$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa File: 3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa (raw, json) Hash identifier: cf3UAkRQmA3WUKBEqtORsFOQiEOHc1PfGF6nPJ39kNs= Subject key identifier: 5E:AA:CB:5F:30:4B:33:F9:E4:9C:E9:07:77:44:DB:BC:F1:C8:3A:BF Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 0376127C804AF9F855C6DA6E8EAD8767F618192F Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa Signing time: Tue 20 May 2025 05:00:01 +0000 ROA not before: Tue 20 May 2025 04:55:01 +0000 ROA not after: Tue 19 May 2026 05:00:01 +0000 asID: 38143 IP address blocks: 202.169.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 12:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:76:12:7c:80:4a:f9:f8:55:c6:da:6e:8e:ad:87:67:f6:18:19:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: May 20 04:55:01 2025 GMT Not After : May 19 05:00:01 2026 GMT Subject: CN=5EAACB5F304B33F9E49CE9077744DBBCF1C83ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:ef:b4:ec:3e:da:da:43:93:6a:61:9f:89: 68:6e:55:e0:1b:2f:ed:3c:c5:7e:db:12:0a:ca:61: b4:e9:13:c2:5d:9f:cd:07:13:d7:0f:2c:8c:fe:8d: 24:47:c5:93:aa:a1:d1:24:2f:41:30:e1:5b:18:48: d1:cf:1a:78:82:bb:2b:64:1d:ae:4a:9a:b6:d2:01: c9:b5:f6:27:5f:13:a0:7f:88:ee:44:c3:5a:ee:28: ea:b2:7b:5e:fc:6d:a4:fa:ff:21:9c:ef:24:26:70: 6d:aa:fd:55:9e:ff:84:bf:ba:46:02:fb:63:2e:26: dc:a9:f6:81:38:f7:05:3c:0a:d9:56:13:6e:25:f1: c5:d1:2f:a0:c8:10:7f:52:30:9e:5f:cd:73:8e:99: af:ef:37:f2:4a:c8:26:05:8d:76:ff:93:e7:81:f5: e0:0c:67:32:20:7a:de:6b:3f:f0:9c:68:03:ae:e6: 1c:0c:02:ca:c3:2e:c1:82:00:9f:b2:c4:19:f4:0f: e3:23:f4:87:75:fe:17:5a:0a:24:a1:74:27:6f:fc: 6f:78:37:03:d7:d6:9e:f3:2d:37:42:fe:53:22:b2: 6e:c5:9d:d0:13:88:e7:4a:44:e2:81:86:c4:07:cc: e0:e4:c0:f0:31:b8:7a:1c:f9:4e:1b:d0:e1:e8:af: 6b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AA:CB:5F:30:4B:33:F9:E4:9C:E9:07:77:44:DB:BC:F1:C8:3A:BF X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235302e302f32342d3234203d3e203338313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.250.0/24 Signature Algorithm: sha256WithRSAEncryption a6:62:00:5d:fb:5f:df:20:c4:7d:67:8c:ea:5e:e4:12:0d:11: 67:1a:db:78:9c:fe:77:98:34:f1:e6:cb:4b:79:ca:1c:cb:d9: 3e:b8:a4:df:d7:18:aa:f1:30:02:46:79:1c:83:a5:b1:bc:7f: 79:7c:8d:26:09:8b:a9:61:56:4d:f7:4e:d5:d3:cf:34:8e:65: 0c:bc:a2:8c:d2:3f:50:d8:9c:a3:66:1e:45:46:bf:08:d0:e9: 2e:28:8e:27:63:e8:e0:73:e4:54:9b:f2:cc:f3:e4:46:12:52: 2a:3b:23:91:41:a8:54:71:fc:93:de:2f:b7:16:23:94:c7:89: 37:0b:78:b5:d9:4f:a0:9d:1d:32:fa:b9:c6:b9:45:30:72:6c: 4f:ea:f2:94:73:c3:9a:48:b0:12:7c:2e:04:48:d2:cb:b4:b5: b7:85:ee:34:a4:82:00:ad:04:02:cf:28:49:c9:d8:d0:e1:00: 51:2a:af:47:f1:35:34:e5:5a:64:47:84:1f:77:11:4b:48:38: 4e:2f:ed:b4:54:c0:d5:66:e2:44:12:2f:c1:9d:03:b3:a0:d8: 84:f1:eb:bf:63:62:f3:bc:cf:30:2d:c3:12:d1:cc:82:15:fb: b9:77:80:5a:e2:53:e4:33:1c:00:ba:b9:67:ea:93:db:2b:7b: ea:96:5a:d6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUA3YSfIBK+fhVxtpujq2HZ/YYGS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTA1MjAwNDU1MDFaFw0yNjA1MTkwNTAwMDFaMDMxMTAvBgNV BAMTKDVFQUFDQjVGMzA0QjMzRjlFNDlDRTkwNzc3NDREQkJDRjFDODNBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV8O+07D7a2kOTamGfiWhuVeAb L+08xX7bEgrKYbTpE8Jdn80HE9cPLIz+jSRHxZOqodEkL0Ew4VsYSNHPGniCuytk Ha5KmrbSAcm19idfE6B/iO5Ew1ruKOqye178baT6/yGc7yQmcG2q/VWe/4S/ukYC +2MuJtyp9oE49wU8CtlWE24l8cXRL6DIEH9SMJ5fzXOOma/vN/JKyCYFjXb/k+eB 9eAMZzIget5rP/CcaAOu5hwMAsrDLsGCAJ+yxBn0D+Mj9Id1/hdaCiShdCdv/G94 NwPX1p7zLTdC/lMism7FndATiOdKROKBhsQHzODkwPAxuHoc+U4b0OHor2u1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXqrLXzBLM/nknOkHd0TbvPHIOr8wHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqn6MA0GCSqG SIb3DQEBCwUAA4IBAQCmYgBd+1/fIMR9Z4zqXuQSDRFnGtt4nP53mDTx5stLecoc y9k+uKTf1xiq8TACRnkcg6WxvH95fI0mCYupYVZN907V0880jmUMvKKM0j9Q2Jyj Zh5FRr8I0OkuKI4nY+jgc+RUm/LM8+RGElIqOyORQahUcfyT3i+3FiOUx4k3C3i1 2U+gnR0y+rnGuUUwcmxP6vKUc8OaSLASfC4ESNLLtLW3he40pIIArQQCzyhJydjQ 4QBRKq9H8TU05VpkR4QfdxFLSDhOL+20VMDVZuJEEi/BnQOzoNiE8eu/Y2LzvM8w LcMS0cyCFfu5d4Ba4lPkMxwAurln6pPbK3vqllrW -----END CERTIFICATE-----Generated at Sun Jun 8 06:39:25 2025 by rpki-client