$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa File: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (raw, json) Hash identifier: bNy3O3/D8sze1XtEAGH5p80v+qY7OivRx/ulln1yeBc= Subject key identifier: 3A:0C:1C:8E:1D:E4:06:8C:45:B6:EE:32:0C:59:DF:25:61:26:75:BE Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Certificate serial: 5F23A6E64610743F11660A7F1484BF0B9E316D35 Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa Signing time: Wed 09 Apr 2025 12:00:01 +0000 ROA not before: Wed 09 Apr 2025 11:55:01 +0000 ROA not after: Wed 08 Apr 2026 12:00:01 +0000 asID: 131111 IP address blocks: 119.235.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 04:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:23:a6:e6:46:10:74:3f:11:66:0a:7f:14:84:bf:0b:9e:31:6d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Validity Not Before: Apr 9 11:55:01 2025 GMT Not After : Apr 8 12:00:01 2026 GMT Subject: CN=3A0C1C8E1DE4068C45B6EE320C59DF25612675BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c1:9e:cb:8f:eb:e1:64:b2:96:31:18:db:bf: aa:58:a8:5c:aa:50:e7:cf:42:90:21:53:f7:62:dd: e1:30:05:df:06:77:ee:a3:b0:b2:58:79:24:0c:0c: d8:11:8a:33:fb:7d:8c:c3:3e:6e:86:fd:15:4a:13: bc:5a:0d:7a:7f:f7:a4:98:d9:ce:0f:97:a1:0a:4e: ea:e1:92:70:7e:46:5c:44:fb:29:76:e2:74:22:fa: 23:6f:14:42:08:41:f3:cf:02:50:c2:27:5f:24:78: 4a:15:df:42:3b:48:f0:b5:e0:59:e8:fe:e4:7e:2a: d9:c3:00:66:54:e5:ae:27:42:75:ab:7d:df:f1:12: 50:6b:db:e3:1b:d2:d5:9f:0a:81:ee:da:ba:8d:78: 82:85:09:d4:2c:e1:d9:52:1f:37:6e:33:f8:63:1b: 47:e9:ea:f8:db:d7:43:55:36:53:1b:95:10:0d:b8: 9b:e2:73:3c:16:41:aa:a6:b8:dd:3c:bc:0a:7e:18: 9b:2a:03:86:aa:91:64:c6:d5:74:d8:d1:b3:b1:87: 43:16:07:e0:fa:ef:21:30:f2:44:b4:34:81:c2:af: a3:b1:c6:36:55:fe:f7:4c:f0:61:a5:5e:c6:6a:8a: fe:e3:46:6b:84:4b:b6:38:ac:7e:d0:77:6e:c8:ba: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0C:1C:8E:1D:E4:06:8C:45:B6:EE:32:0C:59:DF:25:61:26:75:BE X509v3 Authority Key Identifier: keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.208.0/20 Signature Algorithm: sha256WithRSAEncryption 12:dd:55:6f:61:47:42:1b:53:5a:29:93:d1:ce:2e:8c:9e:b1: e7:81:06:40:d8:ec:17:81:11:a6:88:f6:a8:50:f0:14:4a:c9: 2f:95:3f:a9:bd:4d:fc:1b:8e:5a:15:70:3e:15:34:ae:37:87: 0a:44:18:0e:8a:23:15:ad:4b:e3:85:65:9d:f4:bd:d5:e7:66: d4:34:0f:0f:3a:7e:99:7d:c9:7b:30:9d:8d:72:a0:87:be:58: b7:4a:8c:27:0f:29:83:0b:1f:ae:86:80:1a:ed:7d:94:25:76: 1f:5b:c9:b6:24:e9:c3:10:1b:d5:db:7f:2e:d9:97:d8:43:4a: b5:66:49:dc:c3:18:5d:50:6b:39:96:df:57:53:62:44:1e:b5: fb:8a:68:a1:22:57:3f:f1:38:c4:4e:ab:66:f4:72:5f:0d:e3: c7:00:bd:08:29:4f:d4:c8:e0:d3:7e:37:d9:eb:db:da:58:df: b6:0f:e6:08:15:31:0b:84:f9:b3:3f:a3:c1:0d:d6:0d:54:91: bd:54:dc:53:c4:4d:ef:7f:6d:ba:54:d7:4e:82:2d:4d:79:67: 18:8e:99:ff:5b:fa:32:38:2c:f8:83:67:b6:8d:8e:95:f8:04: ae:a8:0a:25:b6:cb:9e:24:d1:2c:19:96:b7:08:a6:48:6f:1f: 6a:5c:c6:75 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXyOm5kYQdD8RZgp/FIS/C54xbTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4 NzE2REMyRjAeFw0yNTA0MDkxMTU1MDFaFw0yNjA0MDgxMjAwMDFaMDMxMTAvBgNV BAMTKDNBMEMxQzhFMURFNDA2OEM0NUI2RUUzMjBDNTlERjI1NjEyNjc1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwZ7Lj+vhZLKWMRjbv6pYqFyq UOfPQpAhU/di3eEwBd8Gd+6jsLJYeSQMDNgRijP7fYzDPm6G/RVKE7xaDXp/96SY 2c4Pl6EKTurhknB+RlxE+yl24nQi+iNvFEIIQfPPAlDCJ18keEoV30I7SPC14Fno /uR+KtnDAGZU5a4nQnWrfd/xElBr2+Mb0tWfCoHu2rqNeIKFCdQs4dlSHzduM/hj G0fp6vjb10NVNlMblRANuJviczwWQaqmuN08vAp+GJsqA4aqkWTG1XTY0bOxh0MW B+D67yEw8kS0NIHCr6OxxjZV/vdM8GGlXsZqiv7jRmuES7Y4rH7Qd27Iul/JAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOgwcjh3kBoxFtu4yDFnfJWEmdb4wHwYDVR0j BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2 REMyRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5MjA1ZTdjLWE4ODEtNDg3My05 MTg4LWU1MjFiNmFmNTI5Yy8wLzMxMzEzOTJlMzIzMzM1MmUzMjMwMzgyZTMwMmYz MjMwMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR369AwDQYJ KoZIhvcNAQELBQADggEBABLdVW9hR0IbU1opk9HOLoyeseeBBkDY7BeBEaaI9qhQ 8BRKyS+VP6m9TfwbjloVcD4VNK43hwpEGA6KIxWtS+OFZZ30vdXnZtQ0Dw86fpl9 yXswnY1yoIe+WLdKjCcPKYMLH66GgBrtfZQldh9bybYk6cMQG9Xbfy7Zl9hDSrVm SdzDGF1QazmW31dTYkQetfuKaKEiVz/xOMROq2b0cl8N48cAvQgpT9TI4NN+N9nr 29pY37YP5ggVMQuE+bM/o8EN1g1Ukb1U3FPETe9/bbpU106CLU15ZxiOmf9b+jI4 LPiDZ7aNjpX4BK6oCiW2y54k0SwZlrcIpkhvH2pcxnU= -----END CERTIFICATE-----Generated at Sat Nov 1 13:54:10 2025 by rpki-client