$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa File: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (raw, json) Hash identifier: I9Xm1cEngTYg6WB2t4U5k+twc9OnUGEq5Opc/dfrZDc= Subject key identifier: AF:B0:AF:91:75:BB:DE:3C:30:A5:1E:13:07:53:8D:BD:28:0C:A4:B1 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 48913A7A89C08567B4D5ED0DA32AADED19496C9A Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa Signing time: Mon 02 Jun 2025 01:02:35 +0000 ROA not before: Mon 02 Jun 2025 00:57:35 +0000 ROA not after: Mon 01 Jun 2026 01:02:35 +0000 asID: 46026 IP address blocks: 175.111.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:91:3a:7a:89:c0:85:67:b4:d5:ed:0d:a3:2a:ad:ed:19:49:6c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jun 2 00:57:35 2025 GMT Not After : Jun 1 01:02:35 2026 GMT Subject: CN=AFB0AF9175BBDE3C30A51E1307538DBD280CA4B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:cd:54:84:5a:8e:82:4f:4c:27:2f:84:8a: 79:5c:96:29:aa:c2:7c:20:c4:fa:64:78:01:aa:ed: 29:a3:b1:65:c0:15:11:4f:b6:43:1c:d3:c2:65:c5: d3:32:2c:a2:34:ef:3b:65:f8:78:d8:51:5e:24:e0: 7f:40:51:a5:db:19:ef:79:3f:fe:1a:97:65:2a:49: 21:eb:35:9f:3d:b3:e9:77:79:e5:16:86:85:1d:fd: 10:66:8c:b7:66:af:9b:27:55:f3:16:82:82:dc:d2: 4b:31:ad:66:5c:95:ed:a4:87:32:3f:4e:0a:4e:6d: d4:61:da:98:60:f6:95:de:2e:55:95:7b:42:4e:59: 3b:12:c9:29:17:46:e5:04:c6:74:30:4e:d5:dd:e1: 9e:15:0e:29:77:0b:d6:bf:f4:bf:ad:8f:2f:22:62: fa:10:a8:25:06:bd:ac:92:c5:33:ea:91:03:88:e2: b2:15:81:44:8d:c9:e5:95:83:d7:b6:bd:65:db:ee: 57:2d:f7:5d:b8:a3:a1:53:35:dc:f0:f3:d9:94:1d: a5:d0:6b:d5:53:33:3d:55:4c:3b:4c:d7:2a:db:fa: 8e:61:19:5e:e5:9b:6d:d5:fd:82:69:32:e2:72:82: 7d:c2:2a:a9:c4:ae:48:57:33:0b:cc:2c:e9:6e:a7: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:AF:91:75:BB:DE:3C:30:A5:1E:13:07:53:8D:BD:28:0C:A4:B1 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.118.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:d2:1d:b5:3b:8b:5f:cf:08:c7:2f:e4:b7:74:9f:9f:a4:79: 59:29:39:82:c5:74:91:7f:fa:07:91:9f:61:72:bb:04:4b:9d: ee:d2:f4:89:fe:4d:2d:95:f8:06:24:06:fe:24:d7:d4:73:db: a6:8f:1d:bd:bf:3a:3b:11:f2:e6:1a:1a:61:b2:a4:33:a0:b0: 4e:19:2e:c7:77:a6:3a:02:93:0a:5a:55:1b:31:c5:81:a5:c2: 1f:6d:e7:bf:00:4e:ef:ff:f9:e3:e3:4c:f5:b7:79:59:ad:67: a4:bd:9d:b3:58:86:03:69:7c:c4:07:3a:ab:56:51:f2:fd:92: f6:49:98:fb:0a:cc:3e:57:e7:a7:fa:d3:90:3d:1a:2d:df:63: e5:ea:6b:e2:2c:1c:d9:57:ea:85:af:00:d8:45:41:c1:dc:b5: 4d:5f:e5:e6:51:7e:9c:06:84:54:39:fd:09:71:3a:8f:08:87: e1:44:70:4c:ce:f7:dc:d5:18:d6:41:d4:b7:bd:4a:80:8e:ca: 56:39:89:54:cd:19:b6:fb:5e:7b:5f:6b:9c:62:6c:f6:f2:2d: 15:f9:5e:44:0c:52:c9:f2:f5:f5:11:e7:aa:7d:66:08:57:df: 72:b0:f0:45:47:85:66:46:e0:00:7a:76:9d:5e:24:80:93:c2: 66:4c:00:e1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSJE6eonAhWe01e0Noyqt7RlJbJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTA2MDIwMDU3MzVaFw0yNjA2MDEwMTAyMzVaMDMxMTAvBgNV BAMTKEFGQjBBRjkxNzVCQkRFM0MzMEE1MUUxMzA3NTM4REJEMjgwQ0E0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOs1UhFqOgk9MJy+Einlclimq wnwgxPpkeAGq7SmjsWXAFRFPtkMc08JlxdMyLKI07ztl+HjYUV4k4H9AUaXbGe95 P/4al2UqSSHrNZ89s+l3eeUWhoUd/RBmjLdmr5snVfMWgoLc0ksxrWZcle2khzI/ TgpObdRh2phg9pXeLlWVe0JOWTsSySkXRuUExnQwTtXd4Z4VDil3C9a/9L+tjy8i YvoQqCUGvaySxTPqkQOI4rIVgUSNyeWVg9e2vWXb7lct9124o6FTNdzw89mUHaXQ a9VTMz1VTDtM1yrb+o5hGV7lm23V/YJpMuJygn3CKqnErkhXMwvMLOlupycbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUr7CvkXW73jwwpR4TB1ONvSgMpLEwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzczNTJlMzEzMTMxMmUzMTMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr292MA0GCSqG SIb3DQEBCwUAA4IBAQAK0h21O4tfzwjHL+S3dJ+fpHlZKTmCxXSRf/oHkZ9hcrsE S53u0vSJ/k0tlfgGJAb+JNfUc9umjx29vzo7EfLmGhphsqQzoLBOGS7Hd6Y6ApMK WlUbMcWBpcIfbee/AE7v//nj40z1t3lZrWekvZ2zWIYDaXzEBzqrVlHy/ZL2SZj7 Csw+V+en+tOQPRot32Pl6mviLBzZV+qFrwDYRUHB3LVNX+XmUX6cBoRUOf0JcTqP CIfhRHBMzvfc1RjWQdS3vUqAjspWOYlUzRm2+157X2ucYmz28i0V+V5EDFLJ8vX1 EeeqfWYIV99ysPBFR4VmRuAAenadXiSAk8JmTADh -----END CERTIFICATE-----Generated at Mon Jun 16 13:21:42 2025 by rpki-client