$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138302e302f32342d3234203d3e20313337333136.roa File: 3131362e39302e3138302e302f32342d3234203d3e20313337333136.roa (raw, json) Hash identifier: WkD1jb0F8rjnoQiRknRh6/6avt7Z/AjjJrYkoQ0mfcw= Subject key identifier: B9:BA:CA:09:6A:7D:1B:A1:1F:FB:FF:28:3B:37:05:80:26:E0:92:83 Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 48D59692D18A778622400FC9ED3E7CAAC016A41D Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138302e302f32342d3234203d3e20313337333136.roa Signing time: Fri 18 Jul 2025 14:00:01 +0000 ROA not before: Fri 18 Jul 2025 13:55:01 +0000 ROA not after: Fri 17 Jul 2026 14:00:01 +0000 asID: 137316 IP address blocks: 116.90.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d5:96:92:d1:8a:77:86:22:40:0f:c9:ed:3e:7c:aa:c0:16:a4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Jul 18 13:55:01 2025 GMT Not After : Jul 17 14:00:01 2026 GMT Subject: CN=B9BACA096A7D1BA11FFBFF283B37058026E09283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:33:e3:1b:6f:32:26:70:dd:57:b6:e7:09:e4: dd:95:9d:36:19:54:44:5d:81:11:50:02:64:0a:4d: 6e:fd:c5:a6:20:bb:06:be:19:66:e4:10:d8:1a:22: db:b3:7d:27:e4:0e:c3:59:90:01:b0:4b:b7:d9:fe: 7a:29:e5:58:c6:71:d7:83:91:8e:1f:81:2f:51:d1: d7:62:0e:f7:cd:bf:83:04:b9:fe:3d:f3:c3:4e:e8: a3:e0:c8:0a:8a:e4:df:04:2c:d1:3e:f7:f4:61:a4: e3:32:64:46:4a:77:ec:47:f8:86:97:1b:df:2f:df: 81:a3:e5:df:f1:0e:57:71:20:60:33:a7:54:bb:9f: 36:8a:84:e5:e1:fe:47:a9:36:0b:91:98:e4:28:a5: 9c:66:88:8e:5b:61:41:1c:f6:07:f2:57:b1:0a:a2: 16:fc:a8:ff:33:b5:e1:2c:d7:12:03:eb:9d:97:eb: 2a:d6:f5:44:4d:b6:be:4a:48:f2:03:4c:ae:b7:b7: 20:ca:44:13:33:ca:d0:1f:6c:db:e4:95:bd:c3:0f: 3e:ec:e2:68:69:31:dc:a4:50:e5:3b:6d:0e:c5:02: b7:2b:13:1c:7d:c6:74:10:9e:77:36:b2:43:f9:68: 84:a3:a0:ee:6f:25:f3:f2:3c:79:02:ec:55:f3:5f: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BA:CA:09:6A:7D:1B:A1:1F:FB:FF:28:3B:37:05:80:26:E0:92:83 X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138302e302f32342d3234203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.180.0/24 Signature Algorithm: sha256WithRSAEncryption b2:bc:fd:9e:25:7e:e6:42:72:e0:c4:ef:d4:0e:9a:e8:d7:9b: 41:02:fa:48:13:32:19:9b:2c:fe:00:70:dc:52:2d:11:b6:ca: 90:f4:6e:dc:51:05:78:08:fa:40:5e:88:ca:31:9f:ee:f1:40: 87:31:58:d9:4d:b7:8d:c6:5e:1b:97:41:bd:41:40:94:64:51: 0d:5b:5c:ac:a6:f6:21:f3:67:b4:e0:cd:d4:99:c8:64:11:a8: e1:2c:51:00:82:bc:c1:e5:b5:7b:00:9e:d0:1c:66:f7:62:0a: 03:87:90:09:b9:a3:1a:5a:d6:0a:32:6f:7b:3b:a3:a3:02:8a: 85:87:7a:eb:63:f5:27:34:23:3e:66:b2:a1:d9:ef:04:75:62: 5b:d5:23:bd:de:83:a0:dd:88:32:85:a0:9d:26:31:a6:91:ff: 54:70:2b:6d:05:a3:50:c6:c2:53:ca:69:09:2a:c4:1d:60:55: 55:7a:99:51:17:01:7e:30:d1:cc:e2:ae:21:5a:55:ab:ff:37: 65:99:0f:e6:22:c0:64:1a:24:85:f6:5d:01:cc:9d:ea:4d:ee: 2b:33:87:66:14:03:29:2f:e5:b0:7d:27:88:ce:59:ac:9b:0c: 1d:23:c0:51:e5:1c:9d:50:78:8c:b7:5b:a2:4d:03:8d:b8:f4: e8:74:bf:22 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSNWWktGKd4YiQA/J7T58qsAWpB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yNTA3MTgxMzU1MDFaFw0yNjA3MTcxNDAwMDFaMDMxMTAvBgNV BAMTKEI5QkFDQTA5NkE3RDFCQTExRkZCRkYyODNCMzcwNTgwMjZFMDkyODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJM+MbbzImcN1XtucJ5N2VnTYZ VERdgRFQAmQKTW79xaYguwa+GWbkENgaItuzfSfkDsNZkAGwS7fZ/nop5VjGcdeD kY4fgS9R0ddiDvfNv4MEuf4988NO6KPgyAqK5N8ELNE+9/RhpOMyZEZKd+xH+IaX G98v34Gj5d/xDldxIGAzp1S7nzaKhOXh/kepNguRmOQopZxmiI5bYUEc9gfyV7EK ohb8qP8zteEs1xID652X6yrW9URNtr5KSPIDTK63tyDKRBMzytAfbNvklb3DDz7s 4mhpMdykUOU7bQ7FArcrExx9xnQQnnc2skP5aISjoO5vJfPyPHkC7FXzX9PfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUubrKCWp9G6Ef+/8oOzcFgCbgkoMwHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMxMzEzNjJlMzkzMDJlMzEzODMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdFq0MA0GCSqG SIb3DQEBCwUAA4IBAQCyvP2eJX7mQnLgxO/UDpro15tBAvpIEzIZmyz+AHDcUi0R tsqQ9G7cUQV4CPpAXojKMZ/u8UCHMVjZTbeNxl4bl0G9QUCUZFENW1yspvYh82e0 4M3UmchkEajhLFEAgrzB5bV7AJ7QHGb3YgoDh5AJuaMaWtYKMm97O6OjAoqFh3rr Y/UnNCM+ZrKh2e8EdWJb1SO93oOg3YgyhaCdJjGmkf9UcCttBaNQxsJTymkJKsQd YFVVeplRFwF+MNHM4q4hWlWr/zdlmQ/mIsBkGiSF9l0BzJ3qTe4rM4dmFAMpL+Ww fSeIzlmsmwwdI8BR5RydUHiMt1uiTQONuPTodL8i -----END CERTIFICATE-----Generated at Thu Jul 24 00:26:23 2025 by rpki-client