$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136352e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3136352e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: ftF6UlYFGHwY1zUcAEO/DMSh1vYIjnXGRoFwsPeJSf4= Subject key identifier: B1:18:57:D1:EC:4B:2A:BE:CF:4E:B3:8B:DC:CF:71:30:5F:04:66:1A Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 03478B24D3BE9D7E2E6A693C7977FFD24386415E Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136352e302f32342d3234203d3e2039333431.roa Signing time: Sun 23 Mar 2025 06:00:01 +0000 ROA not before: Sun 23 Mar 2025 05:55:01 +0000 ROA not after: Sun 22 Mar 2026 06:00:01 +0000 asID: 9341 IP address blocks: 119.252.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:47:8b:24:d3:be:9d:7e:2e:6a:69:3c:79:77:ff:d2:43:86:41:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 23 05:55:01 2025 GMT Not After : Mar 22 06:00:01 2026 GMT Subject: CN=B11857D1EC4B2ABECF4EB38BDCCF71305F04661A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:a8:62:ec:e7:96:94:86:9d:f7:08:70:90: 64:04:45:83:4a:2b:fc:6c:8d:b4:fd:e1:e3:1f:b3: 14:ff:5c:31:9a:a3:2c:4c:42:1f:a2:fe:8b:e9:d1: bf:53:cf:9f:89:81:4c:c2:1b:a5:c4:1a:1b:6a:ea: 0c:d0:60:2d:bd:2d:6f:91:9e:72:fb:5b:e4:95:16: 93:89:76:7b:74:b8:01:17:3f:63:30:cb:a7:4b:e2: e7:1b:93:ee:b6:fb:9f:e2:4d:8f:5c:f1:3b:a8:74: 92:f9:2f:36:84:a5:3a:44:a9:80:5e:18:a2:6a:80: d6:01:42:46:50:e6:7f:65:3c:82:10:f7:1d:39:40: 46:ef:1b:e3:fb:15:0c:82:c5:df:1b:f4:c3:de:72: a4:fb:f4:6d:37:b8:2f:f5:56:63:aa:83:d9:6c:9a: 5d:64:27:10:7e:50:87:29:48:7c:0d:5c:c5:1e:f0: e5:79:ae:90:a4:c0:d5:bf:ca:4b:48:8c:6a:e6:bb: 3d:fe:19:c8:d8:f7:85:4c:e0:b9:4c:d7:e8:1a:83: 9a:27:3b:20:33:6d:95:62:48:01:41:ff:57:a9:5d: a9:df:23:5d:45:25:e0:00:60:06:b6:01:90:61:5e: 98:87:3e:89:01:eb:16:da:74:1b:28:b7:eb:35:3f: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:18:57:D1:EC:4B:2A:BE:CF:4E:B3:8B:DC:CF:71:30:5F:04:66:1A X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136352e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.165.0/24 Signature Algorithm: sha256WithRSAEncryption 83:34:d8:67:66:9f:e5:9b:cd:65:ce:5c:6f:67:fc:73:7e:b2: 8f:3b:de:e0:9d:8d:c5:d2:31:f5:00:98:ea:d7:9e:82:10:47: 58:73:76:ce:d6:e4:77:6d:c0:f2:cd:3e:97:be:64:b8:d5:4b: 97:a2:9d:6c:70:d0:7a:5b:b9:4a:f8:71:2f:c2:4e:f7:1a:3c: fd:fe:c4:43:7a:0c:0b:d3:70:7d:ac:fd:53:71:22:18:71:8b: 58:a8:f2:f9:1e:0f:13:92:69:82:b6:41:bc:c3:26:9a:e6:87: 38:6a:ad:c9:65:c1:97:d9:09:8d:b4:81:ee:85:f7:cb:72:63: 4c:85:e1:79:e3:a3:01:fc:25:0c:95:ab:98:18:e7:b0:33:96: 46:24:91:83:cd:7d:89:c5:8e:22:d1:31:15:20:06:8c:36:3b: ce:a6:e0:4c:f4:3b:32:48:c8:bb:6b:04:8f:e2:43:87:81:d7: db:a7:98:8b:ad:2f:cf:70:9e:0d:56:eb:30:9b:b3:09:40:60: 6f:3f:09:97:04:0c:b5:34:cf:16:64:ac:96:6e:a6:4c:8e:e3: f4:e8:c8:e0:4c:82:94:f1:00:19:73:f3:3a:f4:fd:4e:ee:4c: a2:a0:da:7f:33:d8:98:95:67:bc:31:8c:cb:c6:8e:8b:18:f8: 5c:b3:f0:d1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUA0eLJNO+nX4uamk8eXf/0kOGQV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTAzMjMwNTU1MDFaFw0yNjAzMjIwNjAwMDFaMDMxMTAvBgNV BAMTKEIxMTg1N0QxRUM0QjJBQkVDRjRFQjM4QkRDQ0Y3MTMwNUYwNDY2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNahi7OeWlIad9whwkGQERYNK K/xsjbT94eMfsxT/XDGaoyxMQh+i/ovp0b9Tz5+JgUzCG6XEGhtq6gzQYC29LW+R nnL7W+SVFpOJdnt0uAEXP2Mwy6dL4ucbk+62+5/iTY9c8TuodJL5LzaEpTpEqYBe GKJqgNYBQkZQ5n9lPIIQ9x05QEbvG+P7FQyCxd8b9MPecqT79G03uC/1VmOqg9ls ml1kJxB+UIcpSHwNXMUe8OV5rpCkwNW/yktIjGrmuz3+GcjY94VM4LlM1+gag5on OyAzbZViSAFB/1epXanfI11FJeAAYAa2AZBhXpiHPokB6xbadBsot+s1P2WbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUsRhX0exLKr7PTrOL3M9xMF8EZhowHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8pTANBgkqhkiG 9w0BAQsFAAOCAQEAgzTYZ2af5ZvNZc5cb2f8c36yjzve4J2NxdIx9QCY6teeghBH WHN2ztbkd23A8s0+l75kuNVLl6KdbHDQelu5SvhxL8JO9xo8/f7EQ3oMC9Nwfaz9 U3EiGHGLWKjy+R4PE5JpgrZBvMMmmuaHOGqtyWXBl9kJjbSB7oX3y3JjTIXheeOj AfwlDJWrmBjnsDOWRiSRg819icWOItExFSAGjDY7zqbgTPQ7MkjIu2sEj+JDh4HX 26eYi60vz3CeDVbrMJuzCUBgbz8JlwQMtTTPFmSslm6mTI7j9OjI4EyClPEAGXPz OvT9Tu5MoqDafzPYmJVnvDGMy8aOixj4XLPw0Q== -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:48 2025 by rpki-client