$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e2034373837.roa File: 3131342e3139392e3132312e302f32342d3234203d3e2034373837.roa (raw, json) Hash identifier: yfiGID6UeqDH1f2YlqSzU8KZygYs190BP3A0AvGm/Ho= Subject key identifier: 5E:91:1D:DF:20:4B:1C:B0:15:DA:41:F8:03:8A:59:90:9B:90:D9:8A Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 648C0C6A14F17299BFA9E2D0A42AA129461E3441 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e2034373837.roa Signing time: Tue 15 Jul 2025 06:14:44 +0000 ROA not before: Tue 15 Jul 2025 06:09:44 +0000 ROA not after: Tue 14 Jul 2026 06:14:44 +0000 asID: 4787 IP address blocks: 114.199.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8c:0c:6a:14:f1:72:99:bf:a9:e2:d0:a4:2a:a1:29:46:1e:34:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Jul 15 06:09:44 2025 GMT Not After : Jul 14 06:14:44 2026 GMT Subject: CN=5E911DDF204B1CB015DA41F8038A59909B90D98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:63:e1:98:33:6b:a9:b8:42:33:a5:7e:9c:c6: 8e:ba:b7:de:b5:5e:4d:99:50:84:81:df:68:b1:49: 3f:4f:7c:88:77:fe:ee:d3:0a:0d:b8:41:be:4f:89: ae:26:6e:bc:8c:40:24:c5:8d:56:de:c7:67:5d:85: 6e:69:a1:af:99:de:18:8b:07:88:63:4c:17:8b:4b: fd:b0:df:81:91:3d:19:a2:25:a3:25:b0:2a:da:7f: 43:70:44:c2:24:d9:eb:7c:cc:a7:5b:71:c5:b9:89: 8a:5f:22:7f:66:9d:2a:a9:c9:ae:3a:b7:ee:c5:a7: aa:ac:eb:a9:9d:51:e3:38:bd:af:aa:61:5e:7b:87: ec:4e:08:8d:f3:8c:e4:9b:c1:02:0f:ae:7e:94:c0: af:00:ac:55:50:4e:64:90:9e:c5:c0:6a:62:1f:82: 8d:8e:b3:fe:11:5e:e1:bb:d9:1c:60:62:87:0d:44: 50:4a:8f:f6:58:73:ee:d6:a2:7c:d2:e3:4f:a0:16: c4:13:84:f7:ef:f4:ba:38:af:7b:80:ef:ca:eb:1f: 6d:39:71:e5:16:d6:0e:82:55:b7:77:a6:2b:41:2b: da:86:3e:02:9c:ab:15:04:53:6b:67:72:65:80:6d: 1d:0b:ae:78:61:f7:bd:2a:37:22:86:c8:2c:97:59: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:91:1D:DF:20:4B:1C:B0:15:DA:41:F8:03:8A:59:90:9B:90:D9:8A X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.121.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a1:d1:4b:dc:43:71:15:c9:0f:3b:f1:62:37:f5:a5:03:ba: 89:2a:0b:39:51:52:bd:1b:c5:3e:af:49:05:83:fc:25:a9:b7: cf:40:da:9c:87:24:f7:ec:e0:69:aa:73:30:40:f2:79:cb:87: ec:39:99:77:22:c0:30:3a:dc:90:7c:ca:20:84:2e:76:ab:4d: 37:84:52:5a:78:8a:3d:f4:57:66:cf:30:f8:1e:2e:05:a1:c4: 22:be:cd:df:ed:dc:63:4d:6d:68:fd:62:52:e5:d3:c7:94:03: 64:49:a7:cb:9c:88:d1:9a:06:05:20:ba:ea:c0:7f:91:54:97: ec:be:35:59:e9:16:60:9f:d9:99:7b:b6:9d:25:64:98:3e:9e: 94:1f:dd:61:49:07:18:3f:92:c3:06:0b:25:19:38:c9:a9:69: f0:7c:c5:fb:87:59:28:2f:5a:59:5b:a7:62:c3:b4:92:e2:56: f6:93:28:24:41:bd:2d:18:a3:2e:c6:9a:4a:21:6c:19:09:5c: c9:2a:34:6f:74:9f:33:f2:db:9a:e4:6d:89:04:56:0d:17:eb: aa:49:a1:70:ea:12:90:2f:b7:21:f6:7d:7e:42:2a:15:c9:70: 21:14:e6:a0:4b:51:5d:89:8c:fd:cc:67:04:3d:14:99:92:49: 60:2f:3a:49 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZIwMahTxcpm/qeLQpCqhKUYeNEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA3MTUwNjA5NDRaFw0yNjA3MTQwNjE0NDRaMDMxMTAvBgNV BAMTKDVFOTExRERGMjA0QjFDQjAxNURBNDFGODAzOEE1OTkwOUI5MEQ5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyY+GYM2upuEIzpX6cxo66t961 Xk2ZUISB32ixST9PfIh3/u7TCg24Qb5Pia4mbryMQCTFjVbex2ddhW5poa+Z3hiL B4hjTBeLS/2w34GRPRmiJaMlsCraf0NwRMIk2et8zKdbccW5iYpfIn9mnSqpya46 t+7Fp6qs66mdUeM4va+qYV57h+xOCI3zjOSbwQIPrn6UwK8ArFVQTmSQnsXAamIf go2Os/4RXuG72RxgYocNRFBKj/ZYc+7WonzS40+gFsQThPfv9Lo4r3uA78rrH205 ceUW1g6CVbd3pitBK9qGPgKcqxUEU2tncmWAbR0Lrnhh970qNyKGyCyXWd/5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXpEd3yBLHLAV2kH4A4pZkJuQ2YowHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHeTANBgkqhkiG 9w0BAQsFAAOCAQEAe6HRS9xDcRXJDzvxYjf1pQO6iSoLOVFSvRvFPq9JBYP8Jam3 z0DanIck9+zgaapzMEDyecuH7DmZdyLAMDrckHzKIIQudqtNN4RSWniKPfRXZs8w +B4uBaHEIr7N3+3cY01taP1iUuXTx5QDZEmny5yI0ZoGBSC66sB/kVSX7L41WekW YJ/ZmXu2nSVkmD6elB/dYUkHGD+SwwYLJRk4yalp8HzF+4dZKC9aWVunYsO0kuJW 9pMoJEG9LRijLsaaSiFsGQlcySo0b3SfM/LbmuRtiQRWDRfrqkmhcOoSkC+3IfZ9 fkIqFclwIRTmoEtRXYmM/cxnBD0UmZJJYC86SQ== -----END CERTIFICATE-----Generated at Mon Jul 21 19:04:26 2025 by rpki-client