$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa File: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (raw, json) Hash identifier: Ro4VwJnTaG/NeUG6CyxbPAddbmOcZkAvVjQYjSzO/Mo= Subject key identifier: 8B:1B:27:83:77:62:3E:51:45:AD:1B:3A:03:27:49:F9:11:F5:FE:1B Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Certificate serial: 115A2494208B332BCC8439904DC0DC5B9021587F Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa Signing time: Wed 27 Aug 2025 05:00:00 +0000 ROA not before: Wed 27 Aug 2025 04:55:00 +0000 ROA not after: Wed 26 Aug 2026 05:00:00 +0000 asID: 23671 IP address blocks: 111.92.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5a:24:94:20:8b:33:2b:cc:84:39:90:4d:c0:dc:5b:90:21:58:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F Validity Not Before: Aug 27 04:55:00 2025 GMT Not After : Aug 26 05:00:00 2026 GMT Subject: CN=8B1B278377623E5145AD1B3A032749F911F5FE1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:c1:57:00:7f:a2:fd:27:56:a9:e0:2f:ad: c1:43:f0:94:a4:81:1e:cf:7b:0b:ac:21:ce:0e:90: c6:41:6c:68:49:c6:33:c4:fb:f6:e3:7f:13:97:fd: 19:25:66:81:a9:63:95:c4:63:63:a6:a9:ae:e4:ea: 86:06:95:a9:6a:4a:df:87:22:da:4f:9f:ac:76:3f: f4:a9:41:45:14:23:a0:da:dc:37:09:76:60:51:f3: 7c:c0:0e:17:d4:37:bb:ae:4c:8a:39:3b:62:25:ad: d4:f6:52:a8:ea:20:fc:a2:e3:ce:d4:01:74:c2:af: 0d:f8:22:1e:c9:7e:e8:d9:a9:17:60:6f:af:44:f2: 78:a1:dc:0e:c5:bc:21:a9:a4:3c:bd:b0:cc:87:15: c2:52:af:19:ef:38:f5:00:77:56:22:9c:a2:01:13: 89:4b:72:21:7d:fb:96:29:67:93:f8:fd:e9:c7:2e: 45:98:2f:55:37:35:17:cb:e4:2b:72:bb:43:d9:27: 67:9e:71:74:59:b8:fe:6e:da:78:2a:17:df:4c:94: 39:ed:9e:18:c4:b8:cf:cb:b0:ba:4c:f9:45:cb:d5: 10:92:50:ef:8b:2a:63:e6:e3:41:6c:cb:53:79:fb: fd:bb:36:fb:1a:42:db:ca:34:e3:c0:81:73:33:33: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1B:27:83:77:62:3E:51:45:AD:1B:3A:03:27:49:F9:11:F5:FE:1B X509v3 Authority Key Identifier: keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.92.168.0/24 Signature Algorithm: sha256WithRSAEncryption c4:1a:39:a6:de:c8:0f:a2:9f:8c:10:34:4e:20:32:1f:3f:b7: db:c4:b5:54:3b:cc:37:c2:2c:a2:29:7a:be:2c:d6:43:cd:3a: c3:78:01:57:4d:31:42:58:9f:e1:14:51:f4:a3:f7:1b:18:3e: 6a:f8:b6:9d:02:8b:6b:87:3b:09:85:e5:0d:72:4c:a8:13:74: 6d:a6:7e:d4:cd:86:89:16:86:79:c5:b2:ae:8a:09:ca:0a:76: 37:0b:8e:05:fc:26:27:c4:f7:d3:68:aa:37:90:c6:4c:3c:43: af:f5:45:92:45:87:20:9c:0e:d6:65:8a:a4:98:e2:24:48:d3: 60:45:45:b2:85:9a:6a:b2:14:28:02:f4:3d:05:10:52:f9:b9: 5b:63:7b:b5:be:6a:a6:74:76:3e:0c:f2:f3:9e:31:6a:90:03: 43:b2:d1:e4:35:46:6f:18:14:c1:0c:3d:6e:70:d3:58:e3:13: 12:fb:3c:0b:bf:7a:1c:a1:59:e7:da:33:82:a7:97:9b:81:6b: 8c:cd:73:e1:c2:95:b7:1a:68:8b:5d:f8:0a:04:57:5e:0f:b7: a8:d5:ef:c9:5e:f0:dd:4a:be:ab:77:62:20:04:0c:8d:ee:23: bd:07:b3:38:91:40:10:93:7e:ba:18:2e:19:3c:ce:43:95:27: 1c:84:c9:6c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUEVoklCCLMyvMhDmQTcDcW5AhWH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy MTg4ODY2RjAeFw0yNTA4MjcwNDU1MDBaFw0yNjA4MjYwNTAwMDBaMDMxMTAvBgNV BAMTKDhCMUIyNzgzNzc2MjNFNTE0NUFEMUIzQTAzMjc0OUY5MTFGNUZFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95cFXAH+i/SdWqeAvrcFD8JSk gR7PewusIc4OkMZBbGhJxjPE+/bjfxOX/RklZoGpY5XEY2Omqa7k6oYGlalqSt+H ItpPn6x2P/SpQUUUI6Da3DcJdmBR83zADhfUN7uuTIo5O2IlrdT2UqjqIPyi487U AXTCrw34Ih7JfujZqRdgb69E8nih3A7FvCGppDy9sMyHFcJSrxnvOPUAd1YinKIB E4lLciF9+5YpZ5P4/enHLkWYL1U3NRfL5Ctyu0PZJ2eecXRZuP5u2ngqF99MlDnt nhjEuM/LsLpM+UXL1RCSUO+LKmPm40Fsy1N5+/27NvsaQtvKNOPAgXMzM5XjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUixsng3diPlFFrRs6AydJ+RH1/hswHwYDVR0j BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4 ODY2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i YmRmLTc2NDU3MWZiYWNlNy8wLzMxMzEzMTJlMzkzMjJlMzEzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG9cqDANBgkqhkiG 9w0BAQsFAAOCAQEAxBo5pt7ID6KfjBA0TiAyHz+328S1VDvMN8Isoil6vizWQ806 w3gBV00xQlif4RRR9KP3Gxg+avi2nQKLa4c7CYXlDXJMqBN0baZ+1M2GiRaGecWy rooJygp2NwuOBfwmJ8T302iqN5DGTDxDr/VFkkWHIJwO1mWKpJjiJEjTYEVFsoWa arIUKAL0PQUQUvm5W2N7tb5qpnR2Pgzy854xapADQ7LR5DVGbxgUwQw9bnDTWOMT Evs8C796HKFZ59ozgqeXm4FrjM1z4cKVtxpoi134CgRXXg+3qNXvyV7w3Uq+q3di IAQMje4jvQezOJFAEJN+uhguGTzOQ5UnHITJbA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:31 2025 by rpki-client