$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35322e302f32332d3234203d3e20313337333633.roa File: 3230322e31302e35322e302f32332d3234203d3e20313337333633.roa (raw, json) Hash identifier: hPRob0LbT96x1OWMP1vefqV7B1+l+jJr6lBjqV01ftw= Subject key identifier: 14:C1:21:BC:7F:0F:BF:CE:67:7B:87:CF:93:ED:63:C3:44:C4:2E:EC Certificate issuer: /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Certificate serial: 4D24D88AB460AD1B080F7BC938489477F0A45FB9 Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35322e302f32332d3234203d3e20313337333633.roa Signing time: Tue 11 Mar 2025 09:13:38 +0000 ROA not before: Tue 11 Mar 2025 09:08:38 +0000 ROA not after: Tue 10 Mar 2026 09:13:38 +0000 asID: 137363 IP address blocks: 202.10.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 03:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:24:d8:8a:b4:60:ad:1b:08:0f:7b:c9:38:48:94:77:f0:a4:5f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Validity Not Before: Mar 11 09:08:38 2025 GMT Not After : Mar 10 09:13:38 2026 GMT Subject: CN=14C121BC7F0FBFCE677B87CF93ED63C344C42EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:6f:c9:8d:d9:c5:05:e1:ef:29:2d:d3:44: 24:2f:0e:bd:5d:cc:03:36:26:e5:97:17:80:5f:2f: 2a:66:f7:41:1c:fa:80:c1:b8:bf:11:1c:a3:fe:7a: 6e:9a:aa:7c:83:0b:13:3a:7b:97:d8:f2:89:2a:e7: 2b:65:7b:4f:d3:35:95:45:b5:a1:11:b9:fc:dc:27: a0:ee:84:95:c1:28:7a:fd:db:6b:21:79:03:9e:86: 50:d4:80:12:19:60:fa:95:a1:2e:d1:66:84:a9:c2: bc:8d:f4:d2:ad:1a:90:04:e0:82:d2:22:4d:2e:84: b0:01:13:9b:1f:a7:c3:11:f8:41:5b:73:a9:d0:e5: b2:06:cf:5b:f7:41:af:3f:54:4f:5d:f3:4b:50:08: 32:7e:24:f2:46:df:47:c7:7f:a4:a9:b6:37:c2:28: 7c:ce:9a:95:50:5e:81:2b:c1:dc:9c:79:68:01:88: 8d:9d:35:8a:77:4d:4a:de:49:f7:a7:a1:df:16:93: b3:f0:98:45:40:47:96:cc:6a:54:39:a7:4d:36:8c: 8c:88:7c:70:42:69:91:68:03:27:47:e1:4b:0a:a2: e2:2b:ba:ed:8b:9e:59:90:7c:86:15:da:5d:6c:d5: 0b:15:37:1a:56:1d:fe:62:e6:2c:c6:68:e5:58:b3: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C1:21:BC:7F:0F:BF:CE:67:7B:87:CF:93:ED:63:C3:44:C4:2E:EC X509v3 Authority Key Identifier: keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35322e302f32332d3234203d3e20313337333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.10.52.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:a5:34:81:50:6e:4b:73:7c:72:36:cb:d3:1d:cb:19:55:be: 78:1d:60:b2:9c:bf:52:26:f8:aa:11:9f:fd:20:9b:74:96:80: 40:e4:56:2d:3c:95:88:56:1f:bb:51:ad:3b:a1:80:7f:4f:c5: 2c:ee:60:25:a0:98:91:98:7a:ec:6e:9a:be:e2:da:8f:d7:93: e1:0e:24:0c:78:86:8d:75:cc:8a:c8:f4:11:4d:c7:c9:be:0a: 1b:c0:ad:df:7a:ca:34:fd:0d:38:12:9f:c8:22:11:83:b9:ea: cc:54:23:52:f6:a8:4b:8f:10:23:83:dc:bf:0b:7a:f1:8a:72: 94:7a:3e:af:53:3e:b4:fd:06:0e:e3:6c:46:b3:cb:45:f6:b5: f7:1f:28:c9:a8:35:1b:0c:4d:db:18:cb:f5:2f:e8:7e:33:f1: 4c:57:af:23:ea:7f:cb:b9:c7:06:a0:08:30:35:37:84:fc:e3: 04:44:36:7e:80:12:15:bd:9f:b3:90:9b:39:81:0c:51:4f:37: 24:29:9b:80:c5:0f:3b:9e:04:25:d3:35:b3:c2:30:77:34:80: 13:bd:9d:fe:f6:99:f3:50:7e:bc:88:03:3f:4a:fd:71:bf:87: a5:a1:eb:1e:ac:86:17:55:60:08:e9:13:43:3d:07:4d:2a:a8: 74:ef:61:c5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTSTYirRgrRsID3vJOEiUd/CkX7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEy NDk5M0NBMzAeFw0yNTAzMTEwOTA4MzhaFw0yNjAzMTAwOTEzMzhaMDMxMTAvBgNV BAMTKDE0QzEyMUJDN0YwRkJGQ0U2NzdCODdDRjkzRUQ2M0MzNDRDNDJFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJ2/JjdnFBeHvKS3TRCQvDr1d zAM2JuWXF4BfLypm90Ec+oDBuL8RHKP+em6aqnyDCxM6e5fY8okq5ytle0/TNZVF taERufzcJ6DuhJXBKHr922sheQOehlDUgBIZYPqVoS7RZoSpwryN9NKtGpAE4ILS Ik0uhLABE5sfp8MR+EFbc6nQ5bIGz1v3Qa8/VE9d80tQCDJ+JPJG30fHf6SptjfC KHzOmpVQXoErwdyceWgBiI2dNYp3TUreSfenod8Wk7PwmEVAR5bMalQ5p002jIyI fHBCaZFoAydH4UsKouIruu2LnlmQfIYV2l1s1QsVNxpWHf5i5izGaOVYs8NZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFMEhvH8Pv85ne4fPk+1jw0TELuwwHwYDVR0j BBgwFoAUtu4fYdbo6e7GQMzB15HboSSZPKMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMC9CNkVFMUY2MUQ2 RThFOUVFQzY0MENDQzFENzkxREJBMTI0OTkzQ0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZFRTFGNjFENkU4RTlFRUM2NDBDQ0MxRDc5MURCQTEyNDk5 M0NBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRhLWY1NzMtNDJmMy04 MjVjLTFjZjBjODcyYjE1Mi8wLzMyMzAzMjJlMzEzMDJlMzUzMjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzNzMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcoKNDANBgkqhkiG 9w0BAQsFAAOCAQEAXaU0gVBuS3N8cjbL0x3LGVW+eB1gspy/Uib4qhGf/SCbdJaA QORWLTyViFYfu1GtO6GAf0/FLO5gJaCYkZh67G6avuLaj9eT4Q4kDHiGjXXMisj0 EU3Hyb4KG8Ct33rKNP0NOBKfyCIRg7nqzFQjUvaoS48QI4Pcvwt68YpylHo+r1M+ tP0GDuNsRrPLRfa19x8oyag1GwxN2xjL9S/ofjPxTFevI+p/y7nHBqAIMDU3hPzj BEQ2foASFb2fs5CbOYEMUU83JCmbgMUPO54EJdM1s8IwdzSAE72d/vaZ81B+vIgD P0r9cb+HpaHrHqyGF1VgCOkTQz0HTSqodO9hxQ== -----END CERTIFICATE-----Generated at Sun Apr 6 09:41:19 2025 by rpki-client