$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa File: 3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa (raw, json) Hash identifier: fmYV59g2MMTraXzEsrTfyQqiYjtK4JJ3htQL7ef1pm4= Subject key identifier: 83:97:71:37:EA:40:ED:6A:6C:01:BF:A8:B5:67:92:E4:37:0E:9E:92 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 4001AA3838B7AF94E76FA40A130AEB8299126FFE Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa Signing time: Mon 02 Jun 2025 02:04:13 +0000 ROA not before: Mon 02 Jun 2025 01:59:13 +0000 ROA not after: Mon 01 Jun 2026 02:04:13 +0000 asID: 38156 IP address blocks: 203.190.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 03:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:01:aa:38:38:b7:af:94:e7:6f:a4:0a:13:0a:eb:82:99:12:6f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Jun 2 01:59:13 2025 GMT Not After : Jun 1 02:04:13 2026 GMT Subject: CN=83977137EA40ED6A6C01BFA8B56792E4370E9E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:95:9e:86:e1:9e:27:20:93:a8:16:fb:52: 63:8e:2e:03:a4:71:b6:2b:da:1a:dd:b8:13:2a:55: 5c:98:92:a4:09:b2:22:f5:00:76:af:4b:8e:05:66: a9:7a:68:0f:91:d2:11:c6:86:7a:69:4d:fb:1c:bc: bc:b7:0f:9b:d6:77:b1:92:21:7c:f1:6a:3c:33:27: ba:7e:0a:c5:64:c0:ae:88:23:8f:b5:6e:b5:49:e6: d6:53:2f:8d:5a:92:74:1c:b5:3b:0d:6b:83:49:8a: a4:f1:5b:9a:3d:58:c4:37:2a:2c:dc:e1:fe:8a:15: d6:f5:b9:36:33:bc:d7:23:19:2f:77:6d:27:84:06: ae:05:c3:7f:a0:bd:7c:5d:99:93:70:de:59:a4:a5: ee:f7:81:ca:9e:8a:c3:84:ed:ac:02:c7:12:c6:3c: 70:ad:26:b2:f3:f0:64:76:aa:fa:98:3f:de:70:b4: 67:4d:37:f0:a4:6f:94:9c:fb:05:83:4d:49:28:5e: 64:24:73:18:5e:5d:50:8d:9c:6b:08:ee:50:95:03: db:b0:d0:39:32:c5:ed:d4:c6:24:43:ac:76:19:b4: 2b:e4:27:da:aa:5b:92:c2:e9:3a:60:0e:aa:c1:b7: 6c:6e:69:82:b2:63:0e:8c:0d:fa:65:f9:4f:82:97: 77:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:97:71:37:EA:40:ED:6A:6C:01:BF:A8:B5:67:92:E4:37:0E:9E:92 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131372e302f32342d3234203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.117.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c6:b1:7d:68:1d:c6:30:db:34:d7:20:a5:cf:e1:b2:95:17: ca:3c:19:52:27:06:12:88:5d:d9:f4:ae:6e:31:74:b8:c7:97: 6a:49:eb:5d:47:f3:2b:4e:3d:a0:ed:3d:48:ad:8a:fe:65:22: f6:b4:6f:91:53:08:1a:5c:29:ff:b0:27:b5:69:66:9b:c4:33: 83:0a:26:b1:d7:57:95:75:72:3c:85:4c:64:70:eb:9c:4c:ef: f1:63:a3:0f:89:f6:39:cd:a0:85:de:fc:fc:27:ba:f6:00:5f: dd:dc:11:89:f1:97:03:e8:04:c8:0c:6d:02:32:a2:f7:00:8d: 17:83:d2:f4:c1:ca:11:ba:18:e4:6a:2f:97:69:5b:2c:30:56: 11:1d:aa:a3:02:52:e5:39:c4:5b:fa:c7:e3:6f:30:39:73:df: 0f:8f:1c:fe:57:54:5c:0b:01:f1:c9:5e:11:62:d6:04:60:52: 71:a7:3f:c0:78:91:0b:c9:7d:2c:89:b5:ec:9f:39:09:76:fb: 34:37:69:7f:75:92:2b:94:b6:c1:b7:01:79:ed:83:db:4d:9a: 02:2f:58:80:4c:e7:3f:b6:38:2b:d1:26:ac:00:91:f2:54:1a: cf:ff:65:ee:a8:77:58:a0:2d:c8:2f:84:a7:64:c2:d1:7a:d6: 10:a6:2d:aa -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQAGqODi3r5Tnb6QKEwrrgpkSb/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTA2MDIwMTU5MTNaFw0yNjA2MDEwMjA0MTNaMDMxMTAvBgNV BAMTKDgzOTc3MTM3RUE0MEVENkE2QzAxQkZBOEI1Njc5MkU0MzcwRTlFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprJWehuGeJyCTqBb7UmOOLgOk cbYr2hrduBMqVVyYkqQJsiL1AHavS44FZql6aA+R0hHGhnppTfscvLy3D5vWd7GS IXzxajwzJ7p+CsVkwK6II4+1brVJ5tZTL41aknQctTsNa4NJiqTxW5o9WMQ3Kizc 4f6KFdb1uTYzvNcjGS93bSeEBq4Fw3+gvXxdmZNw3lmkpe73gcqeisOE7awCxxLG PHCtJrLz8GR2qvqYP95wtGdNN/Ckb5Sc+wWDTUkoXmQkcxheXVCNnGsI7lCVA9uw 0Dkyxe3UxiRDrHYZtCvkJ9qqW5LC6TpgDqrBt2xuaYKyYw6MDfpl+U+Cl3frAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUg5dxN+pA7WpsAb+otWeS5DcOnpIwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzAzMzJlMzEzOTMwMmUzMTMxMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy751MA0GCSqG SIb3DQEBCwUAA4IBAQAJxrF9aB3GMNs01yClz+GylRfKPBlSJwYSiF3Z9K5uMXS4 x5dqSetdR/MrTj2g7T1IrYr+ZSL2tG+RUwgaXCn/sCe1aWabxDODCiax11eVdXI8 hUxkcOucTO/xY6MPifY5zaCF3vz8J7r2AF/d3BGJ8ZcD6ATIDG0CMqL3AI0Xg9L0 wcoRuhjkai+XaVssMFYRHaqjAlLlOcRb+sfjbzA5c98Pjxz+V1RcCwHxyV4RYtYE YFJxpz/AeJELyX0sibXsnzkJdvs0N2l/dZIrlLbBtwF57YPbTZoCL1iATOc/tjgr 0SasAJHyVBrP/2XuqHdYoC3IL4SnZMLRetYQpi2q -----END CERTIFICATE-----Generated at Tue Jul 1 09:43:06 2025 by rpki-client