$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa File: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (raw, json) Hash identifier: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM= Subject key identifier: 3A:DA:CC:F0:20:26:42:B3:B0:54:98:33:D0:64:F1:EB:2F:B9:33:23 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 134CD6F77D6E1A1440106CE6DB9B8E9E78FF3169 Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa Signing time: Mon 02 Jun 2025 01:03:16 +0000 ROA not before: Mon 02 Jun 2025 00:58:16 +0000 ROA not after: Mon 01 Jun 2026 01:03:16 +0000 asID: 23756 IP address blocks: 117.102.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4c:d6:f7:7d:6e:1a:14:40:10:6c:e6:db:9b:8e:9e:78:ff:31:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Jun 2 00:58:16 2025 GMT Not After : Jun 1 01:03:16 2026 GMT Subject: CN=3ADACCF0202642B3B0549833D064F1EB2FB93323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f6:29:12:ef:83:24:8b:cb:57:cb:e4:c4:c6: 0e:09:21:9d:70:c8:fc:66:dd:44:bc:7e:c7:3d:ff: 8d:5c:b6:f8:d2:b1:92:1b:20:e7:6c:66:31:c7:14: e3:f9:a2:73:12:9f:78:92:a4:22:ad:fc:cc:c6:99: bb:f2:72:c3:18:40:aa:1e:cc:d1:c6:c5:54:aa:0a: 00:52:1a:02:17:f1:f7:e5:b2:24:90:f3:4a:8b:99: ee:c1:64:31:14:3e:c3:fc:1c:b6:a4:ca:1b:7f:a2: 21:c3:ce:49:a8:fa:04:5e:ab:f6:c2:17:ab:54:3c: db:d2:c8:75:5e:f8:4b:80:0f:8c:bc:0b:9c:b8:1d: 3f:be:84:8f:b1:a6:ee:2b:cc:b0:22:23:92:33:22: 66:02:79:48:47:12:23:73:01:37:86:48:c6:09:53: 20:b9:82:5f:60:62:21:79:12:d5:99:4b:85:b5:f7: c2:ac:7e:50:7e:5a:03:1d:f5:36:6c:bb:72:61:a0: 6d:00:62:0f:53:ad:84:c2:dd:f3:a8:b1:fe:59:c6: 94:5a:ab:3e:b1:a0:44:95:78:3f:c8:44:73:ca:bb: f5:3e:68:54:2f:72:c6:f4:d3:20:5a:cd:b5:55:30: b2:66:ca:9a:9c:ff:91:62:65:2d:1f:51:8c:62:32: e7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DA:CC:F0:20:26:42:B3:B0:54:98:33:D0:64:F1:EB:2F:B9:33:23 X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.102.224.0/19 Signature Algorithm: sha256WithRSAEncryption 90:6f:49:70:71:4e:df:47:64:cf:58:4b:7a:2b:66:34:60:47: a7:aa:a5:c4:27:53:31:45:2e:8c:c2:ee:11:39:fe:2f:d6:c9: 1f:7a:13:fe:0f:8c:eb:31:3b:88:b2:77:21:fc:f0:82:c8:d1: da:a7:cd:70:3c:ff:9f:08:4b:e6:fc:13:c5:ec:db:87:10:83: 03:70:c5:d1:aa:d2:94:b8:e7:80:5c:bb:bd:98:3b:b2:2f:cf: 6c:98:13:e8:56:0c:4f:56:70:da:4b:f3:8c:db:05:48:0d:e8: cb:da:7c:ec:53:6e:26:35:de:27:82:a9:e8:42:f4:9b:58:c0: c2:8c:51:68:a0:37:aa:87:24:3a:bc:96:fe:cb:aa:05:3e:ca: 97:1e:6c:6e:d7:39:35:7d:81:93:46:34:39:9e:1f:42:fe:cb: 41:0e:0a:67:61:64:84:2e:70:93:45:24:c2:90:30:96:48:08: dc:3f:53:25:00:e7:ef:95:b8:a0:fc:cf:f0:04:d9:82:4a:8f: 97:38:01:ff:77:f2:ae:12:fb:ae:ac:cd:cb:73:0e:36:af:34: 93:7e:6a:16:c2:ad:32:fc:49:db:5a:e0:77:49:9a:c8:79:0b: 9d:06:8e:ee:e9:84:50:61:71:7d:26:ff:ce:76:98:8b:1f:e6: 06:02:7e:43 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUE0zW931uGhRAEGzm25uOnnj/MWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTA2MDIwMDU4MTZaFw0yNjA2MDEwMTAzMTZaMDMxMTAvBgNV BAMTKDNBREFDQ0YwMjAyNjQyQjNCMDU0OTgzM0QwNjRGMUVCMkZCOTMzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9ikS74Mki8tXy+TExg4JIZ1w yPxm3US8fsc9/41ctvjSsZIbIOdsZjHHFOP5onMSn3iSpCKt/MzGmbvycsMYQKoe zNHGxVSqCgBSGgIX8fflsiSQ80qLme7BZDEUPsP8HLakyht/oiHDzkmo+gReq/bC F6tUPNvSyHVe+EuAD4y8C5y4HT++hI+xpu4rzLAiI5IzImYCeUhHEiNzATeGSMYJ UyC5gl9gYiF5EtWZS4W198KsflB+WgMd9TZsu3JhoG0AYg9TrYTC3fOosf5ZxpRa qz6xoESVeD/IRHPKu/U+aFQvcsb00yBazbVVMLJmypqc/5FiZS0fUYxiMudDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOtrM8CAmQrOwVJgz0GTx6y+5MyMwHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkMGYxYTZlLTgzYjYtNDUzNC05 NjdkLWY4ZGIzYzM3MTFmNC8wLzMxMzEzNzJlMzEzMDMyMmUzMjMyMzQyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzMjMzMzczNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFdWbgMA0GCSqG SIb3DQEBCwUAA4IBAQCQb0lwcU7fR2TPWEt6K2Y0YEenqqXEJ1MxRS6Mwu4ROf4v 1skfehP+D4zrMTuIsnch/PCCyNHap81wPP+fCEvm/BPF7NuHEIMDcMXRqtKUuOeA XLu9mDuyL89smBPoVgxPVnDaS/OM2wVIDejL2nzsU24mNd4ngqnoQvSbWMDCjFFo oDeqhyQ6vJb+y6oFPsqXHmxu1zk1fYGTRjQ5nh9C/stBDgpnYWSELnCTRSTCkDCW SAjcP1MlAOfvlbig/M/wBNmCSo+XOAH/d/KuEvuurM3Lcw42rzSTfmoWwq0y/Enb WuB3SZrIeQudBo7u6YRQYXF9Jv/OdpiLH+YGAn5D -----END CERTIFICATE-----Generated at Sun Jun 8 03:54:47 2025 by rpki-client