$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa File: 3131392e322e34372e302f32342d3234203d3e203338353234.roa (raw, json) Hash identifier: 5idMOKwl6OMHF3ESnhfwC1D5L+3IjlBFTsYaziQSsP4= Subject key identifier: A9:76:96:BA:E9:DF:27:BF:54:39:8C:D7:CB:D2:3B:6A:4B:85:87:73 Certificate issuer: /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Certificate serial: 4D339C546B402E7E46F894294D90DC407DF883C8 Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa Signing time: Mon 02 Jun 2025 02:02:46 +0000 ROA not before: Mon 02 Jun 2025 01:57:46 +0000 ROA not after: Mon 01 Jun 2026 02:02:46 +0000 asID: 38524 IP address blocks: 119.2.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:33:9c:54:6b:40:2e:7e:46:f8:94:29:4d:90:dc:40:7d:f8:83:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A Validity Not Before: Jun 2 01:57:46 2025 GMT Not After : Jun 1 02:02:46 2026 GMT Subject: CN=A97696BAE9DF27BF54398CD7CBD23B6A4B858773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:1f:99:7a:e7:d3:02:fe:c6:f9:3d:6e:5a: ff:8c:32:46:34:79:de:1f:31:a2:eb:d9:bd:de:6c: 0f:02:fe:79:96:73:5a:60:b0:be:3a:6b:5a:6c:af: ec:a8:12:e9:5a:67:88:46:c1:40:10:fc:03:cd:53: 71:3f:f6:41:d1:32:ca:5d:1b:6f:dd:ec:8f:2c:98: 4b:cb:13:ac:11:f0:63:3a:8d:be:3d:11:41:d9:ed: f2:33:f0:69:35:75:39:a0:08:bf:89:b7:f5:5d:d5: 97:d0:fd:6e:d7:08:de:32:a2:60:6d:9c:3d:e8:1d: 47:b6:be:54:16:79:d8:06:a5:fe:75:4b:df:63:73: 32:17:e4:89:c7:7c:b4:a6:d0:7b:6a:9f:f4:ed:fe: 3c:09:46:65:a7:f0:1b:cc:4b:df:61:a5:b0:42:a4: 12:36:25:b5:e5:cd:d5:56:1c:7e:58:ea:2f:49:26: f3:f9:bd:23:aa:d6:34:a5:48:27:45:0b:3e:fb:e0: 82:ee:b8:48:6b:99:9b:22:ff:87:9d:e9:b7:19:c9: 7c:2f:e3:51:1e:6b:b7:60:82:5d:2c:55:15:d6:2d: c0:cc:40:4d:37:05:f1:0b:84:fb:75:77:1c:e4:e7: 64:89:5e:4e:8d:e6:2b:bf:79:c0:19:60:c5:2b:04: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:76:96:BA:E9:DF:27:BF:54:39:8C:D7:CB:D2:3B:6A:4B:85:87:73 X509v3 Authority Key Identifier: keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.2.47.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:df:c7:a5:c4:c2:58:aa:84:89:e9:95:51:22:55:2a:6f:56: 43:0f:23:5e:7d:e8:24:91:d4:8e:7b:03:f3:95:4e:97:12:9c: ee:a7:fa:29:9d:34:3a:84:5b:24:77:40:ee:fc:70:a1:e0:14: fb:60:b1:d1:5c:09:94:b5:65:bd:d3:2d:40:35:e4:56:7b:9b: 4e:b2:1c:46:4f:6b:65:9c:02:77:9c:52:18:82:53:bd:e7:73: dc:af:d6:6c:d1:88:04:ed:78:59:06:a7:e8:65:36:65:ea:fb: 0a:c6:41:24:11:54:6c:d8:ef:56:8c:61:a0:05:bf:da:e8:aa: a1:a4:69:3e:bf:65:f8:15:64:e4:dd:7b:4f:b1:70:da:e6:a7: a7:af:cd:c8:f8:27:18:c2:b7:00:ee:79:49:7b:85:be:cd:62: 8c:1b:99:b6:c5:01:a4:1f:5a:89:4b:4b:53:85:dc:17:a3:61: 66:20:2b:02:3d:ab:44:3b:96:5a:56:8d:f2:37:1a:a1:33:83: 0e:dd:44:7e:68:52:0c:87:47:32:01:b2:25:85:7e:c0:35:b5: 7e:d7:50:2e:ec:1b:6e:3b:96:96:92:e0:7f:92:e0:81:e0:ed: e5:65:4e:34:e1:aa:96:67:6c:84:bd:36:8a:69:f9:fa:de:e7: b2:53:c1:4b -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUTTOcVGtALn5G+JQpTZDcQH34g8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBD RDI4M0U5QTAeFw0yNTA2MDIwMTU3NDZaFw0yNjA2MDEwMjAyNDZaMDMxMTAvBgNV BAMTKEE5NzY5NkJBRTlERjI3QkY1NDM5OENEN0NCRDIzQjZBNEI4NTg3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/x+ZeufTAv7G+T1uWv+MMkY0 ed4fMaLr2b3ebA8C/nmWc1pgsL46a1psr+yoEulaZ4hGwUAQ/APNU3E/9kHRMspd G2/d7I8smEvLE6wR8GM6jb49EUHZ7fIz8Gk1dTmgCL+Jt/Vd1ZfQ/W7XCN4yomBt nD3oHUe2vlQWedgGpf51S99jczIX5InHfLSm0Htqn/Tt/jwJRmWn8BvMS99hpbBC pBI2JbXlzdVWHH5Y6i9JJvP5vSOq1jSlSCdFCz774ILuuEhrmZsi/4ed6bcZyXwv 41Eea7dggl0sVRXWLcDMQE03BfELhPt1dxzk52SJXk6N5iu/ecAZYMUrBECDAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUqXaWuunfJ79UOYzXy9I7akuFh3MwHwYDVR0j BBgwFoAUazOgjWRSSS04/l/GVg33UM0oPpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmY5NjlmYy0zOWM3LTQ0Y2QtODcxNi05Y2U0YzZkNWFjOTEvMC82QjMzQTA4RDY0 NTI0OTJEMzhGRTVGQzY1NjBERjc1MENEMjgzRTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzM0EwOEQ2NDUyNDkyRDM4RkU1RkM2NTYwREY3NTBDRDI4 M0U5QS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZmOTY5ZmMtMzljNy00NGNkLTg3 MTYtOWNlNGM2ZDVhYzkxLzAvMzEzMTM5MmUzMjJlMzQzNzJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3Ai8wDQYJKoZIhvcNAQEL BQADggEBAJrfx6XEwliqhInplVEiVSpvVkMPI1596CSR1I57A/OVTpcSnO6n+imd NDqEWyR3QO78cKHgFPtgsdFcCZS1Zb3TLUA15FZ7m06yHEZPa2WcAnecUhiCU73n c9yv1mzRiATteFkGp+hlNmXq+wrGQSQRVGzY71aMYaAFv9roqqGkaT6/ZfgVZOTd e0+xcNrmp6evzcj4JxjCtwDueUl7hb7NYowbmbbFAaQfWolLS1OF3BejYWYgKwI9 q0Q7llpWjfI3GqEzgw7dRH5oUgyHRzIBsiWFfsA1tX7XUC7sG247lpaS4H+S4IHg 7eVlTjThqpZnbIS9Nopp+fre57JTwUs= -----END CERTIFICATE-----Generated at Sat Jun 7 09:22:02 2025 by rpki-client