$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: 74RWOLaag/5NmURDfNr9Lc9WAZttaifDiyLxjjXG8bg= Subject key identifier: 39:F2:AE:EE:25:BE:BB:44:A0:BC:A6:62:D6:CE:4E:D0:01:6B:18:40 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 66ABA4DAF94D8833AA38AA78F37A3F1F3147387C Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa Signing time: Sat 03 May 2025 09:00:05 +0000 ROA not before: Sat 03 May 2025 08:55:05 +0000 ROA not after: Sat 02 May 2026 09:00:05 +0000 asID: 24525 IP address blocks: 114.199.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ab:a4:da:f9:4d:88:33:aa:38:aa:78:f3:7a:3f:1f:31:47:38:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 3 08:55:05 2025 GMT Not After : May 2 09:00:05 2026 GMT Subject: CN=39F2AEEE25BEBB44A0BCA662D6CE4ED0016B1840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:85:97:6a:ff:b0:64:c0:e8:a0:97:17:53: 25:06:13:5e:c2:23:b4:db:b7:ad:ac:8f:0b:be:db: 98:35:5d:8a:fd:2c:7d:51:02:3e:a2:6f:e2:ec:90: fe:7d:2a:a4:37:95:c0:51:4d:df:32:e4:d3:09:c6: 64:54:29:a1:6a:c7:75:ad:98:c1:7a:75:54:1e:f3: 53:ee:f1:7b:2f:20:d5:26:7b:2a:41:f4:bb:27:8b: a3:30:0c:51:2b:ca:52:66:91:30:4a:5e:65:02:40: a8:9b:b5:1c:0c:97:d4:6c:f9:fc:8f:98:7e:00:88: 3c:10:e1:8f:a3:6a:a2:a0:91:c2:a7:f8:0b:ad:b0: 64:ca:8e:6f:d1:4c:5f:f4:22:7e:95:3d:7b:5f:9f: 1e:54:82:e9:94:66:74:3b:2f:9c:b7:af:65:97:0b: 28:df:79:3b:a2:77:3d:e0:58:a5:d3:26:2d:64:35: 80:31:d8:74:f0:4b:42:04:16:a9:0e:94:88:de:22: 6e:d1:f1:f5:6a:7a:cc:26:9e:f9:2c:21:07:90:b2: 6d:b8:7c:02:79:01:eb:b2:f2:3a:6a:7d:cc:56:8d: ff:a1:c9:25:fd:b7:0a:37:8b:61:0a:1e:13:18:36: ab:8a:e9:e1:9b:fa:19:9e:02:30:53:7b:0a:2f:d0: c8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F2:AE:EE:25:BE:BB:44:A0:BC:A6:62:D6:CE:4E:D0:01:6B:18:40 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.121.0/24 Signature Algorithm: sha256WithRSAEncryption 58:ce:ab:62:d8:3f:dd:5b:3f:e6:bb:12:cf:b6:4e:51:b1:dc: b6:01:ac:2b:6d:6f:21:bc:3b:62:67:47:ed:88:bf:8d:08:e8: 21:c0:cc:92:97:b8:6d:ad:0f:2b:5b:a1:22:93:58:5a:5f:a9: 23:3b:63:35:5a:83:5d:4a:e8:3f:78:28:71:6e:85:73:60:e5: ac:81:d6:58:81:85:60:04:ec:28:22:74:a3:e9:71:8f:0d:68: c0:9c:89:b5:43:ee:c9:b2:c4:a1:35:40:e6:b4:42:40:24:6c: c7:a1:19:96:9e:04:3f:d6:50:f7:d9:d7:7d:fd:ea:9f:49:f2: a9:9e:37:25:1f:4a:ed:a4:68:59:37:33:c6:be:e6:36:eb:d4: 17:5c:55:4f:23:91:e6:7d:ac:48:da:36:a0:17:9c:99:20:c4: 09:7b:e4:45:ae:39:56:e3:4c:4d:a0:6a:eb:16:75:a8:3a:27: 14:23:23:38:6b:e9:4c:e3:f0:58:2a:20:30:dd:87:88:f5:d7: 87:da:e8:39:e9:a6:ff:ed:ba:19:b8:4b:8b:7f:c3:95:72:e8: c5:c4:de:f2:1d:35:68:64:fa:93:71:2a:1b:ba:ad:68:c4:85: db:1f:9b:55:03:90:47:8e:28:a7:4f:f6:40:1e:82:60:1e:17: 5f:fa:57:56 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZquk2vlNiDOqOKp483o/HzFHOHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA1MDMwODU1MDVaFw0yNjA1MDIwOTAwMDVaMDMxMTAvBgNV BAMTKDM5RjJBRUVFMjVCRUJCNDRBMEJDQTY2MkQ2Q0U0RUQwMDE2QjE4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LoWXav+wZMDooJcXUyUGE17C I7Tbt62sjwu+25g1XYr9LH1RAj6ib+LskP59KqQ3lcBRTd8y5NMJxmRUKaFqx3Wt mMF6dVQe81Pu8XsvINUmeypB9Lsni6MwDFErylJmkTBKXmUCQKibtRwMl9Rs+fyP mH4AiDwQ4Y+jaqKgkcKn+AutsGTKjm/RTF/0In6VPXtfnx5UgumUZnQ7L5y3r2WX CyjfeTuidz3gWKXTJi1kNYAx2HTwS0IEFqkOlIjeIm7R8fVqeswmnvksIQeQsm24 fAJ5Aeuy8jpqfcxWjf+hySX9two3i2EKHhMYNquK6eGb+hmeAjBTewov0MhrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOfKu7iW+u0SgvKZi1s5O0AFrGEAwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsd5MA0GCSqG SIb3DQEBCwUAA4IBAQBYzqti2D/dWz/muxLPtk5Rsdy2AawrbW8hvDtiZ0ftiL+N COghwMySl7htrQ8rW6Eik1haX6kjO2M1WoNdSug/eChxboVzYOWsgdZYgYVgBOwo InSj6XGPDWjAnIm1Q+7JssShNUDmtEJAJGzHoRmWngQ/1lD32dd9/eqfSfKpnjcl H0rtpGhZNzPGvuY269QXXFVPI5HmfaxI2jagF5yZIMQJe+RFrjlW40xNoGrrFnWo OicUIyM4a+lM4/BYKiAw3YeI9deH2ug56ab/7boZuEuLf8OVcujFxN7yHTVoZPqT cSobuq1oxIXbH5tVA5BHjiinT/ZAHoJgHhdf+ldW -----END CERTIFICATE-----Generated at Sun May 11 07:03:28 2025 by rpki-client