$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa File: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (raw, json) Hash identifier: Qq0X69fpKkgoXdxqOric3DILoOypszE2/fpWSdPOnc0= Subject key identifier: 6F:1D:73:33:C8:D3:E8:4C:A3:47:91:4C:BE:C8:F8:6F:D1:B7:D1:A7 Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 1BBB36C308043A28228DF1FB744389A0F281BBB9 Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa Signing time: Mon 23 Jun 2025 18:00:00 +0000 ROA not before: Mon 23 Jun 2025 17:55:00 +0000 ROA not after: Mon 22 Jun 2026 18:00:00 +0000 asID: 4787 IP address blocks: 116.206.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bb:36:c3:08:04:3a:28:22:8d:f1:fb:74:43:89:a0:f2:81:bb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Jun 23 17:55:00 2025 GMT Not After : Jun 22 18:00:00 2026 GMT Subject: CN=6F1D7333C8D3E84CA347914CBEC8F86FD1B7D1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:b4:6b:71:1c:e4:0c:81:0a:e3:c8:83:d6: b7:58:31:06:60:b1:63:4a:00:8e:af:9f:96:e9:41: fd:c9:c8:05:1b:b2:84:ac:9b:d5:50:d5:53:fe:22: ee:22:18:b3:38:ba:ca:ef:9c:6d:43:1f:9d:53:ba: 5c:54:8c:8a:c4:47:a8:46:23:bb:a7:f9:a2:1a:cb: 78:bf:4b:b5:d5:a9:1b:5c:7c:1a:78:bc:9d:c2:ff: 50:38:da:6e:dd:29:23:b6:60:ff:67:86:3e:d3:96: 96:f1:50:82:07:56:3a:a4:b5:e7:dd:f5:eb:d8:eb: 5d:2e:65:af:91:04:cb:05:e9:45:39:07:1e:84:95: a4:f3:16:8c:8a:31:1d:6c:7b:fc:e6:99:a5:62:3a: b5:0d:83:66:c1:1f:6d:51:f6:6b:db:77:01:90:b5: fd:8e:2e:a9:d7:8a:52:e1:88:d7:df:b8:e6:71:54: ae:a9:28:ac:1f:59:86:7a:07:01:2e:c7:30:e8:45: e5:73:37:83:cf:1b:12:70:7e:5e:f1:7a:27:a4:25: a7:46:a4:91:fd:67:dc:84:d9:67:58:09:b9:6d:bc: 04:55:f9:69:02:aa:55:a9:40:fa:83:3e:9c:06:2e: c4:83:3f:a7:14:65:da:92:50:c5:01:a4:47:f9:d6: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1D:73:33:C8:D3:E8:4C:A3:47:91:4C:BE:C8:F8:6F:D1:B7:D1:A7 X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.206.236.0/22 Signature Algorithm: sha256WithRSAEncryption 24:4c:b5:a5:b2:78:05:e6:7f:17:04:e4:44:2c:fe:fe:b5:75: d2:f8:da:6f:2e:47:d3:9e:98:f1:bc:c8:be:11:b8:14:e8:48: 00:9b:99:8b:76:28:b1:01:b1:12:4c:2d:d8:cb:8f:c3:f7:7c: d3:01:ce:1f:51:70:e5:87:e9:d2:75:f7:46:30:65:11:b1:73: ad:18:a0:9a:9c:73:1e:e9:1d:b0:36:f4:76:37:ad:73:a4:c2: 96:e0:6f:18:16:88:f9:ee:66:93:66:e3:fd:30:ab:fb:26:c4: a7:1a:56:81:ee:07:cf:cf:89:bb:a4:7a:71:2c:03:be:ec:5a: 1d:1d:e5:d8:22:b3:c4:c4:68:48:b3:23:3d:4e:d9:71:4c:ad: 33:33:15:6c:b3:9e:3e:8b:3a:ef:98:f6:3e:c5:02:d8:cf:5e: f3:39:7b:23:25:66:0a:0d:ed:c2:6b:68:1f:e1:52:07:50:aa: 25:6d:06:84:af:c6:b1:8e:46:03:5d:fc:91:c2:15:e0:99:d2: 05:5e:ad:ad:93:b4:8a:ec:00:66:62:71:07:af:d6:7a:27:41: 4a:17:43:79:23:e1:78:38:25:ad:13:32:ca:2f:0f:e6:b3:4b: 54:9a:7f:f7:fe:b8:77:57:32:aa:39:37:fa:15:86:4f:65:53: e2:9c:26:ac -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG7s2wwgEOigijfH7dEOJoPKBu7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yNTA2MjMxNzU1MDBaFw0yNjA2MjIxODAwMDBaMDMxMTAvBgNV BAMTKDZGMUQ3MzMzQzhEM0U4NENBMzQ3OTE0Q0JFQzhGODZGRDFCN0QxQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUbRrcRzkDIEK48iD1rdYMQZg sWNKAI6vn5bpQf3JyAUbsoSsm9VQ1VP+Iu4iGLM4usrvnG1DH51TulxUjIrER6hG I7un+aIay3i/S7XVqRtcfBp4vJ3C/1A42m7dKSO2YP9nhj7TlpbxUIIHVjqktefd 9evY610uZa+RBMsF6UU5Bx6ElaTzFoyKMR1se/zmmaViOrUNg2bBH21R9mvbdwGQ tf2OLqnXilLhiNffuOZxVK6pKKwfWYZ6BwEuxzDoReVzN4PPGxJwfl7xeiekJadG pJH9Z9yE2WdYCbltvARV+WkCqlWpQPqDPpwGLsSDP6cUZdqSUMUBpEf51h2pAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbx1zM8jT6EyjR5FMvsj4b9G30acwHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzEzNjJlMzIzMDM2MmUzMjMzMzYyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnTO7DANBgkqhkiG 9w0BAQsFAAOCAQEAJEy1pbJ4BeZ/FwTkRCz+/rV10vjaby5H056Y8bzIvhG4FOhI AJuZi3YosQGxEkwt2MuPw/d80wHOH1Fw5Yfp0nX3RjBlEbFzrRigmpxzHukdsDb0 djetc6TCluBvGBaI+e5mk2bj/TCr+ybEpxpWge4Hz8+Ju6R6cSwDvuxaHR3l2CKz xMRoSLMjPU7ZcUytMzMVbLOePos675j2PsUC2M9e8zl7IyVmCg3twmtoH+FSB1Cq JW0GhK/GsY5GA138kcIV4JnSBV6trZO0iuwAZmJxB6/WeidBShdDeSPheDglrRMy yi8P5rNLVJp/9/64d1cyqjk3+hWGT2VT4pwmrA== -----END CERTIFICATE-----Generated at Tue Jul 1 08:58:14 2025 by rpki-client