$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa File: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (raw, json) Hash identifier: IJ/QrpohwAAMEHf60VyOYZyE2rLKrvAARpcXl8wmM9I= Subject key identifier: F0:7A:D5:92:39:7F:DE:8D:0B:3D:9F:F0:53:5B:74:7A:3A:2C:12:DB Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 4CEA5913C802C5A860CE59EFF8E05CD9CD0878C2 Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa Signing time: Wed 19 Mar 2025 04:00:01 +0000 ROA not before: Wed 19 Mar 2025 03:55:01 +0000 ROA not after: Wed 18 Mar 2026 04:00:01 +0000 asID: 138818 IP address blocks: 114.141.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ea:59:13:c8:02:c5:a8:60:ce:59:ef:f8:e0:5c:d9:cd:08:78:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Mar 19 03:55:01 2025 GMT Not After : Mar 18 04:00:01 2026 GMT Subject: CN=F07AD592397FDE8D0B3D9FF0535B747A3A2C12DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:53:15:ef:ae:60:7d:e1:88:ca:2a:45:53:3d: 53:09:87:a4:03:50:4a:1d:92:f5:36:dd:da:57:a9: fe:7f:5f:7d:64:1d:b3:2d:90:10:1e:0e:54:66:43: ea:df:58:56:02:e0:5e:83:46:5c:27:28:0c:03:0d: 9c:66:35:77:66:30:f1:52:56:03:ba:36:d0:e7:09: 6e:f4:ea:de:03:91:50:55:c2:f6:87:cb:28:d6:2c: 2a:74:2e:d6:c6:ae:35:62:0f:30:82:97:01:1f:c3: 91:56:29:af:7c:66:10:68:70:dc:8a:f5:a0:69:fc: 0f:81:66:20:e3:6e:51:7b:ff:74:47:19:5e:e8:e9: a7:e3:b8:12:83:13:a6:46:33:a7:4e:ba:08:55:32: 9a:ae:ed:1c:23:6e:43:90:f9:36:3e:84:5f:aa:17: 25:b0:93:c5:6d:2f:ab:9e:ed:09:5c:a7:be:df:bd: 3e:a0:6d:e0:80:4a:d3:29:a4:2a:a6:29:d0:b5:ea: e8:00:81:23:f0:90:70:49:b0:4c:cd:e9:6c:37:45: 7a:05:05:28:11:d4:bb:f7:b5:3b:9b:36:e2:8b:83: d7:1a:93:7f:44:ca:e4:24:d7:d6:12:fd:35:cb:19: 7e:79:2f:f7:8c:a7:8e:ca:15:fe:80:45:89:46:20: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7A:D5:92:39:7F:DE:8D:0B:3D:9F:F0:53:5B:74:7A:3A:2C:12:DB X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.141.91.0/24 Signature Algorithm: sha256WithRSAEncryption 35:3e:ee:28:cb:6d:9e:c6:65:ac:b2:74:09:a2:28:3e:8d:cd: 4d:d6:66:40:f1:91:dd:c0:70:61:7c:59:2e:38:b4:1c:d2:c6: 55:b4:e4:ff:1c:54:96:71:61:23:d6:43:dd:72:bd:70:4f:1c: 19:2b:1e:a1:de:8f:66:c8:45:0d:0a:1b:c7:82:0b:70:15:70: 8e:bb:31:da:ab:d4:e8:a1:c5:e4:28:3c:0e:2e:05:3a:b4:6c: ec:58:7f:b3:45:a8:1e:e6:58:ee:ab:8e:70:dc:2c:4f:05:84: 29:80:94:f8:61:fb:3b:cf:e2:d7:83:65:20:a8:d7:be:11:9b: 5b:77:90:2d:5e:83:34:3a:8c:75:67:50:3b:ea:4c:7e:9b:3c: 7a:27:1e:9d:92:46:6c:cd:36:bc:45:44:94:71:b7:6d:bd:ac: 42:b3:f4:b8:bc:77:2f:37:b5:82:06:61:a1:9f:c5:57:cd:17: 06:46:c0:9b:35:5e:2a:36:87:56:43:6b:5f:d1:87:7c:58:a7: 93:1b:5e:7e:2c:ba:00:22:3b:26:15:8f:89:a9:9b:b4:c9:d8: da:5a:b3:c8:4f:df:10:64:68:b6:5d:f4:1b:72:1f:29:c0:53: 0e:e3:d6:df:80:ac:05:91:72:0b:57:84:ca:49:21:3d:a7:bd: 85:71:04:02 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTOpZE8gCxahgzlnv+OBc2c0IeMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNTAzMTkwMzU1MDFaFw0yNjAzMTgwNDAwMDFaMDMxMTAvBgNV BAMTKEYwN0FENTkyMzk3RkRFOEQwQjNEOUZGMDUzNUI3NDdBM0EyQzEyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6UxXvrmB94YjKKkVTPVMJh6QD UEodkvU23dpXqf5/X31kHbMtkBAeDlRmQ+rfWFYC4F6DRlwnKAwDDZxmNXdmMPFS VgO6NtDnCW706t4DkVBVwvaHyyjWLCp0LtbGrjViDzCClwEfw5FWKa98ZhBocNyK 9aBp/A+BZiDjblF7/3RHGV7o6afjuBKDE6ZGM6dOughVMpqu7RwjbkOQ+TY+hF+q FyWwk8VtL6ue7Qlcp77fvT6gbeCAStMppCqmKdC16ugAgSPwkHBJsEzN6Ww3RXoF BSgR1Lv3tTubNuKLg9cak39EyuQk19YS/TXLGX55L/eMp47KFf6ARYlGILTNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8HrVkjl/3o0LPZ/wU1t0ejosEtswHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3ZmM1NGZiLTcyNGUtNDMxNi1i OWJjLTFjNGIwNmVhNTdhZS8wLzMxMzEzNDJlMzEzNDMxMmUzOTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAco1bMA0GCSqG SIb3DQEBCwUAA4IBAQA1Pu4oy22exmWssnQJoig+jc1N1mZA8ZHdwHBhfFkuOLQc 0sZVtOT/HFSWcWEj1kPdcr1wTxwZKx6h3o9myEUNChvHggtwFXCOuzHaq9ToocXk KDwOLgU6tGzsWH+zRage5ljuq45w3CxPBYQpgJT4Yfs7z+LXg2UgqNe+EZtbd5At XoM0Oox1Z1A76kx+mzx6Jx6dkkZszTa8RUSUcbdtvaxCs/S4vHcvN7WCBmGhn8VX zRcGRsCbNV4qNodWQ2tf0Yd8WKeTG15+LLoAIjsmFY+JqZu0ydjaWrPIT98QZGi2 XfQbch8pwFMO49bfgKwFkXILV4TKSSE9p72FcQQC -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:43 2025 by rpki-client