$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e39302e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: JqkEwt8fBwmfmnn43vrVB0n4hoKtEkYtLlcur6N61OA= Subject key identifier: BA:7C:7E:41:C6:8B:6A:2D:BB:DE:C9:B0:86:3F:3B:5C:64:2C:41:B4 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 65983D3D2803BF167AFB31CDCCA42A5F78E85A2D Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 12:02:08 +0000 ROA not before: Sat 17 May 2025 11:57:08 +0000 ROA not after: Sat 16 May 2026 12:02:08 +0000 asID: 17671 IP address blocks: 114.199.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:98:3d:3d:28:03:bf:16:7a:fb:31:cd:cc:a4:2a:5f:78:e8:5a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 11:57:08 2025 GMT Not After : May 16 12:02:08 2026 GMT Subject: CN=BA7C7E41C68B6A2DBBDEC9B0863F3B5C642C41B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:20:ae:9c:a1:51:a9:db:71:a8:dd:5d:59: c1:20:fe:d5:3f:99:25:2b:42:c3:ba:94:37:ac:ee: 39:38:58:42:71:13:e4:4e:47:84:15:aa:04:b5:9c: f0:bb:ad:0e:26:63:83:e3:e9:95:d1:e8:0b:be:6b: af:bc:c5:93:28:83:f9:04:5d:73:f1:0d:b6:07:fb: 26:a4:ca:bb:91:91:e1:c3:e2:13:b3:95:8c:f2:8d: 27:f7:67:93:62:6f:90:b3:91:d9:7a:d5:30:ae:27: 13:d0:c4:5c:64:01:d2:27:f6:02:43:c1:63:f8:a3: 72:2f:94:85:90:40:91:e7:11:98:3e:3c:2e:1b:ee: ff:22:ba:de:ba:3d:63:f9:7e:75:4c:77:61:71:bc: c5:0f:11:86:b7:7b:0f:87:94:1c:30:86:7f:79:d2: 15:e7:e3:b2:99:b7:70:2a:70:7d:20:92:04:1b:00: a9:75:e1:fe:8d:47:59:16:cd:02:7a:b3:db:36:41: 43:72:78:41:0e:f1:0e:8a:9a:bd:59:17:f8:e0:62: b9:a5:7f:a9:60:b9:39:72:a6:49:5d:e3:02:fb:4a: 4b:41:61:a6:00:26:84:e7:e3:e5:71:06:ff:46:11: ce:95:d4:7e:a3:ae:4d:f1:8b:ee:a8:35:10:ad:85: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7C:7E:41:C6:8B:6A:2D:BB:DE:C9:B0:86:3F:3B:5C:64:2C:41:B4 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39302e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.90.0/24 Signature Algorithm: sha256WithRSAEncryption a4:a6:74:3c:0e:05:ed:fe:39:2d:58:3e:aa:86:69:dd:af:ef: f8:47:4d:dd:9c:9a:4d:ae:38:dc:0c:4c:df:8a:7b:7a:82:03: 8d:52:d3:1e:f1:b2:28:1e:e4:26:e3:3e:22:f2:2a:2c:66:ac: 2a:b1:6f:b0:cf:a9:5b:8c:89:1a:04:65:2c:6a:98:9f:03:96: 46:97:74:c1:a4:37:b9:ec:4f:a1:5e:77:cf:e0:f9:72:1d:21: 81:3a:93:bb:9f:7b:38:2a:31:47:60:51:53:28:73:a1:1c:0e: d9:a8:9e:65:95:13:2f:3b:dc:ac:ef:fd:ec:5f:1c:d7:49:12: b5:d9:85:93:63:06:0b:9a:75:a5:e6:c1:17:86:67:ed:87:25: e9:26:c7:70:ed:b3:a7:1b:0d:d5:0b:fd:9f:69:a2:7b:f4:61: 5f:65:5a:3f:8d:57:1c:a9:4d:3d:cb:86:31:0f:71:2c:4c:88: 93:ae:ba:7a:ba:74:0f:fc:30:13:25:09:10:40:f3:fb:8c:1e: 42:b2:1b:2d:37:e1:23:ab:05:74:29:67:a6:f0:71:ce:dd:b7: 1e:f1:6b:94:8e:19:a7:1b:ac:19:59:d5:d2:b5:cf:96:4f:8b: 91:c2:53:4c:df:c9:f8:12:13:c7:a0:c3:4e:f6:19:ee:1d:90: f2:d5:44:b4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZZg9PSgDvxZ6+zHNzKQqX3joWi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMTU3MDhaFw0yNjA1MTYxMjAyMDhaMDMxMTAvBgNV BAMTKEJBN0M3RTQxQzY4QjZBMkRCQkRFQzlCMDg2M0YzQjVDNjQyQzQxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCSCunKFRqdtxqN1dWcEg/tU/ mSUrQsO6lDes7jk4WEJxE+ROR4QVqgS1nPC7rQ4mY4Pj6ZXR6Au+a6+8xZMog/kE XXPxDbYH+yakyruRkeHD4hOzlYzyjSf3Z5Nib5Czkdl61TCuJxPQxFxkAdIn9gJD wWP4o3IvlIWQQJHnEZg+PC4b7v8iut66PWP5fnVMd2FxvMUPEYa3ew+HlBwwhn95 0hXn47KZt3AqcH0gkgQbAKl14f6NR1kWzQJ6s9s2QUNyeEEO8Q6Kmr1ZF/jgYrml f6lguTlypkld4wL7SktBYaYAJoTn4+VxBv9GEc6V1H6jrk3xi+6oNRCthdcdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUunx+QcaLai273smwhj87XGQsQbQwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzOTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHWjANBgkqhkiG 9w0BAQsFAAOCAQEApKZ0PA4F7f45LVg+qoZp3a/v+EdN3ZyaTa443AxM34p7eoID jVLTHvGyKB7kJuM+IvIqLGasKrFvsM+pW4yJGgRlLGqYnwOWRpd0waQ3uexPoV53 z+D5ch0hgTqTu597OCoxR2BRUyhzoRwO2aieZZUTLzvcrO/97F8c10kStdmFk2MG C5p1pebBF4Zn7Ycl6SbHcO2zpxsN1Qv9n2mie/RhX2VaP41XHKlNPcuGMQ9xLEyI k666erp0D/wwEyUJEEDz+4weQrIbLTfhI6sFdClnpvBxzt23HvFrlI4ZpxusGVnV 0rXPlk+LkcJTTN/J+BITx6DDTvYZ7h2Q8tVEtA== -----END CERTIFICATE-----Generated at Tue Jul 1 18:26:50 2025 by rpki-client