$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e39322e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: mj8nzb7GDtFflFZUVJBsddsqePb7jy0mPFkv5//yvZE= Subject key identifier: 91:8C:5B:A6:3F:EC:83:DF:66:C4:46:9D:03:F0:C9:14:97:5A:96:43 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 3E7E02538415A075842372E9FFE0DE9FC6A317EC Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 12:02:09 +0000 ROA not before: Sat 17 May 2025 11:57:09 +0000 ROA not after: Sat 16 May 2026 12:02:09 +0000 asID: 17671 IP address blocks: 114.199.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7e:02:53:84:15:a0:75:84:23:72:e9:ff:e0:de:9f:c6:a3:17:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 11:57:09 2025 GMT Not After : May 16 12:02:09 2026 GMT Subject: CN=918C5BA63FEC83DF66C4469D03F0C914975A9643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:2b:3b:3c:3e:85:1d:c3:e7:b1:2f:e8:32: a2:1a:54:fe:fb:1f:bc:c6:75:de:bd:84:ae:64:98: 6d:b5:59:02:88:df:c9:b2:1b:8a:3b:00:3a:3d:ff: 91:ad:88:b9:b4:df:b0:ad:43:70:6d:1d:e4:96:bd: f4:b5:75:51:94:77:2f:c8:9e:93:2b:bc:d2:c8:14: e2:e4:84:8e:a9:d6:94:b7:1c:d4:cd:a3:cf:8d:92: 6a:36:96:72:51:5a:11:f2:9e:af:f5:bb:6e:f2:14: e1:08:bb:2e:07:fa:4f:0f:7d:d2:9e:60:7e:ce:f6: 15:c5:2a:36:9a:88:17:8e:d6:2d:63:1a:9b:48:df: 5f:0d:98:d1:b6:2b:f0:8e:1a:13:f0:75:b9:06:22: b8:dd:75:5d:73:57:ce:75:0f:e2:f0:88:3a:7f:5e: db:5d:94:12:60:19:67:c8:b1:2b:cf:30:c6:c0:6c: ed:05:7a:1e:54:6e:80:84:96:cb:75:6e:2c:b0:07: dd:38:f8:a3:8e:7c:26:e1:25:df:b7:00:d8:ef:3b: 13:fe:3b:d1:99:91:db:18:fd:a4:a9:20:a4:a8:51: 4b:58:b9:a8:89:8d:29:5b:d2:ff:e0:9f:c3:b4:f0: bd:0c:95:70:9a:03:13:8a:b6:19:3f:85:24:34:45: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8C:5B:A6:3F:EC:83:DF:66:C4:46:9D:03:F0:C9:14:97:5A:96:43 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e39322e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.92.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:e2:31:fc:6a:23:83:96:f4:ab:3e:3d:0e:71:78:f3:0f:f6: 3b:89:03:d6:8f:63:4d:73:d4:df:54:1f:c5:28:73:c9:57:8b: 69:06:84:cf:6b:f8:9b:7e:f2:9a:aa:31:96:85:22:b8:65:89: fb:f1:68:b5:56:f3:8d:e1:89:0e:02:bd:b2:19:4c:b2:d9:64: 2e:48:ce:a9:97:cc:44:ca:18:21:8c:bc:6e:dc:b1:95:05:62: 5e:d9:35:0f:00:6e:a0:8d:96:3b:ba:9e:60:44:49:4c:79:fb: 27:20:5d:0a:35:8e:95:e3:cf:eb:94:76:90:57:7a:ae:b3:40: f5:12:df:e4:ec:ef:25:ff:cc:c7:b3:c9:49:0a:58:dc:63:63: a4:70:61:46:68:e5:91:82:48:51:a4:30:61:e1:78:af:16:c3: 35:02:b6:ec:23:58:8a:f5:49:63:10:3b:dc:32:44:c7:db:cc: d0:ca:81:70:c7:b4:f8:8d:bf:0e:c9:8f:f7:e5:f7:53:03:47: ea:c7:46:f5:10:45:04:a1:bf:5d:80:9b:40:a3:5a:4b:f8:af: df:72:db:a6:04:d0:13:23:e6:b0:96:0d:95:47:fc:af:65:18: de:4c:10:b0:eb:57:53:1f:0d:03:c5:73:c1:9c:2c:1c:b1:f8: 5b:74:e2:a9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPn4CU4QVoHWEI3Lp/+Den8ajF+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMTU3MDlaFw0yNjA1MTYxMjAyMDlaMDMxMTAvBgNV BAMTKDkxOEM1QkE2M0ZFQzgzREY2NkM0NDY5RDAzRjBDOTE0OTc1QTk2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPSs7PD6FHcPnsS/oMqIaVP77 H7zGdd69hK5kmG21WQKI38myG4o7ADo9/5GtiLm037CtQ3BtHeSWvfS1dVGUdy/I npMrvNLIFOLkhI6p1pS3HNTNo8+Nkmo2lnJRWhHynq/1u27yFOEIuy4H+k8PfdKe YH7O9hXFKjaaiBeO1i1jGptI318NmNG2K/COGhPwdbkGIrjddV1zV851D+LwiDp/ XttdlBJgGWfIsSvPMMbAbO0Feh5UboCElst1biywB904+KOOfCbhJd+3ANjvOxP+ O9GZkdsY/aSpIKSoUUtYuaiJjSlb0v/gn8O08L0MlXCaAxOKthk/hSQ0RaVXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkYxbpj/sg99mxEadA/DJFJdalkMwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzOTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHXDANBgkqhkiG 9w0BAQsFAAOCAQEAXuIx/Gojg5b0qz49DnF48w/2O4kD1o9jTXPU31QfxShzyVeL aQaEz2v4m37ymqoxloUiuGWJ+/FotVbzjeGJDgK9shlMstlkLkjOqZfMRMoYIYy8 btyxlQViXtk1DwBuoI2WO7qeYERJTHn7JyBdCjWOlePP65R2kFd6rrNA9RLf5Ozv Jf/Mx7PJSQpY3GNjpHBhRmjlkYJIUaQwYeF4rxbDNQK27CNYivVJYxA73DJEx9vM 0MqBcMe0+I2/DsmP9+X3UwNH6sdG9RBFBKG/XYCbQKNaS/iv33LbpgTQEyPmsJYN lUf8r2UY3kwQsOtXUx8NA8VzwZwsHLH4W3TiqQ== -----END CERTIFICATE-----Generated at Mon Jul 21 08:27:06 2025 by rpki-client