$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137382e302f32342d3234203d3e20313337333136.roa File: 3131362e39302e3137382e302f32342d3234203d3e20313337333136.roa (raw, json) Hash identifier: EK61tRS/BA/tSm4u9IJE08/qUn8YsQi+d6Y0Vz3jCWA= Subject key identifier: 27:C2:44:65:1D:A0:94:3B:FB:DB:32:80:7C:7E:EA:F5:66:21:EC:F4 Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 2D3740B8D1C15CE533766B35415B174C3C7483E0 Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137382e302f32342d3234203d3e20313337333136.roa Signing time: Sun 20 Jul 2025 09:02:22 +0000 ROA not before: Sun 20 Jul 2025 08:57:22 +0000 ROA not after: Sun 19 Jul 2026 09:02:22 +0000 asID: 137316 IP address blocks: 116.90.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:37:40:b8:d1:c1:5c:e5:33:76:6b:35:41:5b:17:4c:3c:74:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Jul 20 08:57:22 2025 GMT Not After : Jul 19 09:02:22 2026 GMT Subject: CN=27C244651DA0943BFBDB32807C7EEAF56621ECF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:61:29:d3:69:dd:ee:b0:8c:7f:77:d6:02: fb:ca:dc:80:0b:53:04:86:8b:4e:59:89:2c:99:04: 02:4e:48:52:3e:0a:e7:60:ea:68:25:9e:42:1d:31: b3:b4:0e:b5:a4:42:c5:cb:46:89:65:24:23:7b:d4: ff:c9:24:0e:7a:20:1a:1f:c8:33:fa:35:5c:50:35: 25:d2:7e:7f:52:cf:e5:14:2f:cb:65:d8:75:55:51: 8e:23:b3:e2:46:a8:b6:04:5e:c1:69:ba:53:ab:86: 75:9b:cc:ea:b4:9f:d2:fe:7e:38:68:a7:19:17:09: e0:fa:e3:4a:cd:62:65:a4:f2:8f:9a:a3:b6:5e:90: 02:eb:76:c8:0a:1b:b3:b5:cb:65:90:ec:fa:bb:1e: b4:1d:90:25:58:f7:f0:45:b2:8d:ff:1d:c0:9a:2a: 11:9b:a7:16:d1:5e:e1:75:54:9b:fb:b0:ab:04:a0: 07:36:ca:19:5d:56:20:26:8a:04:a8:b8:c6:39:00: c2:a2:03:35:a2:1b:74:54:4b:d8:67:86:f3:72:b6: bf:ac:10:59:a9:39:e6:29:1c:54:1b:d0:a8:e2:ef: da:46:2a:cf:b4:86:1f:1f:bf:0c:04:16:17:94:51: d1:78:0f:84:e3:1e:2a:52:ab:cf:4e:a2:eb:11:17: a7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C2:44:65:1D:A0:94:3B:FB:DB:32:80:7C:7E:EA:F5:66:21:EC:F4 X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137382e302f32342d3234203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.178.0/24 Signature Algorithm: sha256WithRSAEncryption 92:ee:62:54:e0:ce:d7:c3:83:e7:63:01:94:07:bd:6a:e6:41: 5f:47:58:49:ac:cb:5c:82:65:ca:1c:e4:03:03:87:ee:f2:34: b2:2b:ef:f6:47:a6:bc:a3:8d:e6:7e:b4:85:a6:83:a2:27:4d: 16:81:2a:14:22:32:a3:84:85:28:de:82:fc:ce:18:5f:09:5d: f7:17:73:c4:2a:2f:48:67:c2:48:f5:c6:16:f2:1e:cd:22:3b: 98:35:83:0e:49:47:63:84:31:f9:ae:0f:41:2b:9d:a5:4b:d1: 07:74:25:0e:b4:0d:f2:ca:67:bd:b6:d3:5c:0a:b8:eb:bd:1e: 36:d9:c7:26:dd:c6:66:63:75:9b:4b:41:02:87:d5:fd:b1:04: 82:c5:67:57:5e:73:09:0d:23:c9:d8:74:e0:21:1d:d7:6a:05: aa:00:50:14:46:9d:e2:b3:12:c9:42:ad:56:20:7e:0a:9e:25: ee:6b:95:38:8b:67:9e:9e:21:a8:f2:e9:e0:3d:0c:a6:99:f2: d2:07:41:d5:13:91:68:be:63:96:0f:d9:29:8f:d3:46:3a:62: d3:36:42:e3:99:66:3c:a3:40:51:c0:6a:ce:6a:69:1c:af:20: 0d:46:b7:46:7a:1c:8c:9c:98:07:41:aa:76:ca:27:02:09:14: 7f:51:e8:eb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULTdAuNHBXOUzdms1QVsXTDx0g+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yNTA3MjAwODU3MjJaFw0yNjA3MTkwOTAyMjJaMDMxMTAvBgNV BAMTKDI3QzI0NDY1MURBMDk0M0JGQkRCMzI4MDdDN0VFQUY1NjYyMUVDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeG2Ep02nd7rCMf3fWAvvK3IAL UwSGi05ZiSyZBAJOSFI+Cudg6mglnkIdMbO0DrWkQsXLRollJCN71P/JJA56IBof yDP6NVxQNSXSfn9Sz+UUL8tl2HVVUY4js+JGqLYEXsFpulOrhnWbzOq0n9L+fjho pxkXCeD640rNYmWk8o+ao7ZekALrdsgKG7O1y2WQ7Pq7HrQdkCVY9/BFso3/HcCa KhGbpxbRXuF1VJv7sKsEoAc2yhldViAmigSouMY5AMKiAzWiG3RUS9hnhvNytr+s EFmpOeYpHFQb0Kji79pGKs+0hh8fvwwEFheUUdF4D4TjHipSq89OousRF6ftAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJ8JEZR2glDv72zKAfH7q9WYh7PQwHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMxMzEzNjJlMzkzMDJlMzEzNzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdFqyMA0GCSqG SIb3DQEBCwUAA4IBAQCS7mJU4M7Xw4PnYwGUB71q5kFfR1hJrMtcgmXKHOQDA4fu 8jSyK+/2R6a8o43mfrSFpoOiJ00WgSoUIjKjhIUo3oL8zhhfCV33F3PEKi9IZ8JI 9cYW8h7NIjuYNYMOSUdjhDH5rg9BK52lS9EHdCUOtA3yyme9ttNcCrjrvR422ccm 3cZmY3WbS0ECh9X9sQSCxWdXXnMJDSPJ2HTgIR3XagWqAFAURp3isxLJQq1WIH4K niXua5U4i2eeniGo8ungPQymmfLSB0HVE5FovmOWD9kpj9NGOmLTNkLjmWY8o0BR wGrOamkcryANRrdGehyMnJgHQap2yicCCRR/Uejr -----END CERTIFICATE-----Generated at Thu Jul 24 00:26:23 2025 by rpki-client