$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131382e302f32342d3234203d3e203535383138.roa File: 3131392e3131302e3131382e302f32342d3234203d3e203535383138.roa (raw, json) Hash identifier: odZfw8nYMAHzYM6fr4IkIMC6ny7+K7b2o1lENcUmVLU= Subject key identifier: A0:64:EA:CD:56:62:75:13:AA:B7:5D:80:CD:21:F9:B4:2F:8D:1D:B6 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 67D53C71EA70996329A8FE1C0FA0B688F4EB77D7 Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131382e302f32342d3234203d3e203535383138.roa Signing time: Sun 31 Aug 2025 08:00:00 +0000 ROA not before: Sun 31 Aug 2025 07:55:00 +0000 ROA not after: Sun 30 Aug 2026 08:00:00 +0000 asID: 55818 IP address blocks: 119.110.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d5:3c:71:ea:70:99:63:29:a8:fe:1c:0f:a0:b6:88:f4:eb:77:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Aug 31 07:55:00 2025 GMT Not After : Aug 30 08:00:00 2026 GMT Subject: CN=A064EACD56627513AAB75D80CD21F9B42F8D1DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:94:81:a1:99:55:9c:a0:5f:c6:35:8d:bf: ed:b9:ab:b2:6e:e2:64:91:07:65:cf:bb:3e:2c:34: 92:4d:f4:78:f3:f9:df:84:7b:98:5c:77:0d:ea:0d: 5c:14:36:6f:58:05:69:de:cd:41:9e:31:64:cb:69: 5f:b8:4c:d7:6f:c7:4f:db:cc:38:f3:c9:52:2d:eb: 0a:e0:47:87:9b:1e:00:d4:5d:5e:9a:79:37:7c:56: f2:20:fd:7a:f8:ed:b1:1f:ee:1c:e3:51:34:90:da: 7e:b6:d5:f8:2c:aa:ee:52:ac:f1:1d:87:4c:3e:55: da:c3:5f:8c:39:63:af:b1:29:a0:52:e7:20:fa:c1: 69:2e:c9:27:c2:56:b2:1f:2c:7e:3d:26:42:5e:31: 12:b0:72:a4:ac:c9:01:e7:ab:60:a7:20:77:26:61: 9f:a5:df:24:17:5e:5e:38:4d:35:12:83:7e:f3:61: 28:b5:8b:24:cd:41:84:c8:6e:12:fe:9f:44:71:8a: 08:db:d4:4d:65:a6:d2:5c:a7:af:e5:55:fd:d5:19: da:66:6b:89:37:70:9f:22:38:d6:cf:e1:e3:cd:10: bb:8b:95:b0:50:65:42:4b:e1:02:78:69:b0:f7:f3: 4e:f2:f2:4b:bc:72:94:b7:c2:32:89:ec:e6:0a:3e: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:EA:CD:56:62:75:13:AA:B7:5D:80:CD:21:F9:B4:2F:8D:1D:B6 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131382e302f32342d3234203d3e203535383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.118.0/24 Signature Algorithm: sha256WithRSAEncryption 40:e8:6a:17:9c:c0:7b:be:14:03:20:87:6e:d8:73:43:66:72: 40:11:e3:8b:62:e4:28:3d:56:ef:bf:5f:ca:4d:d8:1a:e9:eb: b3:07:bb:17:6b:67:f5:29:bb:97:d0:f1:0b:fb:7d:b8:9c:b2: 5e:1e:35:4e:57:78:15:8a:43:1e:c3:b1:5e:6c:a0:a0:cc:5b: d8:76:8f:04:08:2b:f6:c7:79:5f:62:ca:f3:83:2d:9a:2d:85: 32:53:3b:e3:cf:14:db:4b:b3:25:8e:9d:38:c0:7c:eb:b4:f2: 5b:6a:73:7e:70:65:ab:44:ed:5a:84:e1:f9:63:de:ea:46:07: b5:ce:9f:24:dc:5e:d7:cc:ec:8c:80:c0:8d:19:67:e8:de:af: 95:f6:87:30:5e:0c:50:92:ac:61:9e:af:5c:30:92:08:c0:fb: 65:5f:e0:22:f4:29:76:ee:01:1e:78:13:67:b9:5f:cd:8f:e0: 0b:1d:30:b7:bc:0f:5d:34:75:98:3f:db:1b:1a:e5:13:8a:85: c4:b4:6f:56:48:d7:56:d7:42:64:65:35:74:e3:06:95:84:3b: a7:86:12:41:a3:04:db:a4:df:ff:ae:b8:bb:62:df:08:e0:53: d1:db:61:2b:96:08:1d:ac:13:b2:b5:42:be:61:c8:85:01:b1: ae:0a:fa:8f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ9U8cepwmWMpqP4cD6C2iPTrd9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTA4MzEwNzU1MDBaFw0yNjA4MzAwODAwMDBaMDMxMTAvBgNV BAMTKEEwNjRFQUNENTY2Mjc1MTNBQUI3NUQ4MENEMjFGOUI0MkY4RDFEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgpSBoZlVnKBfxjWNv+25q7Ju 4mSRB2XPuz4sNJJN9Hjz+d+Ee5hcdw3qDVwUNm9YBWnezUGeMWTLaV+4TNdvx0/b zDjzyVIt6wrgR4ebHgDUXV6aeTd8VvIg/Xr47bEf7hzjUTSQ2n621fgsqu5SrPEd h0w+VdrDX4w5Y6+xKaBS5yD6wWkuySfCVrIfLH49JkJeMRKwcqSsyQHnq2CnIHcm YZ+l3yQXXl44TTUSg37zYSi1iyTNQYTIbhL+n0Rxigjb1E1lptJcp6/lVf3VGdpm a4k3cJ8iONbP4ePNELuLlbBQZUJL4QJ4abD3807y8ku8cpS3wjKJ7OYKPm3xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoGTqzVZidROqt12AzSH5tC+NHbYwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAd252MA0GCSqG SIb3DQEBCwUAA4IBAQBA6GoXnMB7vhQDIIdu2HNDZnJAEeOLYuQoPVbvv1/KTdga 6euzB7sXa2f1KbuX0PEL+324nLJeHjVOV3gVikMew7FebKCgzFvYdo8ECCv2x3lf Ysrzgy2aLYUyUzvjzxTbS7Mljp04wHzrtPJbanN+cGWrRO1ahOH5Y97qRge1zp8k 3F7XzOyMgMCNGWfo3q+V9ocwXgxQkqxhnq9cMJIIwPtlX+Ai9Cl27gEeeBNnuV/N j+ALHTC3vA9dNHWYP9sbGuUTioXEtG9WSNdW10JkZTV04waVhDunhhJBowTbpN// rri7Yt8I4FPR22ErlggdrBOytUK+YciFAbGuCvqP -----END CERTIFICATE-----Generated at Mon Sep 8 09:38:12 2025 by rpki-client