$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: qykkhhxHnO0ydNs5JBAQOA0f9BAZyPwR6KhTyOO68q8= Subject key identifier: 9C:47:3E:13:58:DF:FC:FD:80:36:1E:75:05:A1:E5:51:9B:6C:AA:EA Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 4935FF8F88C17F05984EC8EB139B9BB37D8F2D3A Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa Signing time: Tue 10 Jun 2025 03:43:27 +0000 ROA not before: Tue 10 Jun 2025 03:38:27 +0000 ROA not after: Tue 09 Jun 2026 03:43:27 +0000 asID: 63859 IP address blocks: 202.152.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:35:ff:8f:88:c1:7f:05:98:4e:c8:eb:13:9b:9b:b3:7d:8f:2d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Jun 10 03:38:27 2025 GMT Not After : Jun 9 03:43:27 2026 GMT Subject: CN=9C473E1358DFFCFD80361E7505A1E5519B6CAAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:de:38:2a:91:9d:81:d8:60:23:4a:e1:75: 2c:45:3b:2c:b6:ae:a3:97:95:5b:1a:e8:d3:b0:ee: 30:5d:be:6b:f5:72:90:04:23:3a:48:c3:da:34:bb: 05:b8:71:c2:d5:b7:eb:02:e7:79:52:d7:79:7a:c3: 27:df:eb:59:2b:96:78:e7:5a:da:f3:2d:bd:b2:9b: 50:9d:d1:c8:39:be:b6:b3:59:d6:51:54:ad:0e:f4: 56:df:e4:a9:10:85:51:c2:d6:d5:3e:e9:1d:43:bd: 8e:5f:93:b7:da:83:66:83:7b:93:7f:dc:3e:12:5c: cd:ea:89:28:7c:6e:9d:c9:ec:2a:b7:c2:6a:2e:bb: 7b:3d:89:c0:d3:9f:73:16:99:12:1b:fc:58:e4:39: fd:3f:0a:38:28:28:a8:b7:8f:8c:c7:9a:95:04:eb: 4d:80:24:89:f7:d7:5d:77:35:9e:ea:a2:85:fe:43: d7:5a:5e:ec:52:6d:25:75:8a:91:03:26:a8:fb:28: 4f:e1:a3:a2:f4:5c:dd:31:c5:17:da:91:69:e0:b4: 0b:a9:64:a7:4b:a0:e6:42:58:28:a1:1b:ad:c2:ff: 38:45:f0:23:8b:5a:cc:b4:d4:67:f3:6e:84:d0:c8: 13:98:3b:b6:a8:f5:00:5e:cf:32:67:c9:68:a1:55: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:47:3E:13:58:DF:FC:FD:80:36:1E:75:05:A1:E5:51:9B:6C:AA:EA X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230322e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.202.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:b8:37:b6:3c:7c:9d:9a:14:08:7b:79:18:24:7f:44:33:93: 04:7a:70:c1:c7:32:fb:08:37:7f:42:02:ed:d7:e2:f3:2f:07: 01:8a:29:ca:3a:c9:59:ce:74:ad:4f:40:bc:6f:38:4c:b3:5e: 2f:c8:9e:e8:df:7c:12:c7:2c:09:b5:0f:a7:d0:ad:7c:e2:dd: 93:40:41:d7:71:76:85:dd:f7:22:6d:14:63:ea:5c:95:c7:16: 82:2e:a5:06:c1:d7:4a:29:9c:44:0a:0d:80:fd:92:24:e7:fd: e5:bc:8b:11:af:f2:cb:48:b6:7b:78:84:09:24:84:24:37:86: 6f:22:51:8c:3b:c0:a3:1d:c3:40:54:2b:16:c4:00:19:8f:06: 48:e5:cf:33:28:8c:a6:50:54:c9:c1:0e:b2:4f:e9:54:61:b6: f5:1c:34:cb:fb:fb:7a:d5:14:c7:7a:28:1f:83:9e:42:40:b5: 76:5a:dc:0e:57:38:7c:05:7f:83:ec:ae:98:f7:a9:47:ef:d1: 45:ed:ea:2e:b0:12:4b:a1:b0:db:4d:da:c4:38:d4:48:74:85: 3b:4c:57:9a:a9:7e:e1:78:e4:48:ed:01:77:7a:9d:f6:4b:92: 49:6b:6b:a9:80:ac:ef:8e:4a:e8:6b:1c:6f:37:dd:98:2c:6c: be:88:4f:fa -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSTX/j4jBfwWYTsjrE5ubs32PLTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA2MTAwMzM4MjdaFw0yNjA2MDkwMzQzMjdaMDMxMTAvBgNV BAMTKDlDNDczRTEzNThERkZDRkQ4MDM2MUU3NTA1QTFFNTUxOUI2Q0FBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgd44KpGdgdhgI0rhdSxFOyy2 rqOXlVsa6NOw7jBdvmv1cpAEIzpIw9o0uwW4ccLVt+sC53lS13l6wyff61krlnjn WtrzLb2ym1Cd0cg5vrazWdZRVK0O9Fbf5KkQhVHC1tU+6R1DvY5fk7fag2aDe5N/ 3D4SXM3qiSh8bp3J7Cq3wmouu3s9icDTn3MWmRIb/FjkOf0/CjgoKKi3j4zHmpUE 602AJIn31113NZ7qooX+Q9daXuxSbSV1ipEDJqj7KE/ho6L0XN0xxRfakWngtAup ZKdLoOZCWCihG63C/zhF8COLWsy01GfzboTQyBOYO7ao9QBezzJnyWihVZcxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnEc+E1jf/P2ANh51BaHlUZtsquowHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjKMA0GCSqG SIb3DQEBCwUAA4IBAQAeuDe2PHydmhQIe3kYJH9EM5MEenDBxzL7CDd/QgLt1+Lz LwcBiinKOslZznStT0C8bzhMs14vyJ7o33wSxywJtQ+n0K184t2TQEHXcXaF3fci bRRj6lyVxxaCLqUGwddKKZxECg2A/ZIk5/3lvIsRr/LLSLZ7eIQJJIQkN4ZvIlGM O8CjHcNAVCsWxAAZjwZI5c8zKIymUFTJwQ6yT+lUYbb1HDTL+/t61RTHeigfg55C QLV2WtwOVzh8BX+D7K6Y96lH79FF7eousBJLobDbTdrEONRIdIU7TFeaqX7heORI 7QF3ep32S5JJa2upgKzvjkroaxxvN92YLGy+iE/6 -----END CERTIFICATE-----Generated at Mon Jun 30 01:04:46 2025 by rpki-client