$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa File: 3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa (raw, json) Hash identifier: TdCSWWnzWm+KPRqe/oZGQpdQ2d6DjsX9MJDJOKgi7r0= Subject key identifier: B9:DA:45:EF:92:F5:78:D6:02:13:36:45:F2:70:57:A3:71:E8:4C:F6 Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 42E742F0FC82706EB5DF6C296132E5AE483F29D6 Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa Signing time: Fri 18 Jul 2025 16:00:01 +0000 ROA not before: Fri 18 Jul 2025 15:55:01 +0000 ROA not after: Fri 17 Jul 2026 16:00:01 +0000 asID: 137316 IP address blocks: 116.90.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e7:42:f0:fc:82:70:6e:b5:df:6c:29:61:32:e5:ae:48:3f:29:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Jul 18 15:55:01 2025 GMT Not After : Jul 17 16:00:01 2026 GMT Subject: CN=B9DA45EF92F578D602133645F27057A371E84CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:60:63:26:fb:fd:7a:10:df:c0:42:ea:90: 7c:d5:01:77:83:1e:b6:71:bb:50:0b:2e:e4:16:b3: 9c:f5:5c:42:f4:35:d3:69:3b:ab:d9:7d:da:0f:6f: da:26:6d:32:37:5c:90:5b:69:5c:b8:e9:6a:b2:04: 0e:50:cc:c4:ad:5b:02:dd:db:e3:a3:d2:fb:b4:da: 91:40:75:88:7f:ba:4e:6c:dc:0d:eb:0f:ec:ba:93: 57:1c:b2:2a:03:03:1d:f1:7a:c2:96:7d:94:ce:8d: 0c:c8:40:cd:09:4f:d3:20:37:3d:45:81:65:72:f7: 7d:2b:48:57:6d:72:45:37:02:d1:6c:0b:d8:3a:05: 29:00:70:31:72:59:56:72:5a:43:53:ef:c8:26:09: 81:27:97:b2:54:36:88:c7:31:be:85:40:4f:67:80: ba:29:6c:84:e9:c8:81:9e:e8:f0:38:43:55:e1:97: 29:f8:94:45:4c:cb:3a:e4:a3:eb:09:81:5c:f5:72: d1:77:0f:20:a3:0a:22:06:94:2a:24:f3:83:01:62: 41:2b:ae:48:4a:5f:7e:96:6d:0a:17:5b:8d:49:58: 51:9a:46:22:9a:23:86:02:f7:15:bd:a3:44:4f:66: d3:7f:83:42:cc:42:fd:45:a0:0d:00:35:d9:3f:e1: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DA:45:EF:92:F5:78:D6:02:13:36:45:F2:70:57:A3:71:E8:4C:F6 X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.90.183.0/24 Signature Algorithm: sha256WithRSAEncryption 91:5e:de:cf:b9:ec:d1:42:6b:69:a1:39:22:1d:03:46:c7:41: 55:b6:39:0e:ac:13:47:0b:50:ed:2d:51:72:e7:5e:dc:70:c8: 32:02:9b:97:f3:e3:bc:e6:1f:20:cd:4d:f4:75:d1:63:c2:1f: 5a:1e:af:4c:e5:09:59:fa:97:7b:df:8d:05:cd:5e:5a:71:f0: 72:aa:9d:c5:1d:41:35:c0:be:93:62:17:f4:86:c2:cd:ea:65: 0d:fd:35:09:07:9a:5d:26:66:9d:c0:dd:7b:27:7b:b8:9f:05: f9:ea:1e:0a:5b:36:80:1d:09:ea:7e:0d:e8:3c:d4:d7:1f:28: 2f:04:ae:44:b6:c7:37:3f:df:fb:e6:41:e4:42:64:21:f3:d3: ec:b2:b8:52:66:c3:f9:f1:52:19:e5:87:ba:d2:b9:c6:4d:78: 83:67:87:f3:c8:7a:12:8f:dd:dd:1e:5c:4d:f0:13:ee:30:d2: 3a:70:b1:90:e4:44:d4:0d:36:2c:a5:a7:cf:fc:ae:5f:00:3b: 11:4f:af:62:ee:8c:74:4f:bf:71:65:6c:b5:47:78:41:46:bb: 06:af:c7:56:98:8a:62:2f:49:0c:f2:30:78:0c:2b:e8:db:c1: ee:23:23:70:f8:f9:92:6d:36:35:21:86:63:7c:fb:b6:cc:43: 3d:54:36:e1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQudC8PyCcG6132wpYTLlrkg/KdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yNTA3MTgxNTU1MDFaFw0yNjA3MTcxNjAwMDFaMDMxMTAvBgNV BAMTKEI5REE0NUVGOTJGNTc4RDYwMjEzMzY0NUYyNzA1N0EzNzFFODRDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkG2BjJvv9ehDfwELqkHzVAXeD HrZxu1ALLuQWs5z1XEL0NdNpO6vZfdoPb9ombTI3XJBbaVy46WqyBA5QzMStWwLd 2+Oj0vu02pFAdYh/uk5s3A3rD+y6k1ccsioDAx3xesKWfZTOjQzIQM0JT9MgNz1F gWVy930rSFdtckU3AtFsC9g6BSkAcDFyWVZyWkNT78gmCYEnl7JUNojHMb6FQE9n gLopbITpyIGe6PA4Q1Xhlyn4lEVMyzrko+sJgVz1ctF3DyCjCiIGlCok84MBYkEr rkhKX36WbQoXW41JWFGaRiKaI4YC9xW9o0RPZtN/g0LMQv1FoA0ANdk/4UFRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUudpF75L1eNYCEzZF8nBXo3HoTPYwHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMxMzEzNjJlMzkzMDJlMzEzODMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdFq3MA0GCSqG SIb3DQEBCwUAA4IBAQCRXt7PuezRQmtpoTkiHQNGx0FVtjkOrBNHC1DtLVFy517c cMgyApuX8+O85h8gzU30ddFjwh9aHq9M5QlZ+pd7340FzV5acfByqp3FHUE1wL6T Yhf0hsLN6mUN/TUJB5pdJmadwN17J3u4nwX56h4KWzaAHQnqfg3oPNTXHygvBK5E tsc3P9/75kHkQmQh89PssrhSZsP58VIZ5Ye60rnGTXiDZ4fzyHoSj93dHlxN8BPu MNI6cLGQ5ETUDTYspafP/K5fADsRT69i7ox0T79xZWy1R3hBRrsGr8dWmIpiL0kM 8jB4DCvo28HuIyNw+PmSbTY1IYZjfPu2zEM9VDbh -----END CERTIFICATE-----Generated at Thu Jul 24 00:25:43 2025 by rpki-client