$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa File: 3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa (raw, json) Hash identifier: k0uvnT276doOx0eRGQ7DFHE2CwnvlOVjgp48qX0PiXo= Subject key identifier: 5A:AE:4B:E0:95:03:27:D5:EF:C8:4E:EC:CC:8C:A3:24:58:E0:C7:8D Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 2C1150BFCE5228EA875DF3230A3CED2884202A95 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa Signing time: Sun 04 May 2025 15:00:00 +0000 ROA not before: Sun 04 May 2025 14:55:00 +0000 ROA not after: Sun 03 May 2026 15:00:00 +0000 asID: 149760 IP address blocks: 119.110.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:11:50:bf:ce:52:28:ea:87:5d:f3:23:0a:3c:ed:28:84:20:2a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: May 4 14:55:00 2025 GMT Not After : May 3 15:00:00 2026 GMT Subject: CN=5AAE4BE0950327D5EFC84EECCC8CA32458E0C78D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:8b:b2:26:04:89:7e:ae:17:ca:9a:39:9b: 29:4e:93:db:26:a7:b0:1b:2f:a0:b3:53:9b:47:b1: 12:88:6e:63:eb:72:52:cd:a6:90:f8:7e:48:b8:03: c5:b0:47:ba:16:2d:a2:dc:75:01:a1:13:85:4c:bd: 3f:57:22:c8:eb:e9:0f:b3:c9:33:8d:6a:a3:93:a8: 4c:44:4f:71:2c:89:39:19:be:ed:dd:5e:b2:85:62: 20:29:bb:c8:bf:df:63:12:e8:dc:6b:c9:36:e1:ff: 1b:b0:ec:3a:1f:d0:5c:e0:63:40:70:85:86:58:4f: be:71:ea:8b:3b:bb:3c:32:0e:35:7d:0f:a5:99:c5: 4b:7c:f2:6f:53:4a:99:9c:c3:b0:6d:73:56:34:c9: c3:87:2d:33:84:66:17:87:4d:44:37:b5:8b:65:af: 06:4f:cf:16:32:f1:bb:0c:3d:1f:6a:13:80:cf:09: 93:48:c8:57:65:d3:2a:63:95:04:51:2e:42:81:69: ba:c4:9c:7f:e1:d1:3d:65:68:18:28:11:32:69:5d: 3b:e4:05:b0:5f:e2:fb:ce:5a:8d:ad:76:b8:9a:32: 2c:ac:03:46:10:9f:54:01:e9:14:92:20:84:05:1e: 94:39:a6:cc:9d:b1:fd:bd:4c:a9:e3:db:d2:b9:9c: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AE:4B:E0:95:03:27:D5:EF:C8:4E:EC:CC:8C:A3:24:58:E0:C7:8D X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.124.0/24 Signature Algorithm: sha256WithRSAEncryption 74:88:9c:d9:27:68:9e:81:74:47:54:fd:3e:1c:34:a9:d1:da: 9a:dd:4a:4e:cd:0f:0b:4e:65:71:07:5a:34:ed:18:a7:24:4f: 40:95:bf:7b:bb:68:ac:72:fc:d8:3c:f0:4f:86:63:ba:a9:33: 53:a4:4a:09:7b:5b:81:cc:f5:08:3b:6b:f7:80:1a:53:d6:cf: fa:bf:1b:db:79:cb:36:1e:b0:29:dc:ea:8c:7a:94:d3:81:5a: 85:44:e9:87:00:bd:a3:f5:65:c0:a5:8b:7e:80:53:9c:5d:5b: 0e:76:e1:fc:93:2d:26:ad:22:00:66:1d:71:76:29:fd:b5:99: eb:53:2c:b0:9a:6c:b1:f9:ed:3a:3d:27:9d:f9:6f:7a:a3:42: 8a:cf:e0:16:d2:da:db:39:96:c1:05:ae:8e:c0:9b:7e:f2:29: bd:b4:ee:e5:53:1f:c3:a1:86:07:5c:f0:24:d8:ec:5c:3d:c4: 12:53:ac:8a:a5:91:b9:0f:c7:a7:07:db:1e:9d:00:36:1b:e1: bd:b9:de:21:13:10:95:2b:7a:fc:8f:2c:40:d7:87:9e:7c:fd: 6b:1e:11:67:d2:8e:c9:46:0c:43:39:c9:5a:8a:39:b7:9d:00: 36:65:fb:30:3c:b1:44:1e:65:15:9c:3f:d2:e8:f3:e8:3a:e0: 41:ab:26:ac -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULBFQv85SKOqHXfMjCjztKIQgKpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTA1MDQxNDU1MDBaFw0yNjA1MDMxNTAwMDBaMDMxMTAvBgNV BAMTKDVBQUU0QkUwOTUwMzI3RDVFRkM4NEVFQ0NDOENBMzI0NThFMEM3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8n4uyJgSJfq4Xypo5mylOk9sm p7AbL6CzU5tHsRKIbmPrclLNppD4fki4A8WwR7oWLaLcdQGhE4VMvT9XIsjr6Q+z yTONaqOTqExET3EsiTkZvu3dXrKFYiApu8i/32MS6NxryTbh/xuw7Dof0FzgY0Bw hYZYT75x6os7uzwyDjV9D6WZxUt88m9TSpmcw7Btc1Y0ycOHLTOEZheHTUQ3tYtl rwZPzxYy8bsMPR9qE4DPCZNIyFdl0ypjlQRRLkKBabrEnH/h0T1laBgoETJpXTvk BbBf4vvOWo2tdriaMiysA0YQn1QB6RSSIIQFHpQ5psydsf29TKnj29K5nK6FAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUWq5L4JUDJ9XvyE7szIyjJFjgx40wHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMyMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM2MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3bnwwDQYJ KoZIhvcNAQELBQADggEBAHSInNknaJ6BdEdU/T4cNKnR2prdSk7NDwtOZXEHWjTt GKckT0CVv3u7aKxy/Ng88E+GY7qpM1OkSgl7W4HM9Qg7a/eAGlPWz/q/G9t5yzYe sCnc6ox6lNOBWoVE6YcAvaP1ZcCli36AU5xdWw524fyTLSatIgBmHXF2Kf21metT LLCabLH57To9J535b3qjQorP4BbS2ts5lsEFro7Am37yKb207uVTH8Ohhgdc8CTY 7Fw9xBJTrIqlkbkPx6cH2x6dADYb4b253iETEJUrevyPLEDXh558/WseEWfSjslG DEM5yVqKObedADZl+zA8sUQeZRWcP9Lo8+g64EGrJqw= -----END CERTIFICATE-----Generated at Sat May 10 18:54:27 2025 by rpki-client