$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa File: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (raw, json) Hash identifier: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk= Subject key identifier: A4:AB:C3:ED:93:6B:DC:C1:8D:91:6D:91:1D:35:94:B8:FB:FC:47:9E Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 153D3D854AA43B941D4F2EBC69359467FA7E174B Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa Signing time: Mon 02 Jun 2025 02:02:30 +0000 ROA not before: Mon 02 Jun 2025 01:57:30 +0000 ROA not after: Mon 01 Jun 2026 02:02:30 +0000 asID: 38150 IP address blocks: 180.214.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3d:3d:85:4a:a4:3b:94:1d:4f:2e:bc:69:35:94:67:fa:7e:17:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Jun 2 01:57:30 2025 GMT Not After : Jun 1 02:02:30 2026 GMT Subject: CN=A4ABC3ED936BDCC18D916D911D3594B8FBFC479E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:06:3f:e6:e4:22:f3:2f:29:3b:73:53:b9: 86:14:9b:72:9b:ec:61:8c:99:a1:1e:f5:42:6c:56: 2a:db:4c:86:62:6b:20:53:08:4d:01:bd:ee:c6:ac: 67:c0:aa:ad:0c:47:a6:55:0b:7d:4f:79:b1:51:cb: 69:43:7e:08:39:ae:de:fa:d4:cd:30:9d:76:5d:ae: 07:3c:0e:56:ac:90:16:4f:ab:ab:7b:e5:4c:90:ea: 1b:89:3e:92:aa:de:b9:63:a0:23:e1:57:e9:49:3f: 0e:ff:9d:06:0f:68:4d:89:78:2c:64:e2:bd:1f:c4: 5e:eb:7f:33:6d:e9:cf:53:92:42:d2:3a:2f:14:43: fc:12:f5:6a:f6:42:b7:24:34:84:81:18:33:61:0e: 60:1b:7f:8f:91:b4:f8:75:b6:a1:27:a5:b8:c3:e2: df:c4:d0:4e:16:27:aa:e8:0f:e9:b4:65:1e:3a:d3: 47:82:80:ee:ae:47:4b:9c:21:8c:49:53:d4:97:10: dd:ae:b9:b1:d6:28:08:66:87:90:90:0c:35:9d:cb: ab:6b:21:15:43:7f:ec:f7:a5:d3:c8:f6:b0:5a:aa: 7b:71:f2:5e:09:98:7d:18:31:c3:77:f2:36:bd:b9: 95:fe:83:14:5d:d1:63:46:b4:03:f6:37:9b:23:34: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:C3:ED:93:6B:DC:C1:8D:91:6D:91:1D:35:94:B8:FB:FC:47:9E X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.243.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:6d:06:fc:42:c6:f1:7e:d2:5c:cf:a5:8f:1d:80:a4:c1:49: 2e:4f:3e:9f:b3:7d:37:fe:0e:cc:60:16:ab:0d:d3:27:a9:6a: 48:69:56:73:40:6d:42:c6:86:c6:40:b3:1f:c6:d8:6f:9e:89: 8f:cf:69:95:55:cf:90:3b:2f:83:b1:0f:74:62:e1:fe:7b:68: 5f:37:25:1a:85:3a:da:6c:69:7b:aa:fb:16:b2:0f:23:c1:f7: f8:dc:00:71:25:50:8b:22:05:bc:46:2b:b8:dd:a4:fc:df:da: 4c:48:a1:67:3b:d8:06:4a:fa:20:58:da:94:53:80:32:1e:d6: 66:21:5b:3b:54:6c:e0:5f:ec:77:d0:f2:e3:e2:d0:68:b1:d9: f5:ee:a5:a0:07:e9:30:50:19:a3:04:5d:bc:71:7b:96:b6:69: 61:0f:b4:7f:53:01:c1:54:04:10:87:6b:b4:f0:43:6a:87:a4: 96:5a:a3:64:42:0c:5e:98:ae:27:c9:61:63:85:1c:ab:62:7e: 40:db:3b:31:b1:c8:b0:54:7f:15:1b:87:41:c3:cb:31:f9:8e: f7:76:b7:61:ae:3c:f8:cb:8f:aa:a1:1d:bd:71:53:88:69:1c: 4e:ad:9b:be:fe:a2:9e:ed:f1:76:8d:e1:b3:69:bd:f0:a9:81: 91:65:8d:68 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFT09hUqkO5QdTy68aTWUZ/p+F0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA2MDIwMTU3MzBaFw0yNjA2MDEwMjAyMzBaMDMxMTAvBgNV BAMTKEE0QUJDM0VEOTM2QkRDQzE4RDkxNkQ5MTFEMzU5NEI4RkJGQzQ3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zAY/5uQi8y8pO3NTuYYUm3Kb 7GGMmaEe9UJsVirbTIZiayBTCE0Bve7GrGfAqq0MR6ZVC31PebFRy2lDfgg5rt76 1M0wnXZdrgc8DlaskBZPq6t75UyQ6huJPpKq3rljoCPhV+lJPw7/nQYPaE2JeCxk 4r0fxF7rfzNt6c9TkkLSOi8UQ/wS9Wr2QrckNISBGDNhDmAbf4+RtPh1tqEnpbjD 4t/E0E4WJ6roD+m0ZR4600eCgO6uR0ucIYxJU9SXEN2uubHWKAhmh5CQDDWdy6tr IRVDf+z3pdPI9rBaqntx8l4JmH0YMcN38ja9uZX+gxRd0WNGtAP2N5sjNOrHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpKvD7ZNr3MGNkW2RHTWUuPv8R54wHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04 Yzc5LTIzMTU2NTk2NjhhYS8wLzMxMzgzMDJlMzIzMTM0MmUzMjM0MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtNbzMA0GCSqG SIb3DQEBCwUAA4IBAQANbQb8QsbxftJcz6WPHYCkwUkuTz6fs303/g7MYBarDdMn qWpIaVZzQG1CxobGQLMfxthvnomPz2mVVc+QOy+DsQ90YuH+e2hfNyUahTrabGl7 qvsWsg8jwff43ABxJVCLIgW8Riu43aT839pMSKFnO9gGSvogWNqUU4AyHtZmIVs7 VGzgX+x30PLj4tBosdn17qWgB+kwUBmjBF28cXuWtmlhD7R/UwHBVAQQh2u08ENq h6SWWqNkQgxemK4nyWFjhRyrYn5A2zsxsciwVH8VG4dBw8sx+Y73drdhrjz4y4+q oR29cVOIaRxOrZu+/qKe7fF2jeGzab3wqYGRZY1o -----END CERTIFICATE-----Generated at Mon Jun 30 03:34:29 2025 by rpki-client