$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3131322e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: R62+83THUrwfNFz7TFbP+HwG1QsKV9nP11ix6XIRM7M= Subject key identifier: C6:CD:0D:47:25:5B:A4:CF:D5:02:67:C3:6F:32:F5:C2:DA:FA:D3:85 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 515DBDBEC67D220E76E1A831102D8C080A4BAAA9 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32342d3234203d3e203234353235.roa Signing time: Sat 03 May 2025 09:00:03 +0000 ROA not before: Sat 03 May 2025 08:55:03 +0000 ROA not after: Sat 02 May 2026 09:00:03 +0000 asID: 24525 IP address blocks: 114.199.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5d:bd:be:c6:7d:22:0e:76:e1:a8:31:10:2d:8c:08:0a:4b:aa:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 3 08:55:03 2025 GMT Not After : May 2 09:00:03 2026 GMT Subject: CN=C6CD0D47255BA4CFD50267C36F32F5C2DAFAD385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:82:22:24:74:7f:d7:6d:6e:6c:57:86:40: bd:0b:6a:ff:e0:0a:c6:33:9f:6d:db:a8:e5:5a:b7: c5:59:ba:0d:bb:52:32:ea:45:56:69:3d:df:5a:03: 07:f8:14:7a:63:a4:31:d6:59:e2:5d:cc:4a:92:14: 1b:a0:b3:f8:28:e1:06:a3:36:da:3f:03:ed:92:74: fb:38:31:a2:a4:87:25:8d:4d:8f:43:1e:52:5d:f6: 9b:4d:17:73:bd:47:87:45:ce:23:d9:74:d4:a8:37: b1:a2:5b:6f:64:35:82:6f:d6:17:bf:13:df:d4:a6: c9:aa:9e:ac:b9:2d:20:9b:b6:0e:e2:03:cb:4e:72: 0e:8d:f8:e6:c2:40:61:b7:b6:df:10:b1:d6:42:c0: 5d:88:f7:cc:09:c3:e6:11:be:8b:38:c6:1b:7b:d5: 67:34:97:49:bf:28:b8:db:17:46:33:82:0d:cc:87: aa:cc:cd:f7:a2:d0:c8:42:05:81:37:9a:9c:72:35: 70:7e:91:22:d5:40:20:9e:b7:b1:5b:89:8d:b8:a2: 67:63:02:96:7b:cd:40:48:2e:8f:30:c9:08:92:13: b2:2b:8e:67:62:48:c1:4a:f0:e5:9c:ee:58:bd:ab: 54:0d:b1:a7:47:0b:55:03:3c:d6:a6:cc:41:f6:85: cd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CD:0D:47:25:5B:A4:CF:D5:02:67:C3:6F:32:F5:C2:DA:FA:D3:85 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.112.0/24 Signature Algorithm: sha256WithRSAEncryption 91:39:a8:a8:f9:e6:12:5f:5e:3a:ce:3f:d5:07:b5:e0:ac:ed: 87:80:2d:71:ed:b8:8b:ea:a8:8a:a5:fc:95:52:6c:0a:a7:e0: 31:b5:80:4f:e8:c0:9e:11:37:a1:54:90:31:7d:65:7f:f6:b9: 6e:b5:c1:45:8d:4c:84:8b:36:10:a7:0f:2a:17:e2:c8:ae:5b: d7:c8:50:45:73:2b:38:14:e4:a6:1e:9c:05:0a:54:2e:85:76: 00:28:e2:ea:5d:55:c0:30:90:ef:ae:bd:37:3c:40:71:a6:a3: f8:a2:09:60:86:57:84:a6:b6:96:bb:07:07:f6:f8:75:4c:10: 84:b3:0e:a9:a2:ed:d2:14:fb:68:6e:52:84:dc:23:f1:fa:4e: cb:3e:6d:f8:dc:b0:f6:8c:43:05:f8:8b:c2:0b:6b:38:e3:5a: 9f:a6:7f:da:e8:91:9e:d8:23:81:a2:44:98:fa:eb:d5:bc:8e: 6b:8c:52:b3:d0:51:2b:f8:ba:8f:69:fc:49:80:1f:1e:6d:af: d1:d8:ad:33:eb:ff:df:1a:55:b5:75:4c:fa:34:ab:89:64:d7: 0b:24:68:86:9d:f9:18:8a:4b:da:d4:38:0f:8a:14:1d:c1:54: 2e:1d:be:b6:9f:0b:fe:1d:94:c6:f4:5a:a4:30:b9:5c:c0:19: 0c:a6:50:7d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUV29vsZ9Ig524agxEC2MCApLqqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA1MDMwODU1MDNaFw0yNjA1MDIwOTAwMDNaMDMxMTAvBgNV BAMTKEM2Q0QwRDQ3MjU1QkE0Q0ZENTAyNjdDMzZGMzJGNUMyREFGQUQzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuYIiJHR/121ubFeGQL0Lav/g CsYzn23bqOVat8VZug27UjLqRVZpPd9aAwf4FHpjpDHWWeJdzEqSFBugs/go4Qaj Nto/A+2SdPs4MaKkhyWNTY9DHlJd9ptNF3O9R4dFziPZdNSoN7GiW29kNYJv1he/ E9/Upsmqnqy5LSCbtg7iA8tOcg6N+ObCQGG3tt8QsdZCwF2I98wJw+YRvos4xht7 1Wc0l0m/KLjbF0Yzgg3Mh6rMzfei0MhCBYE3mpxyNXB+kSLVQCCet7FbiY24omdj ApZ7zUBILo8wyQiSE7IrjmdiSMFK8OWc7li9q1QNsadHC1UDPNamzEH2hc33AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxs0NRyVbpM/VAmfDbzL1wtr604UwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdwMA0GCSqG SIb3DQEBCwUAA4IBAQCROaio+eYSX146zj/VB7XgrO2HgC1x7biL6qiKpfyVUmwK p+AxtYBP6MCeETehVJAxfWV/9rlutcFFjUyEizYQpw8qF+LIrlvXyFBFcys4FOSm HpwFClQuhXYAKOLqXVXAMJDvrr03PEBxpqP4oglghleEpraWuwcH9vh1TBCEsw6p ou3SFPtoblKE3CPx+k7LPm343LD2jEMF+IvCC2s441qfpn/a6JGe2COBokSY+uvV vI5rjFKz0FEr+LqPafxJgB8eba/R2K0z6//fGlW1dUz6NKuJZNcLJGiGnfkYikva 1DgPihQdwVQuHb62nwv+HZTG9FqkMLlcwBkMplB9 -----END CERTIFICATE-----Generated at Sun May 11 07:09:48 2025 by rpki-client