$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa File: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (raw, json) Hash identifier: h34a36oOro4h82UzWlqmmFvXIQsUxyJPSi5+fu8agyc= Subject key identifier: 80:76:03:F1:09:0D:4C:5A:E3:2C:E9:EE:45:C1:12:43:71:87:78:C8 Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 2E4A31EF0931F2C1FAEC35222CBF32BFE87BA4AB Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa Signing time: Thu 09 Jan 2025 02:32:50 +0000 ROA not before: Thu 09 Jan 2025 02:27:50 +0000 ROA not after: Thu 08 Jan 2026 02:32:50 +0000 asID: 141142 IP address blocks: 122.248.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 06:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4a:31:ef:09:31:f2:c1:fa:ec:35:22:2c:bf:32:bf:e8:7b:a4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Jan 9 02:27:50 2025 GMT Not After : Jan 8 02:32:50 2026 GMT Subject: CN=807603F1090D4C5AE32CE9EE45C11243718778C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:37:ab:f1:1e:b3:ed:19:07:79:f8:64:ac: 10:7a:3f:05:4c:d7:72:34:6f:50:5b:76:38:e2:ad: 23:7a:39:e0:60:75:39:63:5b:47:36:22:4a:3e:fa: 60:15:dc:16:86:b3:2c:4c:92:da:3b:a0:ff:20:1e: 07:dc:39:94:e5:2a:d0:eb:60:a9:24:7b:0e:9d:5e: 0c:6a:dd:6e:49:ce:61:65:f3:21:7c:29:a4:21:97: 44:be:d8:3f:8c:2a:57:dc:67:32:6d:54:78:68:28: 64:2a:98:c9:26:44:d7:bc:b5:61:ae:a2:76:28:8c: 6e:12:ff:7d:c4:2a:04:13:0a:d2:8e:8f:12:04:4f: e7:7c:e7:b8:43:7c:e0:f4:13:28:ef:5a:3f:fd:54: e2:34:4b:10:5e:e1:0f:ce:d6:22:ed:46:95:56:30: 87:b0:80:7c:7b:d9:30:5b:8f:d6:7a:34:e6:eb:71: ca:2b:60:4f:61:50:d1:c2:b0:2e:0a:67:88:ac:25: 11:7f:76:d4:8f:16:04:92:81:75:cf:d4:bb:df:c1: ef:38:3f:70:d2:8a:bf:93:46:74:30:0b:84:33:31: da:c1:d4:57:79:77:21:7d:df:ba:b1:03:bf:00:bf: 1e:92:cb:0e:19:59:61:23:9c:f6:19:9d:77:15:94: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:76:03:F1:09:0D:4C:5A:E3:2C:E9:EE:45:C1:12:43:71:87:78:C8 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.44.0/24 Signature Algorithm: sha256WithRSAEncryption a7:15:3f:a2:56:df:0c:37:9b:fb:c8:cc:70:4a:0d:61:a4:91: 60:c0:e3:39:6b:86:5f:e4:51:1e:7a:31:55:81:a8:a3:dd:ad: 3e:0f:f9:54:a3:bb:58:6c:62:f4:55:4b:fa:c1:94:99:9b:fb: d3:ed:c5:30:24:7c:9b:ff:22:95:5a:e0:27:e2:70:b2:bd:10: e5:90:59:94:58:05:a1:c7:e0:d3:da:f5:13:7d:61:31:9a:d4: 4c:d6:e3:8b:1e:9f:e3:3d:10:8b:35:bb:10:2c:6e:30:f9:13: 0c:d1:d7:23:e0:9e:7f:14:ab:16:be:eb:e7:c0:fd:3e:8f:a1: 97:e6:ca:47:3c:b3:a6:84:d4:6b:d0:e1:37:9a:47:9c:53:dd: 42:84:bc:23:dc:72:49:84:36:00:03:34:c8:1c:be:7f:9d:90: 7a:58:b7:fe:2c:56:f0:9f:c1:8f:6f:be:92:f9:7a:ae:39:07: 3f:a0:bc:9b:6e:b8:f2:93:5d:11:be:91:29:a8:5a:e7:0c:88: 9b:20:91:1b:c1:b1:1d:6e:a3:3b:de:dc:9f:d5:e3:53:c7:32: 83:71:0e:76:e9:63:e6:f6:22:0e:44:4f:ed:d6:5a:e5:c8:bb: 61:fd:2a:41:4d:4c:a6:1d:71:e2:e3:7e:21:9b:82:c5:ab:33: 0c:65:fb:4f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULkox7wkx8sH67DUiLL8yv+h7pKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTAxMDkwMjI3NTBaFw0yNjAxMDgwMjMyNTBaMDMxMTAvBgNV BAMTKDgwNzYwM0YxMDkwRDRDNUFFMzJDRTlFRTQ1QzExMjQzNzE4Nzc4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrzer8R6z7RkHefhkrBB6PwVM 13I0b1BbdjjirSN6OeBgdTljW0c2Iko++mAV3BaGsyxMkto7oP8gHgfcOZTlKtDr YKkkew6dXgxq3W5JzmFl8yF8KaQhl0S+2D+MKlfcZzJtVHhoKGQqmMkmRNe8tWGu onYojG4S/33EKgQTCtKOjxIET+d857hDfOD0EyjvWj/9VOI0SxBe4Q/O1iLtRpVW MIewgHx72TBbj9Z6NObrccorYE9hUNHCsC4KZ4isJRF/dtSPFgSSgXXP1Lvfwe84 P3DSir+TRnQwC4QzMdrB1Fd5dyF937qxA78Avx6Syw4ZWWEjnPYZnXcVlLANAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgHYD8QkNTFrjLOnuRcESQ3GHeMgwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAevgsMA0GCSqG SIb3DQEBCwUAA4IBAQCnFT+iVt8MN5v7yMxwSg1hpJFgwOM5a4Zf5FEeejFVgaij 3a0+D/lUo7tYbGL0VUv6wZSZm/vT7cUwJHyb/yKVWuAn4nCyvRDlkFmUWAWhx+DT 2vUTfWExmtRM1uOLHp/jPRCLNbsQLG4w+RMM0dcj4J5/FKsWvuvnwP0+j6GX5spH PLOmhNRr0OE3mkecU91ChLwj3HJJhDYAAzTIHL5/nZB6WLf+LFbwn8GPb76S+Xqu OQc/oLybbrjyk10RvpEpqFrnDIibIJEbwbEdbqM73tyf1eNTxzKDcQ526WPm9iIO RE/t1lrlyLth/SpBTUymHXHi434hm4LFqzMMZftP -----END CERTIFICATE-----Generated at Thu Apr 17 13:41:22 2025 by rpki-client