$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa File: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (raw, json) Hash identifier: d6+MpeOwnH/agtVVZkfqBxwK6cPDeJjFB6fgvTWTTwY= Subject key identifier: BF:65:7F:40:C3:B1:D5:45:C2:B5:6E:C5:15:AC:04:B6:9A:17:9C:81 Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345 Certificate serial: 0C268DDD86DC5DEE45DBCCF2EED335C1262AFBFF Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa Signing time: Sun 20 Apr 2025 08:00:01 +0000 ROA not before: Sun 20 Apr 2025 07:55:01 +0000 ROA not after: Sun 19 Apr 2026 08:00:01 +0000 asID: 46058 IP address blocks: 202.52.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 00:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:26:8d:dd:86:dc:5d:ee:45:db:cc:f2:ee:d3:35:c1:26:2a:fb:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345 Validity Not Before: Apr 20 07:55:01 2025 GMT Not After : Apr 19 08:00:01 2026 GMT Subject: CN=BF657F40C3B1D545C2B56EC515AC04B69A179C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:c5:68:ed:e8:24:c6:09:e9:77:b1:46:a2: 82:7d:1a:a4:85:50:2a:56:9a:12:f0:e2:4d:34:98: 1d:e7:c7:a7:fc:59:6c:b2:34:00:cb:70:6d:32:28: ba:b8:1f:ee:45:db:cc:0a:36:c1:b1:49:c5:4d:3b: 1e:3b:62:9e:eb:3c:3f:05:1c:28:d7:23:57:f4:d7: 4b:9e:c2:73:ad:ae:97:98:8e:28:b2:1f:c0:f4:43: 44:6c:c0:c0:e9:6c:0a:7a:e3:f4:d1:e8:f7:2e:35: cb:bb:af:79:a6:25:4a:3c:79:d2:c5:2c:cb:56:ff: be:09:16:c3:8e:f8:2b:cd:96:00:34:06:b1:04:35: e0:0f:42:9b:0f:ee:68:52:5f:e9:88:69:31:b7:71: 99:62:e4:2e:6d:5f:6b:23:f4:99:bd:5f:f4:68:92: 32:55:60:d5:80:c4:13:09:ad:13:a5:85:30:d8:d5: 7f:0d:70:a6:9a:9a:26:16:4a:25:bc:3e:bb:96:2a: 58:19:7f:5e:a4:1f:22:32:8f:ca:04:e2:b6:67:89: cd:7c:ae:93:65:11:66:75:57:34:89:15:fd:56:eb: 5c:78:6d:da:ad:e2:05:01:15:3e:80:60:e5:3d:37: 06:0c:e4:67:0e:86:90:62:95:0e:b0:10:39:63:f0: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:65:7F:40:C3:B1:D5:45:C2:B5:6E:C5:15:AC:04:B6:9A:17:9C:81 X509v3 Authority Key Identifier: keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.58.0/23 Signature Algorithm: sha256WithRSAEncryption 63:62:ac:60:83:f5:fe:2f:d5:2e:ae:ae:00:58:48:f5:c9:7c: 72:91:d3:24:6d:7f:09:8f:8d:a8:0a:09:3c:bb:c2:78:32:07: ba:ff:6a:53:a6:ae:5c:4d:3f:8f:cf:56:f3:b9:2b:ca:77:46: 7a:ea:49:30:a6:9a:e4:0c:24:71:26:d4:4f:e0:61:06:2e:a6: e6:f9:8d:0d:92:e6:6b:30:34:b2:72:b3:ac:bb:17:67:fb:d7: 39:9c:4a:e1:c8:d7:90:f0:90:94:a3:fc:c8:84:a3:1f:d1:9a: 71:83:d8:dc:42:c8:f2:ea:78:1a:b9:95:82:04:a8:dd:8b:ae: d5:ea:4f:c5:91:f1:80:7b:b8:fc:de:e6:9d:8d:1f:6c:d1:8f: 9f:f0:2f:ee:1e:c2:13:91:ba:2b:1b:20:15:8e:b5:76:d7:41: 97:19:ea:9a:ae:61:d2:e4:13:04:f2:ff:28:f6:a7:67:5a:01: 5e:a5:0b:28:87:8f:ad:8d:10:96:b1:c9:34:7f:fd:f7:fa:14: 14:db:0d:22:d3:de:a0:94:16:7d:71:2a:a9:b3:32:96:bb:09: f9:0a:92:6f:bf:37:f4:8d:f3:09:6d:d9:9e:f8:b5:6f:99:86: 47:dd:f1:b6:22:9a:17:0a:07:1c:32:98:38:55:6c:4e:04:84: 8a:de:8c:31 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDCaN3YbcXe5F28zy7tM1wSYq+/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2 RDk1QzM0NTAeFw0yNTA0MjAwNzU1MDFaFw0yNjA0MTkwODAwMDFaMDMxMTAvBgNV BAMTKEJGNjU3RjQwQzNCMUQ1NDVDMkI1NkVDNTE1QUMwNEI2OUExNzlDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfsVo7egkxgnpd7FGooJ9GqSF UCpWmhLw4k00mB3nx6f8WWyyNADLcG0yKLq4H+5F28wKNsGxScVNOx47Yp7rPD8F HCjXI1f010uewnOtrpeYjiiyH8D0Q0RswMDpbAp64/TR6PcuNcu7r3mmJUo8edLF LMtW/74JFsOO+CvNlgA0BrEENeAPQpsP7mhSX+mIaTG3cZli5C5tX2sj9Jm9X/Ro kjJVYNWAxBMJrROlhTDY1X8NcKaamiYWSiW8PruWKlgZf16kHyIyj8oE4rZnic18 rpNlEWZ1VzSJFf1W61x4bdqt4gUBFT6AYOU9NwYM5GcOhpBilQ6wEDlj8B4nAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUv2V/QMOx1UXCtW7FFawEtpoXnIEwHwYDVR0j BBgwFoAULlVIO5BiRNLaNX8BT5r6YG2Vw0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMC8yRTU1NDgzQjkw NjI0NEQyREEzNTdGMDE0RjlBRkE2MDZEOTVDMzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2RDk1 QzM0NS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyZTIzZGM0LTRmZDUtNDNlMi1i YjZhLTRmZGMzODdlYmM1OC8wLzMyMzAzMjJlMzUzMjJlMzUzODJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDM0MzYzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKNDowDQYJKoZIhvcN AQELBQADggEBAGNirGCD9f4v1S6urgBYSPXJfHKR0yRtfwmPjagKCTy7wngyB7r/ alOmrlxNP4/PVvO5K8p3RnrqSTCmmuQMJHEm1E/gYQYupub5jQ2S5mswNLJys6y7 F2f71zmcSuHI15DwkJSj/MiEox/RmnGD2NxCyPLqeBq5lYIEqN2LrtXqT8WR8YB7 uPze5p2NH2zRj5/wL+4ewhORuisbIBWOtXbXQZcZ6pquYdLkEwTy/yj2p2daAV6l CyiHj62NEJaxyTR//ff6FBTbDSLT3qCUFn1xKqmzMpa7CfkKkm+/N/SN8wlt2Z74 tW+Zhkfd8bYimhcKBxwymDhVbE4EhIrejDE= -----END CERTIFICATE-----Generated at Tue May 6 20:24:33 2025 by rpki-client