$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa File: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (raw, json) Hash identifier: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M= Subject key identifier: AF:93:52:5C:0C:5C:CA:73:06:6D:06:85:00:A6:7B:B3:E0:67:1E:63 Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 3007CDBA580CFEDF10D58185257C18AF84FFE4BC Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa Signing time: Sun 13 Jul 2025 11:46:11 +0000 ROA not before: Sun 13 Jul 2025 11:41:11 +0000 ROA not after: Sun 12 Jul 2026 11:46:11 +0000 asID: 59282 IP address blocks: 116.206.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:07:cd:ba:58:0c:fe:df:10:d5:81:85:25:7c:18:af:84:ff:e4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Jul 13 11:41:11 2025 GMT Not After : Jul 12 11:46:11 2026 GMT Subject: CN=AF93525C0C5CCA73066D068500A67BB3E0671E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:17:61:ef:1f:b6:1c:ec:36:1a:14:b9:08: 8c:1d:7b:68:86:bc:80:c4:9c:10:b0:83:7a:b1:9c: c5:9e:fd:3e:4a:b8:02:df:80:02:88:0e:d2:3a:92: 9b:73:d0:78:28:53:e3:64:87:49:87:71:1e:3a:d5: 2a:cc:c3:b4:d9:38:bd:82:3c:e8:1e:bb:9e:9f:45: 3d:de:ef:c1:3c:2f:d3:71:c2:0c:e1:a7:e5:29:fb: 7f:a2:e2:c8:0d:c5:09:77:20:d2:1b:ee:1f:e8:71: a1:07:2e:61:11:95:3e:79:b7:70:76:11:ec:0e:49: 05:1a:ad:1c:14:90:97:cb:29:d4:b4:8d:0d:fa:eb: 87:b4:0e:e9:7b:64:8d:96:c3:f5:eb:32:1f:84:80: 0b:9c:ec:73:84:f2:84:50:7f:07:43:2b:8c:65:93: 96:cc:e1:da:8c:13:f6:00:e4:80:b9:79:d9:98:9c: 9e:de:0e:1e:0b:e5:fa:9d:ec:d7:f9:28:d5:d9:70: fa:16:75:25:e3:a8:22:da:38:ee:ce:20:97:29:4b: 76:dc:bd:4f:cd:13:cf:4a:b4:e0:28:59:b1:68:3d: 99:48:6b:c2:28:31:64:3b:75:8d:da:8e:3a:73:78: 8d:2e:f9:30:0b:b5:0c:07:34:e5:2d:b6:95:fd:18: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:93:52:5C:0C:5C:CA:73:06:6D:06:85:00:A6:7B:B3:E0:67:1E:63 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.206.212.0/22 Signature Algorithm: sha256WithRSAEncryption 36:1c:de:d5:06:24:ad:fa:4a:8e:e7:1d:ba:a9:e7:5c:a3:50: f7:22:aa:97:d7:40:03:d4:5a:18:4e:f4:cb:86:d8:07:35:f4: a2:9b:85:07:ea:07:6d:dc:d5:12:c2:57:75:b0:93:79:04:be: 79:18:79:af:10:54:8b:ca:8c:e0:fc:1d:fb:4d:a6:d8:c4:8a: 6e:14:b7:7c:58:7d:77:b0:74:27:12:6a:90:f0:e3:62:6f:1e: a8:ff:3e:89:91:37:e4:4f:7c:c8:78:fb:b1:f9:81:8f:2a:fb: 46:b1:cd:43:ef:92:4f:ea:6d:05:b7:3e:13:3e:ad:af:97:aa: fa:d7:be:9d:d6:7f:83:98:d1:9b:34:11:82:cf:27:de:83:63: 6d:e8:d4:0f:6e:13:91:d4:8a:f3:c7:b1:43:1c:4e:fb:0b:aa: 77:8d:e8:91:ea:4c:62:ff:fb:3f:87:2b:3c:66:c3:0c:5f:79: a5:89:08:9c:ba:43:0e:f4:7a:4e:db:0d:41:a9:de:7e:ea:ac: b9:71:09:df:df:48:d6:ad:b2:fc:36:da:f0:1b:9c:a9:b8:c6: 26:8c:b5:4c:c3:ac:e7:76:0e:92:fd:99:34:f5:ed:c4:f4:16: 4e:e1:76:18:95:b5:38:40:25:e3:20:f9:a2:80:72:61:cc:b5: 50:97:3d:d7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMAfNulgM/t8Q1YGFJXwYr4T/5LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA3MTMxMTQxMTFaFw0yNjA3MTIxMTQ2MTFaMDMxMTAvBgNV BAMTKEFGOTM1MjVDMEM1Q0NBNzMwNjZEMDY4NTAwQTY3QkIzRTA2NzFFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoARdh7x+2HOw2GhS5CIwde2iG vIDEnBCwg3qxnMWe/T5KuALfgAKIDtI6kptz0HgoU+Nkh0mHcR461SrMw7TZOL2C POgeu56fRT3e78E8L9Nxwgzhp+Up+3+i4sgNxQl3INIb7h/ocaEHLmERlT55t3B2 EewOSQUarRwUkJfLKdS0jQ3664e0Dul7ZI2Ww/XrMh+EgAuc7HOE8oRQfwdDK4xl k5bM4dqME/YA5IC5edmYnJ7eDh4L5fqd7Nf5KNXZcPoWdSXjqCLaOO7OIJcpS3bc vU/NE89KtOAoWbFoPZlIa8IoMWQ7dY3ajjpzeI0u+TALtQwHNOUttpX9GP2zAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUr5NSXAxcynMGbQaFAKZ7s+BnHmMwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04 MDQ3LTY4ZDJiZDYzYzljMy8wLzMxMzEzNjJlMzIzMDM2MmUzMjMxMzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCdM7UMA0GCSqG SIb3DQEBCwUAA4IBAQA2HN7VBiSt+kqO5x26qedco1D3IqqX10AD1FoYTvTLhtgH NfSim4UH6gdt3NUSwld1sJN5BL55GHmvEFSLyozg/B37TabYxIpuFLd8WH13sHQn EmqQ8ONibx6o/z6JkTfkT3zIePux+YGPKvtGsc1D75JP6m0Ftz4TPq2vl6r6176d 1n+DmNGbNBGCzyfeg2Nt6NQPbhOR1Irzx7FDHE77C6p3jeiR6kxi//s/hys8ZsMM X3mliQicukMO9HpO2w1Bqd5+6qy5cQnf30jWrbL8NtrwG5ypuMYmjLVMw6zndg6S /Zk09e3E9BZO4XYYlbU4QCXjIPmigHJhzLVQlz3X -----END CERTIFICATE-----Generated at Mon Jul 21 14:36:26 2025 by rpki-client