$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32392e302f32342d3234203d3e203233393532.roa File: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (raw, json) Hash identifier: Up+DcyPm785j9NlRpEoposKBRtppwgof2aDCtVfivl0= Subject key identifier: 6B:3C:3F:93:6D:E8:92:5B:B0:4D:BB:61:0B:42:A0:34:8F:A0:BF:9E Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 4EBC492E5CC04649ACCCD6AE6885F99B80F71CCF Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32392e302f32342d3234203d3e203233393532.roa Signing time: Thu 19 Jun 2025 14:45:16 +0000 ROA not before: Thu 19 Jun 2025 14:40:16 +0000 ROA not after: Thu 18 Jun 2026 14:45:16 +0000 asID: 23952 IP address blocks: 202.93.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bc:49:2e:5c:c0:46:49:ac:cc:d6:ae:68:85:f9:9b:80:f7:1c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Jun 19 14:40:16 2025 GMT Not After : Jun 18 14:45:16 2026 GMT Subject: CN=6B3C3F936DE8925BB04DBB610B42A0348FA0BF9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f2:4f:ba:5e:d3:b3:a3:9e:77:bb:d0:6e:ce: 0e:e6:71:36:01:e6:2b:12:4e:61:7e:a6:c8:28:48: fa:20:12:94:f3:76:63:1e:d8:cd:9d:46:41:fe:1c: 7d:44:e6:95:42:3f:1f:6b:ce:7a:11:b1:4e:90:a9: 2b:4c:ae:d2:a9:1b:f7:dd:57:95:d2:10:ee:2e:7b: 78:b8:9e:cd:e4:1b:7d:40:55:6f:1c:39:db:f4:98: f3:95:70:25:04:b9:5e:e8:e6:1d:d3:bc:3a:03:6c: a4:ba:21:8e:fe:41:0e:3c:1b:bc:63:92:20:4e:72: b1:1b:73:26:d6:35:86:57:a0:53:ce:80:4d:b4:3d: 32:a3:8c:63:d0:3f:70:6b:6c:b2:7a:b5:93:a2:24: fa:c3:ad:1f:cc:1f:27:88:99:df:97:64:be:de:85: f9:2d:b6:81:83:b2:02:cf:c6:27:91:bf:c2:cf:6f: d1:28:9d:b1:65:b9:70:38:5c:1e:a9:17:fe:10:27: 0e:1f:16:d9:a1:ad:fa:9f:ee:7a:7d:93:be:21:68: d3:c5:99:ff:a7:71:a8:1c:f8:a5:20:8c:6b:cf:7b: 23:d1:b2:fc:f5:0b:20:40:5e:75:04:84:82:0d:de: c8:e5:21:35:54:0e:bb:53:04:50:b7:51:61:9c:e4: 77:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3C:3F:93:6D:E8:92:5B:B0:4D:BB:61:0B:42:A0:34:8F:A0:BF:9E X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32392e302f32342d3234203d3e203233393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.93.29.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:b0:a6:85:40:f3:ee:c7:30:85:8f:32:6d:8b:82:51:ee:55: a8:21:43:62:7c:2b:ab:c5:d7:f6:0c:b7:dc:2c:5b:0b:66:b1: d5:4b:84:72:a1:a9:79:fb:ff:83:e2:9e:7b:1d:f1:a7:69:eb: d5:00:22:cf:35:75:f1:b4:2c:17:18:01:67:9f:2f:d3:d7:92: 83:ba:e1:73:b5:fb:c1:82:fd:b8:9d:96:bd:6d:9d:57:f9:cc: a6:9b:a8:c8:3a:a3:b0:3d:bd:db:07:63:2c:32:65:b6:c8:70: 7c:94:ed:28:b4:b9:e2:76:36:61:b6:3b:ac:7f:48:81:b7:2d: b4:e7:bc:32:06:04:c8:80:97:a7:9a:6c:5d:75:94:82:82:c8: ea:70:89:18:2f:b8:8b:15:44:1b:8f:65:10:c6:87:88:2a:30: ef:03:69:30:e1:95:63:8c:e1:96:0c:95:81:8b:65:86:dd:c5: f9:8c:31:d0:be:e7:d5:b7:3c:b3:44:1b:d2:43:18:6a:6a:4c: b0:5c:2c:fe:71:1d:61:11:f1:4d:7f:c6:3d:5e:03:48:97:d8: c8:18:3e:e2:b8:01:f2:25:e6:8b:58:0f:b4:79:2c:88:29:0f: dc:fd:8d:40:8d:78:94:4b:6f:60:4a:d5:cf:c1:d7:ee:4f:88: de:0f:b3:1d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUTrxJLlzARkmszNauaIX5m4D3HM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNTA2MTkxNDQwMTZaFw0yNjA2MTgxNDQ1MTZaMDMxMTAvBgNV BAMTKDZCM0MzRjkzNkRFODkyNUJCMDREQkI2MTBCNDJBMDM0OEZBMEJGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk8k+6XtOzo553u9Buzg7mcTYB 5isSTmF+psgoSPogEpTzdmMe2M2dRkH+HH1E5pVCPx9rznoRsU6QqStMrtKpG/fd V5XSEO4ue3i4ns3kG31AVW8cOdv0mPOVcCUEuV7o5h3TvDoDbKS6IY7+QQ48G7xj kiBOcrEbcybWNYZXoFPOgE20PTKjjGPQP3BrbLJ6tZOiJPrDrR/MHyeImd+XZL7e hfkttoGDsgLPxieRv8LPb9EonbFluXA4XB6pF/4QJw4fFtmhrfqf7np9k74haNPF mf+ncagc+KUgjGvPeyPRsvz1CyBAXnUEhIIN3sjlITVUDrtTBFC3UWGc5HevAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUazw/k23okluwTbthC0KgNI+gv54wHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjOGFiM2UwLWNhNjgtNDJmNi05 OGY2LTY1NGEyNTJhODY0OC8wLzMyMzAzMjJlMzkzMzJlMzIzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzMzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXR0wDQYJKoZIhvcN AQELBQADggEBADywpoVA8+7HMIWPMm2LglHuVaghQ2J8K6vF1/YMt9wsWwtmsdVL hHKhqXn7/4Pinnsd8adp69UAIs81dfG0LBcYAWefL9PXkoO64XO1+8GC/bidlr1t nVf5zKabqMg6o7A9vdsHYywyZbbIcHyU7Si0ueJ2NmG2O6x/SIG3LbTnvDIGBMiA l6eabF11lIKCyOpwiRgvuIsVRBuPZRDGh4gqMO8DaTDhlWOM4ZYMlYGLZYbdxfmM MdC+59W3PLNEG9JDGGpqTLBcLP5xHWER8U1/xj1eA0iX2MgYPuK4AfIl5otYD7R5 LIgpD9z9jUCNeJRLb2BK1c/B1+5PiN4Psx0= -----END CERTIFICATE-----Generated at Mon Jun 30 14:14:01 2025 by rpki-client