$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa File: 3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa (raw, json) Hash identifier: bSaTuo9sDugIK74bgWEH/NaeFrepofco9BHUfKaMqME= Subject key identifier: 67:FF:BA:58:09:F3:01:99:DC:05:30:24:3E:A2:8E:56:7A:74:2B:B2 Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 1A1DAF3DD66793FFEC7573C2347E01544936EDF4 Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa Signing time: Mon 23 Jun 2025 18:00:00 +0000 ROA not before: Mon 23 Jun 2025 17:55:00 +0000 ROA not after: Mon 22 Jun 2026 18:00:00 +0000 asID: 4787 IP address blocks: 116.206.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1d:af:3d:d6:67:93:ff:ec:75:73:c2:34:7e:01:54:49:36:ed:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Jun 23 17:55:00 2025 GMT Not After : Jun 22 18:00:00 2026 GMT Subject: CN=67FFBA5809F30199DC0530243EA28E567A742BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:28:16:cf:19:65:e4:c2:f2:11:50:cf:46: 6a:78:34:b2:48:a0:49:c0:9b:d2:9b:e6:bf:4b:08: d7:7f:7f:a5:fe:1d:10:b8:e9:92:04:f2:78:39:34: 57:70:7c:bf:15:2f:59:fc:e3:25:07:d6:6d:29:fd: 14:b6:8c:74:24:d6:a6:1e:9e:cd:be:4f:f7:09:d5: 2b:b1:c9:90:79:92:f1:98:55:5d:70:87:76:cf:44: f1:0c:0b:44:1f:4a:bd:b8:66:b6:1d:28:40:55:da: cd:53:cc:14:6e:50:07:08:98:ad:f8:f0:09:04:5c: de:22:f8:ef:b8:4b:9e:c5:f3:c9:11:2b:65:ac:91: 86:48:fb:3c:f3:f0:71:4a:d9:6e:53:ed:91:21:19: 25:d5:00:62:57:78:fd:55:dc:4d:83:7b:7d:c3:09: e3:f0:75:ed:6f:ab:99:4e:e9:01:e1:c1:23:f8:2f: 34:81:1d:17:19:41:32:29:17:98:92:eb:36:df:ea: fd:fa:0c:fe:e4:e5:44:86:24:f5:d5:ad:30:90:a6: 54:c4:24:39:50:d1:e9:30:e6:18:2b:43:89:4d:9d: 4f:41:f4:1a:37:bf:40:d3:b0:1b:bb:f6:d2:e0:07: 5e:8d:7b:02:18:c6:81:55:a9:10:a2:da:a7:8a:56: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FF:BA:58:09:F3:01:99:DC:05:30:24:3E:A2:8E:56:7A:74:2B:B2 X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233322e302f32322d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.206.232.0/22 Signature Algorithm: sha256WithRSAEncryption b6:d4:16:f0:c3:5c:51:4f:42:60:0a:3e:c4:04:48:d5:60:7d: 0a:49:f2:18:bd:fc:79:fc:93:62:e6:1c:46:40:79:bd:e0:54: d5:df:a2:ea:34:f7:6b:24:d1:2b:22:40:08:3d:a3:9b:d5:2c: c0:9e:b6:be:d5:bd:15:b2:e6:5f:ff:97:95:0b:ee:b1:67:8a: 86:a9:7e:94:62:85:92:d9:f4:e6:ca:c9:c0:6f:39:c3:7b:ce: ab:6b:6e:7a:c1:04:4d:e1:1e:e8:70:58:db:65:00:28:ae:b2: 1a:3c:82:2c:11:1e:e4:52:b2:bb:13:b2:2f:40:88:9f:55:8e: 5c:ef:f7:ee:04:0e:5e:13:e1:9a:2d:6c:b0:ef:b9:63:dc:56: be:3f:c8:bb:72:06:6a:b9:d8:17:3a:ff:7d:93:57:77:98:52: 9e:47:3c:dc:2a:ed:ef:06:8d:6a:47:e1:3e:7d:d0:82:f2:bf: 3a:16:74:da:d9:ea:68:ee:35:8c:b5:16:bb:a7:c0:d8:98:70: 18:a3:0e:b4:b6:7f:35:ab:b0:42:4f:54:79:53:84:fc:d8:e8: 34:ea:67:7c:b2:3e:2b:aa:cb:51:af:4f:13:c4:6e:cf:a6:b6: 30:db:94:a7:6e:6b:e1:7f:c8:54:88:cd:90:89:86:d7:3e:1c: 4a:e3:9e:50 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGh2vPdZnk//sdXPCNH4BVEk27fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yNTA2MjMxNzU1MDBaFw0yNjA2MjIxODAwMDBaMDMxMTAvBgNV BAMTKDY3RkZCQTU4MDlGMzAxOTlEQzA1MzAyNDNFQTI4RTU2N0E3NDJCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyygWzxll5MLyEVDPRmp4NLJI oEnAm9Kb5r9LCNd/f6X+HRC46ZIE8ng5NFdwfL8VL1n84yUH1m0p/RS2jHQk1qYe ns2+T/cJ1SuxyZB5kvGYVV1wh3bPRPEMC0QfSr24ZrYdKEBV2s1TzBRuUAcImK34 8AkEXN4i+O+4S57F88kRK2WskYZI+zzz8HFK2W5T7ZEhGSXVAGJXeP1V3E2De33D CePwde1vq5lO6QHhwSP4LzSBHRcZQTIpF5iS6zbf6v36DP7k5USGJPXVrTCQplTE JDlQ0ekw5hgrQ4lNnU9B9Bo3v0DTsBu79tLgB16NewIYxoFVqRCi2qeKVrInAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZ/+6WAnzAZncBTAkPqKOVnp0K7IwHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzEzNjJlMzIzMDM2MmUzMjMzMzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnTO6DANBgkqhkiG 9w0BAQsFAAOCAQEAttQW8MNcUU9CYAo+xARI1WB9CknyGL38efyTYuYcRkB5veBU 1d+i6jT3ayTRKyJACD2jm9UswJ62vtW9FbLmX/+XlQvusWeKhql+lGKFktn05srJ wG85w3vOq2tuesEETeEe6HBY22UAKK6yGjyCLBEe5FKyuxOyL0CIn1WOXO/37gQO XhPhmi1ssO+5Y9xWvj/Iu3IGarnYFzr/fZNXd5hSnkc83Crt7waNakfhPn3QgvK/ OhZ02tnqaO41jLUWu6fA2JhwGKMOtLZ/NauwQk9UeVOE/NjoNOpnfLI+K6rLUa9P E8Ruz6a2MNuUp25r4X/IVIjNkImG1z4cSuOeUA== -----END CERTIFICATE-----Generated at Mon Jun 30 15:11:53 2025 by rpki-client