$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: m+bzUVO8lcZe1R3l6vSAwluc+u3gULM7PctKZnFRQ8w= Subject key identifier: 4B:DB:90:77:72:6C:20:94:27:9A:4B:07:2C:D6:52:38:C6:DE:3C:E2 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 671B0AA4A4137B3DC4495F32B4F645E4EFB50C79 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa Signing time: Sun 23 Mar 2025 06:00:02 +0000 ROA not before: Sun 23 Mar 2025 05:55:02 +0000 ROA not after: Sun 22 Mar 2026 06:00:02 +0000 asID: 9341 IP address blocks: 119.252.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1b:0a:a4:a4:13:7b:3d:c4:49:5f:32:b4:f6:45:e4:ef:b5:0c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 23 05:55:02 2025 GMT Not After : Mar 22 06:00:02 2026 GMT Subject: CN=4BDB9077726C2094279A4B072CD65238C6DE3CE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:f1:e8:a4:4f:e5:db:60:93:b6:8c:41:77: 1c:4b:7d:0d:9e:a8:bd:08:72:7b:ee:85:b8:ef:4c: c6:b6:31:57:eb:e6:47:95:ac:38:ff:c0:e8:d4:08: b8:77:11:7e:0e:c0:bb:9c:d7:bf:87:53:88:6b:f1: 35:c6:b2:83:80:66:fc:d7:a4:e8:58:50:5c:86:38: 8a:95:c8:2e:33:40:38:43:ff:65:7e:1d:da:f5:51: 1a:08:00:57:69:1f:7b:ef:d6:d4:57:0a:9e:77:93: f3:eb:50:fe:7e:c6:0e:cd:f9:a7:8c:9a:69:a3:d5: d5:c5:bd:2d:8c:4c:6d:72:68:b3:ed:c8:aa:14:6f: 99:2f:19:0a:ef:64:4f:0b:31:fd:63:6f:81:7c:9c: 40:b0:b2:2b:29:82:ab:0c:78:13:29:c1:92:57:b0: 79:4e:ba:aa:98:c4:08:ef:77:e3:dc:aa:b4:99:86: 8f:64:92:79:8f:a4:f8:17:46:99:d3:02:08:65:5b: c8:29:e9:a6:fc:fe:62:44:34:d9:f7:6f:0a:14:47: 79:fa:bb:c7:f2:5f:de:ff:9b:38:25:d5:f0:08:6b: bf:0d:cf:a0:5b:36:db:d2:de:0e:88:83:5c:84:4e: bf:d2:7f:41:1f:07:fb:14:5c:0b:73:c2:b0:86:5f: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DB:90:77:72:6C:20:94:27:9A:4B:07:2C:D6:52:38:C6:DE:3C:E2 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136372e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.167.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a6:39:18:87:73:25:b7:e1:51:3b:28:c4:03:5a:32:f8:2f: 3e:ca:39:52:2f:13:b4:63:b0:e6:59:8a:67:a6:19:dc:8e:7f: 24:dd:be:b6:4a:1a:df:f3:dc:7c:f3:15:cf:6f:f5:c9:31:2a: da:a6:07:5e:4d:b2:e1:97:9e:73:de:5e:60:45:68:4c:4d:ca: 98:4f:1f:a5:b8:57:04:94:e1:ed:b4:90:11:8b:7c:f9:2b:43: 56:ce:c4:ac:13:6b:85:b9:f5:f0:f7:ea:ba:0c:8e:b7:84:40: b9:ff:b2:c0:73:ae:b4:15:12:90:3b:50:ef:72:49:af:51:d4: 1f:b0:a7:8c:64:25:6a:bc:91:2c:81:12:b9:5d:ad:8a:1f:ae: f8:95:5c:29:84:3f:5b:bb:90:22:df:17:2f:f7:00:75:96:fa: fb:d7:4e:f4:25:1d:9d:bf:cb:dd:40:12:8e:8d:c9:7c:41:68: b6:0c:fa:b7:0f:52:6e:ab:a3:31:ec:4a:47:3e:23:6a:06:4a: 58:ba:3c:7d:cc:5e:15:75:f6:26:0c:ff:cd:2f:aa:08:98:2d: 3c:e2:12:67:29:1f:44:39:9e:05:1f:08:45:bf:36:63:db:53: 81:bd:65:9c:81:34:fb:67:83:d8:d8:35:dc:cf:c8:93:b1:4b: a9:89:3e:cd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZxsKpKQTez3ESV8ytPZF5O+1DHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTAzMjMwNTU1MDJaFw0yNjAzMjIwNjAwMDJaMDMxMTAvBgNV BAMTKDRCREI5MDc3NzI2QzIwOTQyNzlBNEIwNzJDRDY1MjM4QzZERTNDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWvHopE/l22CTtoxBdxxLfQ2e qL0IcnvuhbjvTMa2MVfr5keVrDj/wOjUCLh3EX4OwLuc17+HU4hr8TXGsoOAZvzX pOhYUFyGOIqVyC4zQDhD/2V+Hdr1URoIAFdpH3vv1tRXCp53k/PrUP5+xg7N+aeM mmmj1dXFvS2MTG1yaLPtyKoUb5kvGQrvZE8LMf1jb4F8nECwsispgqsMeBMpwZJX sHlOuqqYxAjvd+PcqrSZho9kknmPpPgXRpnTAghlW8gp6ab8/mJENNn3bwoUR3n6 u8fyX97/mzgl1fAIa78Nz6BbNtvS3g6Ig1yETr/Sf0EfB/sUXAtzwrCGX/EvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUS9uQd3JsIJQnmksHLNZSOMbePOIwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8pzANBgkqhkiG 9w0BAQsFAAOCAQEAcaY5GIdzJbfhUTsoxANaMvgvPso5Ui8TtGOw5lmKZ6YZ3I5/ JN2+tkoa3/PcfPMVz2/1yTEq2qYHXk2y4Zeec95eYEVoTE3KmE8fpbhXBJTh7bSQ EYt8+StDVs7ErBNrhbn18PfqugyOt4RAuf+ywHOutBUSkDtQ73JJr1HUH7CnjGQl aryRLIESuV2tih+u+JVcKYQ/W7uQIt8XL/cAdZb6+9dO9CUdnb/L3UASjo3JfEFo tgz6tw9SbqujMexKRz4jagZKWLo8fcxeFXX2Jgz/zS+qCJgtPOISZykfRDmeBR8I Rb82Y9tTgb1lnIE0+2eD2Ng13M/Ik7FLqYk+zQ== -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:36 2025 by rpki-client