$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa File: 3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa (raw, json) Hash identifier: O7s9vGDlw/rPxlL45ZzEcpBml0IdvbvciPZWwTb3YDg= Subject key identifier: C1:44:F7:8D:BE:E4:63:55:D9:32:C5:3A:BD:DB:6F:69:A6:1F:ED:49 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 15EAB4D815BDE074B9B69E7009B341A878274062 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa Signing time: Mon 02 Jun 2025 05:39:09 +0000 ROA not before: Mon 02 Jun 2025 05:34:09 +0000 ROA not after: Mon 01 Jun 2026 05:39:09 +0000 asID: 45147 IP address blocks: 119.110.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ea:b4:d8:15:bd:e0:74:b9:b6:9e:70:09:b3:41:a8:78:27:40:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Jun 2 05:34:09 2025 GMT Not After : Jun 1 05:39:09 2026 GMT Subject: CN=C144F78DBEE46355D932C53ABDDB6F69A61FED49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:c0:3b:1b:05:1a:c4:e7:d3:b9:e8:d0:77: 4b:f9:3f:02:fa:dc:ad:cf:95:81:e1:06:48:1f:16: 1a:5c:10:66:26:c5:86:f4:98:20:03:ae:29:f2:3d: a6:48:0a:32:e1:2b:ac:dc:0f:e2:a8:18:0f:e0:02: 20:05:1f:aa:c0:26:b9:b7:1a:10:33:69:d0:54:d4: 20:91:8b:b2:fb:7d:c2:12:b9:04:01:3f:5d:3c:ad: 7d:92:4a:e6:60:b3:d7:50:c7:99:ef:da:3c:13:10: ac:51:5e:a0:35:af:05:c5:cb:a5:e7:17:82:e9:32: cd:60:9e:ee:91:88:e6:1c:29:50:20:9d:57:cc:b1: 5d:9b:02:d9:41:0b:48:58:d1:d7:4d:2b:38:8e:93: 7a:1a:c9:a0:7a:9f:0d:30:87:72:58:84:88:87:27: ab:58:01:9a:23:51:9e:c6:96:59:2d:e3:e3:f4:b7: 9a:2e:2f:07:53:30:a3:37:b0:bb:7c:43:9c:ec:76: 80:0e:76:df:fe:ab:c4:a3:ff:a1:96:bd:be:8d:6e: 8f:55:dc:6d:97:07:d0:da:3a:a5:87:75:d9:3b:75: 0e:2a:20:9b:47:6c:93:24:2a:0c:44:1d:db:e4:8e: a8:88:40:28:12:34:39:c0:f2:92:bb:e9:42:7a:0e: ae:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:F7:8D:BE:E4:63:55:D9:32:C5:3A:BD:DB:6F:69:A6:1F:ED:49 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.113.0/24 Signature Algorithm: sha256WithRSAEncryption c6:da:04:73:dd:fb:2d:99:16:e9:29:1a:67:a4:85:24:9d:a8: 95:1c:d9:c0:89:c4:57:67:db:76:e0:3e:ee:d6:4f:db:65:d9: a4:8b:6a:c2:8c:0e:ef:89:3d:79:d2:06:49:81:65:f8:38:32: 3f:d3:4f:04:47:34:3d:90:82:bf:16:10:80:d6:d9:4b:c5:4e: 07:65:a8:81:0f:b3:17:82:40:5b:44:5f:68:f3:60:ae:32:80: aa:86:2a:5b:0d:e5:a4:91:73:23:f2:45:d2:88:53:68:3f:ce: 6a:6b:45:0d:ad:fd:76:a1:d3:a4:12:6e:0a:51:14:8f:42:18: 77:c2:db:b3:b6:0c:6d:4d:a0:63:89:80:b2:1f:56:d8:c5:d3: 8e:a3:9a:40:58:c5:96:b6:df:51:b5:4d:06:b1:c3:9f:3d:67: 47:14:2a:75:bc:0a:a5:95:0a:71:13:4b:96:bc:91:3f:ce:57: a4:b6:ed:c0:96:a3:a3:04:13:4c:5d:9a:1c:aa:d7:2d:7f:94: 22:0d:fe:95:54:ba:71:4e:cd:fc:11:49:f8:d0:12:96:73:0f: e1:0c:3b:66:1c:b4:49:a3:87:65:f0:b9:68:7c:83:8c:1f:e7: b8:ee:ab:62:bf:2c:f3:75:df:9e:c8:86:e0:e9:59:9b:0b:89: 77:9a:b3:2c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFeq02BW94HS5tp5wCbNBqHgnQGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTA2MDIwNTM0MDlaFw0yNjA2MDEwNTM5MDlaMDMxMTAvBgNV BAMTKEMxNDRGNzhEQkVFNDYzNTVEOTMyQzUzQUJEREI2RjY5QTYxRkVENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+08A7GwUaxOfTuejQd0v5PwL6 3K3PlYHhBkgfFhpcEGYmxYb0mCADrinyPaZICjLhK6zcD+KoGA/gAiAFH6rAJrm3 GhAzadBU1CCRi7L7fcISuQQBP108rX2SSuZgs9dQx5nv2jwTEKxRXqA1rwXFy6Xn F4LpMs1gnu6RiOYcKVAgnVfMsV2bAtlBC0hY0ddNKziOk3oayaB6nw0wh3JYhIiH J6tYAZojUZ7Gllkt4+P0t5ouLwdTMKM3sLt8Q5zsdoAOdt/+q8Sj/6GWvb6Nbo9V 3G2XB9DaOqWHddk7dQ4qIJtHbJMkKgxEHdvkjqiIQCgSNDnA8pK76UJ6Dq5zAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUwUT3jb7kY1XZMsU6vdtvaaYf7UkwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMxMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAd25xMA0GCSqG SIb3DQEBCwUAA4IBAQDG2gRz3fstmRbpKRpnpIUknaiVHNnAicRXZ9t24D7u1k/b Zdmki2rCjA7viT150gZJgWX4ODI/008ERzQ9kIK/FhCA1tlLxU4HZaiBD7MXgkBb RF9o82CuMoCqhipbDeWkkXMj8kXSiFNoP85qa0UNrf12odOkEm4KURSPQhh3wtuz tgxtTaBjiYCyH1bYxdOOo5pAWMWWtt9RtU0GscOfPWdHFCp1vAqllQpxE0uWvJE/ zlektu3AlqOjBBNMXZocqtctf5QiDf6VVLpxTs38EUn40BKWcw/hDDtmHLRJo4dl 8LlofIOMH+e47qtivyzzdd+eyIbg6VmbC4l3mrMs -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:00 2025 by rpki-client