$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35312e302f32342d3234203d3e203435333132.roa File: 3230322e38312e35312e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: pP7gm1kvtd2NCgUfcAxRcq6GNQ6lQDaLd5nX18H5Zig= Subject key identifier: 73:C7:CB:A7:07:05:FB:AE:3A:39:16:5C:39:81:D4:EE:BE:4C:CB:8F Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 7ACCE339B6A301E0DC26D9EC856098BE2BCE9168 Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35312e302f32342d3234203d3e203435333132.roa Signing time: Tue 17 Dec 2024 05:16:00 +0000 ROA not before: Tue 17 Dec 2024 05:11:00 +0000 ROA not after: Tue 16 Dec 2025 05:16:00 +0000 asID: 45312 IP address blocks: 202.81.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:cc:e3:39:b6:a3:01:e0:dc:26:d9:ec:85:60:98:be:2b:ce:91:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Dec 17 05:11:00 2024 GMT Not After : Dec 16 05:16:00 2025 GMT Subject: CN=73C7CBA70705FBAE3A39165C3981D4EEBE4CCB8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:da:42:0a:1f:6b:d3:cf:bb:0d:f2:11:99: c0:fd:5d:a5:75:80:3c:63:ee:1a:6a:ef:f1:e1:ad: 8f:c2:94:1d:d9:e8:14:f8:6d:16:58:0a:c5:2b:08: b6:eb:76:b4:77:3b:82:f1:b2:ad:cd:6b:03:a5:f9: 75:c9:bf:13:14:07:86:8f:06:54:74:3a:67:f1:ed: 2c:83:34:3d:07:27:3d:5e:15:84:42:b8:b4:99:3c: 6c:da:2a:da:9a:bb:78:18:cd:7b:f2:22:cd:af:37: af:dd:c8:c4:f0:0e:43:6a:e6:3d:6d:fc:b0:cf:ed: 13:8d:74:c6:02:d7:cd:b1:00:64:9e:99:64:05:95: f1:1c:2f:d3:0c:5c:fa:69:55:c5:d3:8b:a3:e4:3d: 9d:9b:b5:c3:91:28:6c:e8:9b:96:db:73:07:b1:6a: 67:3e:97:07:82:0a:3f:35:fe:fd:bd:88:85:c9:30: 01:8e:74:e7:fb:4c:b4:8a:8b:e1:91:87:8b:05:17: 4d:16:85:1c:10:82:83:79:07:1e:53:28:d6:a2:2d: 96:fc:d3:2b:e5:9c:e2:0c:0b:28:a0:a5:d3:b8:21: 13:b3:89:0d:81:8d:85:86:1f:c2:35:77:b2:a9:95: 62:9c:82:57:04:cf:13:a0:fe:9f:05:31:8f:9f:19: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C7:CB:A7:07:05:FB:AE:3A:39:16:5C:39:81:D4:EE:BE:4C:CB:8F X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35312e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.81.51.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:7e:16:08:7a:50:f0:29:8c:54:b7:bb:51:e2:b3:e6:16:81: 5a:f6:95:62:30:ae:bb:82:44:90:f7:58:78:07:b2:ed:4b:41: ad:5a:9d:04:4d:9f:ab:f1:f3:4f:e2:d3:db:11:e9:58:4f:db: 80:85:42:e8:b0:42:64:c3:13:55:31:a2:b0:4c:88:41:2b:32: 76:c6:c9:33:0d:82:5d:b3:cc:df:f9:31:8f:e9:df:86:a4:6b: cb:f4:e2:aa:27:22:d0:f8:49:40:f8:26:8d:56:ca:cd:41:19: 88:5f:d5:bd:6e:4b:21:45:7c:28:5f:0a:ce:30:21:56:bd:99: d7:14:20:6f:48:6a:4c:e5:14:c3:21:39:86:8c:a7:75:d3:ef: c7:4e:4e:eb:8e:e7:30:8b:17:82:91:4b:ff:5a:f2:2c:47:15: 6a:10:f7:a1:d2:39:84:1f:6b:d6:1b:97:98:72:1d:b3:b3:43: ae:c2:5e:8f:4b:24:7f:72:fe:fa:ba:30:5d:91:30:43:8d:da: f4:47:de:bd:cd:8f:b4:f4:cd:93:49:d9:62:20:dc:ce:e6:43: bf:be:36:1d:18:6c:e8:ca:b2:83:e8:c5:8a:09:b0:fd:a3:4c: 59:42:d0:31:18:89:68:fb:e0:28:b9:88:50:d9:34:d9:3e:e2: 6e:16:8e:9a -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUeszjObajAeDcJtnshWCYvivOkWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yNDEyMTcwNTExMDBaFw0yNTEyMTYwNTE2MDBaMDMxMTAvBgNV BAMTKDczQzdDQkE3MDcwNUZCQUUzQTM5MTY1QzM5ODFENEVFQkU0Q0NCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYr9pCCh9r08+7DfIRmcD9XaV1 gDxj7hpq7/HhrY/ClB3Z6BT4bRZYCsUrCLbrdrR3O4Lxsq3NawOl+XXJvxMUB4aP BlR0Omfx7SyDND0HJz1eFYRCuLSZPGzaKtqau3gYzXvyIs2vN6/dyMTwDkNq5j1t /LDP7RONdMYC182xAGSemWQFlfEcL9MMXPppVcXTi6PkPZ2btcORKGzom5bbcwex amc+lweCCj81/v29iIXJMAGOdOf7TLSKi+GRh4sFF00WhRwQgoN5Bx5TKNaiLZb8 0yvlnOIMCyigpdO4IROziQ2BjYWGH8I1d7KplWKcglcEzxOg/p8FMY+fGXM9AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUc8fLpwcF+646ORZcOYHU7r5My48wHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzUzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTMwDQYJKoZIhvcN AQELBQADggEBAIp+Fgh6UPApjFS3u1His+YWgVr2lWIwrruCRJD3WHgHsu1LQa1a nQRNn6vx80/i09sR6VhP24CFQuiwQmTDE1UxorBMiEErMnbGyTMNgl2zzN/5MY/p 34aka8v04qonItD4SUD4Jo1Wys1BGYhf1b1uSyFFfChfCs4wIVa9mdcUIG9Iakzl FMMhOYaMp3XT78dOTuuO5zCLF4KRS/9a8ixHFWoQ96HSOYQfa9Ybl5hyHbOzQ67C Xo9LJH9y/vq6MF2RMEON2vRH3r3Nj7T0zZNJ2WIg3M7mQ7++Nh0YbOjKsoPoxYoJ sP2jTFlC0DEYiWj74Ci5iFDZNNk+4m4Wjpo= -----END CERTIFICATE-----Generated at Mon Apr 7 01:05:51 2025 by rpki-client