$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 08dE8+5h5VM8IAQN0ml1YiJAjJEdE4Qbpafz+/inBuI= Subject key identifier: 16:B6:AF:3C:ED:C9:F9:AD:63:61:6B:16:3C:F4:68:4E:9F:D2:10:0F Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 68D4B753F346595051D9C254CFCAE360B95F5CFB Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa Signing time: Tue 10 Jun 2025 03:39:35 +0000 ROA not before: Tue 10 Jun 2025 03:34:35 +0000 ROA not after: Tue 09 Jun 2026 03:39:35 +0000 asID: 63859 IP address blocks: 202.152.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 18:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d4:b7:53:f3:46:59:50:51:d9:c2:54:cf:ca:e3:60:b9:5f:5c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Jun 10 03:34:35 2025 GMT Not After : Jun 9 03:39:35 2026 GMT Subject: CN=16B6AF3CEDC9F9AD63616B163CF4684E9FD2100F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:27:b5:82:99:26:fa:f6:96:a1:c5:97:19:cd: 40:01:e0:2e:3a:5f:11:e0:80:99:cd:cd:df:9c:cb: fc:a9:b5:f7:00:b8:5b:95:fe:78:11:92:f2:40:84: 6a:aa:5b:85:b0:60:0f:7e:bf:a8:d4:e8:7f:bc:bb: ce:2f:04:96:40:2b:e0:a9:87:52:ab:b6:f1:03:4a: a0:49:7e:3d:14:e1:62:f5:b9:c3:c1:74:9c:68:60: d4:8a:55:2a:5b:9b:f0:37:a8:f4:fb:f5:c0:48:a3: 26:40:f4:7c:06:b6:6c:83:53:77:2d:b1:89:af:4a: 68:97:7c:80:18:d4:c6:96:6b:27:c2:96:b8:1f:e6: 28:99:2f:22:b3:83:ac:7f:6e:6c:b3:56:e8:5a:33: b8:e0:fb:fb:2d:2a:cd:52:f1:70:dc:6c:de:bd:30: 86:12:be:6f:d8:b5:d9:78:7d:e4:ff:d1:f4:bf:14: ab:d9:ef:39:e8:08:87:3d:cc:bf:71:65:e2:f5:13: 4a:c7:22:7f:0e:87:67:9c:e4:a2:59:df:fe:70:fb: fd:9c:99:dd:80:d1:12:0a:2e:4c:e6:b0:65:52:8f: 72:70:86:8e:da:63:0a:18:cb:f5:1b:ce:cc:5c:37: 90:54:af:66:0b:6a:b4:7e:b6:df:52:79:64:6b:a3: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B6:AF:3C:ED:C9:F9:AD:63:61:6B:16:3C:F4:68:4E:9F:D2:10:0F X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3139382e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.198.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:8f:5d:5f:11:2b:76:ee:14:4f:67:fc:e4:d0:64:8e:9a:59: 6b:b1:85:5b:2d:3a:a8:9e:03:27:c3:fc:40:cb:ef:79:c6:78: eb:71:30:80:f7:c4:38:7d:4e:ab:d7:58:3f:0e:2b:c9:c7:9a: 77:8f:a9:d3:e3:f1:7e:71:f4:17:fd:63:24:28:05:58:bf:fa: 9c:b1:1c:90:e4:a9:41:73:5d:c1:d4:33:cb:20:e9:73:a2:c6: d8:a8:fc:5b:b1:16:71:95:5d:bf:07:7c:aa:38:68:cf:18:4a: ba:ce:a9:0c:5b:62:0e:4e:81:52:76:16:9f:16:4e:40:53:91: 6c:97:aa:cd:94:d0:be:d2:1d:33:91:c4:9b:78:dd:e9:e6:39: 9e:bf:e4:35:69:b9:45:fa:86:ad:21:e1:89:4b:cf:cc:64:59: 53:15:e5:d0:04:e0:85:03:66:4a:7b:7d:82:8d:3a:2e:7d:4b: 5b:24:a5:dc:c5:ea:6d:f0:e2:90:d9:35:e0:f0:e0:08:aa:b7: a7:06:e7:5f:a7:cc:7a:66:8b:5b:28:ab:6c:63:f1:64:f4:5b: f7:ff:51:19:c9:71:80:66:c0:94:16:ba:46:a7:a6:a2:7d:0a: cc:29:6c:05:f9:25:78:89:ad:f8:ea:5f:40:b4:ef:00:01:9c: 0a:de:ec:f3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaNS3U/NGWVBR2cJUz8rjYLlfXPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA2MTAwMzM0MzVaFw0yNjA2MDkwMzM5MzVaMDMxMTAvBgNV BAMTKDE2QjZBRjNDRURDOUY5QUQ2MzYxNkIxNjNDRjQ2ODRFOUZEMjEwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcJ7WCmSb69pahxZcZzUAB4C46 XxHggJnNzd+cy/yptfcAuFuV/ngRkvJAhGqqW4WwYA9+v6jU6H+8u84vBJZAK+Cp h1KrtvEDSqBJfj0U4WL1ucPBdJxoYNSKVSpbm/A3qPT79cBIoyZA9HwGtmyDU3ct sYmvSmiXfIAY1MaWayfClrgf5iiZLyKzg6x/bmyzVuhaM7jg+/stKs1S8XDcbN69 MIYSvm/Ytdl4feT/0fS/FKvZ7znoCIc9zL9xZeL1E0rHIn8Oh2ec5KJZ3/5w+/2c md2A0RIKLkzmsGVSj3Jwho7aYwoYy/UbzsxcN5BUr2YLarR+tt9SeWRro+fHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFravPO3J+a1jYWsWPPRoTp/SEA8wHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjGMA0GCSqG SIb3DQEBCwUAA4IBAQBOj11fESt27hRPZ/zk0GSOmllrsYVbLTqongMnw/xAy+95 xnjrcTCA98Q4fU6r11g/DivJx5p3j6nT4/F+cfQX/WMkKAVYv/qcsRyQ5KlBc13B 1DPLIOlzosbYqPxbsRZxlV2/B3yqOGjPGEq6zqkMW2IOToFSdhafFk5AU5Fsl6rN lNC+0h0zkcSbeN3p5jmev+Q1ablF+oatIeGJS8/MZFlTFeXQBOCFA2ZKe32CjTou fUtbJKXcxept8OKQ2TXg8OAIqrenBudfp8x6ZotbKKtsY/Fk9Fv3/1EZyXGAZsCU FrpGp6aifQrMKWwF+SV4ia346l9AtO8AAZwK3uzz -----END CERTIFICATE-----Generated at Wed Jun 18 01:52:58 2025 by rpki-client