$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa File: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (raw, json) Hash identifier: omzII3ixbtOuAnPW3RG0el7+Kj2LR6H6b/zYKpPBQBo= Subject key identifier: 97:70:A1:D4:0C:00:C3:53:C2:5D:78:C7:D2:C8:DE:0F:6B:D1:42:C0 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 4B5791800D0533BF7CE79093D0976E7F65745052 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa Signing time: Mon 02 Jun 2025 02:02:36 +0000 ROA not before: Mon 02 Jun 2025 01:57:36 +0000 ROA not after: Mon 01 Jun 2026 02:02:36 +0000 asID: 46032 IP address blocks: 118.151.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:57:91:80:0d:05:33:bf:7c:e7:90:93:d0:97:6e:7f:65:74:50:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: Jun 2 01:57:36 2025 GMT Not After : Jun 1 02:02:36 2026 GMT Subject: CN=9770A1D40C00C353C25D78C7D2C8DE0F6BD142C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:03:25:ed:e2:d0:3c:ef:d6:66:25:87:89: 55:be:31:63:a1:c5:58:f1:33:d3:cf:d8:2f:09:eb: c8:40:62:09:b7:3d:33:62:11:cb:73:85:ec:6a:ae: 08:7b:b1:cb:6f:31:34:8f:e2:87:1a:45:29:e2:1c: b6:c2:f2:3f:a7:24:48:b6:7e:60:33:63:3a:59:37: 3e:a4:5a:ff:db:fb:f2:9d:be:78:81:12:1b:d7:46: 3f:31:45:42:5d:9d:50:9d:05:3b:8c:5c:16:ee:4a: d5:9f:29:23:8c:3f:25:97:16:c4:be:e9:e2:39:eb: e7:a9:8e:25:1e:c9:1e:ff:9f:ca:95:f5:b4:46:02: 67:27:dd:9e:5d:8c:7c:49:88:b4:89:65:65:f0:a2: 9d:dc:ed:7c:2e:39:31:51:4d:4f:5f:c9:5d:a4:94: a3:52:79:8b:60:5c:c0:63:5a:1c:26:51:bb:57:19: ee:94:a8:58:45:9b:e9:af:f8:a6:7f:62:7b:7e:9f: 0c:c8:77:78:2b:4a:37:f8:ef:a1:47:09:75:3f:c4: 4e:9a:f6:99:f5:88:e1:9a:9a:eb:2a:31:e6:a8:fc: 3f:d4:c7:49:62:8a:58:af:fd:2e:d9:10:c0:24:0f: b9:03:2c:46:11:25:df:12:12:34:3c:c3:b0:1d:8f: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:A1:D4:0C:00:C3:53:C2:5D:78:C7:D2:C8:DE:0F:6B:D1:42:C0 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.151.221.0/24 Signature Algorithm: sha256WithRSAEncryption 11:28:c1:48:72:3a:59:bc:74:94:3f:27:cc:06:d3:1a:7c:0a: ec:78:c6:97:35:a7:e1:ac:4f:d0:61:0a:2a:16:3d:fb:8e:cf: 44:15:a3:3f:ed:ed:8a:6a:aa:85:23:3e:b8:ef:de:bb:dc:33: 87:06:1a:88:94:d5:2c:75:c6:73:c4:46:04:f5:c3:66:6e:8e: b7:dc:41:96:9b:d7:a7:1c:cb:da:ab:a6:68:30:ee:a0:57:92: ed:51:e5:44:28:e6:7b:2c:02:15:f7:81:3e:3e:12:15:4a:e2: fb:f5:ea:ea:ff:1b:b3:c0:db:b6:5b:d8:de:61:c6:bb:0a:0f: ad:a1:96:9e:29:67:3f:0f:67:d9:7f:fb:0d:cb:d9:b8:e1:15: 3f:98:67:9e:8f:bf:22:94:de:c2:40:df:45:0f:99:9f:1f:f0: 7b:d4:bb:72:01:ac:f4:e7:bf:0a:9b:f6:43:66:a6:6b:7e:87: bd:8d:bb:fc:a7:e7:e3:66:6b:9f:21:60:68:f4:af:24:29:cc: ea:9d:b8:69:4c:52:f2:9c:71:37:ed:7c:3c:e2:21:49:2f:de: bb:27:ad:fa:b6:31:d4:15:98:d0:86:43:31:9d:d8:21:da:d9: 06:aa:00:19:81:a4:16:16:c3:5f:7a:a3:0e:2b:53:f4:bd:cc: 2b:6c:1a:ea -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUS1eRgA0FM79855CT0Jduf2V0UFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNTA2MDIwMTU3MzZaFw0yNjA2MDEwMjAyMzZaMDMxMTAvBgNV BAMTKDk3NzBBMUQ0MEMwMEMzNTNDMjVENzhDN0QyQzhERTBGNkJEMTQyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEAMl7eLQPO/WZiWHiVW+MWOh xVjxM9PP2C8J68hAYgm3PTNiEctzhexqrgh7sctvMTSP4ocaRSniHLbC8j+nJEi2 fmAzYzpZNz6kWv/b+/KdvniBEhvXRj8xRUJdnVCdBTuMXBbuStWfKSOMPyWXFsS+ 6eI56+epjiUeyR7/n8qV9bRGAmcn3Z5djHxJiLSJZWXwop3c7XwuOTFRTU9fyV2k lKNSeYtgXMBjWhwmUbtXGe6UqFhFm+mv+KZ/Ynt+nwzId3grSjf476FHCXU/xE6a 9pn1iOGamusqMeao/D/Ux0liiliv/S7ZEMAkD7kDLEYRJd8SEjQ8w7Adj5vXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUl3Ch1AwAw1PCXXjH0sjeD2vRQsAwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1N2I5MGNiLThlYmQtNGM3Yi04 YzMxLTEzM2E4YjRlZDY5Yy8wLzMxMzEzODJlMzEzNTMxMmUzMjMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdpfdMA0GCSqG SIb3DQEBCwUAA4IBAQARKMFIcjpZvHSUPyfMBtMafArseMaXNafhrE/QYQoqFj37 js9EFaM/7e2KaqqFIz6479673DOHBhqIlNUsdcZzxEYE9cNmbo633EGWm9enHMva q6ZoMO6gV5LtUeVEKOZ7LAIV94E+PhIVSuL79erq/xuzwNu2W9jeYca7Cg+toZae KWc/D2fZf/sNy9m44RU/mGeej78ilN7CQN9FD5mfH/B71LtyAaz0578Km/ZDZqZr foe9jbv8p+fjZmufIWBo9K8kKczqnbhpTFLynHE37Xw84iFJL967J636tjHUFZjQ hkMxndgh2tkGqgAZgaQWFsNfeqMOK1P0vcwrbBrq -----END CERTIFICATE-----Generated at Sun Jun 8 03:59:48 2025 by rpki-client