$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132352e302f32342d3234203d3e2034373837.roa File: 3131342e3139392e3132352e302f32342d3234203d3e2034373837.roa (raw, json) Hash identifier: UyfPHUxPGBPiTNwJB9vXMYzZu/B402oZrq1G1YtPxRE= Subject key identifier: CC:1F:6F:8F:E9:04:6B:C2:9E:F7:87:49:BC:23:95:B9:55:7A:2A:38 Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 7A0AA808176D85295778C65F4EC0FFEA9ACE7F88 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132352e302f32342d3234203d3e2034373837.roa Signing time: Tue 15 Jul 2025 06:15:58 +0000 ROA not before: Tue 15 Jul 2025 06:10:58 +0000 ROA not after: Tue 14 Jul 2026 06:15:58 +0000 asID: 4787 IP address blocks: 114.199.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0a:a8:08:17:6d:85:29:57:78:c6:5f:4e:c0:ff:ea:9a:ce:7f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Jul 15 06:10:58 2025 GMT Not After : Jul 14 06:15:58 2026 GMT Subject: CN=CC1F6F8FE9046BC29EF78749BC2395B9557A2A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:77:c9:0c:54:92:9e:dc:42:83:16:87:f2: de:61:51:ca:ea:f4:28:3b:01:90:a5:94:8d:f1:e1: cc:39:89:ac:06:f5:b3:96:d9:a7:88:e1:3b:33:a9: f1:68:bf:71:1e:c2:50:bf:db:6a:03:b7:60:6c:0e: ae:9d:02:50:fa:8a:f6:b3:ca:6d:1c:36:40:8f:16: b6:83:07:13:dd:1f:9a:b2:82:f7:d6:49:76:e8:8a: 23:5a:ac:c4:dc:66:ba:55:66:80:85:50:05:75:c0: 9f:55:b9:04:12:e3:ec:f4:8b:26:8c:67:58:00:e8: 8c:c8:a4:05:c2:b0:7c:75:2c:25:21:6e:d1:c1:96: d4:f3:be:48:70:cd:5f:d4:21:28:db:96:d8:a7:e5: 5f:2b:99:2e:f4:ae:b4:ab:a8:2e:75:86:c8:87:3d: 3e:a0:a0:cb:ec:ad:b4:41:10:17:9e:be:29:10:c1: bc:45:51:15:c4:a3:c5:36:6a:88:b3:28:c9:10:ec: ad:fc:a6:2b:67:df:f2:16:f4:14:72:81:6a:85:28: 79:f1:7e:30:be:0d:43:d0:67:bc:7d:a9:62:c8:6e: 1a:21:5c:f4:56:41:72:a4:c4:57:b0:27:d4:61:c3: e3:82:9e:03:51:64:c1:9a:45:03:ba:85:ee:e0:05: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1F:6F:8F:E9:04:6B:C2:9E:F7:87:49:BC:23:95:B9:55:7A:2A:38 X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132352e302f32342d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.125.0/24 Signature Algorithm: sha256WithRSAEncryption 71:16:cd:a6:32:bf:dd:2d:0f:6b:d4:b9:57:da:a3:20:c9:6e: cb:ea:61:ca:9c:b8:32:77:2e:e3:3d:18:ca:28:f0:88:ae:0e: f1:f4:48:14:58:0a:49:7b:b3:cd:88:b7:85:4d:7b:a0:fb:6c: 0f:6e:66:4b:5f:03:7c:2f:a1:c1:52:81:49:3e:7d:de:37:8b: 08:12:df:2e:e8:d1:44:0f:b5:8d:1a:e8:d1:75:f3:85:8d:99: eb:9a:8f:59:3e:e8:de:14:ab:09:e6:90:c8:f6:0c:b1:c7:29: 0a:c2:d4:72:ad:00:71:55:78:5f:f4:80:88:8f:6b:83:d3:6c: 06:95:fe:4b:1d:5a:cd:18:9d:3c:47:72:5e:31:61:25:20:d5: 3b:42:2f:d7:c4:59:cf:9b:b5:84:6c:75:b7:49:20:e5:0c:64: bc:7a:de:d0:b7:bc:4c:f2:d1:08:64:c1:cf:99:b8:d5:08:83: d7:8e:b2:6d:2b:c7:f0:5d:24:e1:68:59:0f:e7:4d:59:b1:7f: cd:fc:73:fb:ff:91:07:37:a1:6b:6c:0b:7d:93:8d:20:58:0c: 5c:c0:c2:f5:20:69:dc:6b:3b:51:9b:53:8e:cd:2a:89:ec:d3: d9:93:9a:ce:53:28:f6:1a:6e:2b:c5:44:05:7e:4e:44:d2:5e: 9d:65:ad:07 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUegqoCBdthSlXeMZfTsD/6prOf4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA3MTUwNjEwNThaFw0yNjA3MTQwNjE1NThaMDMxMTAvBgNV BAMTKENDMUY2RjhGRTkwNDZCQzI5RUY3ODc0OUJDMjM5NUI5NTU3QTJBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ3XfJDFSSntxCgxaH8t5hUcrq 9Cg7AZCllI3x4cw5iawG9bOW2aeI4TszqfFov3EewlC/22oDt2BsDq6dAlD6ivaz ym0cNkCPFraDBxPdH5qygvfWSXboiiNarMTcZrpVZoCFUAV1wJ9VuQQS4+z0iyaM Z1gA6IzIpAXCsHx1LCUhbtHBltTzvkhwzV/UISjbltin5V8rmS70rrSrqC51hsiH PT6goMvsrbRBEBeevikQwbxFURXEo8U2aoizKMkQ7K38pitn3/IW9BRygWqFKHnx fjC+DUPQZ7x9qWLIbhohXPRWQXKkxFewJ9Rhw+OCngNRZMGaRQO6he7gBb4nAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzB9vj+kEa8Ke94dJvCOVuVV6KjgwHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHfTANBgkqhkiG 9w0BAQsFAAOCAQEAcRbNpjK/3S0Pa9S5V9qjIMluy+phypy4Mncu4z0YyijwiK4O 8fRIFFgKSXuzzYi3hU17oPtsD25mS18DfC+hwVKBST593jeLCBLfLujRRA+1jRro 0XXzhY2Z65qPWT7o3hSrCeaQyPYMsccpCsLUcq0AcVV4X/SAiI9rg9NsBpX+Sx1a zRidPEdyXjFhJSDVO0Iv18RZz5u1hGx1t0kg5QxkvHre0Le8TPLRCGTBz5m41QiD 146ybSvH8F0k4WhZD+dNWbF/zfxz+/+RBzeha2wLfZONIFgMXMDC9SBp3Gs7UZtT js0qiezT2ZOazlMo9hpuK8VEBX5ORNJenWWtBw== -----END CERTIFICATE-----Generated at Mon Jul 21 19:05:05 2025 by rpki-client