$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa File: 36312e31342e3235312e302f32342d3234203d3e203633353031.roa (raw, json) Hash identifier: 9HA8+f1KuEY73x5eI3NyGPnk+prH+pYPMOMdeQF4VZc= Subject key identifier: D8:53:9B:A0:AA:28:DF:B1:AC:EB:B8:93:03:D6:CB:88:37:A9:7F:FC Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1 Certificate serial: 7403AA21B6D974C89D72D1DA4B32791CDF1A8553 Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa Signing time: Sun 25 May 2025 19:00:01 +0000 ROA not before: Sun 25 May 2025 18:55:01 +0000 ROA not after: Sun 24 May 2026 19:00:01 +0000 asID: 63501 IP address blocks: 61.14.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:03:aa:21:b6:d9:74:c8:9d:72:d1:da:4b:32:79:1c:df:1a:85:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1 Validity Not Before: May 25 18:55:01 2025 GMT Not After : May 24 19:00:01 2026 GMT Subject: CN=D8539BA0AA28DFB1ACEBB89303D6CB8837A97FFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:59:4e:20:a1:f0:29:2f:d8:b0:4b:2d:93: 0e:7b:35:de:2d:ff:14:b9:f2:c9:78:0c:87:3c:94: 75:24:be:ae:ba:2c:41:a0:3d:3d:3f:f6:ce:47:3e: 51:fa:9d:1a:eb:20:17:48:3b:8d:7f:e5:87:a6:59: 70:8e:3c:df:39:c8:12:6a:1b:dc:61:4a:04:99:a4: ec:b2:17:91:3f:11:88:c5:e9:2b:37:a0:22:c3:ba: fe:81:8b:5b:cd:c2:04:aa:d1:51:2c:56:31:f4:f1: 37:c0:2c:28:1d:3e:7b:36:95:07:84:75:b0:5c:4c: 4b:3c:28:3c:1e:de:e3:dd:9d:9c:46:91:4b:09:10: cc:d2:33:23:d5:14:4d:89:7f:10:af:25:b2:65:ac: 63:c2:70:be:55:79:c9:21:9d:c7:4d:d4:4c:51:81: c7:ce:63:39:43:1f:db:e3:0b:87:ec:71:1e:1b:be: 0d:03:6b:aa:30:6f:8f:ab:fc:ad:63:4d:07:28:d8: 4a:e5:ba:54:ab:f2:97:76:20:eb:da:b6:51:77:08: 53:8d:25:2d:7e:6e:44:14:80:fc:af:bd:5d:8b:2d: f5:54:02:ab:cc:28:60:ce:81:db:9d:6b:d9:e2:10: 08:3d:85:38:fa:62:46:ff:61:1c:22:6a:dd:10:59: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:53:9B:A0:AA:28:DF:B1:AC:EB:B8:93:03:D6:CB:88:37:A9:7F:FC X509v3 Authority Key Identifier: keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235312e302f32342d3234203d3e203633353031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.14.251.0/24 Signature Algorithm: sha256WithRSAEncryption 14:d1:65:20:52:93:59:a2:73:11:08:de:73:15:23:54:b2:85: 15:67:6c:cc:25:57:19:c6:d2:3f:c8:4c:eb:2f:57:3d:42:7c: f3:6f:dc:4f:9b:f5:b7:dc:2d:68:ae:1e:b3:a7:6b:0c:18:f9: 0c:0d:fe:11:ae:72:11:4c:91:f3:88:d2:db:b8:2a:a6:57:2d: 16:57:e2:bf:ef:49:13:1d:9f:06:e5:ea:c5:32:cd:72:c3:04: 85:f0:ff:c9:4f:3a:09:53:c7:4b:1c:35:6e:1d:74:f6:f6:22: af:ce:35:21:25:5e:b2:cf:22:b2:8c:6f:fd:9e:de:4f:55:0a: fc:00:1c:44:11:5e:9a:79:27:0e:d8:47:2f:07:92:bb:0f:de: 81:f7:1f:be:54:0e:ca:d3:0e:2a:15:63:7e:d3:5a:4b:2a:4f: 89:de:15:da:02:f7:02:6e:4b:7b:f5:ae:8a:41:4c:a4:7f:2e: 67:cc:ec:32:f4:99:f7:fe:be:d7:ab:42:81:b2:3e:61:66:75: 4a:3c:08:a5:02:2e:cf:09:5a:09:fa:95:88:d5:a6:9f:7a:fc: 3f:60:93:4d:8c:bd:8e:54:6e:ba:ee:be:4c:5e:3c:be:2c:07: b0:38:f4:4d:9d:fc:60:10:f6:d0:72:56:96:a6:f4:c9:39:39: 51:e6:db:08 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUdAOqIbbZdMidctHaSzJ5HN8ahVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4 NTVBMThFMTAeFw0yNTA1MjUxODU1MDFaFw0yNjA1MjQxOTAwMDFaMDMxMTAvBgNV BAMTKEQ4NTM5QkEwQUEyOERGQjFBQ0VCQjg5MzAzRDZDQjg4MzdBOTdGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZmFlOIKHwKS/YsEstkw57Nd4t /xS58sl4DIc8lHUkvq66LEGgPT0/9s5HPlH6nRrrIBdIO41/5YemWXCOPN85yBJq G9xhSgSZpOyyF5E/EYjF6Ss3oCLDuv6Bi1vNwgSq0VEsVjH08TfALCgdPns2lQeE dbBcTEs8KDwe3uPdnZxGkUsJEMzSMyPVFE2JfxCvJbJlrGPCcL5VeckhncdN1ExR gcfOYzlDH9vjC4fscR4bvg0Da6owb4+r/K1jTQco2ErlulSr8pd2IOvatlF3CFON JS1+bkQUgPyvvV2LLfVUAqvMKGDOgduda9niEAg9hTj6Ykb/YRwiat0QWQFhAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU2FOboKoo37Gs67iTA9bLiDepf/wwHwYDVR0j BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h MDVjLTY1MGZiNDlmMDU5NC8wLzM2MzEyZTMxMzQyZTMyMzUzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9DvswDQYJKoZIhvcN AQELBQADggEBABTRZSBSk1micxEI3nMVI1SyhRVnbMwlVxnG0j/ITOsvVz1CfPNv 3E+b9bfcLWiuHrOnawwY+QwN/hGuchFMkfOI0tu4KqZXLRZX4r/vSRMdnwbl6sUy zXLDBIXw/8lPOglTx0scNW4ddPb2Iq/ONSElXrLPIrKMb/2e3k9VCvwAHEQRXpp5 Jw7YRy8HkrsP3oH3H75UDsrTDioVY37TWksqT4neFdoC9wJuS3v1ropBTKR/LmfM 7DL0mff+vterQoGyPmFmdUo8CKUCLs8JWgn6lYjVpp96/D9gk02MvY5Ubrruvkxe PL4sB7A49E2d/GAQ9tByVpam9Mk5OVHm2wg= -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:19 2025 by rpki-client