$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32302e302f32342d3234203d3e20313439343039.roa File: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (raw, json) Hash identifier: wC6luSTP1AKNUykfYnoLzUykZGRywJ+GQGrVX69tkgQ= Subject key identifier: D6:29:A5:2F:3C:B2:ED:92:67:17:9F:5E:37:50:14:8E:0C:1F:58:F7 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 15EBA0FE6183EB0AF0753B8BC828DFD92B59A09F Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32302e302f32342d3234203d3e20313439343039.roa Signing time: Sun 30 Mar 2025 14:00:00 +0000 ROA not before: Sun 30 Mar 2025 13:55:00 +0000 ROA not after: Sun 29 Mar 2026 14:00:00 +0000 asID: 149409 IP address blocks: 202.51.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 05:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:eb:a0:fe:61:83:eb:0a:f0:75:3b:8b:c8:28:df:d9:2b:59:a0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: Mar 30 13:55:00 2025 GMT Not After : Mar 29 14:00:00 2026 GMT Subject: CN=D629A52F3CB2ED9267179F5E3750148E0C1F58F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:75:ed:8b:50:ec:3c:85:4b:08:eb:04:60: 91:fe:d9:17:43:e0:1f:a0:eb:c0:fd:66:83:d1:45: 2f:99:78:2a:57:1e:a3:00:fb:36:7c:e1:7d:a6:7f: ae:e1:ec:91:be:e5:4b:68:91:05:8a:ce:9f:8a:1c: ad:28:8b:72:a0:0f:2f:57:3e:25:54:df:78:45:47: 46:22:ab:1c:d0:00:3b:d1:77:23:bb:0e:6a:19:e5: b3:39:2c:0c:58:e4:75:8e:f8:59:5a:5d:65:15:dc: 6a:d7:71:0e:eb:01:b4:24:f7:af:5b:45:2b:02:25: 26:4d:d2:27:55:1b:02:db:46:06:ae:8a:8b:99:c7: 9a:6b:02:62:a1:85:df:9a:d3:24:96:25:62:1c:9d: 55:1d:cb:5f:b3:5b:16:74:11:8e:25:a5:8a:8b:03: 4f:75:eb:d9:88:6f:4f:70:63:e3:86:58:27:c5:d0: d5:e8:47:fe:4a:a0:aa:1c:d9:18:31:64:04:10:f3: 4d:9b:41:61:b4:2c:ec:58:c4:11:82:fd:a9:a0:36: 9e:17:48:91:5d:89:4f:43:3e:77:b6:ae:ae:cf:d4: 4b:59:09:ea:8c:54:31:2c:c1:5d:b6:2e:dd:63:c2: 7d:a2:7e:75:5c:8f:a6:67:20:19:56:46:ca:bd:c5: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:29:A5:2F:3C:B2:ED:92:67:17:9F:5E:37:50:14:8E:0C:1F:58:F7 X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32302e302f32342d3234203d3e20313439343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.20.0/24 Signature Algorithm: sha256WithRSAEncryption 49:40:79:1c:5e:8d:8b:a0:33:59:1b:16:ec:10:24:af:d1:0a: aa:1a:9d:8c:c5:da:21:03:41:54:aa:2f:33:8d:9e:26:48:51: 88:0c:e9:03:c4:de:39:1c:78:b6:99:39:f3:32:ff:60:69:4a: 3d:91:63:c0:d5:a2:57:4a:b8:36:3b:74:ff:80:f7:b2:af:91: df:e6:2f:87:35:34:54:9f:db:c8:e8:15:8f:6d:9b:43:66:98: 14:78:27:bf:cc:da:f5:0d:fa:65:1e:79:b8:df:91:59:c4:43: 60:1f:e4:57:fd:74:b7:9b:57:b7:56:d0:5c:50:58:0b:08:2f: 00:11:47:b1:3e:61:17:28:e9:6b:65:50:94:b4:49:67:92:4b: 96:06:5b:95:be:2e:c2:28:1a:84:dc:b0:6d:0e:4f:9d:92:09: a5:e6:e2:f8:44:a1:05:c1:c3:09:df:e1:18:33:01:bb:b6:57: 4b:d7:7e:7c:90:7d:da:49:15:7e:2b:4e:1e:49:e1:77:79:cf: 9f:c9:2e:97:6d:82:fe:17:84:09:cb:a3:5f:af:96:9e:82:52: d5:3e:ec:05:02:be:71:28:db:89:47:8c:98:53:a0:e1:d2:7d: 64:95:4b:73:3d:b6:68:71:32:c1:91:b5:3d:72:e0:7d:eb:b7: a5:bd:03:55 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFeug/mGD6wrwdTuLyCjf2StZoJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNTAzMzAxMzU1MDBaFw0yNjAzMjkxNDAwMDBaMDMxMTAvBgNV BAMTKEQ2MjlBNTJGM0NCMkVEOTI2NzE3OUY1RTM3NTAxNDhFMEMxRjU4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGnXti1DsPIVLCOsEYJH+2RdD 4B+g68D9ZoPRRS+ZeCpXHqMA+zZ84X2mf67h7JG+5UtokQWKzp+KHK0oi3KgDy9X PiVU33hFR0YiqxzQADvRdyO7DmoZ5bM5LAxY5HWO+FlaXWUV3GrXcQ7rAbQk969b RSsCJSZN0idVGwLbRgauiouZx5prAmKhhd+a0ySWJWIcnVUdy1+zWxZ0EY4lpYqL A09169mIb09wY+OGWCfF0NXoR/5KoKoc2RgxZAQQ802bQWG0LOxYxBGC/amgNp4X SJFdiU9DPne2rq7P1EtZCeqMVDEswV22Lt1jwn2ifnVcj6ZnIBlWRsq9xbFVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1imlLzyy7ZJnF59eN1AUjgwfWPcwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5NGU2YjJkLTNkZGItNDZlYi04 M2VmLWM5OWIyMDAzNzgzZi8wLzMyMzAzMjJlMzUzMTJlMzIzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM0MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMozFDANBgkqhkiG 9w0BAQsFAAOCAQEASUB5HF6Ni6AzWRsW7BAkr9EKqhqdjMXaIQNBVKovM42eJkhR iAzpA8TeORx4tpk58zL/YGlKPZFjwNWiV0q4Njt0/4D3sq+R3+YvhzU0VJ/byOgV j22bQ2aYFHgnv8za9Q36ZR55uN+RWcRDYB/kV/10t5tXt1bQXFBYCwgvABFHsT5h Fyjpa2VQlLRJZ5JLlgZblb4uwigahNywbQ5PnZIJpebi+EShBcHDCd/hGDMBu7ZX S9d+fJB92kkVfitOHknhd3nPn8kul22C/heECcujX6+WnoJS1T7sBQK+cSjbiUeM mFOg4dJ9ZJVLcz22aHEywZG1PXLgfeu3pb0DVQ== -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:32 2025 by rpki-client on console.sobornost.net