$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa File: 3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa (raw, json) Hash identifier: 82GNYTxcqyfVraIO6b3Wdj4f7oxhdnEBPcZWwRSvhJg= Subject key identifier: 07:27:BD:85:A1:DB:D7:0A:EE:13:CE:00:93:67:55:0B:D2:05:E2:98 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 73C13CFE4068AC4332B1764CAD81E0A624E953EE Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa Signing time: Mon 02 Jun 2025 02:00:02 +0000 ROA not before: Mon 02 Jun 2025 01:55:02 +0000 ROA not after: Mon 01 Jun 2026 02:00:02 +0000 asID: 38778 IP address blocks: 203.201.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c1:3c:fe:40:68:ac:43:32:b1:76:4c:ad:81:e0:a6:24:e9:53:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jun 2 01:55:02 2025 GMT Not After : Jun 1 02:00:02 2026 GMT Subject: CN=0727BD85A1DBD70AEE13CE009367550BD205E298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:49:b2:af:d0:77:78:44:75:c3:5e:b2:87: d1:ce:79:69:4c:4e:92:f6:50:11:e8:98:89:5d:db: e9:2b:04:87:bd:50:f4:c9:9b:24:9d:12:9b:85:62: c0:49:df:ee:a8:13:69:40:92:75:c5:c0:2d:33:28: 88:66:cb:1c:e5:7e:c7:3a:1b:32:c7:86:5b:b5:70: ce:72:3c:b1:4b:c2:68:58:76:c1:ab:db:e6:0f:f1: f9:63:a4:bd:52:bc:3d:85:d8:79:32:61:a5:5b:d5: 3e:6e:fe:e5:7e:e3:0e:78:b7:ca:59:cf:07:4a:fb: 76:19:54:34:f7:83:f8:3c:45:48:eb:9c:d0:33:b4: f2:c2:16:fb:01:04:47:db:b5:ec:f3:8a:3c:57:7d: f1:35:f2:6f:df:be:f7:68:69:f1:24:63:a2:00:f3: a8:9f:64:a0:1e:36:47:ac:a7:97:0a:32:0f:63:c2: cd:c3:2b:16:34:52:9c:8d:af:2e:1b:89:b4:01:62: 35:09:e0:ab:f6:cb:16:18:ce:a8:73:e3:68:f2:5d: 22:5e:59:b3:d2:49:f1:41:b2:2d:7d:12:0c:aa:7d: 29:08:59:c3:b7:71:ca:da:0e:45:35:30:29:64:67: ff:04:9a:b0:7c:d6:9e:7a:a5:3a:d7:9c:73:95:3e: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:27:BD:85:A1:DB:D7:0A:EE:13:CE:00:93:67:55:0B:D2:05:E2:98 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3137352e302f32342d3234203d3e203338373738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.201.175.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:f8:bf:a6:15:b4:90:04:67:1d:0b:bb:56:7c:7e:97:27:09: 33:d8:17:83:a4:dd:02:01:66:20:22:2e:ae:5c:e1:18:6e:73: 97:15:ee:cc:04:e5:08:f6:6b:e0:e0:a6:f1:13:1a:74:c7:4e: 18:f7:a9:5f:e9:f9:d8:8a:65:8f:74:b4:0a:05:9b:e0:fe:7f: d8:49:d7:7a:76:62:39:b3:84:d5:81:65:46:0c:a0:24:ba:b5: e9:35:62:3b:2f:bb:77:51:7f:8b:ca:b2:68:f0:23:0c:d6:82: f5:c4:f3:73:be:d0:77:27:66:0d:d2:f1:ec:32:a3:5a:0b:18: 03:dd:18:88:db:0e:0d:26:2a:63:d3:4e:d8:98:24:d0:d9:45: fe:c7:c8:22:e9:12:4f:7e:62:fd:ff:6a:fc:21:c5:5c:c3:e4: 83:4b:63:53:f7:6a:46:a9:9f:c9:22:6a:fa:01:86:ea:2a:2b: 31:0e:43:ec:a0:19:e7:8c:3c:7f:75:9c:b6:3e:37:af:bc:2c: a9:0b:c9:37:f6:1e:48:a6:49:98:70:3d:6d:ac:ca:cf:16:02: cb:f6:7a:09:d3:cf:87:a5:53:26:62:2a:ae:f0:2d:b1:48:43: c7:d1:55:d8:1f:38:f7:a6:c1:e1:a0:58:1d:0a:40:8b:21:d4: 06:b3:f1:29 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUc8E8/kBorEMysXZMrYHgpiTpU+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTA2MDIwMTU1MDJaFw0yNjA2MDEwMjAwMDJaMDMxMTAvBgNV BAMTKDA3MjdCRDg1QTFEQkQ3MEFFRTEzQ0UwMDkzNjc1NTBCRDIwNUUyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcb0myr9B3eER1w16yh9HOeWlM TpL2UBHomIld2+krBIe9UPTJmySdEpuFYsBJ3+6oE2lAknXFwC0zKIhmyxzlfsc6 GzLHhlu1cM5yPLFLwmhYdsGr2+YP8fljpL1SvD2F2HkyYaVb1T5u/uV+4w54t8pZ zwdK+3YZVDT3g/g8RUjrnNAztPLCFvsBBEfbtezzijxXffE18m/fvvdoafEkY6IA 86ifZKAeNkesp5cKMg9jws3DKxY0UpyNry4bibQBYjUJ4Kv2yxYYzqhz42jyXSJe WbPSSfFBsi19EgyqfSkIWcO3ccraDkU1MClkZ/8EmrB81p56pTrXnHOVPlLnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBye9haHb1wruE84Ak2dVC9IF4pgwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy8mvMA0GCSqG SIb3DQEBCwUAA4IBAQCN+L+mFbSQBGcdC7tWfH6XJwkz2BeDpN0CAWYgIi6uXOEY bnOXFe7MBOUI9mvg4KbxExp0x04Y96lf6fnYimWPdLQKBZvg/n/YSdd6dmI5s4TV gWVGDKAkurXpNWI7L7t3UX+LyrJo8CMM1oL1xPNzvtB3J2YN0vHsMqNaCxgD3RiI 2w4NJipj007YmCTQ2UX+x8gi6RJPfmL9/2r8IcVcw+SDS2NT92pGqZ/JImr6AYbq KisxDkPsoBnnjDx/dZy2PjevvCypC8k39h5IpkmYcD1trMrPFgLL9noJ08+HpVMm Yiqu8C2xSEPH0VXYHzj3psHhoFgdCkCLIdQGs/Ep -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:53 2025 by rpki-client