$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: v0q5I9DDQ1roaX0Qr0ZGVf4pVi4lE41Lmy8Ss4KwkvE= Subject key identifier: 2F:8B:86:CC:2D:88:53:97:7D:6C:F2:E9:D0:D4:0F:B7:48:64:F9:05 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 234683365EA12CA34FC262967363F328CE064C9D Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa Signing time: Sun 23 Mar 2025 04:00:02 +0000 ROA not before: Sun 23 Mar 2025 03:55:02 +0000 ROA not after: Sun 22 Mar 2026 04:00:02 +0000 asID: 9341 IP address blocks: 119.252.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:46:83:36:5e:a1:2c:a3:4f:c2:62:96:73:63:f3:28:ce:06:4c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 23 03:55:02 2025 GMT Not After : Mar 22 04:00:02 2026 GMT Subject: CN=2F8B86CC2D8853977D6CF2E9D0D40FB74864F905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:e1:15:a2:40:8e:90:17:9a:a0:1c:a3:f0: 84:a9:6a:4f:18:39:09:52:5d:ae:57:9b:f8:74:99: 7f:6a:cb:44:55:11:6f:cf:0b:0c:a5:d2:4a:ad:94: 8d:28:63:19:57:7c:9c:b9:92:25:78:f8:ea:ad:b5: 15:82:cc:87:c6:b3:2c:7e:fe:ad:a9:69:3b:db:a7: ab:e1:af:58:1e:34:12:97:4b:0b:0e:7d:91:18:0c: ce:1f:77:83:73:90:7e:47:91:87:6c:2f:23:7e:ec: fd:f3:05:58:2f:fa:e1:37:c3:ad:91:15:7f:30:08: 06:05:42:ff:06:e2:f4:1b:3a:46:ec:5b:88:69:d6: bd:56:17:fe:56:4b:9e:a1:70:1d:8e:5f:76:ca:2b: 04:7c:b4:c9:42:06:e8:30:f1:ee:8f:53:d9:4d:f9: be:33:64:f6:17:e7:51:cf:1b:d7:e7:5b:9b:7f:5d: b9:27:96:8e:8f:3a:65:7e:06:72:d0:52:f9:b2:31: 31:e4:47:df:1a:00:33:63:11:be:b7:c9:c1:4c:f7: 9e:b0:7c:c8:04:c0:1e:f2:e8:08:27:68:3d:c1:58: 93:8f:0e:ee:ef:e8:6b:3b:b5:5d:e2:a1:5c:8e:d5: 49:ad:eb:05:3b:6d:e1:24:0c:3f:91:d0:1d:91:df: 27:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8B:86:CC:2D:88:53:97:7D:6C:F2:E9:D0:D4:0F:B7:48:64:F9:05 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136392e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.169.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:45:f8:46:96:c5:61:96:8c:b1:8d:65:3b:02:02:06:c8:e4: 27:7c:29:6d:38:50:3b:3e:3b:9d:21:29:70:c5:42:f3:3b:33: fe:55:eb:89:02:d6:00:98:04:cb:96:a2:d5:f5:92:02:88:0a: db:b7:0e:b4:94:d1:ce:15:de:df:08:5b:ef:4b:91:63:9f:13: 56:b7:91:ff:2c:31:b5:c2:3f:37:d8:dc:91:29:2d:81:6e:de: 75:24:a2:52:ab:e9:99:7f:c4:d8:84:81:52:8e:84:b9:5d:a6: 0a:ab:c8:5e:21:c6:0a:1a:8f:33:14:f4:38:d3:01:81:c7:2c: ee:96:2f:5e:ef:b2:9e:a4:36:78:e6:e1:30:0f:57:1f:24:40: 9d:56:79:4c:bb:bc:aa:b8:18:3e:c6:38:5a:c2:a3:77:32:b7: cd:80:e1:07:96:65:16:7d:d6:89:1f:10:fa:0e:d4:7a:11:ce: ea:14:dd:a8:10:ec:51:48:25:04:7d:d4:c9:aa:0b:bb:c8:5f: 50:47:57:b5:27:89:68:34:8f:6a:49:ea:29:cc:7e:22:7e:b1: 52:13:e2:c6:0c:5d:da:d4:94:32:67:dd:ee:8a:62:b4:ce:1b: 2c:56:76:ae:19:93:91:95:43:ad:a9:f1:35:4e:ea:38:0e:7c: fc:d7:cb:41 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUI0aDNl6hLKNPwmKWc2PzKM4GTJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTAzMjMwMzU1MDJaFw0yNjAzMjIwNDAwMDJaMDMxMTAvBgNV BAMTKDJGOEI4NkNDMkQ4ODUzOTc3RDZDRjJFOUQwRDQwRkI3NDg2NEY5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3+EVokCOkBeaoByj8ISpak8Y OQlSXa5Xm/h0mX9qy0RVEW/PCwyl0kqtlI0oYxlXfJy5kiV4+OqttRWCzIfGsyx+ /q2paTvbp6vhr1geNBKXSwsOfZEYDM4fd4NzkH5HkYdsLyN+7P3zBVgv+uE3w62R FX8wCAYFQv8G4vQbOkbsW4hp1r1WF/5WS56hcB2OX3bKKwR8tMlCBugw8e6PU9lN +b4zZPYX51HPG9fnW5t/Xbknlo6POmV+BnLQUvmyMTHkR98aADNjEb63ycFM956w fMgEwB7y6AgnaD3BWJOPDu7v6Gs7tV3ioVyO1Umt6wU7beEkDD+R0B2R3yfpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUL4uGzC2IU5d9bPLp0NQPt0hk+QUwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8qTANBgkqhkiG 9w0BAQsFAAOCAQEAC0X4RpbFYZaMsY1lOwICBsjkJ3wpbThQOz47nSEpcMVC8zsz /lXriQLWAJgEy5ai1fWSAogK27cOtJTRzhXe3whb70uRY58TVreR/ywxtcI/N9jc kSktgW7edSSiUqvpmX/E2ISBUo6EuV2mCqvIXiHGChqPMxT0ONMBgccs7pYvXu+y nqQ2eObhMA9XHyRAnVZ5TLu8qrgYPsY4WsKjdzK3zYDhB5ZlFn3WiR8Q+g7UehHO 6hTdqBDsUUglBH3UyaoLu8hfUEdXtSeJaDSPaknqKcx+In6xUhPixgxd2tSUMmfd 7opitM4bLFZ2rhmTkZVDranxNU7qOA58/NfLQQ== -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:44 2025 by rpki-client