$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203330383630.roa File: 3230322e35312e35372e302f32342d3234203d3e203330383630.roa (raw, json) Hash identifier: lQ+fQzdjr0S1DLs1lSSCMj5N6c3fuO+jsggHmQtAADw= Subject key identifier: 79:D3:70:87:BB:AC:72:25:6A:FC:7C:F7:2C:5D:EE:2F:C8:9D:9A:18 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 08F35B23724D7B67C7B74BF255C151C62AEB129C Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203330383630.roa Signing time: Mon 23 Dec 2024 13:50:04 +0000 ROA not before: Mon 23 Dec 2024 13:45:04 +0000 ROA not after: Mon 22 Dec 2025 13:50:04 +0000 asID: 30860 IP address blocks: 202.51.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 03:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f3:5b:23:72:4d:7b:67:c7:b7:4b:f2:55:c1:51:c6:2a:eb:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Dec 23 13:45:04 2024 GMT Not After : Dec 22 13:50:04 2025 GMT Subject: CN=79D37087BBAC72256AFC7CF72C5DEE2FC89D9A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:34:3f:b6:8c:4c:ab:1b:52:27:76:dd:7c: 98:62:c3:e2:3c:b7:37:5a:b8:33:46:7a:c0:30:5d: 94:14:5c:5a:91:78:9d:b8:d9:33:99:df:20:41:2a: 46:08:34:2c:5c:3a:4e:61:d5:f5:17:f6:d4:91:32: 86:c2:01:4a:a2:44:28:18:b7:07:8d:ab:2f:c1:17: c5:59:25:22:03:5a:68:37:39:7a:52:99:96:27:81: e1:07:f3:65:78:d0:56:89:3e:05:2c:ac:c8:b4:89: 07:54:6d:47:0b:ae:c4:d6:99:71:31:c0:f7:da:58: 1e:fe:38:92:22:9c:42:0c:f0:ec:7b:25:a9:7b:ca: 78:f9:10:30:95:cc:d8:72:51:03:e6:29:2e:f7:68: 19:0d:83:db:e6:0a:45:50:8a:7a:5c:dd:b1:07:30: 38:c4:1b:3e:59:ee:b3:96:85:31:bc:0c:60:14:a8: 81:c0:e9:88:9e:e4:d9:3a:bf:af:c9:ce:d1:c1:a6: d6:2b:8a:d3:5e:ac:09:d1:b7:7b:9b:77:88:f1:5d: ae:ea:f8:b3:c9:8a:1b:b3:e7:3b:bb:30:5a:57:80: 01:2a:7f:44:b5:e7:59:95:79:a4:45:d3:00:0f:60: 9a:3d:95:14:1f:0c:95:d2:fa:41:8e:62:03:2e:9d: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D3:70:87:BB:AC:72:25:6A:FC:7C:F7:2C:5D:EE:2F:C8:9D:9A:18 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35372e302f32342d3234203d3e203330383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.57.0/24 Signature Algorithm: sha256WithRSAEncryption 98:be:85:82:2a:d9:77:97:ed:51:1b:f8:74:60:8d:75:66:46: 47:5e:18:18:89:88:ff:f3:98:46:2a:7c:60:8d:e3:88:ea:e6: 8a:7e:45:e1:5f:64:02:90:da:b4:53:48:bb:90:4d:35:00:49: 9d:3e:3a:67:a9:b5:df:e8:68:c5:6c:e9:4c:94:f6:50:f4:23: 7e:12:37:34:d5:aa:a2:22:cc:39:58:c0:93:09:94:02:e3:87: 51:81:52:41:83:8b:bf:65:ab:a7:aa:90:ad:ab:6a:49:db:da: dc:e9:68:a7:e6:ed:af:20:77:99:16:c3:71:bc:8b:be:09:4d: 77:5d:a8:e7:63:61:18:96:e8:c6:29:a3:69:e6:df:f6:74:57: aa:8a:2e:3d:22:b7:eb:d7:8e:05:a6:53:bf:94:20:08:b7:86: d7:ee:df:bd:dc:7d:68:65:cf:e4:77:3f:71:18:6a:4b:a7:92: 19:91:97:27:70:98:4c:df:c4:5a:64:22:57:85:e1:88:c0:0b: 6f:8b:ff:a9:d0:61:56:c3:33:8c:d1:83:7b:34:a4:f6:32:e7: 62:2f:f3:04:5b:27:07:1c:b7:df:c6:31:7d:95:22:e0:c1:88: cd:0d:be:57:c3:5b:90:e2:bd:49:fa:bd:61:bb:04:3e:15:62: 08:16:40:31 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUCPNbI3JNe2fHt0vyVcFRxirrEpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNDEyMjMxMzQ1MDRaFw0yNTEyMjIxMzUwMDRaMDMxMTAvBgNV BAMTKDc5RDM3MDg3QkJBQzcyMjU2QUZDN0NGNzJDNURFRTJGQzg5RDlBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHjQ/toxMqxtSJ3bdfJhiw+I8 tzdauDNGesAwXZQUXFqReJ242TOZ3yBBKkYINCxcOk5h1fUX9tSRMobCAUqiRCgY tweNqy/BF8VZJSIDWmg3OXpSmZYngeEH82V40FaJPgUsrMi0iQdUbUcLrsTWmXEx wPfaWB7+OJIinEIM8Ox7Jal7ynj5EDCVzNhyUQPmKS73aBkNg9vmCkVQinpc3bEH MDjEGz5Z7rOWhTG8DGAUqIHA6Yie5Nk6v6/JztHBptYritNerAnRt3ubd4jxXa7q +LPJihuz5zu7MFpXgAEqf0S151mVeaRF0wAPYJo9lRQfDJXS+kGOYgMunT87AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUedNwh7usciVq/Hz3LF3uL8idmhgwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzAzODM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKMzkwDQYJKoZIhvcN AQELBQADggEBAJi+hYIq2XeX7VEb+HRgjXVmRkdeGBiJiP/zmEYqfGCN44jq5op+ ReFfZAKQ2rRTSLuQTTUASZ0+Omeptd/oaMVs6UyU9lD0I34SNzTVqqIizDlYwJMJ lALjh1GBUkGDi79lq6eqkK2raknb2tzpaKfm7a8gd5kWw3G8i74JTXddqOdjYRiW 6MYpo2nm3/Z0V6qKLj0it+vXjgWmU7+UIAi3htfu373cfWhlz+R3P3EYakunkhmR lydwmEzfxFpkIleF4YjAC2+L/6nQYVbDM4zRg3s0pPYy52Iv8wRbJwcct9/GMX2V IuDBiM0NvlfDW5DivUn6vWG7BD4VYggWQDE= -----END CERTIFICATE-----Generated at Sat Apr 5 23:34:36 2025 by rpki-client