$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa File: 3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa (raw, json) Hash identifier: fP4hNA2uEzHr5eJDUSmt0gsGgJey+aWljQi65QQOvIM= Subject key identifier: 51:2C:0A:CD:CB:E3:8C:3F:1C:9E:F9:2B:B0:6C:2C:4F:6F:5D:39:C9 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 5182A8316517D5289E09BC95FBD18DBABB3CDC8F Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa Signing time: Tue 06 May 2025 11:00:01 +0000 ROA not before: Tue 06 May 2025 10:55:01 +0000 ROA not after: Tue 05 May 2026 11:00:01 +0000 asID: 149707 IP address blocks: 202.154.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 01:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:82:a8:31:65:17:d5:28:9e:09:bc:95:fb:d1:8d:ba:bb:3c:dc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: May 6 10:55:01 2025 GMT Not After : May 5 11:00:01 2026 GMT Subject: CN=512C0ACDCBE38C3F1C9EF92BB06C2C4F6F5D39C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:17:2a:61:44:7c:1e:0a:af:21:fe:1b:c6: eb:b4:aa:b6:45:ff:f3:43:a4:77:21:9b:62:ca:df: 9c:6f:b2:08:ee:f4:40:30:f9:71:be:4e:1c:80:7e: 2e:11:b7:c5:f2:3c:6c:92:f0:80:6f:d9:ca:49:0b: 60:0a:c6:1a:ac:27:29:28:40:d9:a3:90:77:27:10: 7e:2a:2c:24:56:94:06:db:28:14:fb:43:48:be:e2: e5:ca:c7:b4:30:0e:13:60:b3:d3:75:8f:ab:44:19: 9d:e0:79:d1:d5:6c:69:fc:e6:c1:5b:03:97:2b:ca: 9d:66:02:86:9b:a4:cb:8b:21:bb:9f:94:fe:49:23: af:f4:96:ad:94:c5:64:84:8e:17:3c:99:6e:1e:03: bb:de:6f:12:4a:e1:d6:16:4c:d4:b8:22:95:87:c4: 4b:18:17:db:b3:9f:10:ad:17:78:9d:88:06:b7:83: bd:f2:14:76:16:8c:a2:36:93:c2:49:a5:c8:29:a5: 6f:5a:8a:cf:cf:11:92:1c:60:c0:e0:fe:5a:46:c4: 5b:12:fd:5d:d0:6f:c5:1c:9c:2a:db:7b:cf:17:c5: 0f:6a:34:5d:51:dc:a3:ef:20:f3:33:77:4c:6e:c2: 47:12:61:5d:fb:6e:2e:73:2d:40:31:15:bc:10:5f: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2C:0A:CD:CB:E3:8C:3F:1C:9E:F9:2B:B0:6C:2C:4F:6F:5D:39:C9 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32332d3234203d3e20313439373037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.12.0/23 Signature Algorithm: sha256WithRSAEncryption a3:ac:a3:ce:fe:3e:1d:8d:e4:2e:01:3e:69:3d:9d:f9:25:25: b6:ab:a9:2e:09:92:29:36:12:65:22:6e:bd:28:51:9f:a0:71: c0:34:11:73:57:75:df:3b:8d:cf:c4:5b:3e:bf:cd:1f:58:03: e2:d6:d2:df:0f:ee:8f:94:11:e2:35:a7:d8:b3:5e:02:50:a0: 19:0b:8e:26:db:76:cc:2b:7a:41:7a:87:a5:8d:27:15:13:56: d2:75:44:c4:6f:c9:ac:d7:5f:0e:3e:bd:3e:29:52:67:93:6a: 46:a5:30:ba:01:59:fc:53:33:35:7c:38:d2:24:39:c4:69:79: 5f:b0:f7:1e:72:fc:b5:6b:55:d4:e9:0b:66:33:5e:ff:1a:f9: 65:2b:d3:84:bc:de:e0:6a:b0:80:60:46:47:c4:37:bf:0e:e1: c6:42:96:ee:e8:11:4a:2c:b9:ba:a1:0e:9e:13:0a:2e:b7:eb: 5b:bf:34:df:2f:46:bf:fd:5b:ab:be:66:30:21:39:b4:88:16: 54:c1:5f:7b:b3:9d:c4:88:45:a6:60:f8:30:66:c8:e5:23:8f: d7:24:a7:70:70:43:80:62:44:7d:8f:12:34:19:ba:c7:14:49: a7:bd:64:6a:ee:24:fe:08:4d:80:95:c8:b2:7c:48:c5:71:e5: 75:0e:81:3c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUYKoMWUX1SieCbyV+9GNurs83I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTA1MDYxMDU1MDFaFw0yNjA1MDUxMTAwMDFaMDMxMTAvBgNV BAMTKDUxMkMwQUNEQ0JFMzhDM0YxQzlFRjkyQkIwNkMyQzRGNkY1RDM5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/xcqYUR8HgqvIf4bxuu0qrZF //NDpHchm2LK35xvsgju9EAw+XG+ThyAfi4Rt8XyPGyS8IBv2cpJC2AKxhqsJyko QNmjkHcnEH4qLCRWlAbbKBT7Q0i+4uXKx7QwDhNgs9N1j6tEGZ3gedHVbGn85sFb A5cryp1mAoabpMuLIbuflP5JI6/0lq2UxWSEjhc8mW4eA7vebxJK4dYWTNS4IpWH xEsYF9uznxCtF3idiAa3g73yFHYWjKI2k8JJpcgppW9ais/PEZIcYMDg/lpGxFsS /V3Qb8UcnCrbe88XxQ9qNF1R3KPvIPMzd0xuwkcSYV37bi5zLUAxFbwQX61JAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUSwKzcvjjD8cnvkrsGwsT29dOckwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMTMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypoMMA0GCSqG SIb3DQEBCwUAA4IBAQCjrKPO/j4djeQuAT5pPZ35JSW2q6kuCZIpNhJlIm69KFGf oHHANBFzV3XfO43PxFs+v80fWAPi1tLfD+6PlBHiNafYs14CUKAZC44m23bMK3pB eoeljScVE1bSdUTEb8ms118OPr0+KVJnk2pGpTC6AVn8UzM1fDjSJDnEaXlfsPce cvy1a1XU6QtmM17/GvllK9OEvN7garCAYEZHxDe/DuHGQpbu6BFKLLm6oQ6eEwou t+tbvzTfL0a//VurvmYwITm0iBZUwV97s53EiEWmYPgwZsjlI4/XJKdwcEOAYkR9 jxI0GbrHFEmnvWRq7iT+CE2AlciyfEjFceV1DoE8 -----END CERTIFICATE-----Generated at Sun May 11 10:41:05 2025 by rpki-client