$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa File: 3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (raw, json) Hash identifier: od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU= Subject key identifier: F9:4F:E6:6F:7A:9C:E4:28:4E:FB:DC:78:42:D8:72:D5:B5:18:08:74 Certificate issuer: /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Certificate serial: 30BD062F81A7D9B5C70BB912E8183DC8C70AE224 Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa Signing time: Sun 18 May 2025 06:00:00 +0000 ROA not before: Sun 18 May 2025 05:55:00 +0000 ROA not after: Sun 17 May 2026 06:00:00 +0000 asID: 45306 IP address blocks: 119.15.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 11:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bd:06:2f:81:a7:d9:b5:c7:0b:b9:12:e8:18:3d:c8:c7:0a:e2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A Validity Not Before: May 18 05:55:00 2025 GMT Not After : May 17 06:00:00 2026 GMT Subject: CN=F94FE66F7A9CE4284EFBDC7842D872D5B5180874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:87:bd:05:ad:a7:56:5c:31:0f:39:87:c7: 3d:b7:f4:bd:bb:75:51:b5:fd:c5:c5:b8:27:32:1d: 21:8d:d9:54:2f:2d:8f:4b:c7:97:58:81:7a:58:97: bd:e3:78:25:15:e8:f4:2f:eb:c3:cf:d5:9b:97:32: ac:0b:41:ca:dd:b4:45:0b:eb:4b:da:6c:0b:a8:28: ca:af:e9:2d:c4:6f:2c:c0:02:d1:f3:57:6e:58:0a: 10:b8:27:60:5a:be:47:5f:ef:1d:b0:da:f6:d6:3b: a6:90:52:60:10:2d:ba:a4:fe:f7:5d:0c:61:ee:37: 39:de:ea:d6:d2:f7:69:2e:d6:f2:f0:5e:21:9a:2e: 8f:52:20:83:74:f8:8f:90:75:04:62:48:20:a1:15: fc:57:4a:7c:92:b7:34:3f:8b:20:bf:f0:69:ec:c3: 55:40:5e:3b:61:c9:89:30:49:12:60:b7:c5:93:e5: fa:72:35:63:26:f7:99:a7:36:da:7c:66:65:17:33: fd:40:2c:d3:f1:b4:ad:01:ec:a5:a0:2b:2a:a4:eb: 0f:0e:f1:99:61:67:ed:b2:99:08:32:4f:31:0d:7b: 3e:b1:1a:25:7a:ae:0f:52:3c:34:5a:0d:6e:bc:1f: 2d:fc:fa:bc:60:27:82:f8:3e:2c:6e:88:8d:d6:a2: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4F:E6:6F:7A:9C:E4:28:4E:FB:DC:78:42:D8:72:D5:B5:18:08:74 X509v3 Authority Key Identifier: keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.15.135.0/24 Signature Algorithm: sha256WithRSAEncryption 70:53:2b:ee:bb:af:d2:63:a4:91:d1:dc:da:a2:06:32:16:b4: 86:b6:b1:f8:57:07:56:f3:68:fd:2d:8f:2d:4c:59:07:63:8a: af:55:55:e3:cb:00:3c:b0:e2:32:45:e2:1c:d3:0e:d7:e7:0e: ff:1d:03:25:79:51:10:54:27:37:0f:76:5a:28:4d:84:eb:d9: 43:5b:83:85:c2:4c:2a:3b:ec:7e:80:eb:40:1d:18:63:f9:d4: 36:f1:1c:30:d7:ed:8c:65:29:69:d9:06:ce:39:0d:12:91:2b: 2b:66:34:f6:f0:6e:a0:5e:21:88:01:89:86:fe:89:73:3e:3a: 89:96:e5:bb:b3:d8:9a:84:fb:05:38:a3:08:58:ae:73:f1:d4: 56:62:24:e4:4b:56:5b:c0:30:a5:99:52:ac:80:ec:74:7b:6d: ca:08:a2:a8:14:c2:db:3f:e1:29:c6:5f:8b:dd:4e:5e:13:d1: 90:c4:c1:7a:33:ef:d0:7d:29:fb:3b:95:88:5b:90:51:e6:fd: b0:81:68:87:54:69:ef:f9:47:2b:e4:0f:b8:54:20:c2:b6:30: ff:5f:ce:40:fe:ae:55:88:d2:d9:76:f9:f4:af:04:e0:85:0a: 58:91:b0:78:5f:f1:9c:60:e9:34:4e:fb:64:96:3b:72:1a:87: b1:e9:85:94 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUML0GL4Gn2bXHC7kS6Bg9yMcK4iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZE RDNDNjcxQTAeFw0yNTA1MTgwNTU1MDBaFw0yNjA1MTcwNjAwMDBaMDMxMTAvBgNV BAMTKEY5NEZFNjZGN0E5Q0U0Mjg0RUZCREM3ODQyRDg3MkQ1QjUxODA4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdYe9Ba2nVlwxDzmHxz239L27 dVG1/cXFuCcyHSGN2VQvLY9Lx5dYgXpYl73jeCUV6PQv68PP1ZuXMqwLQcrdtEUL 60vabAuoKMqv6S3EbyzAAtHzV25YChC4J2Bavkdf7x2w2vbWO6aQUmAQLbqk/vdd DGHuNzne6tbS92ku1vLwXiGaLo9SIIN0+I+QdQRiSCChFfxXSnyStzQ/iyC/8Gns w1VAXjthyYkwSRJgt8WT5fpyNWMm95mnNtp8ZmUXM/1ALNPxtK0B7KWgKyqk6w8O 8ZlhZ+2ymQgyTzENez6xGiV6rg9SPDRaDW68Hy38+rxgJ4L4PixuiI3WolL1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+U/mb3qc5ChO+9x4Qthy1bUYCHQwHwYDVR0j BBgwFoAU8YU6HFweyv4QdvlKYfp3lt08ZxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWFiNjBiMS1hMjQ0LTRhNzgtYjMxYi1mZWNhM2QxNGVkOWYvMC9GMTg1M0ExQzVD MUVDQUZFMTA3NkY5NEE2MUZBNzc5NkREM0M2NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjE4NTNBMUM1QzFFQ0FGRTEwNzZGOTRBNjFGQTc3OTZERDND NjcxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMxMzEzOTJlMzEzNTJlMzEzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcPhzANBgkqhkiG 9w0BAQsFAAOCAQEAcFMr7ruv0mOkkdHc2qIGMha0hrax+FcHVvNo/S2PLUxZB2OK r1VV48sAPLDiMkXiHNMO1+cO/x0DJXlREFQnNw92WihNhOvZQ1uDhcJMKjvsfoDr QB0YY/nUNvEcMNftjGUpadkGzjkNEpErK2Y09vBuoF4hiAGJhv6Jcz46iZblu7PY moT7BTijCFiuc/HUVmIk5EtWW8AwpZlSrIDsdHttygiiqBTC2z/hKcZfi91OXhPR kMTBejPv0H0p+zuViFuQUeb9sIFoh1Rp7/lHK+QPuFQgwrYw/1/OQP6uVYjS2Xb5 9K8E4IUKWJGweF/xnGDpNE77ZJY7chqHsemFlA== -----END CERTIFICATE-----Generated at Thu Nov 6 06:05:48 2025 by rpki-client