$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32342d3234203d3e203234353235.roa File: 3131342e3139392e3132362e302f32342d3234203d3e203234353235.roa (raw, json) Hash identifier: W5OQQolSw979UHIxs2bR9rdEXWQVvZrOdRpBR9Cq+ag= Subject key identifier: EE:E4:17:49:24:BB:8B:8F:DF:3F:77:3D:DA:44:EF:00:1F:C7:47:50 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 24DD034D117B9DDCF9D69551301FB4645342B570 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32342d3234203d3e203234353235.roa Signing time: Sat 03 May 2025 09:00:01 +0000 ROA not before: Sat 03 May 2025 08:55:01 +0000 ROA not after: Sat 02 May 2026 09:00:01 +0000 asID: 24525 IP address blocks: 114.199.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:dd:03:4d:11:7b:9d:dc:f9:d6:95:51:30:1f:b4:64:53:42:b5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: May 3 08:55:01 2025 GMT Not After : May 2 09:00:01 2026 GMT Subject: CN=EEE4174924BB8B8FDF3F773DDA44EF001FC74750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:c9:c7:80:f9:7e:c1:3f:38:94:82:ec:6b: fd:8a:59:43:8c:59:47:0e:30:49:1f:3d:cb:44:3c: 09:89:2b:18:9f:87:d6:d3:af:fd:47:00:db:1f:ec: 2f:94:9c:72:06:c5:70:fc:8a:71:84:1b:f6:20:1a: 14:24:66:00:b0:8c:44:56:a2:fe:45:bd:d1:f0:23: 16:fe:cc:68:ed:30:12:6e:4e:00:d9:b6:a8:4c:40: ae:00:93:27:5e:61:1c:f3:26:c0:50:3f:c9:20:fa: 1c:95:d0:bd:77:b0:fa:94:98:b0:63:6f:68:aa:51: 60:b3:89:db:c0:d4:b4:03:a3:5d:9d:18:ef:2b:2f: 50:12:e0:1d:91:e6:81:6d:ce:a4:b5:0b:20:d4:53: 76:43:67:68:2b:59:06:a5:19:e1:03:95:6c:bd:d7: 35:a5:7c:2b:c2:b0:a3:0e:c3:c8:e0:86:20:ff:6d: 47:54:77:46:78:0c:fc:6b:79:a1:c1:ed:5a:64:f3: 17:92:ed:5c:c3:3b:a6:1c:68:21:cb:be:2d:36:e3: df:5c:75:62:5b:ee:2e:80:09:9f:69:01:10:a4:ef: d2:c2:eb:cb:fe:01:15:a1:87:8d:4e:1c:2e:25:77: a4:fc:29:af:09:2c:d1:f7:77:39:cc:95:1d:22:0b: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E4:17:49:24:BB:8B:8F:DF:3F:77:3D:DA:44:EF:00:1F:C7:47:50 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32342d3234203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.126.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:80:35:11:7f:d6:5e:cd:fd:52:cd:46:cf:ca:0e:1a:3e:28: 07:84:16:eb:13:a5:60:2c:ac:ac:3e:24:64:be:e8:dc:b8:73: 1e:c8:32:94:17:40:e5:f3:e8:21:56:86:0c:ac:a4:1d:06:d5: 7b:2a:17:a9:4d:91:73:9c:f1:fd:a1:82:1b:4f:9b:b9:ae:f9: 63:7e:04:fa:0c:77:4a:a7:db:c4:39:af:bc:06:7c:c8:0c:c6: 5b:79:66:61:35:cc:ee:ee:4d:f8:25:31:ed:38:ed:5e:53:1b: ea:5f:e6:ad:54:48:f5:bd:a7:5e:71:68:ef:95:83:fe:26:c3: 05:2b:d4:20:a2:0a:c9:2f:f6:fc:9e:2d:dc:5a:b4:82:88:b3: ec:ec:bd:eb:9f:03:bb:42:e3:37:69:f6:fd:d9:3a:47:2c:56: 2e:d2:95:6a:04:40:9f:f6:24:9f:26:2d:7d:53:8b:1f:9e:88: ec:19:e5:b5:a7:c2:c0:8c:9f:46:0b:22:d7:bf:32:a9:86:6e: 8a:fc:31:ea:5d:2e:34:f5:ab:b5:10:2e:bf:60:ba:a9:14:b3: 91:80:e6:15:b5:ba:e0:c5:12:9a:93:28:48:48:71:15:fd:75: e0:09:52:65:35:ef:1f:84:d2:f1:54:a7:8d:3f:8f:54:9d:12: ff:5e:39:36 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJN0DTRF7ndz51pVRMB+0ZFNCtXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA1MDMwODU1MDFaFw0yNjA1MDIwOTAwMDFaMDMxMTAvBgNV BAMTKEVFRTQxNzQ5MjRCQjhCOEZERjNGNzczRERBNDRFRjAwMUZDNzQ3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ncnHgPl+wT84lILsa/2KWUOM WUcOMEkfPctEPAmJKxifh9bTr/1HANsf7C+UnHIGxXD8inGEG/YgGhQkZgCwjERW ov5FvdHwIxb+zGjtMBJuTgDZtqhMQK4AkydeYRzzJsBQP8kg+hyV0L13sPqUmLBj b2iqUWCzidvA1LQDo12dGO8rL1AS4B2R5oFtzqS1CyDUU3ZDZ2grWQalGeEDlWy9 1zWlfCvCsKMOw8jghiD/bUdUd0Z4DPxreaHB7Vpk8xeS7VzDO6YcaCHLvi02499c dWJb7i6ACZ9pARCk79LC68v+ARWhh41OHC4ld6T8Ka8JLNH3dznMlR0iC0XpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7uQXSSS7i4/fP3c92kTvAB/HR1AwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsd+MA0GCSqG SIb3DQEBCwUAA4IBAQBMgDURf9Zezf1SzUbPyg4aPigHhBbrE6VgLKysPiRkvujc uHMeyDKUF0Dl8+ghVoYMrKQdBtV7KhepTZFznPH9oYIbT5u5rvljfgT6DHdKp9vE Oa+8BnzIDMZbeWZhNczu7k34JTHtOO1eUxvqX+atVEj1vadecWjvlYP+JsMFK9Qg ogrJL/b8ni3cWrSCiLPs7L3rnwO7QuM3afb92TpHLFYu0pVqBECf9iSfJi19U4sf nojsGeW1p8LAjJ9GCyLXvzKphm6K/DHqXS409au1EC6/YLqpFLORgOYVtbrgxRKa kyhISHEV/XXgCVJlNe8fhNLxVKeNP49UnRL/Xjk2 -----END CERTIFICATE-----Generated at Sun May 11 06:31:46 2025 by rpki-client