$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa File: 3131392e31382e3135322e302f32312d3234203d3e203535363835.roa (raw, json) Hash identifier: g4sonhuF/71N1CjcpPqg8OMnNOqHTh63u3B8lPtSWgM= Subject key identifier: C3:2B:38:E3:28:40:F5:65:94:45:E7:19:F7:FC:4F:EB:22:11:BA:77 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 4D981454C724185F99FDA340DD10401EAABAE98C Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa Signing time: Mon 02 Jun 2025 02:04:46 +0000 ROA not before: Mon 02 Jun 2025 01:59:46 +0000 ROA not after: Mon 01 Jun 2026 02:04:46 +0000 asID: 55685 IP address blocks: 119.18.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:98:14:54:c7:24:18:5f:99:fd:a3:40:dd:10:40:1e:aa:ba:e9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Jun 2 01:59:46 2025 GMT Not After : Jun 1 02:04:46 2026 GMT Subject: CN=C32B38E32840F5659445E719F7FC4FEB2211BA77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f9:13:07:82:e2:43:23:84:dc:37:d3:36:7e: 54:36:99:47:64:1e:54:73:a5:3c:2f:f0:27:a0:71: 71:f2:48:fc:7f:7f:20:a4:9c:f0:0b:74:1c:27:f6: 08:2e:0a:a4:fc:83:46:b9:a9:24:cc:24:62:d5:d6: 83:64:14:2c:46:37:8d:00:ab:6b:57:69:9a:43:c7: 0c:ea:af:27:ee:ee:ad:ff:fe:61:e8:07:49:2a:e4: c8:51:96:71:8d:5a:36:76:2c:e1:a0:ea:88:09:b1: 8c:df:71:09:94:b4:be:49:5b:18:89:d0:1e:aa:1d: d0:7d:ab:a0:6a:64:7f:fb:58:f9:2d:88:4c:12:3e: 4e:d6:bc:92:36:9d:50:cb:66:6b:50:25:78:2d:26: ce:be:1d:6a:58:dc:33:ec:97:4a:b8:f4:89:70:ed: 83:0d:98:5a:4e:e0:9b:aa:70:49:84:79:81:96:f0: 82:1a:92:e1:0d:28:85:0d:0e:4e:56:b9:af:00:f9: 91:23:49:00:85:f5:94:56:e6:07:21:75:50:e5:41: 85:5c:60:ec:a5:1c:02:bd:20:ee:80:11:de:33:da: e2:0c:6c:c8:94:f3:a3:6c:f2:5e:2e:da:a3:fd:94: 8d:14:75:6f:f2:a0:a9:fb:23:3f:33:87:8f:b4:70: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2B:38:E3:28:40:F5:65:94:45:E7:19:F7:FC:4F:EB:22:11:BA:77 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.18.152.0/21 Signature Algorithm: sha256WithRSAEncryption 24:f1:dd:ef:b6:6a:12:11:80:74:e4:39:0a:bb:8f:61:49:b9: 74:6e:d6:c4:90:66:f9:4c:63:e5:4b:98:3d:45:ee:9e:ea:37: a9:e2:be:58:37:75:a0:1e:4b:16:41:2a:f3:4d:0c:98:c6:35: d2:38:a9:07:b9:83:53:04:fe:08:14:c0:99:a8:70:33:47:8a: c6:ae:0f:bc:9a:af:7d:d6:61:ba:a6:38:07:d4:9c:22:dd:be: 0f:ec:6e:2b:42:51:ae:96:f3:9a:28:94:56:c4:65:73:0b:1d: ef:4e:c1:6e:29:7d:32:41:48:5a:f2:5a:c5:00:4f:0f:2d:16: 9b:a2:00:fe:47:c5:db:d9:91:57:cf:34:91:c6:99:d0:76:c4: 59:65:8e:68:8c:e4:57:5f:e4:e5:d6:a7:f3:f0:eb:50:4d:78: 7c:2d:e8:54:49:b3:17:eb:5e:ed:5d:4e:ff:c7:51:d1:9e:63: f1:8c:1f:9b:c0:6c:f1:cf:61:ea:61:4d:80:93:ec:53:41:97: 0f:91:93:9a:12:4e:34:c9:6f:86:41:bf:20:e9:f7:22:65:b2: 9a:42:3c:f3:91:8f:c2:09:62:03:19:20:15:aa:5f:21:97:70: 74:2b:69:41:d9:c9:6f:44:56:58:e4:7f:63:90:3e:b5:be:5f: df:91:84:d4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTZgUVMckGF+Z/aNA3RBAHqq66YwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTA2MDIwMTU5NDZaFw0yNjA2MDEwMjA0NDZaMDMxMTAvBgNV BAMTKEMzMkIzOEUzMjg0MEY1NjU5NDQ1RTcxOUY3RkM0RkVCMjIxMUJBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW+RMHguJDI4TcN9M2flQ2mUdk HlRzpTwv8CegcXHySPx/fyCknPALdBwn9gguCqT8g0a5qSTMJGLV1oNkFCxGN40A q2tXaZpDxwzqryfu7q3//mHoB0kq5MhRlnGNWjZ2LOGg6ogJsYzfcQmUtL5JWxiJ 0B6qHdB9q6BqZH/7WPktiEwSPk7WvJI2nVDLZmtQJXgtJs6+HWpY3DPsl0q49Ilw 7YMNmFpO4JuqcEmEeYGW8IIakuENKIUNDk5Wua8A+ZEjSQCF9ZRW5gchdVDlQYVc YOylHAK9IO6AEd4z2uIMbMiU86Ns8l4u2qP9lI0UdW/yoKn7Iz8zh4+0cKVvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwys44yhA9WWURecZ9/xP6yIRuncwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzEzOTJlMzEzODJlMzEzNTMyMmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cSmDANBgkqhkiG 9w0BAQsFAAOCAQEAJPHd77ZqEhGAdOQ5CruPYUm5dG7WxJBm+Uxj5UuYPUXunuo3 qeK+WDd1oB5LFkEq800MmMY10jipB7mDUwT+CBTAmahwM0eKxq4PvJqvfdZhuqY4 B9ScIt2+D+xuK0JRrpbzmiiUVsRlcwsd707Bbil9MkFIWvJaxQBPDy0Wm6IA/kfF 29mRV880kcaZ0HbEWWWOaIzkV1/k5dan8/DrUE14fC3oVEmzF+te7V1O/8dR0Z5j 8Ywfm8Bs8c9h6mFNgJPsU0GXD5GTmhJONMlvhkG/IOn3ImWymkI885GPwgliAxkg FapfIZdwdCtpQdnJb0RWWOR/Y5A+tb5f35GE1A== -----END CERTIFICATE-----Generated at Sat Jun 7 06:02:56 2025 by rpki-client