$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa File: 3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: +yojSrIhe0qfYYoNaS+bjIGGRqdco9vP3EvqLvXSniA= Subject key identifier: 64:D8:B0:BF:F0:86:D1:89:C9:3C:E1:3B:A1:96:5B:D2:C0:1F:5B:54 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 2C8770B0D2EFE41ABEE6C2B00BAC76A68CA68780 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa Signing time: Tue 10 Jun 2025 03:44:28 +0000 ROA not before: Tue 10 Jun 2025 03:39:28 +0000 ROA not after: Tue 09 Jun 2026 03:44:28 +0000 asID: 63859 IP address blocks: 202.152.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 18:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:87:70:b0:d2:ef:e4:1a:be:e6:c2:b0:0b:ac:76:a6:8c:a6:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Jun 10 03:39:28 2025 GMT Not After : Jun 9 03:44:28 2026 GMT Subject: CN=64D8B0BFF086D189C93CE13BA1965BD2C01F5B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:3f:65:e7:9b:89:d5:28:fa:44:86:a2:fa: 7b:f0:d8:78:da:74:ba:60:f4:51:4c:06:69:9c:73: 68:5f:ca:6e:e7:c7:43:c3:ee:6f:37:3a:08:a5:4c: 41:31:68:0e:2c:50:e0:88:25:ca:8c:1d:9f:b0:84: 77:25:6f:c7:f7:02:17:38:fc:a4:a6:b9:05:f6:d2: 0b:67:b4:5e:23:42:b8:e7:8c:27:15:13:9a:9b:82: ca:a1:c7:54:85:f1:2a:0c:92:ab:07:2e:7e:a3:03: 5f:99:b1:0b:6a:e2:30:d5:b3:27:6f:fa:2b:d0:52: c5:a2:f7:62:34:31:49:0e:a4:71:5a:38:23:9e:16: 2e:58:c3:ce:e7:4e:03:20:ea:b7:15:bf:13:68:1b: ff:55:e1:cb:57:ba:e3:e9:0c:34:0f:de:df:74:a0: 84:c6:3e:10:7a:46:90:34:c1:26:7f:0e:af:3a:9c: 82:3a:8d:c5:22:7a:d6:01:05:6e:2d:09:35:f8:db: 76:b9:54:dd:d7:26:bb:77:5b:3a:19:df:db:07:d6: 65:e4:50:a6:cb:a9:d8:6f:2a:9a:27:83:63:79:a5: 28:b9:4d:23:8a:ae:1a:da:5a:5a:27:21:51:76:12: 34:51:43:b1:ac:d7:c5:49:32:b2:d2:6a:8e:3a:66: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:B0:BF:F0:86:D1:89:C9:3C:E1:3B:A1:96:5B:D2:C0:1F:5B:54 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230332e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.152.203.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:63:f7:ca:5c:8e:c3:f7:21:ce:25:47:36:b8:ec:24:4d:c0: ea:3c:cd:30:c9:ff:96:ef:56:3c:3a:46:27:1f:d4:02:38:0c: 23:f0:a0:4d:1b:89:ab:c6:39:5e:43:68:6c:77:27:04:37:f0: 4e:47:6b:80:d0:97:1e:a4:42:3d:09:ed:a9:f7:72:7c:5d:ec: 1f:4c:e2:6e:66:05:1a:5f:14:39:99:6a:69:af:b4:85:56:f1: be:a2:46:d4:37:d0:be:b5:51:ec:83:78:cf:29:27:8a:dd:ea: df:df:97:0e:7a:3f:b8:f6:ba:f3:27:64:86:b2:50:48:ee:55: 6a:24:c8:fc:12:7a:53:bd:0a:43:e9:92:39:21:63:94:5b:c0: 87:e6:3e:7b:de:fa:a5:fd:03:bd:d4:30:df:54:85:84:70:14: fb:8d:37:d9:11:ff:dc:61:15:99:47:d1:91:47:e8:c7:38:11: 88:eb:44:1b:56:eb:e0:20:12:a9:04:a2:02:d6:b4:04:cd:c3: 58:18:56:a8:1c:45:35:59:59:cb:c8:d2:9b:fd:e4:3a:48:c5: 03:1e:a0:e6:c1:27:0a:ba:e0:d1:4f:58:d9:38:bb:49:94:07: a3:23:46:42:94:e5:2f:d8:46:6e:e8:45:ef:ec:3e:15:dd:f6: 68:14:bc:64 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULIdwsNLv5Bq+5sKwC6x2poymh4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA2MTAwMzM5MjhaFw0yNjA2MDkwMzQ0MjhaMDMxMTAvBgNV BAMTKDY0RDhCMEJGRjA4NkQxODlDOTNDRTEzQkExOTY1QkQyQzAxRjVCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImz9l55uJ1Sj6RIai+nvw2Hja dLpg9FFMBmmcc2hfym7nx0PD7m83OgilTEExaA4sUOCIJcqMHZ+whHclb8f3Ahc4 /KSmuQX20gtntF4jQrjnjCcVE5qbgsqhx1SF8SoMkqsHLn6jA1+ZsQtq4jDVsydv +ivQUsWi92I0MUkOpHFaOCOeFi5Yw87nTgMg6rcVvxNoG/9V4ctXuuPpDDQP3t90 oITGPhB6RpA0wSZ/Dq86nII6jcUietYBBW4tCTX423a5VN3XJrt3WzoZ39sH1mXk UKbLqdhvKpong2N5pSi5TSOKrhraWlonIVF2EjRRQ7Gs18VJMrLSao46ZgtXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZNiwv/CG0YnJPOE7oZZb0sAfW1QwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjLMA0GCSqG SIb3DQEBCwUAA4IBAQAOY/fKXI7D9yHOJUc2uOwkTcDqPM0wyf+W71Y8OkYnH9QC OAwj8KBNG4mrxjleQ2hsdycEN/BOR2uA0JcepEI9Ce2p93J8XewfTOJuZgUaXxQ5 mWppr7SFVvG+okbUN9C+tVHsg3jPKSeK3erf35cOej+49rrzJ2SGslBI7lVqJMj8 EnpTvQpD6ZI5IWOUW8CH5j573vql/QO91DDfVIWEcBT7jTfZEf/cYRWZR9GRR+jH OBGI60QbVuvgIBKpBKIC1rQEzcNYGFaoHEU1WVnLyNKb/eQ6SMUDHqDmwScKuuDR T1jZOLtJlAejI0ZClOUv2EZu6EXv7D4V3fZoFLxk -----END CERTIFICATE-----Generated at Wed Jun 18 01:55:08 2025 by rpki-client