$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa File: 3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (raw, json) Hash identifier: dCgYQVEarcna28gmSfUk7VoXXuxd4x7SFqSDwv0sDbY= Subject key identifier: 2C:3A:D6:EF:50:57:18:E4:E5:49:00:74:09:A9:9A:C0:BD:EC:40:E9 Certificate issuer: /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE Certificate serial: 676E57654501EE1F81C85348CC5BEAE202A6FAD9 Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa Signing time: Mon 02 Jun 2025 02:02:55 +0000 ROA not before: Mon 02 Jun 2025 01:57:55 +0000 ROA not after: Mon 01 Jun 2026 02:02:55 +0000 asID: 18153 IP address blocks: 202.72.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6e:57:65:45:01:ee:1f:81:c8:53:48:cc:5b:ea:e2:02:a6:fa:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE Validity Not Before: Jun 2 01:57:55 2025 GMT Not After : Jun 1 02:02:55 2026 GMT Subject: CN=2C3AD6EF505718E4E549007409A99AC0BDEC40E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:5b:d3:87:e9:54:3a:33:b8:7d:3b:2a:78: ee:ba:f9:e7:d8:e6:5d:66:8c:55:3c:db:ee:8f:8a: 95:32:27:29:93:dd:f1:51:c5:51:96:9c:6d:55:01: e1:15:39:16:01:0c:16:65:a2:47:04:04:bc:97:98: 56:e7:90:ff:bc:ad:69:43:8c:6d:eb:2b:ab:55:cf: ce:57:aa:d7:6f:d4:b1:0f:75:e0:f3:2d:95:3e:7a: d1:10:4c:69:7f:37:c2:06:e1:8d:35:0a:50:56:92: 28:95:37:64:71:ae:01:d8:5e:0e:77:93:77:fd:f7: b9:ad:41:bc:80:42:e3:52:75:7f:0c:c7:3a:28:73: ed:fc:de:10:23:b5:c5:7e:76:3c:38:e1:b1:68:d1: 43:79:69:12:37:af:ea:d7:89:ff:1d:65:75:8f:04: db:40:65:df:e1:ca:31:c1:55:74:5a:cd:37:dd:e3: 1a:78:ea:14:27:c4:49:7a:d2:84:c2:b5:ae:cc:32: 61:95:1a:f4:1a:63:d0:23:22:8c:c5:7d:be:fe:60: de:74:82:69:70:a4:eb:e9:38:eb:19:d5:4a:4b:fc: a7:5b:62:44:0a:d5:2a:38:28:c7:d5:02:58:3b:0f: ca:34:05:16:64:e3:20:13:9d:0e:fa:82:a8:c7:e0: 36:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3A:D6:EF:50:57:18:E4:E5:49:00:74:09:A9:9A:C0:BD:EC:40:E9 X509v3 Authority Key Identifier: keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.72.206.0/24 Signature Algorithm: sha256WithRSAEncryption 71:31:71:24:30:f2:76:92:ee:e9:15:cc:70:22:da:37:69:5d: 73:ad:9c:08:f1:21:42:97:1a:6f:23:8b:6b:14:29:47:3f:e9: 53:0a:97:ca:f5:5c:83:78:17:1c:7f:be:f3:81:75:f3:67:1a: 63:8d:29:1d:9c:46:e9:b7:c3:d5:7c:86:a0:21:80:47:1a:40: 87:2e:03:1c:90:98:63:13:5a:14:f0:c5:18:3c:85:4b:e4:e5: 60:83:c4:84:69:c8:ef:7e:21:f5:94:7e:a9:1b:f8:83:ca:c5: 1e:31:7d:83:39:fd:78:2e:c3:31:08:8a:98:63:92:47:ad:21: cf:32:d2:9e:c1:31:f9:0c:56:95:6a:8d:3a:34:ea:01:25:35: bb:80:90:82:79:cc:ce:b6:ab:a3:66:d7:79:85:e2:4e:02:68: dd:46:4b:26:3a:d7:b3:71:90:ae:57:4f:0e:3c:a0:b1:b1:64: ce:0e:5e:4c:14:b5:ee:46:bc:51:10:dc:63:a4:fd:a0:a6:1e: 26:32:80:99:42:d2:25:e8:07:1f:a2:66:a8:e5:00:5f:a2:79: a2:34:0f:f1:d6:ec:65:ba:b0:1d:89:8e:f9:89:ea:38:45:33: 74:f4:d9:79:98:a0:4c:c6:3e:21:e4:01:11:69:ca:41:b7:69: a4:61:47:f7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZ25XZUUB7h+ByFNIzFvq4gKm+tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4 Rjc4ODFFRTAeFw0yNTA2MDIwMTU3NTVaFw0yNjA2MDEwMjAyNTVaMDMxMTAvBgNV BAMTKDJDM0FENkVGNTA1NzE4RTRFNTQ5MDA3NDA5QTk5QUMwQkRFQzQwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIVvTh+lUOjO4fTsqeO66+efY 5l1mjFU82+6PipUyJymT3fFRxVGWnG1VAeEVORYBDBZlokcEBLyXmFbnkP+8rWlD jG3rK6tVz85Xqtdv1LEPdeDzLZU+etEQTGl/N8IG4Y01ClBWkiiVN2RxrgHYXg53 k3f997mtQbyAQuNSdX8Mxzooc+383hAjtcV+djw44bFo0UN5aRI3r+rXif8dZXWP BNtAZd/hyjHBVXRazTfd4xp46hQnxEl60oTCta7MMmGVGvQaY9AjIozFfb7+YN50 gmlwpOvpOOsZ1UpL/KdbYkQK1So4KMfVAlg7D8o0BRZk4yATnQ76gqjH4DZbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULDrW71BXGOTlSQB0CamawL3sQOkwHwYDVR0j BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0 MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4 ODFFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04 NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzODMxMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIzjANBgkqhkiG 9w0BAQsFAAOCAQEAcTFxJDDydpLu6RXMcCLaN2ldc62cCPEhQpcabyOLaxQpRz/p UwqXyvVcg3gXHH++84F182caY40pHZxG6bfD1XyGoCGARxpAhy4DHJCYYxNaFPDF GDyFS+TlYIPEhGnI734h9ZR+qRv4g8rFHjF9gzn9eC7DMQiKmGOSR60hzzLSnsEx +QxWlWqNOjTqASU1u4CQgnnMzraro2bXeYXiTgJo3UZLJjrXs3GQrldPDjygsbFk zg5eTBS17ka8URDcY6T9oKYeJjKAmULSJegHH6JmqOUAX6J5ojQP8dbsZbqwHYmO +YnqOEUzdPTZeZigTMY+IeQBEWnKQbdppGFH9w== -----END CERTIFICATE-----Generated at Mon Jun 16 10:37:23 2025 by rpki-client