$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa File: 3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa (raw, json) Hash identifier: Ak3vjsHxXSpMdgVghFRGvjsq/qMaBzr+zmCnuCKSkYw= Subject key identifier: 77:21:E4:66:83:3F:48:D4:75:AC:97:06:81:29:5B:A4:A7:0A:53:1A Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 03DA0A2255D60DBB3F81CB9F9EEE7890D4462C1A Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa Signing time: Sun 20 Jul 2025 09:02:22 +0000 ROA not before: Sun 20 Jul 2025 08:57:22 +0000 ROA not after: Sun 19 Jul 2026 09:02:22 +0000 asID: 137316 IP address blocks: 116.90.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:da:0a:22:55:d6:0d:bb:3f:81:cb:9f:9e:ee:78:90:d4:46:2c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Jul 20 08:57:22 2025 GMT Not After : Jul 19 09:02:22 2026 GMT Subject: CN=7721E466833F48D475AC970681295BA4A70A531A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:c3:e7:ac:74:27:61:08:a3:b8:cd:42:c0: 1f:a0:35:58:85:24:ce:e2:66:1b:eb:18:db:4d:74: 6d:3d:cd:ac:d8:3b:7d:3d:3e:99:9d:83:e6:46:d6: e0:74:e5:fb:90:1b:49:6f:45:44:f8:6b:78:bc:c0: e9:7f:47:3b:34:12:01:60:47:85:ab:62:af:9c:53: 36:ed:a7:ce:22:40:11:7a:78:ca:6f:55:e7:a7:bc: 52:a0:bf:08:32:d2:c1:48:fc:36:2a:13:ec:75:af: 50:53:bd:d3:63:70:8b:b0:e8:d3:3f:6c:13:75:f1: 15:5b:4d:32:11:a8:00:44:b6:ae:02:22:be:1f:0e: 94:7b:4d:a3:f9:54:23:23:b9:60:d9:66:d6:d0:1f: 88:72:f3:a0:5d:d7:9a:ad:8d:84:07:70:a1:16:31: 41:fe:3e:7c:f1:6d:04:a7:d9:b9:32:68:b2:7a:1e: aa:d6:76:81:c3:f6:84:a8:77:0d:44:c1:47:7d:ae: 8c:4b:06:83:df:1d:dd:82:41:5c:75:36:f8:e3:99: dc:da:a5:70:3c:ae:da:e6:43:2e:cc:61:a8:02:6a: cc:bb:c3:39:be:48:cb:51:72:ac:60:54:28:5c:0b: 4b:43:88:1a:2a:80:af:0a:10:fe:e8:71:b4:54:1d: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:21:E4:66:83:3F:48:D4:75:AC:97:06:81:29:5B:A4:A7:0A:53:1A X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.179.0/24 Signature Algorithm: sha256WithRSAEncryption 91:74:01:15:81:23:b4:c5:43:79:68:31:bb:81:37:f6:c1:2b: f4:b9:1f:c1:41:7b:d2:29:6d:08:b8:5b:18:94:56:c9:d5:9b: 35:bb:17:42:2a:76:52:a1:c5:51:8b:d5:e8:ea:dd:a3:31:4c: 0f:37:45:e0:d9:17:53:92:0f:9f:12:9d:55:27:c8:7b:4d:6a: a4:58:5e:71:38:5c:c5:7b:fe:46:c4:15:70:e6:85:8b:ea:56: 2e:10:d8:40:58:48:2e:93:d9:2a:dd:92:38:81:5f:95:74:76: 27:f3:14:f0:22:86:58:3a:5f:aa:b6:69:68:27:61:1d:0a:f7: 3f:a2:fa:24:dc:de:fe:39:d8:af:98:df:3e:62:be:3b:60:33: 34:46:77:f5:39:66:5d:4b:3e:c7:7f:b1:48:6a:4a:8d:07:a0: 6c:fc:41:2b:a7:cc:bb:fd:c7:70:38:e4:e9:1d:e3:95:c3:91: ea:71:eb:14:fa:fb:08:a5:3e:16:a4:fc:8b:93:06:ff:62:45: 46:31:0c:d7:12:c4:83:fb:84:fc:a3:ec:bf:a0:4b:dd:4b:21: 13:ce:13:a8:0f:7c:24:03:8b:d3:09:92:56:78:b2:00:ba:82: 36:37:48:ac:ba:44:d1:9f:34:6b:c1:b7:69:cd:8c:3e:23:13: e8:f0:e7:b9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUA9oKIlXWDbs/gcufnu54kNRGLBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yNTA3MjAwODU3MjJaFw0yNjA3MTkwOTAyMjJaMDMxMTAvBgNV BAMTKDc3MjFFNDY2ODMzRjQ4RDQ3NUFDOTcwNjgxMjk1QkE0QTcwQTUzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUMPnrHQnYQijuM1CwB+gNViF JM7iZhvrGNtNdG09zazYO309Ppmdg+ZG1uB05fuQG0lvRUT4a3i8wOl/Rzs0EgFg R4WrYq+cUzbtp84iQBF6eMpvVeenvFKgvwgy0sFI/DYqE+x1r1BTvdNjcIuw6NM/ bBN18RVbTTIRqABEtq4CIr4fDpR7TaP5VCMjuWDZZtbQH4hy86Bd15qtjYQHcKEW MUH+PnzxbQSn2bkyaLJ6HqrWdoHD9oSodw1EwUd9roxLBoPfHd2CQVx1Nvjjmdza pXA8rtrmQy7MYagCasy7wzm+SMtRcqxgVChcC0tDiBoqgK8KEP7ocbRUHS/NAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdyHkZoM/SNR1rJcGgSlbpKcKUxowHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMxMzEzNjJlMzkzMDJlMzEzNzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdFqzMA0GCSqG SIb3DQEBCwUAA4IBAQCRdAEVgSO0xUN5aDG7gTf2wSv0uR/BQXvSKW0IuFsYlFbJ 1Zs1uxdCKnZSocVRi9Xo6t2jMUwPN0Xg2RdTkg+fEp1VJ8h7TWqkWF5xOFzFe/5G xBVw5oWL6lYuENhAWEguk9kq3ZI4gV+VdHYn8xTwIoZYOl+qtmloJ2EdCvc/ovok 3N7+OdivmN8+Yr47YDM0Rnf1OWZdSz7Hf7FIakqNB6Bs/EErp8y7/cdwOOTpHeOV w5HqcesU+vsIpT4WpPyLkwb/YkVGMQzXEsSD+4T8o+y/oEvdSyETzhOoD3wkA4vT CZJWeLIAuoI2N0isukTRnzRrwbdpzYw+IxPo8Oe5 -----END CERTIFICATE-----Generated at Thu Jul 24 00:26:23 2025 by rpki-client