$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e372e302f32342d3234203d3e203338373738.roa File: 3230322e3134382e372e302f32342d3234203d3e203338373738.roa (raw, json) Hash identifier: 8Al9govPcm2GD/w4CgcgfWWw3DKCwCA65SLBYwwhZXU= Subject key identifier: 36:41:70:DC:61:2C:0D:95:CA:D7:5F:9A:5C:92:1E:4E:94:20:F9:D5 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 777F1980D6C851C0203512B14DD7FEF293F4FA81 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e372e302f32342d3234203d3e203338373738.roa Signing time: Mon 02 Jun 2025 01:03:04 +0000 ROA not before: Mon 02 Jun 2025 00:58:04 +0000 ROA not after: Mon 01 Jun 2026 01:03:04 +0000 asID: 38778 IP address blocks: 202.148.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7f:19:80:d6:c8:51:c0:20:35:12:b1:4d:d7:fe:f2:93:f4:fa:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jun 2 00:58:04 2025 GMT Not After : Jun 1 01:03:04 2026 GMT Subject: CN=364170DC612C0D95CAD75F9A5C921E4E9420F9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:61:f7:87:3a:84:8a:ab:d9:e8:6c:dd:03:27: 43:be:7d:72:a4:9b:60:e0:77:cf:34:fe:2c:c7:73: 0e:5f:10:98:7c:57:3e:fa:38:a7:66:88:a4:b1:1e: 27:e2:4f:bc:74:46:08:ce:b1:b6:cd:ca:4c:05:ab: 54:96:c5:f0:3c:46:aa:fe:ca:1f:da:13:fa:8a:c7: 9d:91:50:80:74:62:de:cd:86:26:ee:2a:a8:a4:f2: d8:5a:17:62:09:2d:f6:8f:77:1f:6b:66:b6:5b:83: a0:e8:25:2f:7e:ed:7a:9a:80:da:08:98:43:a8:43: f4:1e:32:b8:11:29:78:85:23:0b:15:30:21:eb:50: 4f:f5:a7:42:ef:0c:e9:d6:f1:cc:dd:4c:ff:90:59: 01:f2:0d:b7:cf:2f:82:dc:eb:a5:6d:04:43:0b:f3: 96:1c:16:22:c9:74:0e:f3:58:e2:a8:ed:42:6d:b2: 73:80:c0:39:31:e2:65:8b:11:d6:71:f9:ad:09:ca: 4b:5f:49:59:1e:d2:d0:f0:7c:ae:dd:5d:09:30:6c: 42:d8:25:ce:1e:40:fc:14:91:6a:ec:56:7d:17:d3: fd:55:df:c2:4e:64:da:c6:6c:d2:39:87:29:22:e2: ca:f9:0e:2d:9a:d0:09:d9:2f:1e:f9:b0:cd:46:19: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:41:70:DC:61:2C:0D:95:CA:D7:5F:9A:5C:92:1E:4E:94:20:F9:D5 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e372e302f32342d3234203d3e203338373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.7.0/24 Signature Algorithm: sha256WithRSAEncryption 88:1a:ef:95:eb:e4:22:4f:26:4a:30:e7:f1:35:e4:c2:94:fb: 51:ba:fa:74:47:00:bb:c7:f5:4f:41:74:72:3d:ca:9e:5a:95: a8:6d:42:7e:55:fe:c2:6b:9d:7a:2d:d3:78:0e:f2:03:1a:0d: 0c:2a:17:ed:81:a7:a7:6b:10:45:b9:c5:6b:cf:c3:3b:46:dc: d0:aa:88:84:da:48:5d:2d:8e:34:c1:64:60:c7:b7:b4:2e:36: fc:72:cc:9c:97:67:77:b6:92:c2:f3:df:00:13:d0:ed:2b:ad: cd:4e:76:79:5d:8e:ff:68:43:f4:b6:04:9a:2b:f0:60:e4:4c: 8c:28:3f:ea:e2:c0:45:47:4f:62:48:79:bd:03:59:78:1a:d9: 06:bb:ac:4d:e0:77:82:2f:9d:73:11:c9:47:7a:5b:db:44:17: 4f:d6:4a:60:85:59:ca:29:0c:67:0b:47:d0:3c:8b:e1:e0:b5: e0:c9:a8:d9:da:4f:65:77:7d:f4:74:5a:31:69:fd:f6:4f:73: 3d:7c:eb:3c:90:07:64:81:f8:55:02:13:7c:d7:bd:5c:97:d7: bd:d5:81:ef:c3:5b:8f:23:95:66:c2:15:40:66:92:ab:3b:a5: 05:6e:9e:3e:35:5f:7d:60:7b:94:78:9e:98:ff:a4:e2:80:2e: 93:af:94:31 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUd38ZgNbIUcAgNRKxTdf+8pP0+oEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTA2MDIwMDU4MDRaFw0yNjA2MDEwMTAzMDRaMDMxMTAvBgNV BAMTKDM2NDE3MERDNjEyQzBEOTVDQUQ3NUY5QTVDOTIxRTRFOTQyMEY5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfYfeHOoSKq9nobN0DJ0O+fXKk m2Dgd880/izHcw5fEJh8Vz76OKdmiKSxHifiT7x0RgjOsbbNykwFq1SWxfA8Rqr+ yh/aE/qKx52RUIB0Yt7NhibuKqik8thaF2IJLfaPdx9rZrZbg6DoJS9+7XqagNoI mEOoQ/QeMrgRKXiFIwsVMCHrUE/1p0LvDOnW8czdTP+QWQHyDbfPL4Lc66VtBEML 85YcFiLJdA7zWOKo7UJtsnOAwDkx4mWLEdZx+a0JyktfSVke0tDwfK7dXQkwbELY Jc4eQPwUkWrsVn0X0/1V38JOZNrGbNI5hyki4sr5Di2a0AnZLx75sM1GGahhAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUNkFw3GEsDZXK11+aXJIeTpQg+dUwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlAcwDQYJKoZIhvcN AQELBQADggEBAIga75Xr5CJPJkow5/E15MKU+1G6+nRHALvH9U9BdHI9yp5alaht Qn5V/sJrnXot03gO8gMaDQwqF+2Bp6drEEW5xWvPwztG3NCqiITaSF0tjjTBZGDH t7QuNvxyzJyXZ3e2ksLz3wAT0O0rrc1Odnldjv9oQ/S2BJor8GDkTIwoP+riwEVH T2JIeb0DWXga2Qa7rE3gd4IvnXMRyUd6W9tEF0/WSmCFWcopDGcLR9A8i+HgteDJ qNnaT2V3ffR0WjFp/fZPcz186zyQB2SB+FUCE3zXvVyX173Vge/DW48jlWbCFUBm kqs7pQVunj41X31ge5R4npj/pOKALpOvlDE= -----END CERTIFICATE-----Generated at Sat Jun 7 17:24:38 2025 by rpki-client