$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa File: 3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: tG6Bd4Qb8/W+GGKO8tK6J7F2lWIZIfxuu0ygTJr+znA= Subject key identifier: 54:E0:E9:8E:57:21:2E:3D:B9:D6:BC:50:CF:12:A9:36:8F:B8:22:93 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 34D96B7D554CC337247882AB4B8EB2A02681E69D Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa Signing time: Mon 02 Jun 2025 02:00:01 +0000 ROA not before: Mon 02 Jun 2025 01:55:01 +0000 ROA not after: Mon 01 Jun 2026 02:00:01 +0000 asID: 9794 IP address blocks: 203.201.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d9:6b:7d:55:4c:c3:37:24:78:82:ab:4b:8e:b2:a0:26:81:e6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jun 2 01:55:01 2025 GMT Not After : Jun 1 02:00:01 2026 GMT Subject: CN=54E0E98E57212E3DB9D6BC50CF12A9368FB82293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:30:f2:c2:b8:6a:fc:f9:77:97:fb:9f:60:f3: 25:45:ac:61:f0:30:42:d2:f0:e1:09:ca:3c:1e:f2: e1:39:53:29:0b:c7:10:ec:ed:d1:9d:53:0d:3f:95: 31:b2:11:20:16:18:e1:b0:d9:c1:5b:f4:23:1d:3e: c7:9e:fa:b2:92:4d:4d:0d:f9:1f:d6:98:03:6c:b6: a9:bd:2c:a3:9c:f5:df:98:10:87:4a:aa:ea:81:d5: 44:40:be:4f:17:ba:b6:44:75:83:e7:fa:d7:73:e6: 91:31:53:17:ca:a8:90:12:c3:07:3c:56:ed:a6:4c: 54:c8:c9:f3:db:ad:db:ea:e9:d4:63:16:ec:13:f3: 61:87:8f:69:96:2c:f9:aa:04:2f:02:25:37:72:db: 0e:a3:e5:e8:a6:59:01:60:18:7d:e2:43:4f:4e:e7: 83:b8:5c:65:3c:68:a5:57:b5:a7:d6:8f:fd:67:92: 24:6e:f0:ba:e4:25:d2:5d:8c:0b:31:86:04:a9:58: db:6b:de:13:f5:42:ac:48:2d:05:46:ad:5b:6d:ae: 5c:5a:76:00:d0:01:22:0b:5e:c6:1a:cb:0b:c3:e1: d2:dd:3c:66:00:71:d0:d8:9a:b8:d0:d6:41:2c:3f: 41:e2:63:22:87:50:cd:f9:e2:d4:11:7c:37:bc:82: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E0:E9:8E:57:21:2E:3D:B9:D6:BC:50:CF:12:A9:36:8F:B8:22:93 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.160.0/24 Signature Algorithm: sha256WithRSAEncryption 91:a8:07:06:38:6d:f5:86:44:76:5c:c4:69:79:bf:20:73:71: 31:e9:a3:c9:b7:7e:91:45:ca:97:d7:12:c1:d0:11:6a:46:47: df:34:e8:74:03:ec:cf:13:23:d1:fc:17:91:af:43:fb:bb:08: a3:d4:da:ef:fc:5e:a0:74:1d:b8:f8:30:80:bd:6a:ee:f3:00: 87:96:50:6e:c0:c0:16:4c:6d:cf:ee:a2:2b:45:f6:e8:68:d7: dc:cb:b6:6f:a0:cb:78:b9:84:35:31:7c:bc:b1:06:5f:c9:9e: 3d:40:e9:27:4c:38:40:87:b8:ab:cd:4f:54:46:fd:bd:aa:94: 37:20:09:de:e4:dc:14:b9:b0:e2:53:e0:7c:a8:ff:bc:44:fd: 7e:10:9d:0e:a2:3a:1a:ce:ab:d4:c4:fe:68:33:2c:ed:85:2b: b7:a9:2a:f8:59:7a:0b:e9:ef:a5:d3:47:bf:26:ec:f4:9d:6d: 0a:6a:32:83:2e:11:05:75:aa:2c:60:af:f3:fc:2a:ae:a2:ec: 6b:92:3b:1f:89:29:fe:0a:ca:c6:78:72:fe:e6:00:fb:48:4f: 13:37:33:39:95:eb:e1:47:1c:18:eb:59:c4:91:36:96:09:a1: 9d:07:bd:73:59:ab:54:16:0f:c7:5b:19:bc:dc:7a:88:ab:a8: cc:7f:35:e6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNNlrfVVMwzckeIKrS46yoCaB5p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTA2MDIwMTU1MDFaFw0yNjA2MDEwMjAwMDFaMDMxMTAvBgNV BAMTKDU0RTBFOThFNTcyMTJFM0RCOUQ2QkM1MENGMTJBOTM2OEZCODIyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/MPLCuGr8+XeX+59g8yVFrGHw MELS8OEJyjwe8uE5UykLxxDs7dGdUw0/lTGyESAWGOGw2cFb9CMdPsee+rKSTU0N +R/WmANstqm9LKOc9d+YEIdKquqB1URAvk8XurZEdYPn+tdz5pExUxfKqJASwwc8 Vu2mTFTIyfPbrdvq6dRjFuwT82GHj2mWLPmqBC8CJTdy2w6j5eimWQFgGH3iQ09O 54O4XGU8aKVXtafWj/1nkiRu8LrkJdJdjAsxhgSpWNtr3hP1QqxILQVGrVttrlxa dgDQASILXsYaywvD4dLdPGYAcdDYmrjQ1kEsP0HiYyKHUM354tQRfDe8gloJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVODpjlchLj251rxQzxKpNo+4IpMwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM2MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMvJoDANBgkqhkiG 9w0BAQsFAAOCAQEAkagHBjht9YZEdlzEaXm/IHNxMemjybd+kUXKl9cSwdARakZH 3zTodAPszxMj0fwXka9D+7sIo9Ta7/xeoHQduPgwgL1q7vMAh5ZQbsDAFkxtz+6i K0X26GjX3Mu2b6DLeLmENTF8vLEGX8mePUDpJ0w4QIe4q81PVEb9vaqUNyAJ3uTc FLmw4lPgfKj/vET9fhCdDqI6Gs6r1MT+aDMs7YUrt6kq+Fl6C+nvpdNHvybs9J1t Cmoygy4RBXWqLGCv8/wqrqLsa5I7H4kp/grKxnhy/uYA+0hPEzczOZXr4UccGOtZ xJE2lgmhnQe9c1mrVBYPx1sZvNx6iKuozH815g== -----END CERTIFICATE-----Generated at Thu Jun 5 18:29:41 2025 by rpki-client