$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131362e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3131362e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: eem2K3f8pGZDaa0YpF1xvcAOAXleAKIZINkyaAgKwiM= Subject key identifier: A8:43:AB:44:57:AD:A2:85:6A:EC:36:68:0C:DB:08:E8:C0:DB:98:B1 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 7DE96EC8784F159F054463072A57FD8A05442C68 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131362e302f32342d3234203d3e203234353235.roa Signing time: Sat 03 May 2025 09:00:03 +0000 ROA not before: Sat 03 May 2025 08:55:03 +0000 ROA not after: Sat 02 May 2026 09:00:03 +0000 asID: 24525 IP address blocks: 114.199.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e9:6e:c8:78:4f:15:9f:05:44:63:07:2a:57:fd:8a:05:44:2c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 3 08:55:03 2025 GMT Not After : May 2 09:00:03 2026 GMT Subject: CN=A843AB4457ADA2856AEC36680CDB08E8C0DB98B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a1:d7:4a:fd:c0:a8:bd:f8:25:39:bb:c2:f5: 0d:b2:cc:f9:29:9e:42:eb:d1:1e:01:8a:f8:b3:ca: 74:5a:5b:4d:13:a6:47:4d:6b:9e:d3:06:08:a2:bb: e1:77:c9:3b:c3:42:f5:70:5d:d4:2f:b9:06:a8:20: 0c:0f:64:12:9d:a3:6a:a4:6d:0f:80:c5:a6:3b:5d: 42:b0:dd:5f:e1:ec:a7:ad:7c:55:dc:72:15:af:a1: 47:d6:9e:50:08:e1:c0:b7:76:c9:2a:b0:56:a2:03: f8:f6:fd:3b:b2:8b:ba:27:4b:cb:6c:bb:d6:c5:f9: 47:6f:8c:b3:b9:d5:27:86:d9:8f:59:5a:01:eb:af: 53:23:67:22:69:6c:4a:02:4d:1d:e2:0c:c6:92:a7: 19:7e:71:ba:b0:33:41:e7:52:d3:08:3c:ae:5c:be: b2:4b:af:af:a0:17:27:51:48:0f:34:87:a7:5d:7c: 53:87:32:69:84:d0:8d:6f:13:48:90:97:04:84:16: e7:76:a4:57:2f:d8:7a:5b:84:db:3d:80:7d:4c:b9: cd:01:40:46:ed:09:c6:7f:c0:59:60:f7:af:75:3b: 60:16:59:4b:5a:72:23:c9:26:79:27:f9:cd:cf:57: 2b:e1:fc:67:2e:de:eb:41:d4:c3:9b:05:f6:9c:00: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:43:AB:44:57:AD:A2:85:6A:EC:36:68:0C:DB:08:E8:C0:DB:98:B1 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131362e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.116.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:04:5d:30:b9:11:42:49:94:36:ad:00:3c:40:12:2e:0f:90: 94:09:15:a7:fe:9c:bf:7f:50:b2:a2:6f:aa:73:e9:8c:72:b4: e7:7d:71:a5:88:9e:93:77:da:c4:6b:e6:ee:5a:e9:c5:2e:ba: 15:6a:54:b7:91:55:ff:c8:2a:08:6b:83:ab:65:5c:5a:0b:c8: 3a:45:6b:f6:4a:37:0b:79:51:db:32:41:80:36:94:2e:ba:81: f5:b9:91:fb:d3:e1:32:b5:17:9e:50:c5:d5:f1:22:44:00:ef: 24:b6:b8:6d:1c:ec:ab:0d:34:59:b1:73:26:60:8c:13:ba:28: 6d:7b:d9:1b:0d:33:0d:2b:54:a6:3b:cf:8c:ac:42:85:7c:8f: 7e:1f:06:9d:c2:ed:5f:eb:6c:5e:64:13:d2:e6:f3:c7:e9:29: 3a:da:52:93:da:ec:74:d5:84:b2:2c:35:82:03:a7:c7:3b:57: 16:55:66:49:dd:94:94:cf:87:fc:d0:c2:93:1d:b1:e4:d9:e6: ad:c9:92:0d:0e:f1:5e:e6:03:dd:83:91:18:d7:94:f5:08:91: 44:57:d6:69:39:c4:21:bc:f7:6a:01:47:d8:3f:48:5f:f8:0f: 16:7a:95:15:66:a9:13:df:1a:92:3f:a5:15:28:68:88:f8:66: 19:fc:fc:dc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfeluyHhPFZ8FRGMHKlf9igVELGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA1MDMwODU1MDNaFw0yNjA1MDIwOTAwMDNaMDMxMTAvBgNV BAMTKEE4NDNBQjQ0NTdBREEyODU2QUVDMzY2ODBDREIwOEU4QzBEQjk4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDioddK/cCovfglObvC9Q2yzPkp nkLr0R4BivizynRaW00TpkdNa57TBgiiu+F3yTvDQvVwXdQvuQaoIAwPZBKdo2qk bQ+AxaY7XUKw3V/h7KetfFXcchWvoUfWnlAI4cC3dskqsFaiA/j2/Tuyi7onS8ts u9bF+UdvjLO51SeG2Y9ZWgHrr1MjZyJpbEoCTR3iDMaSpxl+cbqwM0HnUtMIPK5c vrJLr6+gFydRSA80h6ddfFOHMmmE0I1vE0iQlwSEFud2pFcv2HpbhNs9gH1Muc0B QEbtCcZ/wFlg9691O2AWWUtaciPJJnkn+c3PVyvh/Gcu3utB1MObBfacAEg1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqEOrRFetooVq7DZoDNsI6MDbmLEwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsd0MA0GCSqG SIb3DQEBCwUAA4IBAQAdBF0wuRFCSZQ2rQA8QBIuD5CUCRWn/py/f1Cyom+qc+mM crTnfXGliJ6Td9rEa+buWunFLroValS3kVX/yCoIa4OrZVxaC8g6RWv2SjcLeVHb MkGANpQuuoH1uZH70+EytReeUMXV8SJEAO8ktrhtHOyrDTRZsXMmYIwTuihte9kb DTMNK1SmO8+MrEKFfI9+Hwadwu1f62xeZBPS5vPH6Sk62lKT2ux01YSyLDWCA6fH O1cWVWZJ3ZSUz4f80MKTHbHk2eatyZINDvFe5gPdg5EY15T1CJFEV9ZpOcQhvPdq AUfYP0hf+A8WepUVZqkT3xqSP6UVKGiI+GYZ/Pzc -----END CERTIFICATE-----Generated at Sun May 11 07:36:19 2025 by rpki-client