:ee:22:71:7c:33:85:40:f9:9c:76:12:6c:5a:67: 06:eb:1d:aa:19:99:bc:19:14:55:c8:be:05:4a:0f:4a:7a:37: c4:4f:a1:14:fd:7a:b1:74:26:2b:6a:8a:fd:0c:4a:50:80:a5: 8d:fe:b0:2d:6a:82:63:a0:53:ac:13:5f:ce:b6:2e:99:14:be: d7:ac:34:c7:d9:4d:9b:70:8f:79:79:57:08:26:f0:5b:77:de: 03:e4:b0:df -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbGHmMN91MvUxXBGTtLGGm1gGR8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTA1MjAwNTU1MDBaFw0yNjA1MTkwNjAwMDBaMDMxMTAvBgNV BAMTKDNGNUVGRjk3NkI4QTQ5OEFFMDBDQUE2NUE1QThFM0E0NjZCOUIyRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLviIxH/kjOXHcGqjbqn7Akdq Vi5ZOndmRSpE0BzvLSzIi3O+6/2/ZNuMKxV0vEPlhhLM1zhJLML9g5rzljlQIWVA uTG91SRnlT7tjFqgW3AarkS2MyqJcPgIS9cvthT8FE7U7EDXGU9KHGg/N6Xlu//S tJl6tgIJpiDwN07cVuRe7Y+b+wwxip+j4URacSCDSsUQ28X2Huz99m3jxHizIw9O Z5Aecz6II4atb9X8d59qO9IJFisGYVvQk9q3yMEPqe5RW5ioRru7xDOeM7NcptJg 4NtSWVFES+/UE86ZWknXp/yfNMKWwm0nS9lWK6PvsZL7yfYBSt4unUAFmGQLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUP17/l2uKSYrgDKplpajjpGa5su4wHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqnyMA0GCSqG SIb3DQEBCwUAA4IBAQBg0MuvnnfxrUzXBppA/2408ifonu2PfwIOqneJ96uy0XXU Ghv5GxQbyBuz99V7Rq0QE9mwXJYbTtiFG6dtOBOi0XkYpf3Y5C+2/SB3WZ1VjiNZ RlhWO0PIGZaTgoBLP1/nujEwoKP/f0DT9DvzFVDPkRca/IRVs0eAOUnLrcvOr16J fAUzrcrlpeUjLX9DmbKLQASepeQ38K//mOHHNeV+pPkgZxI+7iJxfDOFQPmcdhJs WmcG6x2qGZm8GRRVyL4FSg9KejfET6EU/XqxdCYraor9DEpQgKWN/rAtaoJjoFOs E1/Oti6ZFL7XrDTH2U2bcI95eVcIJvBbd94D5LDf -----END CERTIFICATE-----Generated at Sun Jun 8 06:13:55 2025 by rpki-client