$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31392e302f32342d3234203d3e203535363835.roa File: 3230332e3136312e31392e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: 2EKyQAe9smBx6VvWBToQt+6Et1+aatUEa3lA8j4kpKM= Subject key identifier: E1:11:C5:24:29:BC:1B:CC:68:21:15:58:A9:9D:74:F4:8C:BC:D7:51 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 1ADFB1FDED757D34899D9AA7F08694BD595E6B9E Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31392e302f32342d3234203d3e203535363835.roa Signing time: Mon 24 Feb 2025 06:00:02 +0000 ROA not before: Mon 24 Feb 2025 05:55:02 +0000 ROA not after: Mon 23 Feb 2026 06:00:02 +0000 asID: 55685 IP address blocks: 203.161.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 10:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:df:b1:fd:ed:75:7d:34:89:9d:9a:a7:f0:86:94:bd:59:5e:6b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Feb 24 05:55:02 2025 GMT Not After : Feb 23 06:00:02 2026 GMT Subject: CN=E111C52429BC1BCC68211558A99D74F48CBCD751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:09:2f:4d:ac:0c:a0:5e:01:7b:21:7f:32:ce: 1a:c5:d2:eb:aa:36:1e:e3:cb:b1:50:9e:60:88:47: 32:3c:5a:83:d4:55:d3:2c:b5:60:0b:51:3a:5c:65: df:be:af:8a:28:15:49:57:eb:1f:b8:7f:d2:6e:54: a6:93:6a:44:54:ee:ff:3f:6d:c4:eb:c2:c9:56:00: 85:77:81:45:6e:c0:7b:73:75:5d:02:d7:86:fb:76: 61:a7:83:08:53:bb:ca:3f:b0:88:e8:c4:72:fc:99: f5:20:86:2a:6e:60:6e:f5:76:0c:96:f4:b4:d5:93: 10:86:61:78:52:26:ec:6a:40:02:9c:55:dd:fb:af: 8a:e5:fa:fc:51:c0:e7:23:5a:e8:07:a5:34:ca:ee: 60:71:82:47:01:dd:03:34:0e:b2:ec:42:b4:94:98: 7e:ec:df:72:1b:b3:65:5f:ea:2c:06:d8:ed:49:34: 7c:b3:17:b7:8e:cb:f5:0a:a7:e2:87:31:23:56:bc: 2e:67:88:37:ed:37:c9:cc:32:56:ca:6c:5a:54:34: a5:94:b5:8b:72:ec:38:50:7c:46:82:a6:c7:2f:fd: a6:07:9a:1f:97:e1:57:31:bf:87:75:0c:b1:30:fd: 8e:c1:3f:40:91:a0:57:83:da:98:93:f0:6e:3c:45: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:11:C5:24:29:BC:1B:CC:68:21:15:58:A9:9D:74:F4:8C:BC:D7:51 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31392e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.19.0/24 Signature Algorithm: sha256WithRSAEncryption 73:a5:39:4d:86:93:0d:7f:6c:b8:aa:11:a7:d4:a7:82:04:c1: cd:22:39:4b:8c:28:88:b0:35:59:58:75:2d:32:eb:cf:a2:10: b0:12:e0:b6:24:d8:44:29:20:bd:50:2e:d4:c6:10:e3:6c:49: e1:c4:37:50:f3:f4:d5:01:51:d8:4d:af:70:ea:21:34:a4:4e: f6:42:cc:5a:d8:e5:36:34:cb:0c:66:b6:61:12:d7:c4:3a:02: bd:57:44:57:2c:1a:57:26:de:5c:62:37:6e:e5:db:6b:95:fa: 2a:0a:45:da:0e:c4:58:5d:bc:e0:8f:d1:1e:33:e8:bd:e8:bf: 63:6a:97:28:7b:a6:23:08:70:71:d4:9e:72:48:dc:73:f8:4f: 52:53:f6:a1:8e:54:a3:0d:5b:68:f5:6d:ca:ad:13:bb:ce:6d: 73:53:ad:ed:7f:6a:23:30:3d:1b:3f:38:8b:92:3e:35:16:c9: 8a:d1:b8:fc:5c:ab:62:93:28:df:23:16:9b:57:e9:92:37:30: fa:ed:d4:b1:4d:f3:7a:7a:4b:2e:c4:58:ef:50:92:32:cc:2b: be:24:94:fd:9b:b1:3e:63:d4:3d:1b:d3:95:e2:99:4d:ca:98: 9d:2c:a1:79:5d:5d:0f:c4:f3:ca:0c:87:98:54:df:17:68:b6: 01:58:d1:e8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGt+x/e11fTSJnZqn8IaUvVlea54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTAyMjQwNTU1MDJaFw0yNjAyMjMwNjAwMDJaMDMxMTAvBgNV BAMTKEUxMTFDNTI0MjlCQzFCQ0M2ODIxMTU1OEE5OUQ3NEY0OENCQ0Q3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCS9NrAygXgF7IX8yzhrF0uuq Nh7jy7FQnmCIRzI8WoPUVdMstWALUTpcZd++r4ooFUlX6x+4f9JuVKaTakRU7v8/ bcTrwslWAIV3gUVuwHtzdV0C14b7dmGngwhTu8o/sIjoxHL8mfUghipuYG71dgyW 9LTVkxCGYXhSJuxqQAKcVd37r4rl+vxRwOcjWugHpTTK7mBxgkcB3QM0DrLsQrSU mH7s33Ibs2Vf6iwG2O1JNHyzF7eOy/UKp+KHMSNWvC5niDftN8nMMlbKbFpUNKWU tYty7DhQfEaCpscv/aYHmh+X4Vcxv4d1DLEw/Y7BP0CRoFeD2piT8G48RduTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU4RHFJCm8G8xoIRVYqZ109Iy811EwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMzJlMzEzNjMxMmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuhEzANBgkqhkiG 9w0BAQsFAAOCAQEAc6U5TYaTDX9suKoRp9SnggTBzSI5S4woiLA1WVh1LTLrz6IQ sBLgtiTYRCkgvVAu1MYQ42xJ4cQ3UPP01QFR2E2vcOohNKRO9kLMWtjlNjTLDGa2 YRLXxDoCvVdEVywaVybeXGI3buXba5X6KgpF2g7EWF284I/RHjPovei/Y2qXKHum IwhwcdSeckjcc/hPUlP2oY5Uow1baPVtyq0Tu85tc1Ot7X9qIzA9Gz84i5I+NRbJ itG4/FyrYpMo3yMWm1fpkjcw+u3UsU3zenpLLsRY71CSMswrviSU/ZuxPmPUPRvT leKZTcqYnSyheV1dD8TzygyHmFTfF2i2AVjR6A== -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:31 2025 by rpki-client