$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa File: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (raw, json) Hash identifier: vY8tbOcXriyCtT6FUxDmURMpeDa3xL/alWeAEYVK8DM= Subject key identifier: 70:C5:59:2F:C3:0E:49:AE:A3:82:17:12:B5:87:DE:9F:0B:65:F5:6A Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 7798253FF1385E74B1E24F4D59F07C7E4553828D Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa Signing time: Fri 10 Jan 2025 04:00:01 +0000 ROA not before: Fri 10 Jan 2025 03:55:01 +0000 ROA not after: Fri 09 Jan 2026 04:00:01 +0000 asID: 9340 IP address blocks: 202.153.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 14:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:98:25:3f:f1:38:5e:74:b1:e2:4f:4d:59:f0:7c:7e:45:53:82:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Jan 10 03:55:01 2025 GMT Not After : Jan 9 04:00:01 2026 GMT Subject: CN=70C5592FC30E49AEA3821712B587DE9F0B65F56A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:09:80:75:03:aa:8a:f9:0e:3c:77:99:2d: 83:13:03:f6:89:5c:39:d7:5e:da:6d:04:3a:a4:4b: ba:f7:34:64:73:1b:5a:c8:bd:5a:79:aa:e8:1d:c8: 42:28:98:9f:ed:d7:8a:10:c3:c4:06:0d:d5:4b:60: 95:9a:6a:f6:94:a1:4d:2f:0e:c4:ed:69:1d:c8:6f: 02:08:95:b1:75:52:87:ab:4f:9f:08:e4:00:2e:17: d8:cc:10:7e:8e:49:f1:e2:84:24:d8:97:1f:02:e5: c3:fb:5b:6a:e1:14:9f:0b:55:cf:fd:5b:8c:51:a1: f3:b4:07:55:0e:da:78:98:78:c2:7e:02:9e:5b:29: 9f:29:c8:c9:90:ae:c9:88:9d:36:bf:11:74:da:4e: 8b:db:a0:bf:11:eb:c9:71:de:e3:2d:d0:36:9d:7a: 18:0d:ba:d2:85:08:1b:e4:65:7f:77:73:74:f1:41: 96:2d:fb:65:0f:9e:e7:f3:ef:a2:92:83:af:fc:69: d5:11:98:81:d4:72:15:fa:e3:63:ce:c0:91:a5:9e: 0d:2c:be:ab:cf:5a:d2:8f:ab:6c:87:91:6c:09:90: 59:e5:63:66:a7:55:23:ca:5e:1e:91:f4:f5:94:84: 0e:49:d6:fb:05:61:5e:d2:46:c6:bf:2f:18:b3:28: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C5:59:2F:C3:0E:49:AE:A3:82:17:12:B5:87:DE:9F:0B:65:F5:6A X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.153.224.0/19 Signature Algorithm: sha256WithRSAEncryption 52:44:d5:b2:19:87:5b:21:68:b6:f0:f3:bd:33:cb:1a:e1:07: 0f:8f:83:7c:1b:ff:53:7c:dc:f1:bc:07:7d:58:01:a9:c3:be: 54:92:64:aa:92:8e:a0:e7:cd:64:a5:5c:38:82:8c:f2:0e:52: e7:a7:73:2b:9e:bf:99:a9:9e:d9:c4:8f:5e:02:2d:9e:c4:06: 21:ec:8d:15:18:b4:06:33:e8:14:a3:1a:0f:3f:ca:1e:93:bb: 0d:79:f1:a3:fb:59:5f:95:d2:29:8f:38:22:9f:9c:21:26:58: 15:0c:5f:b1:6b:e7:71:f2:e6:e4:a6:db:2a:93:a3:ab:4c:32: 09:49:71:8e:9b:ac:53:7c:eb:f5:4e:da:bb:fd:b6:65:35:54: 28:26:0b:c5:a9:c3:58:a1:fd:9e:ef:17:f6:47:59:ca:40:6b: d1:24:12:d0:5a:70:c9:7f:96:96:b6:ff:1a:cb:95:9c:0c:68: af:84:67:ef:38:e2:a7:08:8d:2e:48:1c:22:8a:13:f3:05:5c: 0f:4d:35:e3:84:a9:9a:b7:83:44:51:51:41:89:a6:76:23:c5: 9a:15:e9:46:55:73:23:ad:3b:49:b9:e8:db:2d:69:99:17:42: f5:de:77:19:98:6d:f2:4f:c5:29:88:0f:66:dd:02:01:4b:2b: 49:42:6e:d6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUd5glP/E4XnSx4k9NWfB8fkVTgo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNTAxMTAwMzU1MDFaFw0yNjAxMDkwNDAwMDFaMDMxMTAvBgNV BAMTKDcwQzU1OTJGQzMwRTQ5QUVBMzgyMTcxMkI1ODdERTlGMEI2NUY1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKwmAdQOqivkOPHeZLYMTA/aJ XDnXXtptBDqkS7r3NGRzG1rIvVp5qugdyEIomJ/t14oQw8QGDdVLYJWaavaUoU0v DsTtaR3IbwIIlbF1UoerT58I5AAuF9jMEH6OSfHihCTYlx8C5cP7W2rhFJ8LVc/9 W4xRofO0B1UO2niYeMJ+Ap5bKZ8pyMmQrsmInTa/EXTaTovboL8R68lx3uMt0Dad ehgNutKFCBvkZX93c3TxQZYt+2UPnufz76KSg6/8adURmIHUchX642POwJGlng0s vqvPWtKPq2yHkWwJkFnlY2anVSPKXh6R9PWUhA5J1vsFYV7SRsa/LxizKBANAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcMVZL8MOSa6jghcStYfenwtl9WowHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YjFlNTdlLWEwZjEtNDY3Zi1h NDZmLTU1YTMxNTdiMGQ2NS8wLzMyMzAzMjJlMzEzNTMzMmUzMjMyMzQyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzOTMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqZ4DANBgkqhkiG 9w0BAQsFAAOCAQEAUkTVshmHWyFotvDzvTPLGuEHD4+DfBv/U3zc8bwHfVgBqcO+ VJJkqpKOoOfNZKVcOIKM8g5S56dzK56/mame2cSPXgItnsQGIeyNFRi0BjPoFKMa Dz/KHpO7DXnxo/tZX5XSKY84Ip+cISZYFQxfsWvncfLm5KbbKpOjq0wyCUlxjpus U3zr9U7au/22ZTVUKCYLxanDWKH9nu8X9kdZykBr0SQS0FpwyX+Wlrb/GsuVnAxo r4Rn7zjipwiNLkgcIooT8wVcD00144SpmreDRFFRQYmmdiPFmhXpRlVzI607Sbno 2y1pmRdC9d53GZht8k/FKYgPZt0CAUsrSUJu1g== -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:01 2025 by rpki-client on console.sobornost.net