$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa File: 3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa (raw, json) Hash identifier: 8/4xAgE1TWPoAy1WLrpkAIeCCgLUf4mVhjMapCZhhdo= Subject key identifier: 8B:D2:E4:7A:76:BE:99:ED:11:10:A1:75:30:14:63:14:E6:96:B4:11 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 4444B44EEA58130ECF63F57A3AAAA83C5DC0A120 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa Signing time: Mon 01 Jul 2024 01:03:03 +0000 ROA not before: Mon 01 Jul 2024 00:58:03 +0000 ROA not after: Mon 30 Jun 2025 01:03:03 +0000 asID: 38778 IP address blocks: 203.201.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Mar 2025 10:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:44:b4:4e:ea:58:13:0e:cf:63:f5:7a:3a:aa:a8:3c:5d:c0:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jul 1 00:58:03 2024 GMT Not After : Jun 30 01:03:03 2025 GMT Subject: CN=8BD2E47A76BE99ED1110A17530146314E696B411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:ca:d2:78:a5:a2:f4:6b:b0:37:e5:40:46: b0:05:2b:1e:a2:2e:5a:e0:66:6b:89:7e:cd:01:bb: 9d:d3:ba:ca:18:45:96:4c:40:cc:62:7b:4d:50:8f: b5:48:dc:c0:29:be:fe:94:fc:da:74:00:fe:9a:23: 3d:d5:17:a9:bd:6c:5e:82:be:d1:ef:f5:bc:45:59: 1c:fb:5d:ac:92:1f:c7:7b:cf:e2:4c:5f:21:2b:55: 1e:e3:23:9a:0a:c0:28:05:9b:71:25:39:1e:68:5c: e7:ce:db:aa:89:f6:39:ec:11:14:78:db:d9:84:9a: 96:1e:c5:03:42:1e:15:ff:73:e5:48:2d:b1:83:0a: e2:c8:f8:20:68:27:6b:02:8e:db:cd:7a:a4:57:20: c5:38:2c:73:bd:83:85:18:a5:81:a8:dc:04:d6:06: e7:1d:87:d9:58:58:7d:24:95:47:cb:ca:d4:f1:5a: 05:fe:6e:9a:7e:da:9f:65:19:88:92:76:7f:ec:ee: d5:de:da:45:b3:df:58:80:27:75:64:fa:66:76:8b: 55:ff:05:27:06:22:df:25:14:71:34:bd:48:c4:af: 8b:de:a6:24:d9:ea:98:74:02:53:4d:17:c2:4a:b9: 7d:2c:c3:50:3d:4a:f6:e1:ac:f8:d2:13:8c:05:8b: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D2:E4:7A:76:BE:99:ED:11:10:A1:75:30:14:63:14:E6:96:B4:11 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.175.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:90:8a:00:35:55:3a:69:1c:d6:19:6a:22:8c:1a:22:49:2d: 7f:06:f6:27:72:d4:03:de:99:5d:b3:a8:7b:7f:28:90:56:fa: ed:4d:1f:76:a2:fe:4b:9f:71:56:c2:74:bb:aa:c1:00:ba:43: ed:68:d9:cb:64:ee:e4:1c:bc:14:07:45:0d:46:61:1d:d2:ec: 06:02:d9:2e:29:3c:d8:cb:09:a7:d8:40:ed:53:ee:f1:09:aa: 5b:48:21:5b:cf:bb:ff:e1:e4:34:21:b0:2c:22:13:16:61:ef: c0:87:4e:5d:5f:2a:63:d7:59:89:94:8f:bc:86:18:a5:17:a8: fc:2c:67:be:fe:bf:7b:ff:44:72:93:75:2b:16:f0:b5:94:99: 74:50:77:46:3b:ba:25:78:ad:cc:6a:4c:a9:bb:ac:b4:7a:b8: ba:34:1d:fd:04:2f:1e:be:46:8c:a6:8a:6b:6c:77:fc:0f:11: ed:dd:de:71:e8:a8:dd:d9:d2:30:11:01:be:a0:62:94:c8:d4: 12:d4:d3:58:ba:f5:3d:9e:0e:f0:60:ea:a6:84:f6:6e:81:3d: 8c:44:a7:24:a9:f3:3d:6e:04:cd:e5:46:5e:62:da:f4:78:a1: 72:cb:b6:43:91:5b:32:85:0e:bd:b0:db:d0:4b:3f:c4:48:f0: 29:ab:51:f6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURES0TupYEw7PY/V6OqqoPF3AoSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNDA3MDEwMDU4MDNaFw0yNTA2MzAwMTAzMDNaMDMxMTAvBgNV BAMTKDhCRDJFNDdBNzZCRTk5RUQxMTEwQTE3NTMwMTQ2MzE0RTY5NkI0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hsrSeKWi9GuwN+VARrAFKx6i LlrgZmuJfs0Bu53TusoYRZZMQMxie01Qj7VI3MApvv6U/Np0AP6aIz3VF6m9bF6C vtHv9bxFWRz7XaySH8d7z+JMXyErVR7jI5oKwCgFm3ElOR5oXOfO26qJ9jnsERR4 29mEmpYexQNCHhX/c+VILbGDCuLI+CBoJ2sCjtvNeqRXIMU4LHO9g4UYpYGo3ATW Bucdh9lYWH0klUfLytTxWgX+bpp+2p9lGYiSdn/s7tXe2kWz31iAJ3Vk+mZ2i1X/ BScGIt8lFHE0vUjEr4vepiTZ6ph0AlNNF8JKuX0sw1A9SvbhrPjSE4wFiy/xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUi9Lkena+me0REKF1MBRjFOaWtBEwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy8mvMA0GCSqG SIb3DQEBCwUAA4IBAQBrkIoANVU6aRzWGWoijBoiSS1/BvYnctQD3plds6h7fyiQ VvrtTR92ov5Ln3FWwnS7qsEAukPtaNnLZO7kHLwUB0UNRmEd0uwGAtkuKTzYywmn 2EDtU+7xCapbSCFbz7v/4eQ0IbAsIhMWYe/Ah05dXypj11mJlI+8hhilF6j8LGe+ /r97/0Ryk3UrFvC1lJl0UHdGO7oleK3Makypu6y0eri6NB39BC8evkaMpoprbHf8 DxHt3d5x6Kjd2dIwEQG+oGKUyNQS1NNYuvU9ng7wYOqmhPZugT2MRKckqfM9bgTN 5UZeYtr0eKFyy7ZDkVsyhQ69sNvQSz/ESPApq1H2 -----END CERTIFICATE-----Generated at Tue Mar 11 05:04:45 2025 by rpki-client