$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32382e302f32342d3234203d3e203435373234.roa File: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (raw, json) Hash identifier: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8= Subject key identifier: 07:F4:F1:7F:FC:82:C6:BE:AD:5B:8D:F1:6F:56:0A:0D:5D:B9:09:DB Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 2619B6C41F4747E2B0569E5FA8A110190B977FF9 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32382e302f32342d3234203d3e203435373234.roa Signing time: Sun 08 Dec 2024 14:26:58 +0000 ROA not before: Sun 08 Dec 2024 14:21:58 +0000 ROA not after: Sun 07 Dec 2025 14:26:58 +0000 asID: 45724 IP address blocks: 202.8.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 06:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:19:b6:c4:1f:47:47:e2:b0:56:9e:5f:a8:a1:10:19:0b:97:7f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Dec 8 14:21:58 2024 GMT Not After : Dec 7 14:26:58 2025 GMT Subject: CN=07F4F17FFC82C6BEAD5B8DF16F560A0D5DB909DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:35:a8:dc:e6:d1:e8:94:07:df:58:32:c2: b7:69:db:58:f2:ad:37:b2:24:bd:2b:8e:75:96:d5: 82:ea:45:00:14:59:31:f2:dd:06:23:80:af:41:1a: d2:49:9a:89:03:1c:f7:e3:14:4e:a5:2f:89:45:8b: 74:9c:79:06:75:d9:74:79:52:af:0b:9c:d9:61:e3: 67:6f:c4:d0:cb:4a:70:ca:ad:65:f9:88:0d:b9:47: 1f:47:6f:16:7b:96:74:d7:48:cb:a5:33:27:f5:2b: 47:62:60:8b:bc:2b:d6:13:08:da:21:49:c1:49:24: b8:66:0f:14:8a:28:5d:d8:79:e9:d9:35:f6:06:ce: 98:e9:45:9d:9b:bc:6c:83:f0:30:0e:8f:f9:5b:91: 6c:98:e1:8f:ea:83:3f:e0:01:8a:da:ff:6e:5e:54: 65:84:27:4a:77:e8:56:31:f9:21:91:5b:79:66:ba: c4:04:c0:42:7d:dc:66:89:fc:f2:20:13:f8:4b:df: a0:47:7e:65:83:87:67:02:2c:fd:ba:31:f0:8c:7f: f3:a6:67:77:f6:cf:45:82:67:56:ca:f9:5a:a4:20: 7f:4c:14:58:93:83:3e:3d:f2:d1:02:74:03:ab:6e: f0:7f:60:42:41:bb:4d:0f:19:25:1b:ca:ee:8c:73: 93:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F4:F1:7F:FC:82:C6:BE:AD:5B:8D:F1:6F:56:0A:0D:5D:B9:09:DB X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32382e302f32342d3234203d3e203435373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.8.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:55:bb:98:b1:44:da:e7:06:0c:c7:a9:78:b3:e3:fe:0e:ee: 2c:83:d2:fa:66:79:3d:d1:23:5e:c9:33:c4:ec:ec:0d:e7:6e: 3d:de:db:b1:2e:ce:55:aa:69:20:f6:dd:91:c5:c3:0e:7f:63: 51:12:45:56:df:93:e6:b9:6b:b3:b2:32:ab:5b:19:9a:c3:33: 15:1f:df:11:80:2d:49:fb:87:d4:c5:c4:a7:77:dc:f0:41:15: 08:a4:9f:d5:3c:24:86:49:68:39:5c:d2:b6:95:3c:a2:11:fe: 90:2e:5c:83:54:bd:52:6a:c8:a1:1f:d0:5a:6d:18:2a:f9:bb: 25:da:d1:9b:2a:56:57:43:a3:4b:46:ec:4b:fd:ca:69:1e:e4: 5a:90:c3:27:ff:3c:00:03:53:14:d4:73:da:27:e9:0b:26:ab: f2:17:9d:f3:2f:62:a2:8d:42:52:4c:51:27:88:4a:be:59:1a: ba:cc:68:de:d1:fb:4b:72:52:36:04:cc:ee:af:3b:f5:a7:6e: 46:1e:2a:06:6b:1e:27:f1:5b:0a:b1:fc:81:47:9e:08:69:43: e9:b8:72:78:47:8f:85:d5:e0:d6:ee:f2:04:7b:38:96:7e:53: a0:56:75:40:20:53:5f:09:b7:09:10:83:26:93:99:c1:56:ab: 9c:75:1d:f7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUJhm2xB9HR+KwVp5fqKEQGQuXf/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNDEyMDgxNDIxNThaFw0yNTEyMDcxNDI2NThaMDMxMTAvBgNV BAMTKDA3RjRGMTdGRkM4MkM2QkVBRDVCOERGMTZGNTYwQTBENURCOTA5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTsjWo3ObR6JQH31gywrdp21jy rTeyJL0rjnWW1YLqRQAUWTHy3QYjgK9BGtJJmokDHPfjFE6lL4lFi3SceQZ12XR5 Uq8LnNlh42dvxNDLSnDKrWX5iA25Rx9HbxZ7lnTXSMulMyf1K0diYIu8K9YTCNoh ScFJJLhmDxSKKF3YeenZNfYGzpjpRZ2bvGyD8DAOj/lbkWyY4Y/qgz/gAYra/25e VGWEJ0p36FYx+SGRW3lmusQEwEJ93GaJ/PIgE/hL36BHfmWDh2cCLP26MfCMf/Om Z3f2z0WCZ1bK+VqkIH9MFFiTgz498tECdAOrbvB/YEJBu00PGSUbyu6Mc5N1AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUB/Txf/yCxr6tW43xb1YKDV25CdswHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzIzMDMyMmUzODJlMzIzODJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM0MzUzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCBwwDQYJKoZIhvcNAQEL BQADggEBAF1Vu5ixRNrnBgzHqXiz4/4O7iyD0vpmeT3RI17JM8Ts7A3nbj3e27Eu zlWqaSD23ZHFww5/Y1ESRVbfk+a5a7OyMqtbGZrDMxUf3xGALUn7h9TFxKd33PBB FQikn9U8JIZJaDlc0raVPKIR/pAuXINUvVJqyKEf0FptGCr5uyXa0ZsqVldDo0tG 7Ev9ymke5FqQwyf/PAADUxTUc9on6Qsmq/IXnfMvYqKNQlJMUSeISr5ZGrrMaN7R +0tyUjYEzO6vO/WnbkYeKgZrHifxWwqx/IFHnghpQ+m4cnhHj4XV4Nbu8gR7OJZ+ U6BWdUAgU18JtwkQgyaTmcFWq5x1Hfc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:37 2025 by rpki-client