$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3131342e3132392e31362e302f32312d3234203d3e203338373538.roa File: 3131342e3132392e31362e302f32312d3234203d3e203338373538.roa (raw, json) Hash identifier: EdvOiYuEQSs6Tte4v6yMNFw5asiVZESXMxoQoYWb3vI= Subject key identifier: 4B:7D:60:BE:E1:6A:60:8A:86:78:9E:EE:CB:18:13:04:79:07:46:F9 Certificate issuer: /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Certificate serial: 0EA3E659E0257B9884C0FD15827492CA9BDF25F5 Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3131342e3132392e31362e302f32312d3234203d3e203338373538.roa Signing time: Mon 02 Jun 2025 01:00:00 +0000 ROA not before: Mon 02 Jun 2025 00:55:00 +0000 ROA not after: Mon 01 Jun 2026 01:00:00 +0000 asID: 38758 IP address blocks: 114.129.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a3:e6:59:e0:25:7b:98:84:c0:fd:15:82:74:92:ca:9b:df:25:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4 Validity Not Before: Jun 2 00:55:00 2025 GMT Not After : Jun 1 01:00:00 2026 GMT Subject: CN=4B7D60BEE16A608A86789EEECB181304790746F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ef:e8:96:ee:1f:ff:09:61:ca:70:f0:68:8e: 2d:96:33:a6:75:ae:ed:8d:f2:6c:da:f6:22:b6:52: 6a:a7:69:72:dc:93:b8:d4:49:97:a8:2a:08:18:75: af:04:86:ac:ab:a4:4e:18:dd:e7:40:28:89:fe:d8: 31:5e:1a:8c:61:45:87:48:9b:85:57:e9:dd:ee:7d: 2b:ef:8e:57:eb:e3:fe:bd:69:6b:8b:d3:78:65:26: ad:80:c9:4b:7a:10:de:e6:0d:df:53:50:82:6e:11: 3a:f6:97:58:1a:e5:ad:a0:d1:1a:0b:87:42:0e:1e: cf:4d:18:ee:49:9d:6d:46:7d:3c:79:ae:bd:c6:4f: 14:86:a8:b8:99:41:d0:b1:3e:13:14:a0:d4:95:03: e1:3b:07:36:90:2e:52:ae:61:04:8a:a8:ef:8b:ff: be:ce:05:86:d5:7a:e0:40:03:eb:9d:43:14:8a:c0: b2:10:04:6e:a7:76:bb:48:59:86:ec:d4:db:36:0f: 07:2d:79:55:3d:fa:f3:e1:75:4e:76:20:da:e1:7f: 11:60:54:9b:3b:9f:a6:d1:b7:22:cb:45:f6:27:2e: 9a:04:29:b9:4f:db:57:0d:70:89:b7:81:a4:92:60: a7:50:64:63:27:7d:7d:54:a5:3f:fa:8f:ed:48:99: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7D:60:BE:E1:6A:60:8A:86:78:9E:EE:CB:18:13:04:79:07:46:F9 X509v3 Authority Key Identifier: keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3131342e3132392e31362e302f32312d3234203d3e203338373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.129.16.0/21 Signature Algorithm: sha256WithRSAEncryption 78:74:63:22:8c:78:c0:6b:71:8b:d5:a4:db:99:f3:60:42:7e: 74:88:da:25:c2:e6:4f:c0:20:6c:e8:6d:16:52:cc:aa:92:9a: 75:59:20:a1:ee:cb:25:08:b0:ce:8d:db:b4:2a:13:3e:66:d8: 72:ca:48:88:43:52:f9:98:b5:73:0b:ab:4b:df:f8:73:44:5e: 98:1c:a7:a2:3e:2b:d4:37:43:58:87:9e:b0:bf:a0:a9:b0:9d: 1e:4d:d8:4c:66:a0:ac:39:fa:2d:3c:bd:ff:38:f6:aa:23:12: 98:56:93:07:63:0c:f3:8f:c8:16:6d:5b:99:96:96:56:54:47: 0f:e7:d3:52:62:ea:01:d5:42:1d:d5:e7:19:eb:03:2d:cd:1b: 9c:d0:f1:c2:2f:54:6d:1a:62:24:15:89:50:04:26:f5:12:2d: 8d:b0:9a:99:03:3e:fe:66:89:ea:a6:0f:29:2d:50:fd:83:f4: 7a:97:b4:c7:76:ec:ea:a5:b5:a6:73:b1:52:83:27:f9:27:d4: 81:e7:09:f3:ef:63:52:bd:06:7a:9e:a1:09:c4:c4:a6:1c:dd: 07:a3:44:4f:4f:fb:1d:6a:5f:9c:56:76:a6:c6:ab:96:3d:53: 7d:e9:00:57:69:1d:36:9a:5f:61:84:88:36:a0:63:86:96:4c: 64:58:73:e4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDqPmWeAle5iEwP0VgnSSypvfJfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1 NTQ5ODZGNDAeFw0yNTA2MDIwMDU1MDBaFw0yNjA2MDEwMTAwMDBaMDMxMTAvBgNV BAMTKDRCN0Q2MEJFRTE2QTYwOEE4Njc4OUVFRUNCMTgxMzA0NzkwNzQ2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm7+iW7h//CWHKcPBoji2WM6Z1 ru2N8mza9iK2UmqnaXLck7jUSZeoKggYda8EhqyrpE4Y3edAKIn+2DFeGoxhRYdI m4VX6d3ufSvvjlfr4/69aWuL03hlJq2AyUt6EN7mDd9TUIJuETr2l1ga5a2g0RoL h0IOHs9NGO5JnW1GfTx5rr3GTxSGqLiZQdCxPhMUoNSVA+E7BzaQLlKuYQSKqO+L /77OBYbVeuBAA+udQxSKwLIQBG6ndrtIWYbs1Ns2DwcteVU9+vPhdU52INrhfxFg VJs7n6bRtyLLRfYnLpoEKblP21cNcIm3gaSSYKdQZGMnfX1UpT/6j+1Imfl5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUS31gvuFqYIqGeJ7uyxgTBHkHRvkwHwYDVR0j BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5 ODZGNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05 M2U1LTUyMmVlNTQwMThkNi8wLzMxMzEzNDJlMzEzMjM5MmUzMTM2MmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzMzODM3MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3KBEDANBgkqhkiG 9w0BAQsFAAOCAQEAeHRjIox4wGtxi9Wk25nzYEJ+dIjaJcLmT8AgbOhtFlLMqpKa dVkgoe7LJQiwzo3btCoTPmbYcspIiENS+Zi1cwurS9/4c0RemBynoj4r1DdDWIee sL+gqbCdHk3YTGagrDn6LTy9/zj2qiMSmFaTB2MM84/IFm1bmZaWVlRHD+fTUmLq AdVCHdXnGesDLc0bnNDxwi9UbRpiJBWJUAQm9RItjbCamQM+/maJ6qYPKS1Q/YP0 epe0x3bs6qW1pnOxUoMn+SfUgecJ8+9jUr0Gep6hCcTEphzdB6NET0/7HWpfnFZ2 psarlj1TfekAV2kdNppfYYSINqBjhpZMZFhz5A== -----END CERTIFICATE-----Generated at Mon Jun 30 02:17:23 2025 by rpki-client