$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa File: 3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa (raw, json) Hash identifier: Eq6eaKzEaCxIozCLaHOftR+sH1E278CK+Xv02gTUoxo= Subject key identifier: A7:B4:A6:B1:C4:60:9C:A5:BE:9A:04:55:18:52:C3:43:D7:DF:74:D2 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 73BB54D6963A15753A27989BD8E1AE2EDF8F5635 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa Signing time: Mon 02 Jun 2025 02:00:01 +0000 ROA not before: Mon 02 Jun 2025 01:55:01 +0000 ROA not after: Mon 01 Jun 2026 02:00:01 +0000 asID: 9794 IP address blocks: 115.178.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:bb:54:d6:96:3a:15:75:3a:27:98:9b:d8:e1:ae:2e:df:8f:56:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Jun 2 01:55:01 2025 GMT Not After : Jun 1 02:00:01 2026 GMT Subject: CN=A7B4A6B1C4609CA5BE9A04551852C343D7DF74D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e7:78:7f:73:45:6c:60:49:ad:2c:94:06:6f: a4:f6:b5:1f:8d:c0:eb:e1:cf:a1:95:3f:1c:4d:b8: 86:23:6a:6d:75:e0:69:94:7d:bc:be:2c:b2:2e:fb: 09:03:84:3e:8e:95:bc:d8:84:cb:b9:b9:c6:dd:cd: 83:8b:84:de:3f:ec:0b:11:c8:13:84:4d:a2:de:dc: d8:e2:ff:0f:2f:91:20:3c:86:2b:6e:e7:cb:20:e3: 7c:41:02:66:96:b4:2f:5b:3f:71:09:89:0f:91:23: e5:75:96:b1:42:df:05:1e:bc:46:e0:ec:a2:77:59: 70:31:7b:33:e5:23:a6:80:07:f4:a0:2a:e5:9b:ed: ed:1e:6c:80:27:b6:43:26:4b:29:d0:55:da:5b:b6: c7:ab:b6:42:68:94:f0:d4:2c:8f:d2:d4:a7:46:ca: ee:fc:f4:19:37:77:1a:08:77:75:5b:f3:41:d7:95: e3:14:2b:dc:c8:8f:76:87:bd:57:57:7d:6c:00:20: dc:e5:5c:23:47:87:27:bd:85:7b:20:eb:38:db:e4: 51:36:c9:d4:68:84:6f:85:b4:c7:8e:a7:cb:14:2e: f2:aa:6e:5e:1a:a5:a2:0d:98:8f:d6:28:9f:bb:33: e2:38:a8:51:cc:da:17:ca:86:da:50:36:63:05:b6: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B4:A6:B1:C4:60:9C:A5:BE:9A:04:55:18:52:C3:43:D7:DF:74:D2 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133302e302f32342d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.130.0/24 Signature Algorithm: sha256WithRSAEncryption 89:3f:8b:fb:09:c3:1b:2f:b1:fa:b0:e3:02:05:5c:c7:c3:e8: 2c:06:27:9c:55:95:fd:63:d1:94:2d:eb:79:fb:28:55:a1:ad: cc:d4:dc:4c:5b:85:7c:c9:40:99:12:05:93:68:ca:2a:c9:f1: 5b:51:38:a8:fc:31:ee:12:a3:5c:15:a1:74:87:97:d1:4d:58: 5b:e2:96:2c:84:b5:03:be:0a:71:d6:1f:f6:25:9c:39:83:24: f9:98:6b:c3:60:68:c5:7a:6a:e3:20:02:85:21:2d:49:2d:6d: 8f:30:77:e1:e8:01:b2:cc:53:a3:73:e8:4c:76:24:9d:7f:cd: 17:d3:61:71:c7:03:81:7f:1b:88:2e:37:87:a5:f1:bd:91:b0: 0b:f8:e4:59:87:2e:05:71:68:7b:16:3a:a8:62:6b:97:94:af: f0:46:df:52:01:82:94:a5:57:4c:f0:2b:d5:84:8b:9d:4e:cb: 4f:f2:ea:86:15:0b:17:6f:d6:bc:6b:77:5d:4a:dd:ee:37:11: 42:b2:8b:ca:54:a9:3b:f8:8f:fc:d2:ab:5b:48:8a:61:c9:dc: 5c:7d:d1:01:cc:33:60:a2:d4:e1:80:f2:16:98:05:80:4a:c1: e8:74:08:b5:53:b1:3a:1f:06:0f:fd:85:33:db:68:51:70:ef: db:06:84:95 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUc7tU1pY6FXU6J5ib2OGuLt+PVjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTA2MDIwMTU1MDFaFw0yNjA2MDEwMjAwMDFaMDMxMTAvBgNV BAMTKEE3QjRBNkIxQzQ2MDlDQTVCRTlBMDQ1NTE4NTJDMzQzRDdERjc0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz53h/c0VsYEmtLJQGb6T2tR+N wOvhz6GVPxxNuIYjam114GmUfby+LLIu+wkDhD6OlbzYhMu5ucbdzYOLhN4/7AsR yBOETaLe3Nji/w8vkSA8hitu58sg43xBAmaWtC9bP3EJiQ+RI+V1lrFC3wUevEbg 7KJ3WXAxezPlI6aAB/SgKuWb7e0ebIAntkMmSynQVdpbtsertkJolPDULI/S1KdG yu789Bk3dxoId3Vb80HXleMUK9zIj3aHvVdXfWwAINzlXCNHhye9hXsg6zjb5FE2 ydRohG+FtMeOp8sULvKqbl4apaINmI/WKJ+7M+I4qFHM2hfKhtpQNmMFtsFFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUp7SmscRgnKW+mgRVGFLDQ9ffdNIwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTMzMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHOygjANBgkqhkiG 9w0BAQsFAAOCAQEAiT+L+wnDGy+x+rDjAgVcx8PoLAYnnFWV/WPRlC3refsoVaGt zNTcTFuFfMlAmRIFk2jKKsnxW1E4qPwx7hKjXBWhdIeX0U1YW+KWLIS1A74KcdYf 9iWcOYMk+Zhrw2BoxXpq4yAChSEtSS1tjzB34egBssxTo3PoTHYknX/NF9NhcccD gX8biC43h6XxvZGwC/jkWYcuBXFoexY6qGJrl5Sv8EbfUgGClKVXTPAr1YSLnU7L T/LqhhULF2/WvGt3XUrd7jcRQrKLylSpO/iP/NKrW0iKYcncXH3RAcwzYKLU4YDy FpgFgErB6HQItVOxOh8GD/2FM9toUXDv2waElQ== -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:45 2025 by rpki-client