$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131332e302f32342d3234203d3e2034373837.roa File: 3131342e3139392e3131332e302f32342d3234203d3e2034373837.roa (raw, json) Hash identifier: HQwsUlJQ1mvZXDngZABRHSehVQm/2AQ0/ApZL8eNeRo= Subject key identifier: 5C:C5:E9:AD:DD:B1:B6:7F:96:A3:54:9D:CB:4F:DA:94:F1:CB:F8:AE Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 7A32CF2DB0D9A3A4818BC8BECB7EAD90B37EF697 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131332e302f32342d3234203d3e2034373837.roa Signing time: Tue 15 Jul 2025 06:12:27 +0000 ROA not before: Tue 15 Jul 2025 06:07:27 +0000 ROA not after: Tue 14 Jul 2026 06:12:27 +0000 asID: 4787 IP address blocks: 114.199.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:32:cf:2d:b0:d9:a3:a4:81:8b:c8:be:cb:7e:ad:90:b3:7e:f6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Jul 15 06:07:27 2025 GMT Not After : Jul 14 06:12:27 2026 GMT Subject: CN=5CC5E9ADDDB1B67F96A3549DCB4FDA94F1CBF8AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:91:b2:4b:1c:2c:6e:e1:de:9a:1b:79:5b: 5e:d0:8e:36:49:3b:66:a1:43:d2:86:2c:54:87:e4: df:20:4a:b3:b1:94:1d:0b:22:a3:c1:70:26:db:f9: ac:9e:3c:f3:f9:60:2d:ad:5c:4d:53:ea:b1:ac:b5: a2:c1:c7:fd:eb:31:45:77:b5:fe:41:92:f4:01:11: 1a:ca:52:60:f3:80:cd:c9:c3:56:8b:a7:21:24:6e: cd:09:79:e6:fd:21:9e:18:2c:b0:7e:54:43:44:ff: 2b:39:bb:f2:48:cb:a0:e8:c7:2c:cf:c5:6d:3f:e8: ae:59:96:97:94:8e:9b:6d:df:92:36:4e:38:3e:cf: b7:4e:ac:4e:11:e8:87:54:6f:8c:e6:fb:79:b8:26: 99:aa:11:0b:a5:56:4a:e6:dd:75:1b:eb:f4:2e:1c: 6e:7d:cd:79:20:c0:49:33:61:49:5a:1f:c6:41:c7: b0:a1:a5:da:5e:e4:5d:9d:81:b0:9b:e4:82:e3:e3: b1:59:1e:b9:dc:4a:ea:88:de:aa:62:9f:ea:b8:75: 9f:9b:5e:ee:b6:7a:6b:ae:47:f0:2a:ac:57:7c:86: 95:0e:79:41:8b:22:06:2a:fa:9c:e6:46:63:d5:eb: 1c:e1:48:26:ed:8d:97:45:f6:5f:71:c9:1e:39:a2: f9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C5:E9:AD:DD:B1:B6:7F:96:A3:54:9D:CB:4F:DA:94:F1:CB:F8:AE X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131332e302f32342d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.113.0/24 Signature Algorithm: sha256WithRSAEncryption c2:ed:2d:0c:51:4f:89:94:b6:d8:f9:21:3c:60:05:5a:88:97: 4a:c5:3d:70:42:1a:0d:c7:5f:af:e5:ab:cf:36:8d:61:7a:bd: 40:f4:11:f9:4c:9a:fc:b4:75:fa:0e:8b:69:9c:7c:d8:fa:2d: 27:31:2a:08:db:e7:e1:cf:83:46:e8:93:74:5d:c7:e9:88:58: e0:e8:f4:db:7c:d9:59:63:d2:a2:25:5b:57:c0:dc:04:b3:12: 65:b2:4e:f8:78:af:95:d3:b7:d4:f6:2d:dd:75:1d:88:2d:34: d0:78:13:2b:9f:15:97:7a:67:bc:44:14:1b:76:3b:dd:8b:ed: 5b:f5:1c:aa:47:5b:4f:f0:70:0f:5f:f8:00:ef:e9:ff:c7:48: 2a:73:1f:7b:85:74:01:cd:c9:cd:16:a3:2d:25:0b:3e:a0:71: 2b:84:64:e3:38:f7:6b:75:74:e5:55:cf:0f:d7:99:94:03:e8: 2b:c9:ec:e8:41:12:8f:b6:04:cd:7d:b7:86:1c:95:0e:84:d5: 44:a2:ad:95:46:88:eb:af:50:a7:36:53:75:be:7c:19:61:22: e8:b9:6a:2b:50:d1:08:f1:88:90:0d:a4:c3:f1:00:90:bf:34: 22:68:70:cb:c1:9a:98:fe:1a:4b:21:83:8f:64:17:68:9a:66: 04:5a:9c:e8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUejLPLbDZo6SBi8i+y36tkLN+9pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA3MTUwNjA3MjdaFw0yNjA3MTQwNjEyMjdaMDMxMTAvBgNV BAMTKDVDQzVFOUFERERCMUI2N0Y5NkEzNTQ5RENCNEZEQTk0RjFDQkY4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mZGySxwsbuHemht5W17QjjZJ O2ahQ9KGLFSH5N8gSrOxlB0LIqPBcCbb+ayePPP5YC2tXE1T6rGstaLBx/3rMUV3 tf5BkvQBERrKUmDzgM3Jw1aLpyEkbs0Jeeb9IZ4YLLB+VENE/ys5u/JIy6DoxyzP xW0/6K5ZlpeUjptt35I2Tjg+z7dOrE4R6IdUb4zm+3m4JpmqEQulVkrm3XUb6/Qu HG59zXkgwEkzYUlaH8ZBx7Chpdpe5F2dgbCb5ILj47FZHrncSuqI3qpin+q4dZ+b Xu62emuuR/AqrFd8hpUOeUGLIgYq+pzmRmPV6xzhSCbtjZdF9l9xyR45ovmBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXMXprd2xtn+Wo1Sdy0/alPHL+K4wHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHcTANBgkqhkiG 9w0BAQsFAAOCAQEAwu0tDFFPiZS22PkhPGAFWoiXSsU9cEIaDcdfr+WrzzaNYXq9 QPQR+Uya/LR1+g6LaZx82PotJzEqCNvn4c+DRuiTdF3H6YhY4Oj023zZWWPSoiVb V8DcBLMSZbJO+HivldO31PYt3XUdiC000HgTK58Vl3pnvEQUG3Y73YvtW/Ucqkdb T/BwD1/4AO/p/8dIKnMfe4V0Ac3JzRajLSULPqBxK4Rk4zj3a3V05VXPD9eZlAPo K8ns6EESj7YEzX23hhyVDoTVRKKtlUaI669QpzZTdb58GWEi6LlqK1DRCPGIkA2k w/EAkL80Imhwy8GamP4aSyGDj2QXaJpmBFqc6A== -----END CERTIFICATE-----Generated at Tue Jul 22 04:25:05 2025 by rpki-client