$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa File: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (raw, json) Hash identifier: rKBd3FDglxAur6pNSQahm+4YOdXF+ndHaH2ghrjrs0c= Subject key identifier: 84:5E:8F:7E:75:07:4A:37:62:73:AB:3D:26:6C:44:6C:8A:81:65:E7 Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 0FA0F90D416B8EC02AE9E3B187E16C9B12D124EE Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa Signing time: Thu 09 Jan 2025 02:23:43 +0000 ROA not before: Thu 09 Jan 2025 02:18:43 +0000 ROA not after: Thu 08 Jan 2026 02:23:43 +0000 asID: 141142 IP address blocks: 122.248.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 07:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a0:f9:0d:41:6b:8e:c0:2a:e9:e3:b1:87:e1:6c:9b:12:d1:24:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Jan 9 02:18:43 2025 GMT Not After : Jan 8 02:23:43 2026 GMT Subject: CN=845E8F7E75074A376273AB3D266C446C8A8165E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:e2:25:5f:dd:54:91:4a:b2:b9:32:e8:7e: e6:91:3b:f0:55:4e:a1:23:1a:59:93:79:67:0c:bd: eb:3b:4a:0b:e3:10:a4:5e:f5:6c:50:3d:d9:68:ba: 68:d5:5f:ae:8b:e7:53:16:04:15:2b:e3:cb:95:68: 1c:ae:d7:d3:25:8b:05:45:94:95:e3:87:7a:87:75: 78:d1:1a:7b:df:0d:2f:15:17:97:13:e4:82:82:f6: d6:88:4c:12:9a:70:74:9a:f8:b5:a0:1d:e4:27:cb: 03:e2:fa:19:4d:8a:1a:dc:d5:5a:b2:e4:e6:2e:86: 28:9a:49:56:fc:bd:23:bb:ba:9e:b4:7f:8e:53:bf: ca:8a:00:6e:71:66:86:85:e4:b6:ef:80:05:db:1d: d6:8c:7b:fd:46:69:c9:3d:f2:b6:c0:4e:db:83:67: b7:fa:64:5f:c6:ab:47:98:a6:04:f1:7f:9f:49:a5: 68:d1:83:e7:d2:51:d4:e0:ad:aa:2f:be:11:03:62: 41:6d:12:76:bc:d6:ff:cc:9e:a3:ff:1c:d9:f9:dc: c8:2c:45:d4:39:11:3b:60:f9:01:c9:25:68:f7:a4: 6d:9f:e3:7b:79:59:fb:f8:e2:88:b0:f5:f0:42:d6: f8:47:bf:01:64:49:9b:c5:ab:18:d0:ed:e4:1c:7a: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5E:8F:7E:75:07:4A:37:62:73:AB:3D:26:6C:44:6C:8A:81:65:E7 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.42.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:24:9b:e0:18:0d:f6:2d:8e:d9:1c:d3:6d:cd:f4:d9:0a:0e: 10:a5:48:00:dd:3f:73:9f:05:47:5e:a7:89:b1:ae:23:11:e5: 5b:fa:24:01:27:f4:23:13:25:9f:fc:32:29:12:56:91:45:be: b0:f8:be:4f:56:75:92:62:d5:b8:86:57:ec:cd:62:b7:90:e1: 7b:bf:bf:f7:8c:7e:c2:23:aa:e2:1c:87:37:b0:0c:9e:dc:c9: 52:e6:c4:f3:db:03:51:d8:60:4e:93:59:9b:c5:6f:9f:6c:77: 24:6a:92:a5:ce:b9:3b:a5:b6:78:73:4f:42:97:82:ff:b9:2a: e7:2d:5f:57:04:39:17:78:30:1f:69:04:43:0d:b4:91:39:7e: 12:3f:f3:41:2f:2e:e0:5b:81:57:fc:17:40:9e:bf:21:13:c6: ad:ec:80:61:d1:9b:19:92:c9:f9:49:1d:df:4b:79:97:ec:b8: be:ee:d3:4e:e7:c7:d5:81:fa:46:f3:a7:cf:d0:a9:84:12:5e: 22:0c:50:58:1b:f1:63:8e:de:11:b9:e0:f8:de:70:97:d1:c7: 17:33:7a:5e:ec:46:b0:d5:e7:3f:c9:ff:34:d0:82:a7:a7:72: f5:ca:9d:1b:81:12:92:f2:da:3a:89:be:2d:4e:23:c7:ad:81: 86:92:f2:bd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUD6D5DUFrjsAq6eOxh+FsmxLRJO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTAxMDkwMjE4NDNaFw0yNjAxMDgwMjIzNDNaMDMxMTAvBgNV BAMTKDg0NUU4RjdFNzUwNzRBMzc2MjczQUIzRDI2NkM0NDZDOEE4MTY1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQeIlX91UkUqyuTLofuaRO/BV TqEjGlmTeWcMves7SgvjEKRe9WxQPdloumjVX66L51MWBBUr48uVaByu19MliwVF lJXjh3qHdXjRGnvfDS8VF5cT5IKC9taITBKacHSa+LWgHeQnywPi+hlNihrc1Vqy 5OYuhiiaSVb8vSO7up60f45Tv8qKAG5xZoaF5LbvgAXbHdaMe/1Gack98rbATtuD Z7f6ZF/Gq0eYpgTxf59JpWjRg+fSUdTgraovvhEDYkFtEna81v/MnqP/HNn53Mgs RdQ5ETtg+QHJJWj3pG2f43t5Wfv44oiw9fBC1vhHvwFkSZvFqxjQ7eQcesUVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhF6PfnUHSjdic6s9JmxEbIqBZecwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAevgqMA0GCSqG SIb3DQEBCwUAA4IBAQCbJJvgGA32LY7ZHNNtzfTZCg4QpUgA3T9znwVHXqeJsa4j EeVb+iQBJ/QjEyWf/DIpElaRRb6w+L5PVnWSYtW4hlfszWK3kOF7v7/3jH7CI6ri HIc3sAye3MlS5sTz2wNR2GBOk1mbxW+fbHckapKlzrk7pbZ4c09Cl4L/uSrnLV9X BDkXeDAfaQRDDbSROX4SP/NBLy7gW4FX/BdAnr8hE8at7IBh0ZsZksn5SR3fS3mX 7Li+7tNO58fVgfpG86fP0KmEEl4iDFBYG/Fjjt4RueD43nCX0ccXM3pe7Eaw1ec/ yf800IKnp3L1yp0bgRKS8to6ib4tTiPHrYGGkvK9 -----END CERTIFICATE-----Generated at Thu Feb 20 03:30:45 2025 by rpki-client