$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: NITrN6jD7nr5oOwLkcfYoDWIPHvMh97xHgy4U3OmoE8= Subject key identifier: 73:4B:2B:03:B1:1F:4D:0F:F2:83:B1:D3:DE:AD:33:7D:DD:47:65:C7 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 281A9B3C30A35B188956F756DCDF5DB14D0B0338 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa Signing time: Tue 10 Jun 2025 03:35:48 +0000 ROA not before: Tue 10 Jun 2025 03:30:48 +0000 ROA not after: Tue 09 Jun 2026 03:35:48 +0000 asID: 63859 IP address blocks: 202.152.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1a:9b:3c:30:a3:5b:18:89:56:f7:56:dc:df:5d:b1:4d:0b:03:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Jun 10 03:30:48 2025 GMT Not After : Jun 9 03:35:48 2026 GMT Subject: CN=734B2B03B11F4D0FF283B1D3DEAD337DDD4765C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0e:c4:6b:b9:0f:42:6f:86:ae:e9:df:82:e9: 97:11:cd:17:7b:e7:d0:fa:f7:9a:a6:07:94:26:4c: 60:c1:d6:9b:70:88:00:ea:43:81:30:83:53:24:74: 5d:d6:62:55:bc:e0:ef:74:81:c8:2d:a5:9f:0a:36: 80:b7:d1:15:19:a3:0a:50:ea:e0:55:ea:ff:6f:28: 85:28:da:4e:d6:0c:fb:3d:23:55:72:61:3e:79:b0: 43:f2:fd:5b:b3:5a:55:d7:ce:16:b8:a6:78:77:a5: b8:4e:a5:be:58:c7:de:f4:b5:a4:1f:90:84:db:63: 40:c0:bd:db:37:fc:dc:e2:28:a5:09:cb:67:f1:a2: 11:dc:a0:49:75:b2:49:26:98:fa:2d:9a:f6:3e:cc: 16:e0:2b:65:3b:da:df:55:a8:8f:20:62:06:f1:df: 85:d7:7d:e6:16:c4:8b:5e:28:74:12:0d:8b:40:75: 91:5a:41:b5:2b:6a:60:d1:51:2a:29:a6:76:d1:40: f2:61:b6:ef:7b:ff:47:8d:dc:8b:98:6e:c6:22:6b: e7:9a:13:49:5f:83:3f:b1:2a:51:ec:d1:f6:0f:38: 1f:96:fb:2c:0a:3c:c5:83:97:4c:48:e9:2b:3c:0a: 68:0e:67:b6:2c:15:14:ae:8e:36:1b:f8:59:c9:2d: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4B:2B:03:B1:1F:4D:0F:F2:83:B1:D3:DE:AD:33:7D:DD:47:65:C7 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139342e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.194.0/24 Signature Algorithm: sha256WithRSAEncryption 24:2f:56:e1:14:81:3a:a2:94:2c:86:a7:28:53:0f:8c:d3:ad: 38:eb:f8:2d:29:be:d6:79:c6:b3:4a:66:a1:0b:ad:a9:bd:07: 01:6c:d8:f7:7d:3b:08:d0:7e:5a:e5:94:7d:81:62:ac:4a:25: 54:c4:75:27:e2:94:1c:e0:fb:51:0b:b0:73:c0:3f:48:c0:d5: 54:b9:52:cf:3d:74:9b:d1:3e:5b:bd:02:eb:f1:25:9a:dc:58: 02:e1:f1:cb:f2:1a:3e:69:4d:9a:d7:7b:6c:b7:f6:aa:37:48: de:13:51:6e:93:d9:c1:3c:d5:04:46:d9:60:3d:ef:c0:af:c8: 13:0e:3a:c2:21:e7:4b:c6:0d:5b:00:82:ae:6a:3d:4d:d4:29: 6b:39:77:69:eb:d5:db:ef:25:11:49:ac:ed:47:5f:9d:a7:87: 7d:d3:8b:57:12:b2:ba:26:9c:58:43:b5:13:63:93:a2:18:e1: ad:f8:f3:3c:78:1b:41:83:b0:4a:ab:70:70:76:6c:3e:81:03: 8f:c7:24:6c:86:0e:66:b8:9b:b0:48:05:ee:7d:48:82:ab:50: d2:68:a0:a9:f6:da:b9:fd:b7:56:a9:cd:70:aa:82:3d:30:19: 0d:50:77:86:92:47:b6:54:ec:d6:8e:c3:d1:86:e5:73:40:b4: e0:4d:6b:e1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKBqbPDCjWxiJVvdW3N9dsU0LAzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA2MTAwMzMwNDhaFw0yNjA2MDkwMzM1NDhaMDMxMTAvBgNV BAMTKDczNEIyQjAzQjExRjREMEZGMjgzQjFEM0RFQUQzMzdEREQ0NzY1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4DsRruQ9Cb4au6d+C6ZcRzRd7 59D695qmB5QmTGDB1ptwiADqQ4Ewg1MkdF3WYlW84O90gcgtpZ8KNoC30RUZowpQ 6uBV6v9vKIUo2k7WDPs9I1VyYT55sEPy/VuzWlXXzha4pnh3pbhOpb5Yx970taQf kITbY0DAvds3/NziKKUJy2fxohHcoEl1skkmmPotmvY+zBbgK2U72t9VqI8gYgbx 34XXfeYWxIteKHQSDYtAdZFaQbUramDRUSoppnbRQPJhtu97/0eN3IuYbsYia+ea E0lfgz+xKlHs0fYPOB+W+ywKPMWDl0xI6Ss8CmgOZ7YsFRSujjYb+FnJLREZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUc0srA7EfTQ/yg7HT3q0zfd1HZccwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjCMA0GCSqG SIb3DQEBCwUAA4IBAQAkL1bhFIE6opQshqcoUw+M06046/gtKb7WecazSmahC62p vQcBbNj3fTsI0H5a5ZR9gWKsSiVUxHUn4pQc4PtRC7BzwD9IwNVUuVLPPXSb0T5b vQLr8SWa3FgC4fHL8ho+aU2a13tst/aqN0jeE1Fuk9nBPNUERtlgPe/Ar8gTDjrC IedLxg1bAIKuaj1N1ClrOXdp69Xb7yURSaztR1+dp4d904tXErK6JpxYQ7UTY5Oi GOGt+PM8eBtBg7BKq3Bwdmw+gQOPxyRshg5muJuwSAXufUiCq1DSaKCp9tq5/bdW qc1wqoI9MBkNUHeGkke2VOzWjsPRhuVzQLTgTWvh -----END CERTIFICATE-----Generated at Tue Jun 17 08:16:32 2025 by rpki-client