$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa File: 3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa (raw, json) Hash identifier: oNpncVJTfRMAgA5hknpP2oLCpJDn9cv6T/mEbUw2rog= Subject key identifier: 8C:60:66:1C:7E:8F:9C:2D:58:F1:4F:4E:AA:FC:CE:F6:2E:8F:30:8D Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 69BE1A747A078C069E02080D39451DEE94D1E603 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa Signing time: Tue 22 Apr 2025 08:03:48 +0000 ROA not before: Tue 22 Apr 2025 07:58:48 +0000 ROA not after: Tue 21 Apr 2026 08:03:48 +0000 asID: 24525 IP address blocks: 114.199.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 06:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:be:1a:74:7a:07:8c:06:9e:02:08:0d:39:45:1d:ee:94:d1:e6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Apr 22 07:58:48 2025 GMT Not After : Apr 21 08:03:48 2026 GMT Subject: CN=8C60661C7E8F9C2D58F14F4EAAFCCEF62E8F308D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ce:e6:6f:25:a7:5b:b2:cc:90:bc:a2:55:ba: 5f:7c:a4:4e:93:21:3a:09:1a:9a:c0:0b:79:b8:5c: ef:a3:95:13:55:9a:a0:2b:b0:37:f5:ad:87:b2:8c: c8:74:d6:7c:9a:7c:f5:cc:0b:69:e5:90:cf:e6:05: ad:a4:8a:8d:b0:90:e6:fa:f5:32:3e:5a:01:a4:08: 5e:7e:73:63:e5:ef:b1:0e:c5:67:6f:fa:8e:ea:11: 7f:38:fa:4c:ad:6a:a6:61:d8:0a:b3:bf:ff:d9:48: 8f:cd:81:61:5e:f6:21:dc:85:9e:0f:a7:56:a9:43: 20:63:df:e8:37:37:87:37:97:41:d5:13:78:c6:93: 33:2a:8c:0b:80:0b:3c:05:70:81:4e:b9:eb:76:13: c1:f1:2d:63:d9:a3:14:73:d3:bb:b4:35:a7:17:4b: 43:ed:7d:96:34:4a:02:4e:ad:d1:fc:74:93:42:25: 59:b1:91:ce:9b:a1:b8:28:8e:75:af:8d:ce:d7:71: 1f:c0:44:95:00:ad:78:e8:15:63:d3:a2:e1:86:7d: 03:58:56:af:b9:bf:7e:47:cb:01:e6:e4:6a:43:f7: 21:91:a9:fd:71:9e:fb:51:a6:12:b6:eb:08:44:a5: 41:ef:69:98:89:06:80:87:78:a4:16:5e:80:2c:15: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:60:66:1C:7E:8F:9C:2D:58:F1:4F:4E:AA:FC:CE:F6:2E:8F:30:8D X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.126.0/23 Signature Algorithm: sha256WithRSAEncryption 42:22:f4:56:be:c7:3b:5b:ab:b4:ec:56:38:0e:59:49:ec:bb: 83:d7:db:2d:56:8d:c5:ba:35:96:13:c7:ab:aa:cc:38:b8:fc: b6:72:04:5e:58:5c:2a:c2:4e:64:54:83:0d:04:d7:64:c9:bf: 68:e1:73:f3:31:c9:d8:7e:ae:15:85:ee:be:9c:8a:f2:b2:fa: 4a:5f:ca:ad:ba:32:56:cf:53:2c:b5:f6:25:e7:c1:ba:b5:65: 91:ff:4d:99:90:a8:09:d0:b6:5b:ab:54:f3:26:62:c1:2c:40: 86:65:29:00:2c:ce:4f:e9:09:9d:b3:27:18:18:f9:cc:0e:1f: 1c:31:99:16:7a:4c:2d:b9:53:03:3c:d8:4f:80:0a:b4:75:09: 70:fb:7c:bf:8c:64:21:16:8e:38:67:7b:60:00:02:94:e8:fd: 93:72:40:d5:21:f7:3c:f7:42:c9:e7:81:6b:ac:02:13:5b:81: bd:7b:61:95:19:bb:c1:b7:85:2c:4e:9a:2d:81:8b:bd:44:e3: dd:ae:3f:92:00:81:61:c6:76:b8:e9:5f:9e:e0:12:7b:55:91: 72:c4:f0:12:5f:4e:78:af:f8:b4:74:3d:5e:fb:98:72:66:f3: 81:46:d2:31:a5:90:b2:13:26:04:b0:8f:86:43:d4:cf:ed:37: 14:8e:fd:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUab4adHoHjAaeAggNOUUd7pTR5gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA0MjIwNzU4NDhaFw0yNjA0MjEwODAzNDhaMDMxMTAvBgNV BAMTKDhDNjA2NjFDN0U4RjlDMkQ1OEYxNEY0RUFBRkNDRUY2MkU4RjMwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkzuZvJadbssyQvKJVul98pE6T IToJGprAC3m4XO+jlRNVmqArsDf1rYeyjMh01nyafPXMC2nlkM/mBa2kio2wkOb6 9TI+WgGkCF5+c2Pl77EOxWdv+o7qEX84+kytaqZh2Aqzv//ZSI/NgWFe9iHchZ4P p1apQyBj3+g3N4c3l0HVE3jGkzMqjAuACzwFcIFOuet2E8HxLWPZoxRz07u0NacX S0PtfZY0SgJOrdH8dJNCJVmxkc6bobgojnWvjc7XcR/ARJUArXjoFWPTouGGfQNY Vq+5v35HywHm5GpD9yGRqf1xnvtRphK26whEpUHvaZiJBoCHeKQWXoAsFWXfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjGBmHH6PnC1Y8U9OqvzO9i6PMI0wHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMyMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBcsd+MA0GCSqG SIb3DQEBCwUAA4IBAQBCIvRWvsc7W6u07FY4DllJ7LuD19stVo3FujWWE8erqsw4 uPy2cgReWFwqwk5kVIMNBNdkyb9o4XPzMcnYfq4Vhe6+nIrysvpKX8qtujJWz1Ms tfYl58G6tWWR/02ZkKgJ0LZbq1TzJmLBLECGZSkALM5P6QmdsycYGPnMDh8cMZkW ekwtuVMDPNhPgAq0dQlw+3y/jGQhFo44Z3tgAAKU6P2TckDVIfc890LJ54FrrAIT W4G9e2GVGbvBt4UsTpotgYu9ROPdrj+SAIFhxna46V+e4BJ7VZFyxPASX054r/i0 dD1e+5hyZvOBRtIxpZCyEyYEsI+GQ9TP7TcUjv1m -----END CERTIFICATE-----Generated at Mon Oct 27 14:26:39 2025 by rpki-client