$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa File: 3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa (raw, json) Hash identifier: jh2VcZkZ1Js0SlE5To/S6wp+fTe6izuj1q8Rf8qNV5g= Subject key identifier: E0:B6:67:68:EA:4E:F4:64:CA:57:7C:AB:C8:02:65:56:7E:B2:2D:27 Certificate issuer: /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Certificate serial: 6D10B905D32DAF018E863A5A8753ACBDBC0C8845 Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa Signing time: Mon 02 Jun 2025 02:04:13 +0000 ROA not before: Mon 02 Jun 2025 01:59:13 +0000 ROA not after: Mon 01 Jun 2026 02:04:13 +0000 asID: 38156 IP address blocks: 203.190.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:10:b9:05:d3:2d:af:01:8e:86:3a:5a:87:53:ac:bd:bc:0c:88:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4 Validity Not Before: Jun 2 01:59:13 2025 GMT Not After : Jun 1 02:04:13 2026 GMT Subject: CN=E0B66768EA4EF464CA577CABC80265567EB22D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e1:e2:c2:56:44:19:12:6e:cd:e0:00:73:8f: f4:94:73:71:74:c8:65:6e:1d:f9:52:a7:ce:16:1b: 4b:3e:9b:e4:ff:82:01:28:e3:d2:03:69:85:47:b4: 6b:e7:f5:a0:98:8f:94:5c:c6:b7:86:0e:3b:d9:3f: e1:71:cc:d0:4e:49:d2:51:d0:e2:b8:11:d6:48:13: 78:7d:34:87:4e:5f:bd:19:55:68:1f:d5:46:55:46: fb:08:80:58:c6:4c:7c:63:89:74:72:6d:1e:23:4d: ca:00:78:74:1c:ae:89:ab:15:ae:5d:59:03:96:10: 2b:0a:67:93:e4:3a:7c:4d:ed:7e:84:9a:97:09:95: 1e:54:ed:fb:4a:3c:0a:28:8a:e9:6b:73:70:68:a5: e5:39:8a:7c:d1:5a:b2:a9:78:c7:3f:a3:de:ba:f2: d9:3c:32:39:f0:21:23:7d:d6:af:d9:94:47:ee:9b: 76:8f:89:f4:ed:1e:9b:10:d1:b9:75:47:f8:01:48: 8d:1b:fa:31:90:d3:c6:49:e2:dd:50:1e:f8:dd:8a: 80:6d:e7:95:61:13:19:7b:57:3c:d3:19:b8:f5:58: bc:74:1e:77:c7:23:6f:ef:f6:c0:88:dd:60:9d:24: 46:de:c1:bc:42:5f:13:10:1f:d1:ce:65:b6:81:73: 0b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B6:67:68:EA:4E:F4:64:CA:57:7C:AB:C8:02:65:56:7E:B2:2D:27 X509v3 Authority Key Identifier: keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131332e302f32342d3234203d3e203338313536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.113.0/24 Signature Algorithm: sha256WithRSAEncryption ac:47:e2:f6:5c:1f:e6:b1:14:30:c4:c6:67:4a:f8:38:dd:6a: 9e:ba:a6:ab:0f:93:da:72:a8:60:21:70:7e:cd:a0:a3:e8:5d: 38:3e:8d:6e:3c:aa:80:39:ab:bd:e4:90:67:ea:8e:0a:2d:54: 73:27:fb:f0:11:99:f9:79:2a:28:d4:04:7c:0e:2b:6b:86:58: 81:5f:86:75:9a:75:96:1f:da:bd:7e:4e:e0:78:b2:2b:df:c8: b5:4b:62:c7:96:fb:b5:4f:fd:30:b0:27:c8:69:30:80:b0:8d: fe:04:40:35:43:86:95:b6:df:e6:3d:d7:b0:cf:11:ca:41:dc: 41:e8:ec:31:47:6b:d4:42:4b:fa:0b:c6:02:fb:3e:17:52:7e: f0:a8:f0:dc:a8:4e:1d:40:04:ca:df:54:e8:bd:e2:6d:4b:78: 9b:0b:84:16:54:11:40:e9:49:d0:64:fe:e4:23:f4:23:aa:9e: ea:21:26:9a:7a:14:19:c0:50:92:35:a9:a9:3b:9a:9c:13:fe: 40:92:f2:ec:58:53:8d:49:02:b3:57:b7:e8:f2:d2:b2:e8:8f: 2b:06:46:2c:7d:96:ed:4d:87:5b:b9:3f:1d:a9:e6:6d:ed:89: b0:cd:d1:29:44:13:c7:09:2e:7f:4d:d1:4b:90:68:89:83:b2: 7b:ca:1d:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbRC5BdMtrwGOhjpah1OsvbwMiEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2 QTRENThDNDAeFw0yNTA2MDIwMTU5MTNaFw0yNjA2MDEwMjA0MTNaMDMxMTAvBgNV BAMTKEUwQjY2NzY4RUE0RUY0NjRDQTU3N0NBQkM4MDI2NTU2N0VCMjJEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4eLCVkQZEm7N4ABzj/SUc3F0 yGVuHflSp84WG0s+m+T/ggEo49IDaYVHtGvn9aCYj5RcxreGDjvZP+FxzNBOSdJR 0OK4EdZIE3h9NIdOX70ZVWgf1UZVRvsIgFjGTHxjiXRybR4jTcoAeHQcromrFa5d WQOWECsKZ5PkOnxN7X6EmpcJlR5U7ftKPAooiulrc3BopeU5inzRWrKpeMc/o966 8tk8MjnwISN91q/ZlEfum3aPifTtHpsQ0bl1R/gBSI0b+jGQ08ZJ4t1QHvjdioBt 55VhExl7VzzTGbj1WLx0HnfHI2/v9sCI3WCdJEbewbxCXxMQH9HOZbaBcwttAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4LZnaOpO9GTKV3yryAJlVn6yLScwHwYDVR0j BBgwFoAUW9D9AOuKzPUJKfaw9Wx1AGpNWMQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWQzZDIyYS0zMzhiLTQzMDItOTNmNC1jMDIxZWE2YWQ1NDgvMC81QkQwRkQwMEVC OEFDQ0Y1MDkyOUY2QjBGNTZDNzUwMDZBNEQ1OEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMEZEMDBFQjhBQ0NGNTA5MjlGNkIwRjU2Qzc1MDA2QTRE NThDNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1ZDNkMjJhLTMzOGItNDMwMi05 M2Y0LWMwMjFlYTZhZDU0OC8wLzMyMzAzMzJlMzEzOTMwMmUzMTMxMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy75xMA0GCSqG SIb3DQEBCwUAA4IBAQCsR+L2XB/msRQwxMZnSvg43WqeuqarD5PacqhgIXB+zaCj 6F04Po1uPKqAOau95JBn6o4KLVRzJ/vwEZn5eSoo1AR8DitrhliBX4Z1mnWWH9q9 fk7geLIr38i1S2LHlvu1T/0wsCfIaTCAsI3+BEA1Q4aVtt/mPdewzxHKQdxB6Owx R2vUQkv6C8YC+z4XUn7wqPDcqE4dQATK31ToveJtS3ibC4QWVBFA6UnQZP7kI/Qj qp7qISaaehQZwFCSNampO5qcE/5AkvLsWFONSQKzV7fo8tKy6I8rBkYsfZbtTYdb uT8dqeZt7YmwzdEpRBPHCS5/TdFLkGiJg7J7yh0A -----END CERTIFICATE-----Generated at Mon Jun 16 14:51:17 2025 by rpki-client