$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa File: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (raw, json) Hash identifier: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s= Subject key identifier: 62:D2:42:A9:7F:53:5E:B3:45:0A:79:2D:D1:59:26:8D:C7:CF:8B:92 Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Certificate serial: 2F861C9092486C06909212207032BFF6D1EFBFCF Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa Signing time: Mon 02 Jun 2025 02:03:30 +0000 ROA not before: Mon 02 Jun 2025 01:58:30 +0000 ROA not after: Mon 01 Jun 2026 02:03:30 +0000 asID: 24537 IP address blocks: 202.61.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:86:1c:90:92:48:6c:06:90:92:12:20:70:32:bf:f6:d1:ef:bf:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF Validity Not Before: Jun 2 01:58:30 2025 GMT Not After : Jun 1 02:03:30 2026 GMT Subject: CN=62D242A97F535EB3450A792DD159268DC7CF8B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e7:c1:40:51:93:92:07:d1:e7:f5:d1:1f:07: 73:7c:df:3d:f2:27:68:02:de:68:bf:eb:2a:84:e8: a2:d2:01:e0:cc:bc:e1:4d:b9:01:17:47:9d:4a:ca: 8e:c6:fd:5d:4f:47:34:ef:3f:b5:a2:0e:4d:f2:ce: 76:47:cb:76:4c:1e:7b:e0:99:2a:44:a1:2b:73:29: 12:6c:07:48:f7:f9:8f:bb:91:a9:d2:32:4a:a8:32: 22:cf:58:76:35:8d:d3:ca:f0:c7:37:56:1c:90:46: 40:5e:5d:3c:b1:a4:39:24:ea:8e:fd:bc:e8:8c:1a: 83:05:00:3b:cc:5a:fe:32:61:70:a8:28:17:98:20: c3:4d:22:ca:2d:15:1b:4a:f6:f5:57:a3:a0:09:24: 75:4e:01:0b:8e:b7:4b:61:d8:ae:62:c1:55:a3:74: bb:c7:56:33:19:d1:54:91:ea:ac:88:45:63:ba:cc: c9:05:00:27:8d:13:f2:10:85:0f:1a:f4:37:3f:bd: 9d:2f:e3:02:a9:83:e1:16:89:b3:74:6d:0b:57:cf: 9c:4c:20:59:f9:aa:eb:98:82:a8:3e:09:b9:46:4e: 34:ea:11:f1:c3:07:94:64:3c:ec:d5:ea:0e:c8:66: a7:6d:e1:fb:6d:f9:dc:8f:d3:27:f2:41:95:43:e1: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D2:42:A9:7F:53:5E:B3:45:0A:79:2D:D1:59:26:8D:C7:CF:8B:92 X509v3 Authority Key Identifier: keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.61.98.0/23 Signature Algorithm: sha256WithRSAEncryption 85:b7:64:72:83:cc:22:88:98:87:0e:ba:ae:aa:5f:65:3f:09: 93:9e:b8:38:43:8d:20:af:f7:68:e7:d1:56:ac:99:77:e7:23: 71:f5:71:ee:1b:e9:38:36:4e:87:b4:cb:6a:da:66:03:91:93: bb:a1:83:86:c0:4f:2c:95:c2:8d:8e:ba:dc:09:19:3d:ea:f1: b2:84:fb:52:c0:8b:4e:aa:15:b1:4a:b3:b5:b4:ba:e5:db:9c: 81:26:ce:e3:98:7c:58:fd:b5:75:97:0c:ba:ee:8e:31:b2:08: 9f:51:df:3d:d7:30:a5:d0:7c:6d:3e:b7:1d:af:ad:2e:98:3a: 5c:ca:e6:60:a0:1d:2c:7f:ad:5f:60:96:00:cf:8d:25:22:0a: b1:c4:12:42:9f:76:5e:93:be:64:af:51:19:89:69:f1:4b:ee: 42:9a:a6:3c:05:cb:30:92:83:59:48:77:02:da:e3:b5:01:61: 69:7a:1b:82:15:02:ca:b2:49:2c:d2:24:7f:79:67:bc:24:b1: 2d:ab:9f:00:aa:98:13:f0:3f:2f:da:72:ba:c1:12:53:2a:e0: fc:3d:20:59:3a:ac:b5:ca:21:f8:8d:86:2d:da:39:46:5d:50: d3:6f:a6:21:7f:b2:f1:cb:7b:0d:5b:06:4e:91:2a:9e:14:22: da:4a:99:58 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUL4YckJJIbAaQkhIgcDK/9tHvv88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3 OTJFRkJCRjAeFw0yNTA2MDIwMTU4MzBaFw0yNjA2MDEwMjAzMzBaMDMxMTAvBgNV BAMTKDYyRDI0MkE5N0Y1MzVFQjM0NTBBNzkyREQxNTkyNjhEQzdDRjhCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD058FAUZOSB9Hn9dEfB3N83z3y J2gC3mi/6yqE6KLSAeDMvOFNuQEXR51Kyo7G/V1PRzTvP7WiDk3yznZHy3ZMHnvg mSpEoStzKRJsB0j3+Y+7kanSMkqoMiLPWHY1jdPK8Mc3VhyQRkBeXTyxpDkk6o79 vOiMGoMFADvMWv4yYXCoKBeYIMNNIsotFRtK9vVXo6AJJHVOAQuOt0th2K5iwVWj dLvHVjMZ0VSR6qyIRWO6zMkFACeNE/IQhQ8a9Dc/vZ0v4wKpg+EWibN0bQtXz5xM IFn5quuYgqg+CblGTjTqEfHDB5RkPOzV6g7IZqdt4ftt+dyP0yfyQZVD4d+HAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUYtJCqX9TXrNFCnkt0VkmjcfPi5IwHwYDVR0j BBgwFoAU/DHbcPey8X8T6Soue65VVHku+78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU0NzE5YS1hY2U0LTQxZjItYTA3MC04ZGUzMTkyYjdmNDkvMC9GQzMxREI3MEY3 QjJGMTdGMTNFOTJBMkU3QkFFNTU1NDc5MkVGQkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkMzMURCNzBGN0IyRjE3RjEzRTkyQTJFN0JBRTU1NTQ3OTJF RkJCRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkZTQ3MTlhLWFjZTQtNDFmMi1h MDcwLThkZTMxOTJiN2Y0OS8wLzMyMzAzMjJlMzYzMTJlMzkzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMyMzQzNTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKPWIwDQYJKoZIhvcN AQELBQADggEBAIW3ZHKDzCKImIcOuq6qX2U/CZOeuDhDjSCv92jn0VasmXfnI3H1 ce4b6Tg2Toe0y2raZgORk7uhg4bATyyVwo2OutwJGT3q8bKE+1LAi06qFbFKs7W0 uuXbnIEmzuOYfFj9tXWXDLrujjGyCJ9R3z3XMKXQfG0+tx2vrS6YOlzK5mCgHSx/ rV9glgDPjSUiCrHEEkKfdl6TvmSvURmJafFL7kKapjwFyzCSg1lIdwLa47UBYWl6 G4IVAsqySSzSJH95Z7wksS2rnwCqmBPwPy/acrrBElMq4Pw9IFk6rLXKIfiNhi3a OUZdUNNvpiF/svHLew1bBk6RKp4UItpKmVg= -----END CERTIFICATE-----Generated at Sat Jun 7 05:56:50 2025 by rpki-client