$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa File: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (raw, json) Hash identifier: /vst8lOP9Na9sgAVJ1wD7o5HJMQFWxGn08eczXMCCA0= Subject key identifier: 3B:A0:92:11:AC:EF:F4:CB:79:83:2D:7B:71:AD:84:4F:74:D4:1B:0F Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 38F82744BD0AFCA8C7B7E5FE71146690C58F6CC3 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa Signing time: Sat 15 Feb 2025 08:00:01 +0000 ROA not before: Sat 15 Feb 2025 07:55:01 +0000 ROA not after: Sat 14 Feb 2026 08:00:01 +0000 asID: 45289 IP address blocks: 203.148.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 02:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f8:27:44:bd:0a:fc:a8:c7:b7:e5:fe:71:14:66:90:c5:8f:6c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Feb 15 07:55:01 2025 GMT Not After : Feb 14 08:00:01 2026 GMT Subject: CN=3BA09211ACEFF4CB79832D7B71AD844F74D41B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:24:27:5f:d7:70:ee:19:99:47:17:40:4b: d1:32:0f:cc:6c:c0:0c:a6:0d:2f:c0:a5:bf:9c:43: 5b:3a:b6:02:17:c5:af:3d:67:38:9c:27:96:dd:7f: 85:4c:f9:78:c0:2c:f2:95:5e:66:fc:2a:a2:4a:55: f3:82:d6:4f:10:12:52:f3:15:45:3b:36:cb:f2:11: 69:a9:40:9b:5d:d9:3d:31:3b:4a:c2:b6:17:5e:3d: 8d:68:90:fe:11:c8:7a:61:b6:be:63:52:fc:a7:21: ba:d3:1d:ec:81:2b:25:58:44:ff:49:d6:99:3d:d5: 3e:34:fd:1b:5f:12:41:05:46:9b:c0:b7:e1:fc:d0: 48:32:88:d3:d1:40:79:1d:da:be:46:81:f3:08:06: ed:6c:e8:44:00:eb:cb:9f:d0:a2:a7:51:0d:87:c6: 2a:95:e5:18:e3:32:6f:c0:0e:a6:93:12:de:d9:19: c8:c2:13:f1:f6:6b:a0:d6:e9:59:ca:0c:21:d5:71: 57:3f:d1:45:20:bc:45:48:5f:76:62:86:9e:3d:93: d2:b3:ea:10:15:94:20:e8:2a:77:29:9a:f9:e5:1c: f1:be:77:e9:ab:6c:5a:ba:e9:44:a2:94:f3:7d:6a: f6:72:59:87:58:8a:d3:20:ea:22:2c:6e:92:c1:15: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A0:92:11:AC:EF:F4:CB:79:83:2D:7B:71:AD:84:4F:74:D4:1B:0F X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.148.85.0/24 Signature Algorithm: sha256WithRSAEncryption 96:bb:f6:7b:c3:1d:c2:f8:02:74:2c:10:55:c3:83:73:54:09: 94:24:0c:58:5c:40:5b:2d:1a:c2:2b:ca:0a:b8:d7:f7:66:b6: 56:46:5d:7a:93:76:32:45:d5:d9:98:57:32:f4:6c:ce:fe:db: 90:e2:7c:4d:28:2d:21:f4:d5:0d:6d:47:d6:db:5d:5f:e7:c8: a3:97:d7:58:c4:72:8c:bf:25:8f:67:3d:51:a9:1f:37:d6:ab: a3:66:3b:79:84:9d:38:95:ab:a7:b1:f6:48:a3:a7:de:01:1e: 62:29:34:40:18:a1:2c:a5:4e:7f:e4:69:40:52:be:e1:73:9d: 92:b9:59:25:72:ce:34:1a:93:1b:4b:0c:8a:ad:ea:39:85:32: 7d:ed:2a:97:67:6a:01:75:2c:6d:0e:83:79:46:b5:5b:ce:f4: f8:9f:41:14:a4:0f:79:e7:22:35:d1:82:d4:0d:00:43:95:54: 5b:59:88:31:37:2c:5d:64:c6:0d:2e:8d:ef:44:63:f8:c5:bb: d8:46:ad:df:ed:f3:45:8e:18:40:6c:7b:25:e4:99:8c:36:2f: 03:7b:7f:3f:29:a1:2b:47:d1:22:21:aa:47:e4:61:9f:8e:cb: 16:39:a0:6f:b5:cb:90:9b:e2:bb:89:8c:d6:05:85:58:12:a3: a4:16:85:b2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOPgnRL0K/KjHt+X+cRRmkMWPbMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNTAyMTUwNzU1MDFaFw0yNjAyMTQwODAwMDFaMDMxMTAvBgNV BAMTKDNCQTA5MjExQUNFRkY0Q0I3OTgzMkQ3QjcxQUQ4NDRGNzRENDFCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEyQnX9dw7hmZRxdAS9EyD8xs wAymDS/Apb+cQ1s6tgIXxa89ZzicJ5bdf4VM+XjALPKVXmb8KqJKVfOC1k8QElLz FUU7NsvyEWmpQJtd2T0xO0rCthdePY1okP4RyHphtr5jUvynIbrTHeyBKyVYRP9J 1pk91T40/RtfEkEFRpvAt+H80EgyiNPRQHkd2r5GgfMIBu1s6EQA68uf0KKnUQ2H xiqV5RjjMm/ADqaTEt7ZGcjCE/H2a6DW6VnKDCHVcVc/0UUgvEVIX3Zihp49k9Kz 6hAVlCDoKncpmvnlHPG+d+mrbFq66USilPN9avZyWYdYitMg6iIsbpLBFav7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUO6CSEazv9Mt5gy17ca2ET3TUGw8wHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h NjJiLWUzZDUwY2M3OTQ0Mi8wLzMyMzAzMzJlMzEzNDM4MmUzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuUVTANBgkqhkiG 9w0BAQsFAAOCAQEAlrv2e8MdwvgCdCwQVcODc1QJlCQMWFxAWy0awivKCrjX92a2 VkZdepN2MkXV2ZhXMvRszv7bkOJ8TSgtIfTVDW1H1ttdX+fIo5fXWMRyjL8lj2c9 UakfN9aro2Y7eYSdOJWrp7H2SKOn3gEeYik0QBihLKVOf+RpQFK+4XOdkrlZJXLO NBqTG0sMiq3qOYUyfe0ql2dqAXUsbQ6DeUa1W870+J9BFKQPeeciNdGC1A0AQ5VU W1mIMTcsXWTGDS6N70Rj+MW72Eat3+3zRY4YQGx7JeSZjDYvA3t/PymhK0fRIiGq R+Rhn47LFjmgb7XLkJviu4mM1gWFWBKjpBaFsg== -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:59 2025 by rpki-client