$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa File: 3131342e3139392e38362e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: c2VbbDQIyw3QtOscBEnOIDt8U8np1mPhzuBYK+L6dGU= Subject key identifier: C3:64:BC:E6:3F:23:0C:5B:04:9F:DC:8B:8C:E0:0A:1B:21:89:6B:3B Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 1BC1F0B7AFBE92A9481A6BF0884361F9FCF9DB73 Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa Signing time: Sat 17 May 2025 12:02:07 +0000 ROA not before: Sat 17 May 2025 11:57:07 +0000 ROA not after: Sat 16 May 2026 12:02:07 +0000 asID: 17671 IP address blocks: 114.199.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 04:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c1:f0:b7:af:be:92:a9:48:1a:6b:f0:88:43:61:f9:fc:f9:db:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 17 11:57:07 2025 GMT Not After : May 16 12:02:07 2026 GMT Subject: CN=C364BCE63F230C5B049FDC8B8CE00A1B21896B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:3c:26:6f:1f:ec:dc:50:aa:a7:be:ef:3e: 90:7e:3d:51:21:83:44:50:c7:c0:cc:36:0e:ee:c4: d4:8a:b5:8d:df:84:84:97:8d:eb:1e:d7:37:b2:43: b7:5e:10:92:d9:46:29:39:41:a0:d2:cd:c6:f9:03: b0:e5:5e:4e:cf:68:81:5c:22:fe:4a:76:55:7a:36: f2:4c:6c:dd:9b:7b:08:e6:10:38:18:75:b9:0d:87: e9:6b:63:d0:b2:8a:9b:23:a3:80:e1:fe:fd:84:8c: 85:95:13:46:72:cf:17:e9:04:ab:5e:60:0c:2a:fa: 00:c0:d9:df:a1:9b:c9:8f:b4:59:ba:1d:96:12:14: 27:b5:1a:53:fa:25:9b:82:9f:73:0b:2b:59:46:fa: 68:69:96:db:da:83:65:17:e7:3a:6e:bb:ae:92:a1: e8:48:ef:b4:a8:a6:e6:96:ee:24:72:dd:2b:ab:62: c9:d3:9c:05:7f:32:8f:43:4b:3e:ed:36:ea:cd:2f: 82:a4:d0:c4:e1:08:91:13:35:1a:f7:ba:71:44:33: bc:4f:21:73:9e:92:ff:af:f9:54:3c:cf:e6:77:24: b6:c2:0a:91:b8:35:6d:d0:e7:51:90:6b:2c:bf:f4: c1:54:86:55:9c:36:f5:8c:92:6a:1d:b2:c7:97:19: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:64:BC:E6:3F:23:0C:5B:04:9F:DC:8B:8C:E0:0A:1B:21:89:6B:3B X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38362e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.86.0/24 Signature Algorithm: sha256WithRSAEncryption 26:98:76:9f:a7:42:f8:b8:b5:fa:30:27:f8:37:15:29:0d:8e: b7:b9:15:09:0d:54:2e:25:7a:85:94:f9:89:e5:07:e8:e4:6e: b4:28:8e:46:6c:f8:43:d9:da:ec:87:25:65:28:72:ba:69:a5: 14:b5:0e:88:de:15:e4:2d:03:85:4a:c5:a6:64:01:44:ce:82: e3:f7:90:70:94:42:ae:e4:92:ef:4f:2a:6a:9c:b2:95:d0:0a: 45:a1:3d:4c:47:a6:73:27:13:fb:a6:6f:90:c5:8a:dc:2a:b7: f9:c9:f3:81:82:78:41:36:60:15:ca:c6:c7:57:46:76:2b:ef: 2b:68:02:16:1e:9a:33:0e:c0:9c:56:aa:41:f8:a0:fa:77:48: 8d:77:b4:ce:f5:0d:1c:77:36:cc:25:12:f1:d5:a5:e5:fa:ab: ed:76:5b:d8:46:f0:54:e7:79:cc:9c:7f:e3:a7:aa:76:c7:b0: 7b:3f:29:81:bf:9d:b6:84:61:70:ed:21:34:a6:64:c5:3f:f7: 82:83:4e:61:d7:c0:ae:97:2c:2d:5d:cf:a6:82:8c:a0:57:92: 49:ba:87:ef:49:58:9f:1a:26:47:47:16:0e:23:52:46:e2:9e: 8e:8c:47:28:c1:29:c7:c5:8d:d8:91:3a:4b:d2:55:64:8e:1c: 46:d6:25:f7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG8Hwt6++kqlIGmvwiENh+fz523MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTcxMTU3MDdaFw0yNjA1MTYxMjAyMDdaMDMxMTAvBgNV BAMTKEMzNjRCQ0U2M0YyMzBDNUIwNDlGREM4QjhDRTAwQTFCMjE4OTZCM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwzwmbx/s3FCqp77vPpB+PVEh g0RQx8DMNg7uxNSKtY3fhISXjese1zeyQ7deEJLZRik5QaDSzcb5A7DlXk7PaIFc Iv5KdlV6NvJMbN2bewjmEDgYdbkNh+lrY9Cyipsjo4Dh/v2EjIWVE0ZyzxfpBKte YAwq+gDA2d+hm8mPtFm6HZYSFCe1GlP6JZuCn3MLK1lG+mhpltvag2UX5zpuu66S oehI77SopuaW7iRy3SurYsnTnAV/Mo9DSz7tNurNL4Kk0MThCJETNRr3unFEM7xP IXOekv+v+VQ8z+Z3JLbCCpG4NW3Q51GQayy/9MFUhlWcNvWMkmodsseXGXsTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUw2S85j8jDFsEn9yLjOAKGyGJazswHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzEzNDJlMzEzOTM5MmUzODM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHVjANBgkqhkiG 9w0BAQsFAAOCAQEAJph2n6dC+Li1+jAn+DcVKQ2Ot7kVCQ1ULiV6hZT5ieUH6ORu tCiORmz4Q9na7IclZShyummlFLUOiN4V5C0DhUrFpmQBRM6C4/eQcJRCruSS708q apyyldAKRaE9TEemcycT+6ZvkMWK3Cq3+cnzgYJ4QTZgFcrGx1dGdivvK2gCFh6a Mw7AnFaqQfig+ndIjXe0zvUNHHc2zCUS8dWl5fqr7XZb2EbwVOd5zJx/46eqdsew ez8pgb+dtoRhcO0hNKZkxT/3goNOYdfArpcsLV3PpoKMoFeSSbqH70lYnxomR0cW DiNSRuKejoxHKMEpx8WN2JE6S9JVZI4cRtYl9w== -----END CERTIFICATE-----Generated at Sat Jun 7 05:18:16 2025 by rpki-client