$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa File: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM= Subject key identifier: 3B:2A:53:54:57:A7:DC:DD:72:69:2B:93:65:60:F2:1E:2C:6D:5A:1F Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 4D4CD9D60F0DBE7161ADAE1EB4422C81CC4B4A35 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa Signing time: Mon 27 Jan 2025 06:00:00 +0000 ROA not before: Mon 27 Jan 2025 05:55:00 +0000 ROA not after: Mon 26 Jan 2026 06:00:00 +0000 asID: 38320 IP address blocks: 119.110.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 17:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4c:d9:d6:0f:0d:be:71:61:ad:ae:1e:b4:42:2c:81:cc:4b:4a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Jan 27 05:55:00 2025 GMT Not After : Jan 26 06:00:00 2026 GMT Subject: CN=3B2A535457A7DCDD72692B936560F21E2C6D5A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:4d:db:55:fa:c9:dd:3b:f9:a3:b6:2b:99: 6c:c3:e0:fc:64:3e:ae:82:b6:a4:12:b8:4a:5a:77: 89:5c:71:c1:56:46:c2:1e:f7:ce:3d:94:06:1f:03: 65:8b:b9:98:d0:96:24:5c:72:1a:31:97:67:7b:1e: 0d:02:f8:17:5a:b4:a0:f8:06:40:33:10:fd:81:1c: 69:70:dc:4c:19:a7:b4:a9:f2:d7:58:9b:99:64:10: 29:5a:ba:c9:a0:a8:4e:e6:66:45:bb:e6:51:cb:e4: 4c:ad:2b:f3:29:ba:74:65:5e:ec:4e:9b:d8:99:ef: b1:6d:d7:dc:08:16:c3:76:73:b6:bf:d0:d8:16:e4: 40:8f:f9:6c:6e:22:aa:66:ff:68:80:e5:52:d4:6c: 00:35:f9:df:38:da:95:2f:9a:77:13:88:5a:d0:86: 56:2f:48:00:29:3d:a9:38:5a:cb:db:35:fb:65:37: 2b:aa:bb:a1:dc:89:fc:19:94:7a:2a:f5:fc:66:fa: 57:dc:7d:df:94:12:3b:ca:32:eb:73:e0:21:45:1f: 92:d3:ad:0d:73:a2:ac:33:c0:0f:77:39:0a:c2:31: 48:a5:f8:a5:a7:5f:0d:e2:5a:9b:10:eb:5b:25:b3: df:28:fc:67:f7:cf:1b:53:20:3e:ed:aa:0e:31:51: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2A:53:54:57:A7:DC:DD:72:69:2B:93:65:60:F2:1E:2C:6D:5A:1F X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.64.0/22 Signature Algorithm: sha256WithRSAEncryption 74:31:c4:be:57:27:91:53:de:a0:5c:c7:04:ad:0a:2f:fe:40: 22:67:53:a0:24:7e:40:e0:2d:19:ab:fe:7e:fd:68:0b:de:5e: f4:0d:37:07:cc:02:fe:12:59:41:30:75:7c:eb:95:30:36:53: 7b:a5:3e:1f:eb:cd:84:6e:83:5d:a7:93:02:4d:f4:30:09:5a: da:21:08:31:2c:cb:39:77:54:11:ff:ff:ec:de:1a:ac:2c:b1: 71:36:34:e9:ba:ab:57:8c:67:e8:b4:68:b8:c4:3d:49:56:a0: ab:cd:1b:2f:9f:7d:16:32:68:c5:23:fb:c5:da:69:ef:86:81: d9:c8:fe:f1:f6:e6:0b:d0:5a:cf:6e:45:86:50:f8:fa:5e:7c: b4:31:0e:c8:71:a3:b4:74:4e:d0:b4:1b:da:c8:5c:73:e1:9d: ad:76:c8:63:b0:b6:5b:9b:95:15:ba:e0:d0:77:1e:23:d3:29: 2c:c1:92:92:fb:43:fe:26:65:93:f3:f1:36:e1:39:2e:68:0c: 0f:3c:dd:3a:e2:0f:58:fc:25:3d:5a:59:c6:57:fb:1b:c3:ff: ba:02:6d:e2:31:7f:b1:47:fe:22:04:ee:42:50:54:80:a0:44: 3b:35:34:b2:78:72:8f:1c:dd:9d:36:e9:e6:1c:d4:d0:3f:be: 9c:44:5b:a3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTUzZ1g8NvnFhra4etEIsgcxLSjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTAxMjcwNTU1MDBaFw0yNjAxMjYwNjAwMDBaMDMxMTAvBgNV BAMTKDNCMkE1MzU0NTdBN0RDREQ3MjY5MkI5MzY1NjBGMjFFMkM2RDVBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX4U3bVfrJ3Tv5o7YrmWzD4Pxk Pq6CtqQSuEpad4lcccFWRsIe9849lAYfA2WLuZjQliRcchoxl2d7Hg0C+BdatKD4 BkAzEP2BHGlw3EwZp7Sp8tdYm5lkEClausmgqE7mZkW75lHL5EytK/MpunRlXuxO m9iZ77Ft19wIFsN2c7a/0NgW5ECP+WxuIqpm/2iA5VLUbAA1+d842pUvmncTiFrQ hlYvSAApPak4WsvbNftlNyuqu6HcifwZlHoq9fxm+lfcfd+UEjvKMutz4CFFH5LT rQ1zoqwzwA93OQrCMUil+KWnXw3iWpsQ61sls98o/Gf3zxtTID7tqg4xUeNlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOypTVFen3N1yaSuTZWDyHixtWh8wHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzEzOTJlMzEzMTMwMmUzNjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnduQDANBgkqhkiG 9w0BAQsFAAOCAQEAdDHEvlcnkVPeoFzHBK0KL/5AImdToCR+QOAtGav+fv1oC95e 9A03B8wC/hJZQTB1fOuVMDZTe6U+H+vNhG6DXaeTAk30MAla2iEIMSzLOXdUEf// 7N4arCyxcTY06bqrV4xn6LRouMQ9SVagq80bL599FjJoxSP7xdpp74aB2cj+8fbm C9Baz25FhlD4+l58tDEOyHGjtHRO0LQb2shcc+GdrXbIY7C2W5uVFbrg0HceI9Mp LMGSkvtD/iZlk/PxNuE5LmgMDzzdOuIPWPwlPVpZxlf7G8P/ugJt4jF/sUf+IgTu QlBUgKBEOzU0snhyjxzdnTbp5hzU0D++nERbow== -----END CERTIFICATE-----Generated at Sun Apr 6 07:20:01 2025 by rpki-client