$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/3230332e372e3137312e302f32342d3234203d3e203535363931.roa File: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (raw, json) Hash identifier: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4= Subject key identifier: 9E:86:97:F6:22:F6:76:A8:6A:17:73:9D:B6:70:38:ED:1F:24:94:34 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 308670F88A265599832AE266C9C8471D151E6F30 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/3230332e372e3137312e302f32342d3234203d3e203535363931.roa Signing time: Mon 02 Jun 2025 02:03:46 +0000 ROA not before: Mon 02 Jun 2025 01:58:46 +0000 ROA not after: Mon 01 Jun 2026 02:03:46 +0000 asID: 55691 IP address blocks: 203.7.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:86:70:f8:8a:26:55:99:83:2a:e2:66:c9:c8:47:1d:15:1e:6f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Jun 2 01:58:46 2025 GMT Not After : Jun 1 02:03:46 2026 GMT Subject: CN=9E8697F622F676A86A17739DB67038ED1F249434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:42:79:54:c3:5e:eb:b1:9d:50:46:04:c0:16: 5f:d9:bb:9b:7d:a9:5c:8e:05:d9:e4:fc:3c:e3:9b: 00:ff:b8:10:8d:e4:5a:17:9a:d4:c3:b7:2a:a6:45: e0:c8:94:59:16:4e:db:43:50:22:5f:0a:57:df:15: 4a:b8:80:20:a4:ef:c5:66:02:19:c5:1c:8f:ea:28: e4:d5:34:d2:03:99:38:a2:86:a4:0d:ba:44:2b:45: 1d:11:53:40:98:97:c4:f8:36:02:a1:da:aa:76:73: ee:c6:5f:f7:9f:53:6b:34:a5:d6:0b:ef:96:4c:3f: 3d:38:e6:80:66:b0:3f:94:33:c5:fb:3e:6c:58:ad: 57:be:7d:0b:ec:28:c9:22:66:af:cd:57:6e:95:3a: ff:26:35:af:a4:9d:20:e3:e2:91:b9:8a:3e:49:c7: 93:f0:ff:cf:50:84:8d:8f:4a:0b:4e:f0:10:d8:a9: c6:46:23:a2:b1:0c:56:41:d1:ff:2d:19:d4:42:b4: db:53:d7:43:e7:6a:29:85:b0:f4:26:75:75:a6:c8: c8:00:65:41:94:e2:e3:7b:b7:cc:77:33:f9:57:74: 47:be:44:a1:a4:85:ab:13:a3:f4:96:74:6b:55:08: c0:d3:14:db:47:df:de:39:fc:d7:b7:54:cf:e1:b6: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:86:97:F6:22:F6:76:A8:6A:17:73:9D:B6:70:38:ED:1F:24:94:34 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/3230332e372e3137312e302f32342d3234203d3e203535363931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.7.171.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:4a:34:d8:85:48:25:92:30:23:7f:4e:18:86:21:31:6a:b4: 48:b9:92:77:be:27:c1:eb:b0:a5:16:45:cb:9b:f3:f3:7e:15: 69:6c:93:c3:3a:6c:9f:95:24:d4:13:b6:aa:df:71:63:0f:fb: b0:8b:1a:6f:5b:c3:e8:7d:62:d7:d0:55:75:9d:d2:bf:34:91: db:48:d5:6b:1c:f3:45:da:63:06:ee:c1:07:1d:15:ab:38:2f: 05:fa:0d:61:a8:4d:7e:e3:04:85:12:65:b6:b5:f6:5f:c9:e9: 97:39:58:77:01:ac:b9:2e:37:cb:15:25:84:66:38:6f:a6:e0: 1c:bf:76:f7:5d:5b:a2:28:72:a4:db:3c:53:11:fc:92:62:e3: 27:f2:2a:3e:bc:78:99:d1:49:67:e5:99:ae:2a:01:5c:4d:ce: 12:89:c4:60:bf:1e:2a:3e:93:3c:f1:a0:dd:79:9f:13:c1:b6: cb:c0:a3:25:20:21:cf:d0:d3:2f:87:a7:3e:a5:e1:93:5e:4d: 58:4c:94:be:6b:58:97:70:29:00:64:6c:37:c1:cd:39:88:8c: fe:9d:9d:a8:bd:17:f3:d1:68:8a:f5:19:ca:f3:2c:ec:2d:fe: 52:5c:ce:15:b4:d9:3f:b8:49:c8:63:6f:1b:5d:8c:4b:27:ad: 3f:ce:00:71 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUMIZw+IomVZmDKuJmychHHRUebzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTA2MDIwMTU4NDZaFw0yNjA2MDEwMjAzNDZaMDMxMTAvBgNV BAMTKDlFODY5N0Y2MjJGNjc2QTg2QTE3NzM5REI2NzAzOEVEMUYyNDk0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQnlUw17rsZ1QRgTAFl/Zu5t9 qVyOBdnk/DzjmwD/uBCN5FoXmtTDtyqmReDIlFkWTttDUCJfClffFUq4gCCk78Vm AhnFHI/qKOTVNNIDmTiihqQNukQrRR0RU0CYl8T4NgKh2qp2c+7GX/efU2s0pdYL 75ZMPz045oBmsD+UM8X7PmxYrVe+fQvsKMkiZq/NV26VOv8mNa+knSDj4pG5ij5J x5Pw/89QhI2PSgtO8BDYqcZGI6KxDFZB0f8tGdRCtNtT10PnaimFsPQmdXWmyMgA ZUGU4uN7t8x3M/lXdEe+RKGkhasTo/SWdGtVCMDTFNtH3945/Ne3VM/httmPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUnoaX9iL2dqhqF3OdtnA47R8klDQwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwMGFlMGYxLWI4YzAtNDUyZi04 ZTg5LTFkZmMzZjU5NGQ0Yy8wLzMyMzAzMzJlMzcyZTMxMzczMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLB6swDQYJKoZIhvcN AQELBQADggEBAI1KNNiFSCWSMCN/ThiGITFqtEi5kne+J8HrsKUWRcub8/N+FWls k8M6bJ+VJNQTtqrfcWMP+7CLGm9bw+h9YtfQVXWd0r80kdtI1Wsc80XaYwbuwQcd Fas4LwX6DWGoTX7jBIUSZba19l/J6Zc5WHcBrLkuN8sVJYRmOG+m4By/dvddW6Io cqTbPFMR/JJi4yfyKj68eJnRSWflma4qAVxNzhKJxGC/Hio+kzzxoN15nxPBtsvA oyUgIc/Q0y+Hpz6l4ZNeTVhMlL5rWJdwKQBkbDfBzTmIjP6dnai9F/PRaIr1Gcrz LOwt/lJczhW02T+4SchjbxtdjEsnrT/OAHE= -----END CERTIFICATE-----Generated at Sat Jun 7 04:03:58 2025 by rpki-client