$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37302e34382e302f32302d3234203d3e203138303034.roa File: 3230322e37302e34382e302f32302d3234203d3e203138303034.roa (raw, json) Hash identifier: Vj9b7eOBgij03V9LOKkEMCElDrFIB3RU0Drnp1lzskU= Subject key identifier: 66:EE:D3:76:96:7A:F5:F7:AF:6C:7C:F8:19:49:5A:18:60:BA:F4:CE Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766 Certificate serial: 7B9085092BA499BD064C7C4E6A1CDF419C9BA608 Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37302e34382e302f32302d3234203d3e203138303034.roa Signing time: Sun 04 May 2025 05:00:02 +0000 ROA not before: Sun 04 May 2025 04:55:02 +0000 ROA not after: Sun 03 May 2026 05:00:02 +0000 asID: 18004 IP address blocks: 202.70.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:90:85:09:2b:a4:99:bd:06:4c:7c:4e:6a:1c:df:41:9c:9b:a6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766 Validity Not Before: May 4 04:55:02 2025 GMT Not After : May 3 05:00:02 2026 GMT Subject: CN=66EED376967AF5F7AF6C7CF819495A1860BAF4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:78:1c:35:56:01:a5:50:3a:08:0d:5f:04:73: a7:36:09:51:b8:09:7d:06:6c:04:3f:40:17:8b:9d: 77:b2:19:c8:35:e8:eb:f5:3b:9c:f2:e0:d5:7d:3a: 9d:3a:95:7c:ed:c3:3f:3b:50:c7:f5:3e:21:46:8b: 2c:2e:02:5d:48:34:bd:c9:b8:7c:2c:63:00:15:d2: 81:a1:5c:64:8c:5f:6b:f1:01:7a:06:d5:7e:05:ef: 01:f3:27:39:b5:0c:41:bb:67:b6:e2:de:88:6a:51: 21:03:ca:6e:bf:65:e7:cf:28:04:9d:fd:40:93:61: 6f:30:86:97:28:32:42:c9:7c:81:70:0c:44:87:48: a0:c4:0d:a4:fb:85:3e:28:64:fd:dc:b0:1b:1b:8a: ab:16:45:8f:4e:36:85:27:29:f9:1d:f7:ec:28:b0: ee:25:ba:17:79:62:d2:83:cc:94:47:28:d1:cb:ce: fe:48:73:35:16:a4:6d:5f:5d:42:bc:2b:4d:a6:b5: 5b:92:d5:ad:3b:13:b5:dd:33:94:98:29:48:cf:1a: 0f:e1:db:cc:b8:d1:15:6b:de:55:f0:fe:8c:75:21: e2:53:f1:5f:25:5e:af:c4:13:e6:0f:5a:63:07:7e: 4e:f1:bf:9f:cd:36:7e:50:57:41:ca:ce:7d:c3:46: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EE:D3:76:96:7A:F5:F7:AF:6C:7C:F8:19:49:5A:18:60:BA:F4:CE X509v3 Authority Key Identifier: keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37302e34382e302f32302d3234203d3e203138303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.70.48.0/20 Signature Algorithm: sha256WithRSAEncryption 15:07:8d:c1:7b:96:a8:03:ba:63:d4:f7:91:d2:ec:b9:40:c7: 1d:cc:a0:8b:9a:d1:d9:b2:9a:17:95:d4:e5:03:91:56:a6:f4: 5f:2f:fb:d6:17:86:95:a4:18:92:12:8e:34:25:9d:ea:0d:5a: 2e:53:3e:27:85:ce:9b:ff:d4:ac:51:a5:b7:63:06:75:25:4a: 58:cc:27:d0:ee:3d:6b:02:70:e6:82:da:f3:95:18:9b:87:cb: a4:a8:9c:b5:cc:d1:9c:1a:0c:4b:ae:21:55:79:bd:d6:98:5a: 3c:de:30:ea:60:7e:b9:7a:4a:17:8a:7d:18:77:90:55:ff:db: e4:ac:70:bc:69:5f:84:a4:28:27:d6:ea:a0:83:b0:0b:e7:04: a2:a4:36:eb:f8:14:95:e6:57:38:11:cd:a7:26:12:33:0b:b4: c5:8a:9f:1f:85:50:e0:16:19:d4:65:37:c7:dd:61:00:6f:85: bd:0d:94:40:ae:6c:aa:df:4d:b1:a6:95:89:7b:84:a3:27:a3: 59:9f:11:a5:66:95:2d:6a:45:ca:84:e4:28:74:27:18:d2:8a: 00:eb:12:e1:82:66:16:a9:81:61:84:e5:6c:a5:53:08:74:52: 8f:0f:91:26:e6:e1:8c:e2:e0:fe:3a:6d:68:53:69:9e:4c:e0: c1:4b:fd:9c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUe5CFCSukmb0GTHxOahzfQZybpggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG M0IxOTc2NjAeFw0yNTA1MDQwNDU1MDJaFw0yNjA1MDMwNTAwMDJaMDMxMTAvBgNV BAMTKDY2RUVEMzc2OTY3QUY1RjdBRjZDN0NGODE5NDk1QTE4NjBCQUY0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbeBw1VgGlUDoIDV8Ec6c2CVG4 CX0GbAQ/QBeLnXeyGcg16Ov1O5zy4NV9Op06lXztwz87UMf1PiFGiywuAl1INL3J uHwsYwAV0oGhXGSMX2vxAXoG1X4F7wHzJzm1DEG7Z7bi3ohqUSEDym6/ZefPKASd /UCTYW8whpcoMkLJfIFwDESHSKDEDaT7hT4oZP3csBsbiqsWRY9ONoUnKfkd9+wo sO4luhd5YtKDzJRHKNHLzv5IczUWpG1fXUK8K02mtVuS1a07E7XdM5SYKUjPGg/h 28y40RVr3lXw/ox1IeJT8V8lXq/EE+YPWmMHfk7xv5/NNn5QV0HKzn3DRtHHAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUZu7TdpZ69fevbHz4GUlaGGC69M4wHwYDVR0j BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2 NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix OTc2Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRhLWRhMGItNDU0MC05 MzQ5LTU5MzBiZDcyNWNlMy8wLzMyMzAzMjJlMzczMDJlMzQzODJlMzAyZjMyMzAy ZDMyMzQyMDNkM2UyMDMxMzgzMDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATKRjAwDQYJKoZIhvcN AQELBQADggEBABUHjcF7lqgDumPU95HS7LlAxx3MoIua0dmymheV1OUDkVam9F8v +9YXhpWkGJISjjQlneoNWi5TPieFzpv/1KxRpbdjBnUlSljMJ9DuPWsCcOaC2vOV GJuHy6SonLXM0ZwaDEuuIVV5vdaYWjzeMOpgfrl6SheKfRh3kFX/2+SscLxpX4Sk KCfW6qCDsAvnBKKkNuv4FJXmVzgRzacmEjMLtMWKnx+FUOAWGdRlN8fdYQBvhb0N lECubKrfTbGmlYl7hKMno1mfEaVmlS1qRcqE5Ch0JxjSigDrEuGCZhapgWGE5Wyl Uwh0Uo8PkSbm4Yzi4P46bWhTaZ5M4MFL/Zw= -----END CERTIFICATE-----Generated at Sun May 11 17:02:59 2025 by rpki-client