$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e38302e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: fZD0RhHbaI5aYXXJ2OUUqS2SFxWWXb/qjgfnDshrIo4= Subject key identifier: 94:BC:C1:DF:8E:F1:12:D5:E1:64:B7:C2:D4:43:74:72:CA:B3:66:57 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 56925739BC3089B65A8E39162C91F1D3E4F34FD4 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 12:02:08 +0000 ROA not before: Sat 17 May 2025 11:57:08 +0000 ROA not after: Sat 16 May 2026 12:02:08 +0000 asID: 17671 IP address blocks: 114.199.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:92:57:39:bc:30:89:b6:5a:8e:39:16:2c:91:f1:d3:e4:f3:4f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 11:57:08 2025 GMT Not After : May 16 12:02:08 2026 GMT Subject: CN=94BCC1DF8EF112D5E164B7C2D4437472CAB36657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:01:6c:0c:71:24:85:d2:93:32:47:5f:eb: d3:f6:b5:18:7e:45:8c:74:45:12:b5:34:46:c5:d4: ea:8a:93:ad:eb:b2:e8:f6:3f:d0:40:db:53:0c:43: 85:0f:a1:cc:ff:c4:a6:f5:14:40:f0:3c:e6:72:ff: b6:8a:06:a7:72:a2:9a:a5:d0:42:68:d6:69:04:dc: f4:ac:c1:85:31:e5:8d:6e:f3:7e:0a:32:57:da:c5: 37:55:2a:43:dc:7f:66:54:a3:c0:00:d5:e9:cc:55: eb:0b:e2:1a:59:8b:fd:3b:10:22:9d:cf:be:a5:1c: bb:96:d1:b0:33:52:4c:f7:51:03:d6:11:1e:51:6a: 87:ec:60:64:54:00:86:02:00:a7:1c:63:54:c7:bb: 3a:4f:1b:42:50:b7:28:c0:e9:05:b0:cc:e3:da:d7: 37:e3:76:d1:ff:d2:1d:3c:55:7e:d4:44:cf:d8:e5: 94:fd:f8:fa:67:0b:00:b9:eb:ab:8a:0b:0e:6f:b0: b2:85:be:de:a8:f0:ee:3a:57:8c:53:f9:2d:18:83: fc:69:d4:a7:5a:c9:5c:0e:41:ee:37:ff:be:5e:c3: 7d:a2:a4:3f:6f:91:f8:20:a8:8a:6a:06:31:91:bc: 8a:3a:77:57:23:e0:8c:88:de:69:02:e7:36:2b:33: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BC:C1:DF:8E:F1:12:D5:E1:64:B7:C2:D4:43:74:72:CA:B3:66:57 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.80.0/24 Signature Algorithm: sha256WithRSAEncryption 23:98:88:66:dc:38:94:fb:e7:71:86:8e:2a:32:8c:08:28:e6: 60:1e:1d:15:31:fb:fd:06:70:18:5d:8c:86:00:68:0f:1b:dd: a1:d6:e8:97:6b:40:d9:4e:4e:46:be:e2:6d:a1:ea:a6:5e:4f: 0a:68:94:f7:90:b3:3e:1e:0d:98:20:cd:7a:79:39:49:f9:23: 4e:15:f8:93:a9:d9:87:8b:4e:31:98:5e:fd:de:ad:29:7d:8c: f2:a5:af:7e:b4:f5:a8:db:22:02:70:20:74:e7:88:24:dc:de: f6:66:db:5a:e2:83:52:7f:40:8e:ab:8f:30:ba:89:1a:00:f8: 1f:70:c8:c1:9d:96:7e:c7:8f:3b:cd:67:f7:92:bb:40:e4:b1: b8:dd:f9:d2:5a:2d:dc:66:20:3a:0a:53:e4:3f:07:a9:9d:de: e5:c5:79:cf:e8:88:04:af:89:c4:fb:ec:8d:4e:13:76:82:07: 0a:b4:5f:7e:8b:03:2f:f1:c3:35:74:d8:56:d7:37:82:d6:9c: 1f:27:50:62:29:33:c6:ff:57:ad:01:bc:be:4e:04:25:81:da: 00:55:a3:a0:be:57:86:47:7b:0f:88:9e:86:a7:51:c0:15:e2: c9:6a:45:de:eb:93:34:42:f7:71:86:0a:23:71:9e:f4:f8:f6: 2a:65:c2:0b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVpJXObwwibZajjkWLJHx0+TzT9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMTU3MDhaFw0yNjA1MTYxMjAyMDhaMDMxMTAvBgNV BAMTKDk0QkNDMURGOEVGMTEyRDVFMTY0QjdDMkQ0NDM3NDcyQ0FCMzY2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJcgFsDHEkhdKTMkdf69P2tRh+ RYx0RRK1NEbF1OqKk63rsuj2P9BA21MMQ4UPocz/xKb1FEDwPOZy/7aKBqdyopql 0EJo1mkE3PSswYUx5Y1u834KMlfaxTdVKkPcf2ZUo8AA1enMVesL4hpZi/07ECKd z76lHLuW0bAzUkz3UQPWER5RaofsYGRUAIYCAKccY1THuzpPG0JQtyjA6QWwzOPa 1zfjdtH/0h08VX7URM/Y5ZT9+PpnCwC566uKCw5vsLKFvt6o8O46V4xT+S0Yg/xp 1KdayVwOQe43/75ew32ipD9vkfggqIpqBjGRvIo6d1cj4IyI3mkC5zYrM+gbAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlLzB347xEtXhZLfC1EN0csqzZlcwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHUDANBgkqhkiG 9w0BAQsFAAOCAQEAI5iIZtw4lPvncYaOKjKMCCjmYB4dFTH7/QZwGF2MhgBoDxvd odbol2tA2U5ORr7ibaHqpl5PCmiU95CzPh4NmCDNenk5SfkjThX4k6nZh4tOMZhe /d6tKX2M8qWvfrT1qNsiAnAgdOeIJNze9mbbWuKDUn9AjquPMLqJGgD4H3DIwZ2W fsePO81n95K7QOSxuN350lot3GYgOgpT5D8HqZ3e5cV5z+iIBK+JxPvsjU4TdoIH CrRffosDL/HDNXTYVtc3gtacHydQYikzxv9XrQG8vk4EJYHaAFWjoL5Xhkd7D4ie hqdRwBXiyWpF3uuTNEL3cYYKI3Ge9Pj2KmXCCw== -----END CERTIFICATE-----Generated at Mon Oct 27 19:48:00 2025 by rpki-client