$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa File: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (raw, json) Hash identifier: /vW/TSbog9WsObuCC1lgKjgijK+Dod2mciJtHHUezKU= Subject key identifier: 43:2D:5F:05:B4:B5:3B:8E:69:E1:9A:33:FC:16:04:17:C5:A5:31:99 Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Certificate serial: 4D60B5F34504DE3AEF500733F5BE0DDD192A168F Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa Signing time: Tue 14 Jan 2025 04:00:00 +0000 ROA not before: Tue 14 Jan 2025 03:55:00 +0000 ROA not after: Tue 13 Jan 2026 04:00:00 +0000 asID: 38515 IP address blocks: 117.74.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 08:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:60:b5:f3:45:04:de:3a:ef:50:07:33:f5:be:0d:dd:19:2a:16:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3 Validity Not Before: Jan 14 03:55:00 2025 GMT Not After : Jan 13 04:00:00 2026 GMT Subject: CN=432D5F05B4B53B8E69E19A33FC160417C5A53199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:e6:6e:fb:5c:a5:38:d0:00:2c:95:31:37: ff:95:ed:ac:92:fe:bd:b0:b0:b3:cb:63:77:36:f8: d4:38:46:21:a5:d5:89:ef:67:cf:bd:ee:9f:ee:af: c5:9c:dc:dd:b4:88:42:4c:80:5d:d1:09:87:6f:93: 00:05:e8:b0:85:13:fa:5c:7e:eb:8d:8f:25:a2:5b: 10:7d:92:e9:00:c0:d6:ac:4b:1c:ed:7b:37:c2:a5: d3:87:58:52:5b:8c:b4:4f:c1:b7:88:95:9a:1f:22: 0d:5e:a3:99:40:8c:46:99:74:8a:b7:ac:30:0c:81: d5:9e:f4:08:89:ac:56:78:4a:8b:e0:40:d8:a6:8d: 5f:5c:20:37:40:d4:0c:a6:29:b1:3f:2b:73:27:24: d1:60:3c:ae:52:a0:99:f2:56:46:c7:71:c0:16:6c: c4:8e:39:6b:71:39:7c:9e:43:78:4a:29:d4:8f:bd: 58:3a:1a:49:49:3a:a6:5f:10:05:c7:ef:92:af:9f: 23:4e:36:b3:f0:a0:c7:da:c4:a3:bb:b9:15:36:c6: 6c:90:2d:c9:8f:79:f8:82:1b:1f:1f:a9:d0:3b:17: 28:16:7f:dd:dc:f6:bd:71:b4:cb:da:27:ad:87:de: d4:7e:5c:88:3d:6a:07:8e:0c:59:77:7c:32:31:00: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2D:5F:05:B4:B5:3B:8E:69:E1:9A:33:FC:16:04:17:C5:A5:31:99 X509v3 Authority Key Identifier: keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.127.0/24 Signature Algorithm: sha256WithRSAEncryption ad:3c:02:21:c8:69:fa:aa:31:89:a5:a8:6b:f8:4f:5e:44:ef: ff:2e:5f:7c:64:a4:62:c8:34:01:3d:07:3b:d2:1b:a9:5b:00: 0c:49:fd:d8:62:27:5b:17:d2:30:46:3a:bf:af:53:5a:cb:5a: 58:c9:8d:49:c4:03:09:e1:6e:62:00:58:1b:05:0b:7b:c9:d5: b6:e5:fa:4b:f5:84:0f:2b:e2:91:e7:26:3f:42:bd:cb:15:8b: 96:32:76:a6:32:1b:a8:2e:07:a6:d4:2e:a7:75:8e:dc:f8:55: c3:d1:d7:7e:a4:8a:9d:18:8c:b0:e0:7d:0d:fc:33:7d:2a:d9: c6:b6:30:3a:8b:14:84:6d:80:d6:6b:9f:55:50:35:28:7b:c2: b3:44:9c:b6:e4:24:a6:27:fa:13:1f:57:5b:fb:fd:76:42:5e: e6:37:17:7e:58:83:1d:25:f8:9f:4b:3d:ab:30:bc:7c:9f:e4: 92:1a:5b:fa:01:73:ff:a7:ac:f2:e8:e1:17:95:72:50:8a:91: 7e:3c:66:77:15:17:7c:cc:49:9b:75:64:9a:dc:7b:d5:ff:7b: d7:20:80:82:dd:b6:91:9e:16:e6:73:20:06:4e:6b:ba:27:7a: 53:89:e5:c3:05:b9:bf:25:41:bc:39:54:d7:75:dd:3f:83:a2: ba:c5:a7:54 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTWC180UE3jrvUAcz9b4N3RkqFo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy RERGRDhGMzAeFw0yNTAxMTQwMzU1MDBaFw0yNjAxMTMwNDAwMDBaMDMxMTAvBgNV BAMTKDQzMkQ1RjA1QjRCNTNCOEU2OUUxOUEzM0ZDMTYwNDE3QzVBNTMxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgC+Zu+1ylONAALJUxN/+V7ayS /r2wsLPLY3c2+NQ4RiGl1YnvZ8+97p/ur8Wc3N20iEJMgF3RCYdvkwAF6LCFE/pc fuuNjyWiWxB9kukAwNasSxztezfCpdOHWFJbjLRPwbeIlZofIg1eo5lAjEaZdIq3 rDAMgdWe9AiJrFZ4SovgQNimjV9cIDdA1AymKbE/K3MnJNFgPK5SoJnyVkbHccAW bMSOOWtxOXyeQ3hKKdSPvVg6GklJOqZfEAXH75KvnyNONrPwoMfaxKO7uRU2xmyQ LcmPefiCGx8fqdA7FygWf93c9r1xtMvaJ62H3tR+XIg9ageODFl3fDIxALCtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQy1fBbS1O45p4Zoz/BYEF8WlMZkwHwYDVR0j BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4 OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG RDhGMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04 NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKfzANBgkqhkiG 9w0BAQsFAAOCAQEArTwCIchp+qoxiaWoa/hPXkTv/y5ffGSkYsg0AT0HO9IbqVsA DEn92GInWxfSMEY6v69TWstaWMmNScQDCeFuYgBYGwULe8nVtuX6S/WEDyvikecm P0K9yxWLljJ2pjIbqC4HptQup3WO3PhVw9HXfqSKnRiMsOB9DfwzfSrZxrYwOosU hG2A1mufVVA1KHvCs0SctuQkpif6Ex9XW/v9dkJe5jcXfliDHSX4n0s9qzC8fJ/k khpb+gFz/6es8ujhF5VyUIqRfjxmdxUXfMxJm3Vkmtx71f971yCAgt22kZ4W5nMg Bk5ruid6U4nlwwW5vyVBvDlU13XdP4OiusWnVA== -----END CERTIFICATE-----Generated at Sun Apr 6 10:50:21 2025 by rpki-client