$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e39332e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: 1zSFHEmNd9QLY8mygXA5zr5Mq4c/IhErZ5P/75OgoQs= Subject key identifier: 51:34:72:8E:AC:67:0B:13:E7:6A:97:05:51:7D:81:E1:F1:D7:FF:2A Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 5F4511E8CB8BA03132707FEBBA7B057BAB69AF99 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 11:02:27 +0000 ROA not before: Sat 17 May 2025 10:57:27 +0000 ROA not after: Sat 16 May 2026 11:02:27 +0000 asID: 17671 IP address blocks: 114.199.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:45:11:e8:cb:8b:a0:31:32:70:7f:eb:ba:7b:05:7b:ab:69:af:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 10:57:27 2025 GMT Not After : May 16 11:02:27 2026 GMT Subject: CN=5134728EAC670B13E76A9705517D81E1F1D7FF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:28:20:1b:42:5d:7d:0e:3b:b2:de:e9:51: e0:2e:29:d9:11:e6:10:7b:c1:df:36:53:67:05:04: 9e:ad:68:4a:95:30:76:61:eb:53:ce:32:2b:13:b4: d0:e0:48:66:bf:29:83:19:de:ed:41:12:a2:05:80: 70:46:b6:58:0c:a7:05:b7:08:a1:a5:5c:01:d5:39: 61:1b:51:4d:5e:0c:a0:f1:72:7c:fa:c3:45:62:51: c9:65:b4:6d:7f:71:1a:8a:cb:17:11:37:c1:cd:55: 10:c5:ce:77:b2:68:23:ec:f8:a9:6e:0f:82:ca:c8: 94:56:30:ff:37:7c:79:75:81:9d:e8:d1:7f:a2:4e: 0a:f7:80:da:67:58:d3:39:7b:38:ed:0f:31:4d:23: c5:9f:f4:ee:9b:bf:49:96:f3:1f:c6:c0:13:68:78: 76:42:3e:b5:c7:94:45:7d:ca:9f:b9:a3:ec:b8:4e: 0d:0d:51:0f:a6:47:25:43:29:b1:05:a5:ea:df:21: dc:08:39:fb:b7:68:64:10:fc:8e:9e:2b:ca:db:da: 48:c5:6a:5c:f5:2c:84:1a:4d:47:ec:05:6a:2f:29: d3:0e:4d:bb:de:28:d4:7a:ae:6e:18:f2:15:1a:ce: 93:77:63:30:c3:9f:ce:33:e5:15:ab:aa:18:61:97: e1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:34:72:8E:AC:67:0B:13:E7:6A:97:05:51:7D:81:E1:F1:D7:FF:2A X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39332e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.93.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:0a:21:c6:7b:ce:4b:c4:f1:eb:5d:ff:5e:cf:90:40:30:17: 80:32:20:4e:18:26:cb:05:34:a2:84:f8:bc:3a:4a:67:9d:04: c3:bc:9d:e6:f6:f8:3b:e3:1f:7b:b6:63:fa:3a:e1:c1:a0:66: 10:c9:41:86:87:e4:dc:c3:c9:aa:50:7c:38:c9:50:3f:52:a5: ca:f6:9a:04:d9:dc:79:2d:19:fb:fc:99:ec:a2:c0:b5:85:35: dc:0f:78:73:05:e3:b9:c0:0a:17:42:55:a3:f6:1a:8f:a4:d2: 02:96:f7:1d:ae:33:ff:02:e1:88:4e:31:fd:b4:87:79:bc:07: dc:36:8f:ef:5c:94:e1:4d:e6:08:65:c9:f2:2f:95:21:40:38: 58:36:1b:4e:80:ed:06:3b:e3:53:20:2e:db:fd:cb:11:f1:21: 76:d0:71:fc:57:fc:cf:81:17:0d:4e:35:8e:7b:82:e5:4a:bb: b9:bc:89:80:2b:0b:b7:1d:3e:0e:8e:64:c1:97:c5:2a:e0:9f: 5b:20:f8:f4:27:c2:14:d3:16:41:91:f1:11:2f:29:f6:de:f2: d4:ad:f3:09:d5:3e:6a:44:f5:47:ff:c9:73:90:09:46:b6:4d: 39:53:88:c9:65:90:7f:2f:b3:f6:e5:8c:8b:71:e5:e3:41:d4: a7:13:3b:46 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUX0UR6MuLoDEycH/runsFe6tpr5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMDU3MjdaFw0yNjA1MTYxMTAyMjdaMDMxMTAvBgNV BAMTKDUxMzQ3MjhFQUM2NzBCMTNFNzZBOTcwNTUxN0Q4MUUxRjFEN0ZGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT0yggG0JdfQ47st7pUeAuKdkR 5hB7wd82U2cFBJ6taEqVMHZh61POMisTtNDgSGa/KYMZ3u1BEqIFgHBGtlgMpwW3 CKGlXAHVOWEbUU1eDKDxcnz6w0ViUclltG1/cRqKyxcRN8HNVRDFzneyaCPs+Klu D4LKyJRWMP83fHl1gZ3o0X+iTgr3gNpnWNM5ezjtDzFNI8Wf9O6bv0mW8x/GwBNo eHZCPrXHlEV9yp+5o+y4Tg0NUQ+mRyVDKbEFperfIdwIOfu3aGQQ/I6eK8rb2kjF alz1LIQaTUfsBWovKdMOTbveKNR6rm4Y8hUazpN3YzDDn84z5RWrqhhhl+GHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUUTRyjqxnCxPnapcFUX2B4fHX/yowHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzOTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHXTANBgkqhkiG 9w0BAQsFAAOCAQEAPwohxnvOS8Tx613/Xs+QQDAXgDIgThgmywU0ooT4vDpKZ50E w7yd5vb4O+Mfe7Zj+jrhwaBmEMlBhofk3MPJqlB8OMlQP1KlyvaaBNnceS0Z+/yZ 7KLAtYU13A94cwXjucAKF0JVo/Yaj6TSApb3Ha4z/wLhiE4x/bSHebwH3DaP71yU 4U3mCGXJ8i+VIUA4WDYbToDtBjvjUyAu2/3LEfEhdtBx/Ff8z4EXDU41jnuC5Uq7 ubyJgCsLtx0+Do5kwZfFKuCfWyD49CfCFNMWQZHxES8p9t7y1K3zCdU+akT1R//J c5AJRrZNOVOIyWWQfy+z9uWMi3Hl40HUpxM7Rg== -----END CERTIFICATE-----Generated at Tue Jul 1 14:07:31 2025 by rpki-client