$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa File: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (raw, json) Hash identifier: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A= Subject key identifier: 8C:A0:27:EA:57:7C:41:AD:8F:76:25:E2:0A:C8:8D:04:C8:46:FF:5D Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 12E25C18A3D26C9267A02D371CC97D01C8F5F3CC Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa Signing time: Mon 01 Sep 2025 09:31:35 +0000 ROA not before: Mon 01 Sep 2025 09:26:35 +0000 ROA not after: Mon 31 Aug 2026 09:31:35 +0000 asID: 46029 IP address blocks: 117.121.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e2:5c:18:a3:d2:6c:92:67:a0:2d:37:1c:c9:7d:01:c8:f5:f3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Sep 1 09:26:35 2025 GMT Not After : Aug 31 09:31:35 2026 GMT Subject: CN=8CA027EA577C41AD8F7625E20AC88D04C846FF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:cb:3d:f6:02:61:55:38:a6:44:56:18:eb: c6:19:d4:ce:23:0a:fe:96:82:b4:2b:ad:8f:0d:5d: 4b:a4:a9:04:ba:b4:de:88:cf:a0:d9:90:13:41:fd: db:98:ae:14:22:73:4d:2a:ad:f4:f7:8b:f2:4e:d6: cc:ff:41:3c:0b:6f:b3:da:2d:84:af:25:3c:a7:05: aa:4b:ff:5e:c3:c3:76:23:fa:e3:b2:c9:ab:37:fa: 79:a8:02:c9:b0:6a:b6:e8:d6:3f:fb:06:27:67:de: 7d:99:70:89:c8:e2:53:0c:70:92:8a:19:d3:57:b0: 00:67:f0:ae:b1:5e:7d:5b:31:be:9c:b6:b8:40:b7: d4:0c:17:04:79:2f:40:5d:67:e8:92:30:90:87:c3: db:e3:f3:67:50:43:36:c0:f4:16:d5:fb:a0:c7:19: 1d:ec:55:e9:a1:db:96:c2:59:fd:31:e4:4e:0b:d5: c4:88:c2:ff:f8:23:e1:d1:a7:44:65:c1:5a:e6:97: c5:ab:4c:ff:f9:9f:cc:96:52:21:34:d4:47:e8:30: 04:2c:87:41:da:59:4d:1c:d8:46:5e:36:e3:fe:82: 95:8b:c4:53:55:8f:07:59:fc:68:46:9a:f7:99:1d: ec:82:ae:dd:fa:33:c4:7a:10:1c:6c:a0:ee:c7:4e: f2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A0:27:EA:57:7C:41:AD:8F:76:25:E2:0A:C8:8D:04:C8:46:FF:5D X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.121.206.0/24 Signature Algorithm: sha256WithRSAEncryption d0:47:44:d3:b9:e2:f2:73:da:f2:ca:12:d8:8a:9e:de:bb:c2: 49:3a:a7:82:b4:b9:3d:cd:c4:8f:ea:24:3b:83:15:33:1a:8c: cc:4c:c8:93:36:55:02:e6:8e:e9:2d:d8:d5:71:4b:43:c0:15: 7b:50:9a:d9:47:b5:33:af:bb:25:0b:f9:c7:47:b4:09:08:93: ec:cf:7c:d0:50:8d:27:68:f1:09:f1:96:de:15:ee:c9:44:ae: 9d:d2:8f:e0:c5:fc:7d:88:5f:e8:1e:61:74:1e:4f:e5:a4:95: b6:b4:e5:5a:9e:ff:f7:a4:56:62:26:4f:07:48:97:8b:1c:53: 44:5e:22:13:4a:15:7c:6d:d2:6c:bc:2b:10:19:5f:31:1a:1d: 77:17:d4:0e:dc:e0:8b:dc:ed:99:54:87:9d:26:95:46:61:98: 68:1e:5f:d8:97:58:48:18:69:eb:83:a8:d6:bf:4a:37:40:38: c0:07:be:20:29:9d:d9:c9:90:93:7c:67:69:d6:a0:d3:56:8f: 03:0b:4b:1f:cf:3e:4f:82:9d:c1:88:0e:f5:77:a9:b8:ec:b9: 8b:8b:b2:88:b8:17:6d:a9:84:17:f7:29:f1:b1:3d:c2:8d:fd: b3:c3:86:02:d7:30:e2:e7:20:19:a6:28:28:b7:74:50:cc:c9: bf:19:91:99 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEuJcGKPSbJJnoC03HMl9Acj188wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTA5MDEwOTI2MzVaFw0yNjA4MzEwOTMxMzVaMDMxMTAvBgNV BAMTKDhDQTAyN0VBNTc3QzQxQUQ4Rjc2MjVFMjBBQzg4RDA0Qzg0NkZGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVecs99gJhVTimRFYY68YZ1M4j Cv6WgrQrrY8NXUukqQS6tN6Iz6DZkBNB/duYrhQic00qrfT3i/JO1sz/QTwLb7Pa LYSvJTynBapL/17Dw3Yj+uOyyas3+nmoAsmwarbo1j/7Bidn3n2ZcInI4lMMcJKK GdNXsABn8K6xXn1bMb6ctrhAt9QMFwR5L0BdZ+iSMJCHw9vj82dQQzbA9BbV+6DH GR3sVemh25bCWf0x5E4L1cSIwv/4I+HRp0RlwVrml8WrTP/5n8yWUiE01EfoMAQs h0HaWU0c2EZeNuP+gpWLxFNVjwdZ/GhGmveZHeyCrt36M8R6EBxsoO7HTvIFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjKAn6ld8Qa2PdiXiCsiNBMhG/10wHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1M2IwNjdjLWVjYzktNGRjYS05 ODdkLWI5NTc2ODE1Zjg1NS8wLzMxMzEzNzJlMzEzMjMxMmUzMjMwMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdXnOMA0GCSqG SIb3DQEBCwUAA4IBAQDQR0TTueLyc9ryyhLYip7eu8JJOqeCtLk9zcSP6iQ7gxUz GozMTMiTNlUC5o7pLdjVcUtDwBV7UJrZR7Uzr7slC/nHR7QJCJPsz3zQUI0naPEJ 8ZbeFe7JRK6d0o/gxfx9iF/oHmF0Hk/lpJW2tOVanv/3pFZiJk8HSJeLHFNEXiIT ShV8bdJsvCsQGV8xGh13F9QO3OCL3O2ZVIedJpVGYZhoHl/Yl1hIGGnrg6jWv0o3 QDjAB74gKZ3ZyZCTfGdp1qDTVo8DC0sfzz5Pgp3BiA71d6m47LmLi7KIuBdtqYQX 9ynxsT3Cjf2zw4YC1zDi5yAZpigot3RQzMm/GZGZ -----END CERTIFICATE-----Generated at Sun Sep 7 17:21:22 2025 by rpki-client