$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233352e302f32342d3234203d3e203435323936.roa File: 3131332e35392e3233352e302f32342d3234203d3e203435323936.roa (raw, json) Hash identifier: Rl+vIZHqpKLQ+zEdVxcDzBikcA2vcYpw3IxauTfHLDQ= Subject key identifier: 7A:FF:DE:29:11:10:14:38:07:29:3D:94:F9:2C:F8:18:6D:66:04:83 Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Certificate serial: 356434ED0BB4D4DA55FEF5EAB3F2EC713BA208E2 Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233352e302f32342d3234203d3e203435323936.roa Signing time: Mon 28 Apr 2025 10:00:00 +0000 ROA not before: Mon 28 Apr 2025 09:55:00 +0000 ROA not after: Mon 27 Apr 2026 10:00:00 +0000 asID: 45296 IP address blocks: 113.59.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 13:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:64:34:ed:0b:b4:d4:da:55:fe:f5:ea:b3:f2:ec:71:3b:a2:08:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Validity Not Before: Apr 28 09:55:00 2025 GMT Not After : Apr 27 10:00:00 2026 GMT Subject: CN=7AFFDE291110143807293D94F92CF8186D660483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:39:c7:2c:29:59:5f:60:76:c5:bd:9e:93: 8f:54:5e:6c:5c:77:7a:18:88:3c:c8:ed:bc:1e:80: e8:63:61:18:fa:74:89:2c:a9:7f:5b:14:48:38:0e: da:fb:58:5d:8a:36:5d:ad:7a:88:8f:9e:b6:f2:48: 1c:0f:14:4b:fa:d5:06:c8:ce:52:c9:1f:0a:66:9d: 95:2f:b8:9b:8a:d3:e0:67:52:ab:8b:94:f0:fe:f8: c7:49:85:bb:91:a1:4b:d7:76:2b:af:44:d9:eb:2c: ad:a2:d9:b3:42:e0:7d:27:af:0b:46:16:90:dc:38: bf:cf:f7:66:c8:cf:b0:fa:30:6c:2d:dd:d0:fd:ba: 50:c8:0f:bc:77:76:8e:26:1f:28:2f:ff:da:7e:ed: 27:29:cd:6f:00:3b:89:08:1a:70:8e:50:d5:95:19: 35:c6:df:2a:a7:7a:9a:4a:27:e5:0e:74:8f:8b:a2: 5b:1b:d7:c1:a2:b0:46:ef:a4:43:72:a4:44:b9:b8: 09:0f:32:34:13:44:ed:9f:ed:a6:31:8d:ad:49:e0: 2c:22:15:ae:7a:3a:65:01:53:96:e6:a6:a5:d2:61: 46:79:33:fd:d1:e8:dd:c5:e0:ea:f1:69:f2:43:68: bc:1b:ae:a7:01:32:a7:40:81:3c:3e:e3:e5:47:10: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FF:DE:29:11:10:14:38:07:29:3D:94:F9:2C:F8:18:6D:66:04:83 X509v3 Authority Key Identifier: keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233352e302f32342d3234203d3e203435323936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.59.235.0/24 Signature Algorithm: sha256WithRSAEncryption 83:61:50:82:7f:d7:e2:5a:67:9f:4c:bb:c2:60:f7:cc:59:b6: 64:0e:7b:09:83:e6:bd:30:b7:2d:f5:b3:5f:32:c9:23:ee:3b: b0:c0:a6:e2:02:9c:ed:18:ae:a0:3b:1a:89:5f:8c:8c:0c:b3: 3d:9b:20:f6:40:13:af:94:91:b0:49:85:73:0e:a9:33:92:ee: 62:14:5a:c2:f1:15:f5:2b:30:bc:55:06:ae:33:1c:3d:f9:2f: be:f7:53:a0:0a:83:50:7e:5a:cc:10:ae:85:23:da:6a:8f:bf: c9:6f:ce:1b:92:d7:38:ad:1a:02:75:62:c9:1d:13:89:21:56: 37:5a:8e:b9:56:da:60:07:83:08:ea:a7:81:a2:71:41:9d:14: 30:cf:ef:28:7f:c5:95:d3:81:21:f9:9c:14:18:0d:6d:b1:d8: 4e:20:cc:bd:c8:ae:1d:2d:bf:47:29:8f:46:05:0f:83:ab:00: 55:8c:0b:1d:03:c4:44:4d:5c:34:8d:90:5c:3c:f5:70:6c:30: e9:cb:97:0f:3c:2c:4e:19:9c:26:fd:6e:41:98:29:97:0f:84: 31:c0:6a:2a:90:c6:ce:3d:34:5a:76:90:55:91:ab:99:c0:77: de:04:b5:50:d2:05:6f:e9:a3:5d:e4:10:c9:2e:b9:a7:26:ad: 56:cc:7b:9c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNWQ07Qu01NpV/vXqs/LscTuiCOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJB NTlGOTlENzAeFw0yNTA0MjgwOTU1MDBaFw0yNjA0MjcxMDAwMDBaMDMxMTAvBgNV BAMTKDdBRkZERTI5MTExMDE0MzgwNzI5M0Q5NEY5MkNGODE4NkQ2NjA0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5jnHLClZX2B2xb2ek49UXmxc d3oYiDzI7bwegOhjYRj6dIksqX9bFEg4Dtr7WF2KNl2teoiPnrbySBwPFEv61QbI zlLJHwpmnZUvuJuK0+BnUquLlPD++MdJhbuRoUvXdiuvRNnrLK2i2bNC4H0nrwtG FpDcOL/P92bIz7D6MGwt3dD9ulDID7x3do4mHygv/9p+7ScpzW8AO4kIGnCOUNWV GTXG3yqneppKJ+UOdI+Lolsb18GisEbvpENypES5uAkPMjQTRO2f7aYxja1J4Cwi Fa56OmUBU5bmpqXSYUZ5M/3R6N3F4OrxafJDaLwbrqcBMqdAgTw+4+VHEAh1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUev/eKREQFDgHKT2U+Sz4GG1mBIMwHwYDVR0j BBgwFoAUmy8AR21qwbqrBcWmJdwAwqWfmdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMC85QjJGMDA0NzZE NkFDMUJBQUIwNUM1QTYyNURDMDBDMkE1OUY5OUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUIyRjAwNDc2RDZBQzFCQUFCMDVDNUE2MjVEQzAwQzJBNTlG OTlENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2MDY3MThmLWY0YzYtNDc3NS04 OTU3LTk5ZDJiZDY2NjM2My8wLzMxMzEzMzJlMzUzOTJlMzIzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE76zANBgkqhkiG 9w0BAQsFAAOCAQEAg2FQgn/X4lpnn0y7wmD3zFm2ZA57CYPmvTC3LfWzXzLJI+47 sMCm4gKc7RiuoDsaiV+MjAyzPZsg9kATr5SRsEmFcw6pM5LuYhRawvEV9SswvFUG rjMcPfkvvvdToAqDUH5azBCuhSPaao+/yW/OG5LXOK0aAnViyR0TiSFWN1qOuVba YAeDCOqngaJxQZ0UMM/vKH/FldOBIfmcFBgNbbHYTiDMvciuHS2/RymPRgUPg6sA VYwLHQPERE1cNI2QXDz1cGww6cuXDzwsThmcJv1uQZgplw+EMcBqKpDGzj00WnaQ VZGrmcB33gS1UNIFb+mjXeQQyS65pyatVsx7nA== -----END CERTIFICATE-----Generated at Sat May 10 22:15:06 2025 by rpki-client