$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: o6P2KjiNyOX+X2GrGTQ1lv3TQAO/ZUWT5MSSaKiuCJM= Subject key identifier: 3E:C9:2C:D0:E2:06:9B:2C:CD:BF:A2:63:18:1B:2F:A6:CE:A9:31:F2 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 2A5F2FE0BA27220EF440B12D7DAA3CF09E82BFBF Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa Signing time: Sat 03 May 2025 09:00:01 +0000 ROA not before: Sat 03 May 2025 08:55:01 +0000 ROA not after: Sat 02 May 2026 09:00:01 +0000 asID: 24525 IP address blocks: 114.199.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5f:2f:e0:ba:27:22:0e:f4:40:b1:2d:7d:aa:3c:f0:9e:82:bf:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 3 08:55:01 2025 GMT Not After : May 2 09:00:01 2026 GMT Subject: CN=3EC92CD0E2069B2CCDBFA263181B2FA6CEA931F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5e:8c:40:63:14:fe:38:0a:8c:60:f2:7f:cb: e3:a1:01:91:ca:4a:ac:50:f0:64:e7:71:23:e3:8f: 85:6f:54:38:20:31:7f:4a:24:a8:75:13:e9:54:29: 17:b6:d7:77:fa:53:15:93:24:f8:d8:16:c8:e5:60: 0c:1a:b4:60:25:3d:75:43:e0:d1:d8:11:ee:70:f3: 83:38:c4:ae:66:12:3a:b3:5a:ca:9a:30:c3:5b:45: 89:eb:67:60:62:d1:4e:30:ba:6e:b7:e2:18:02:25: c9:d5:1c:61:08:2a:2a:a2:11:7b:79:0e:6d:45:d9: 72:90:b3:24:34:49:bb:f3:13:29:a8:97:70:38:db: 2c:dc:e6:89:b0:99:ed:0e:3f:35:cd:f7:d3:ba:fa: f3:2d:c4:03:e9:28:ca:0d:4c:35:d8:33:4d:47:1c: f9:ec:8c:cc:e5:79:fa:87:f4:e0:56:d8:35:0b:e9: 93:49:03:b5:5e:70:e5:7c:3a:5e:04:23:8e:23:f8: ad:74:18:9d:08:fb:9f:10:4c:78:37:b1:d6:6a:07: 3b:8a:43:fc:b1:c1:9f:5d:54:92:b2:c0:d5:4a:be: f4:3c:6b:08:4f:c1:bd:d4:fb:5a:96:c5:8f:08:34: 26:30:62:5e:3e:c3:23:86:17:a2:f5:f7:54:ff:e4: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C9:2C:D0:E2:06:9B:2C:CD:BF:A2:63:18:1B:2F:A6:CE:A9:31:F2 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.102.0/24 Signature Algorithm: sha256WithRSAEncryption aa:66:1a:09:75:f5:72:f5:09:2c:8d:c8:57:b2:3f:24:2e:87: 6e:d3:d7:9f:e4:25:89:45:9c:a6:39:f9:d4:4e:fe:5c:38:40: 33:51:58:65:31:c6:84:fa:6d:3b:b1:af:07:6e:c1:ef:07:88: 2e:f5:84:a6:78:51:c6:4a:39:69:4f:78:0d:8e:ab:57:d1:e0: a5:10:dc:d0:e7:68:e4:71:61:30:f6:3c:65:79:62:31:5f:02: dc:2b:be:9d:3e:5a:90:ca:93:55:bd:0e:a4:13:a8:e1:9d:0d: 91:26:d8:b9:df:d7:0d:d3:27:b5:17:7c:16:71:8c:8a:eb:c9: ea:3f:c1:f4:1b:38:06:79:95:3c:ca:59:30:d8:f0:a0:48:f3: 83:09:77:d8:e6:f6:47:8d:c7:dc:32:e8:e8:22:0f:e5:49:d0: f7:3c:c0:69:f1:79:db:28:54:33:01:0c:cc:a5:5c:5f:98:c8: 6a:ac:e6:65:19:f7:0e:97:7e:bc:2b:b5:b7:bf:5a:b4:34:84: 16:24:14:37:18:8d:0f:df:ea:6c:c0:8a:9f:99:a5:67:b4:c9: 7b:a3:15:39:e6:55:33:e9:16:f9:52:14:2d:9d:9c:56:2a:f3: c7:cd:52:66:34:ff:3c:e1:6a:17:16:ef:a1:5e:e4:f2:8a:0b: 17:88:3b:c3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKl8v4LonIg70QLEtfao88J6Cv78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA1MDMwODU1MDFaFw0yNjA1MDIwOTAwMDFaMDMxMTAvBgNV BAMTKDNFQzkyQ0QwRTIwNjlCMkNDREJGQTI2MzE4MUIyRkE2Q0VBOTMxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeXoxAYxT+OAqMYPJ/y+OhAZHK SqxQ8GTncSPjj4VvVDggMX9KJKh1E+lUKRe213f6UxWTJPjYFsjlYAwatGAlPXVD 4NHYEe5w84M4xK5mEjqzWsqaMMNbRYnrZ2Bi0U4wum634hgCJcnVHGEIKiqiEXt5 Dm1F2XKQsyQ0SbvzEymol3A42yzc5omwme0OPzXN99O6+vMtxAPpKMoNTDXYM01H HPnsjMzlefqH9OBW2DUL6ZNJA7VecOV8Ol4EI44j+K10GJ0I+58QTHg3sdZqBzuK Q/yxwZ9dVJKywNVKvvQ8awhPwb3U+1qWxY8INCYwYl4+wyOGF6L191T/5L4nAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPsks0OIGmyzNv6JjGBsvps6pMfIwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdmMA0GCSqG SIb3DQEBCwUAA4IBAQCqZhoJdfVy9QksjchXsj8kLodu09ef5CWJRZymOfnUTv5c OEAzUVhlMcaE+m07sa8HbsHvB4gu9YSmeFHGSjlpT3gNjqtX0eClENzQ52jkcWEw 9jxleWIxXwLcK76dPlqQypNVvQ6kE6jhnQ2RJti539cN0ye1F3wWcYyK68nqP8H0 GzgGeZU8ylkw2PCgSPODCXfY5vZHjcfcMujoIg/lSdD3PMBp8XnbKFQzAQzMpVxf mMhqrOZlGfcOl368K7W3v1q0NIQWJBQ3GI0P3+pswIqfmaVntMl7oxU55lUz6Rb5 UhQtnZxWKvPHzVJmNP884WoXFu+hXuTyigsXiDvD -----END CERTIFICATE-----Generated at Sun May 11 07:36:18 2025 by rpki-client