$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa File: 3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa (raw, json) Hash identifier: 4azYJIfIwLBN6QOXYJQcD/4KChhMtRRTK+Od9tKQdq8= Subject key identifier: 3F:B9:3A:D1:90:61:AA:AF:6B:6C:36:DD:62:22:F8:2E:45:7F:05:04 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 101EEFE3C58B3F63B9F78EAFAABA013566CF083E Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa Signing time: Fri 06 Dec 2024 10:00:01 +0000 ROA not before: Fri 06 Dec 2024 09:55:01 +0000 ROA not after: Fri 05 Dec 2025 10:00:01 +0000 asID: 141607 IP address blocks: 202.154.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1e:ef:e3:c5:8b:3f:63:b9:f7:8e:af:aa:ba:01:35:66:cf:08:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Dec 6 09:55:01 2024 GMT Not After : Dec 5 10:00:01 2025 GMT Subject: CN=3FB93AD19061AAAF6B6C36DD6222F82E457F0504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:4c:21:87:37:50:f2:a6:d9:f6:9c:4a:ec: c8:a3:59:e7:6a:bb:96:2b:68:f8:d3:93:5c:8c:aa: 3e:81:0d:49:39:e2:6e:e8:b1:da:8b:61:64:0b:d9: 24:94:f0:6c:45:7a:97:f7:4d:98:20:4b:5b:c6:b1: e2:39:4a:8f:63:6c:79:a3:32:19:eb:b8:bd:68:1b: 00:a3:2c:90:94:5c:f3:a7:d6:23:c8:d1:85:7e:70: 24:09:43:cc:43:8e:ef:18:88:0c:ab:06:06:1a:a3: 11:27:2e:3e:44:64:d1:81:e8:06:b5:ef:a7:56:a9: 72:70:e8:51:3b:35:49:3b:40:40:d2:31:e5:66:4e: 5b:d1:a6:4b:f3:c6:c8:65:1f:5c:58:d9:2e:45:28: fa:ca:82:cd:30:40:4e:1a:db:4e:58:45:c2:17:cd: d4:09:9f:d9:5b:01:ea:60:4f:72:b0:98:55:26:f9: 3c:3d:51:04:e5:d9:4c:f5:b6:ed:e6:f7:72:78:44: 08:9d:3c:69:3c:66:06:df:a1:d5:a7:b6:54:50:a6: 63:36:2e:60:52:eb:16:ac:21:53:e1:db:b7:de:da: 04:3e:3f:6a:e6:ea:0d:e6:e3:76:f0:8e:5c:12:5d: 2e:d8:8f:3b:28:0e:a4:74:12:27:88:ca:e0:33:3c: 57:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B9:3A:D1:90:61:AA:AF:6B:6C:36:DD:62:22:F8:2E:45:7F:05:04 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.36.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:08:51:8f:cb:55:ec:54:57:c2:e3:64:3e:90:7f:8a:63:c8: 89:b5:99:0d:52:95:6c:f7:4c:d6:38:86:0e:65:ff:d2:52:b5: 3a:a7:87:b7:4a:49:2f:78:b0:ac:6f:83:57:a7:b9:c2:5e:c7: 54:bb:53:77:7e:ec:34:df:09:b9:e3:1c:6c:1d:c3:af:34:20: 19:05:f4:19:8e:87:4d:ec:bf:35:94:43:5c:af:75:a3:8d:4a: a4:5a:94:06:b1:69:2a:bf:5b:56:ed:31:0f:17:1a:f5:43:03: 5b:38:38:a0:a4:0d:23:83:be:93:2e:43:d2:c2:b3:a4:41:aa: 3c:ff:e1:1f:33:ff:8d:71:62:c7:d9:cc:54:a5:b9:e5:05:bf: 15:bb:6a:4a:e6:5c:2f:32:5f:98:d2:76:c2:89:16:5f:eb:6e: 9f:ed:55:66:16:cf:b4:8e:69:fe:80:ee:33:5f:ec:97:b8:48: 4d:0b:1b:0f:e5:0a:ef:f8:18:46:23:56:aa:fd:dc:e1:34:fb: a9:7f:5a:ec:c4:8b:7e:0b:60:04:61:b6:52:39:74:4d:b0:fe: 69:bc:4b:2f:cc:16:5a:45:70:55:ce:30:be:6b:1f:5a:38:ef: 8c:db:20:d5:b0:74:17:9f:0f:e0:3f:b4:e2:5a:bf:e2:22:ee: e9:34:b3:1c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEB7v48WLP2O5946vqroBNWbPCD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNDEyMDYwOTU1MDFaFw0yNTEyMDUxMDAwMDFaMDMxMTAvBgNV BAMTKDNGQjkzQUQxOTA2MUFBQUY2QjZDMzZERDYyMjJGODJFNDU3RjA1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr90whhzdQ8qbZ9pxK7MijWedq u5YraPjTk1yMqj6BDUk54m7osdqLYWQL2SSU8GxFepf3TZggS1vGseI5So9jbHmj MhnruL1oGwCjLJCUXPOn1iPI0YV+cCQJQ8xDju8YiAyrBgYaoxEnLj5EZNGB6Aa1 76dWqXJw6FE7NUk7QEDSMeVmTlvRpkvzxshlH1xY2S5FKPrKgs0wQE4a205YRcIX zdQJn9lbAepgT3KwmFUm+Tw9UQTl2Uz1tu3m93J4RAidPGk8ZgbfodWntlRQpmM2 LmBS6xasIVPh27fe2gQ+P2rm6g3m43bwjlwSXS7YjzsoDqR0EieIyuAzPFevAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUP7k60ZBhqq9rbDbdYiL4LkV/BQQwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypokMA0GCSqG SIb3DQEBCwUAA4IBAQB6CFGPy1XsVFfC42Q+kH+KY8iJtZkNUpVs90zWOIYOZf/S UrU6p4e3SkkveLCsb4NXp7nCXsdUu1N3fuw03wm54xxsHcOvNCAZBfQZjodN7L81 lENcr3WjjUqkWpQGsWkqv1tW7TEPFxr1QwNbODigpA0jg76TLkPSwrOkQao8/+Ef M/+NcWLH2cxUpbnlBb8Vu2pK5lwvMl+Y0nbCiRZf626f7VVmFs+0jmn+gO4zX+yX uEhNCxsP5Qrv+BhGI1aq/dzhNPupf1rsxIt+C2AEYbZSOXRNsP5pvEsvzBZaRXBV zjC+ax9aOO+M2yDVsHQXnw/gP7TiWr/iIu7pNLMc -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net