$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa File: 3230322e3134382e302e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: DFLkhVgr3/GWILTgNHb+7GTAkrMww4vPCPcmPvuZXr4= Subject key identifier: 77:13:06:47:F3:2A:15:E1:43:6A:C8:CB:B1:51:64:DB:3A:56:2A:04 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 0D5AE54592659C4554D984F21BE3717741EE413C Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa Signing time: Mon 02 Jun 2025 02:00:02 +0000 ROA not before: Mon 02 Jun 2025 01:55:02 +0000 ROA not after: Mon 01 Jun 2026 02:00:02 +0000 asID: 9794 IP address blocks: 202.148.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5a:e5:45:92:65:9c:45:54:d9:84:f2:1b:e3:71:77:41:ee:41:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jun 2 01:55:02 2025 GMT Not After : Jun 1 02:00:02 2026 GMT Subject: CN=77130647F32A15E1436AC8CBB15164DB3A562A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:bb:a7:98:f6:cf:aa:bc:ad:96:98:85:96: 00:a5:fc:cc:64:01:65:e6:b7:c6:75:4a:9c:b5:25: f0:03:8f:b6:5e:e3:b2:41:72:e6:e3:3c:b6:f2:42: f5:17:9a:7d:3e:75:33:32:f2:88:47:5d:1b:82:04: 19:03:19:a3:56:af:77:b2:bc:df:3d:ad:7b:74:53: 5e:95:46:8c:77:da:a1:26:5d:f3:fc:52:4c:d6:74: bb:ff:17:ac:05:f7:f0:92:3c:61:1d:22:23:af:2d: 6e:f2:cc:82:cc:e2:68:d3:ea:d7:63:16:4c:93:e2: e0:4f:de:39:6b:1f:46:cc:3a:ef:66:fd:dd:4c:05: b9:3d:1f:a0:ae:48:df:19:78:1a:23:7b:a9:b2:2e: 66:67:4e:b7:30:53:ad:8b:8c:85:21:07:de:6a:c2: 65:d1:ab:c1:06:a6:e3:17:c2:14:67:df:eb:d6:13: 74:14:e2:51:8c:ac:1e:2e:ac:66:ef:da:24:41:69: b9:69:f4:c8:6d:4b:d4:49:fe:f9:08:96:34:fb:5d: 2c:d3:1a:46:3f:c4:16:37:08:cd:9f:7b:f3:60:78: 6b:13:e7:da:8c:04:c3:9e:bd:75:85:67:4c:af:20: c8:89:86:26:71:38:3c:30:46:29:9d:84:a4:06:00: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:13:06:47:F3:2A:15:E1:43:6A:C8:CB:B1:51:64:DB:3A:56:2A:04 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.0.0/24 Signature Algorithm: sha256WithRSAEncryption b3:0f:e0:a1:a2:2c:0f:cf:5b:2d:ba:74:75:45:9f:f8:d5:3f: 3a:d1:8f:42:c8:9a:67:08:05:92:e7:d4:2d:c0:51:06:c3:b1: b2:53:80:e4:ca:bb:d4:70:89:86:6b:b7:e2:45:03:1c:cc:33: 8e:a1:7d:71:70:00:d0:55:3a:f2:31:d9:25:18:d1:ee:aa:e0: b2:2e:f9:e0:09:43:02:db:30:2a:3d:00:2a:96:30:c4:4c:b5: 6f:db:00:9b:91:3e:30:f7:39:f0:62:fa:a7:3c:ec:3b:74:90: 58:37:0a:d0:44:38:7f:17:59:28:74:9b:f4:58:c6:4e:ee:68: 95:97:11:68:02:78:de:03:9b:7a:cd:44:df:6a:02:30:94:75: a4:e5:34:51:99:23:ae:88:84:f3:59:ca:e4:de:e3:b8:19:7d: 58:eb:3b:b2:2b:f3:d4:c9:69:b2:ca:06:cd:73:3f:9e:32:cf: 20:e0:44:c2:55:29:98:05:8b:f8:1c:af:45:b8:c4:2f:9f:4c: d8:4b:d9:fc:e4:8b:be:80:1a:42:46:09:80:9d:0a:36:c1:6d: 1b:03:95:bd:b1:70:45:71:d8:9d:42:00:36:49:23:30:0a:48: 44:c4:da:e3:22:11:bf:ca:29:08:8f:af:16:74:d2:1a:d7:06: a3:a4:ee:cb -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUDVrlRZJlnEVU2YTyG+Nxd0HuQTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTA2MDIwMTU1MDJaFw0yNjA2MDEwMjAwMDJaMDMxMTAvBgNV BAMTKDc3MTMwNjQ3RjMyQTE1RTE0MzZBQzhDQkIxNTE2NERCM0E1NjJBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLLunmPbPqrytlpiFlgCl/Mxk AWXmt8Z1Spy1JfADj7Ze47JBcubjPLbyQvUXmn0+dTMy8ohHXRuCBBkDGaNWr3ey vN89rXt0U16VRox32qEmXfP8UkzWdLv/F6wF9/CSPGEdIiOvLW7yzILM4mjT6tdj FkyT4uBP3jlrH0bMOu9m/d1MBbk9H6CuSN8ZeBoje6myLmZnTrcwU62LjIUhB95q wmXRq8EGpuMXwhRn3+vWE3QU4lGMrB4urGbv2iRBablp9MhtS9RJ/vkIljT7XSzT GkY/xBY3CM2fe/NgeGsT59qMBMOevXWFZ0yvIMiJhiZxODwwRimdhKQGAHa/AgMB AAGjggItMIICKTAdBgNVHQ4EFgQUdxMGR/MqFeFDasjLsVFk2zpWKgQwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0ZWNjNDAtNmI4NC00OWU4LWI2 MGItNmU5OTA0MTI4Y2E4LzAvMzIzMDMyMmUzMTM0MzgyZTMwMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlAAwDQYJKoZIhvcNAQEL BQADggEBALMP4KGiLA/PWy26dHVFn/jVPzrRj0LImmcIBZLn1C3AUQbDsbJTgOTK u9RwiYZrt+JFAxzMM46hfXFwANBVOvIx2SUY0e6q4LIu+eAJQwLbMCo9ACqWMMRM tW/bAJuRPjD3OfBi+qc87Dt0kFg3CtBEOH8XWSh0m/RYxk7uaJWXEWgCeN4Dm3rN RN9qAjCUdaTlNFGZI66IhPNZyuTe47gZfVjrO7Ir89TJabLKBs1zP54yzyDgRMJV KZgFi/gcr0W4xC+fTNhL2fzki76AGkJGCYCdCjbBbRsDlb2xcEVx2J1CADZJIzAK SETE2uMiEb/KKQiPrxZ00hrXBqOk7ss= -----END CERTIFICATE-----Generated at Thu Jun 5 18:36:31 2025 by rpki-client