$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/36302e3235332e39362e302f31392d3234203d3e203338313434.roa File: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (raw, json) Hash identifier: gI7OgYv6GfwsEVRaXvd5tRlYtRW/gCZ+OwdOGTRV5w8= Subject key identifier: E7:43:A0:56:56:E0:8D:8A:2E:18:8F:24:A1:FC:C7:7A:B5:A8:06:87 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 442BEC14E78FBA8172BBDAF1DB88FDC8B55F8590 Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/36302e3235332e39362e302f31392d3234203d3e203338313434.roa Signing time: Mon 02 Jun 2025 02:04:31 +0000 ROA not before: Mon 02 Jun 2025 01:59:31 +0000 ROA not after: Mon 01 Jun 2026 02:04:31 +0000 asID: 38144 IP address blocks: 60.253.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 01:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2b:ec:14:e7:8f:ba:81:72:bb:da:f1:db:88:fd:c8:b5:5f:85:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Jun 2 01:59:31 2025 GMT Not After : Jun 1 02:04:31 2026 GMT Subject: CN=E743A05656E08D8A2E188F24A1FCC77AB5A80687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:e9:26:6f:ae:b8:8f:9d:a4:25:e8:bc:a2: 3a:fd:cb:84:d9:7a:3e:e0:e9:18:9a:62:e9:9a:96: b5:f6:1f:a6:97:2d:c2:d0:bc:05:eb:f0:dd:b5:0d: 3f:d6:ec:c0:ad:b6:f6:25:ff:6b:6f:49:ef:ad:40: 17:5f:d5:04:22:03:06:d6:b9:07:a1:92:86:64:09: 37:5b:0b:77:d6:bf:65:bf:c3:68:2c:b7:99:0b:bf: ec:8b:0b:41:b3:06:a5:63:0e:a1:bc:66:70:9f:be: 6c:7f:9a:0e:0a:df:e0:96:0a:b5:8d:0c:46:00:6c: aa:5f:7e:56:f3:8b:54:de:6f:bf:9d:b4:00:93:68: 81:db:06:f7:4f:87:5e:c4:1d:00:a7:bf:b7:bd:83: b7:ed:d2:3e:f8:58:40:fb:89:9c:ee:5a:7b:38:c6: 34:be:92:da:9e:df:47:d7:1b:8c:02:2a:3b:69:c6: 4b:6a:09:2e:a6:7a:dc:2b:34:08:ba:98:69:cd:94: 93:2c:63:de:9d:84:80:6e:a8:5e:ff:83:8c:88:ba: ca:64:9f:8b:6e:01:3c:70:aa:1e:ae:6e:6c:39:f8: f5:b2:a2:ab:54:15:c4:d6:1c:ee:bd:63:e2:f2:1d: 19:b9:0e:b7:55:4a:63:21:a5:2f:79:60:28:6d:c2: 0f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:43:A0:56:56:E0:8D:8A:2E:18:8F:24:A1:FC:C7:7A:B5:A8:06:87 X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/36302e3235332e39362e302f31392d3234203d3e203338313434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.253.96.0/19 Signature Algorithm: sha256WithRSAEncryption 10:83:7a:11:44:dd:b4:e4:15:97:54:f1:c5:06:f3:1a:57:74: c3:3a:c2:2f:9c:f0:4f:29:c8:ce:d8:1f:b6:11:36:4e:29:ee: bc:5c:c3:28:07:26:86:6f:fe:e6:b1:40:7a:81:4b:c1:6c:45: 12:30:ab:5e:6d:a9:98:d3:34:a4:59:43:09:2b:bd:07:38:16: 7e:e9:77:ee:10:7c:f0:a7:33:51:d8:45:7f:ff:df:55:d8:6b: 6e:06:1d:10:ae:e7:c5:32:95:11:7d:e9:01:ca:dd:fe:39:70: b0:65:07:4f:57:b8:f8:63:74:43:cc:22:2c:f1:2c:65:16:c8: 6f:1a:df:65:20:c9:b0:3d:52:73:c4:87:9e:65:c6:c6:1b:1a: 13:ea:85:66:33:ae:29:02:e5:b7:19:78:26:57:e4:6c:82:4a: 7f:2b:1d:80:dd:59:b7:5a:dc:65:37:dc:a7:47:1e:48:1e:88: af:48:30:97:e6:43:ed:67:a9:ef:e3:0b:07:d2:be:f2:5a:9a: 7d:9a:74:7c:94:db:09:0a:5c:12:9d:a2:a2:97:e3:35:08:81: 73:76:d2:0c:ae:91:c7:8d:79:d9:6c:30:9e:a9:ef:b6:c9:b0: 2f:89:2e:7d:02:da:a7:33:09:59:14:ef:67:d9:75:a9:18:a2: 16:f5:98:59 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIURCvsFOePuoFyu9rx24j9yLVfhZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNTA2MDIwMTU5MzFaFw0yNjA2MDEwMjA0MzFaMDMxMTAvBgNV BAMTKEU3NDNBMDU2NTZFMDhEOEEyRTE4OEYyNEExRkNDNzdBQjVBODA2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcq+kmb664j52kJei8ojr9y4TZ ej7g6RiaYumalrX2H6aXLcLQvAXr8N21DT/W7MCttvYl/2tvSe+tQBdf1QQiAwbW uQehkoZkCTdbC3fWv2W/w2gst5kLv+yLC0GzBqVjDqG8ZnCfvmx/mg4K3+CWCrWN DEYAbKpfflbzi1Teb7+dtACTaIHbBvdPh17EHQCnv7e9g7ft0j74WED7iZzuWns4 xjS+ktqe30fXG4wCKjtpxktqCS6metwrNAi6mGnNlJMsY96dhIBuqF7/g4yIuspk n4tuATxwqh6ubmw5+PWyoqtUFcTWHO69Y+LyHRm5DrdVSmMhpS95YChtwg/xAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU50OgVlbgjYouGI8kofzHerWoBocwHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjZDc1MzZkLTllMTAtNGQ0OS1i NmNhLTA0MWNjOWE1OTE0ZS8wLzM2MzAyZTMyMzUzMzJlMzkzNjJlMzAyZjMxMzky ZDMyMzQyMDNkM2UyMDMzMzgzMTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU8/WAwDQYJKoZIhvcN AQELBQADggEBABCDehFE3bTkFZdU8cUG8xpXdMM6wi+c8E8pyM7YH7YRNk4p7rxc wygHJoZv/uaxQHqBS8FsRRIwq15tqZjTNKRZQwkrvQc4Fn7pd+4QfPCnM1HYRX// 31XYa24GHRCu58UylRF96QHK3f45cLBlB09XuPhjdEPMIizxLGUWyG8a32UgybA9 UnPEh55lxsYbGhPqhWYzrikC5bcZeCZX5GyCSn8rHYDdWbda3GU33KdHHkgeiK9I MJfmQ+1nqe/jCwfSvvJamn2adHyU2wkKXBKdoqKX4zUIgXN20gyukceNedlsMJ6p 77bJsC+JLn0C2qczCVkU72fZdakYohb1mFk= -----END CERTIFICATE-----Generated at Tue Jul 1 18:14:12 2025 by rpki-client