$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131382e302f32342d3234203d3e203338353233.roa File: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (raw, json) Hash identifier: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg= Subject key identifier: C4:E9:39:4A:8D:F0:3A:B2:F6:34:8A:E2:9C:3A:7C:A5:8A:ED:96:5B Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 16DF8C23519B063CC0C9D295886F0CC46CEA5AE9 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131382e302f32342d3234203d3e203338353233.roa Signing time: Fri 04 Jul 2025 15:00:02 +0000 ROA not before: Fri 04 Jul 2025 14:55:02 +0000 ROA not after: Fri 03 Jul 2026 15:00:02 +0000 asID: 38523 IP address blocks: 117.74.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:df:8c:23:51:9b:06:3c:c0:c9:d2:95:88:6f:0c:c4:6c:ea:5a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Jul 4 14:55:02 2025 GMT Not After : Jul 3 15:00:02 2026 GMT Subject: CN=C4E9394A8DF03AB2F6348AE29C3A7CA58AED965B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:75:8d:b5:84:cf:33:66:cb:29:9d:ba:74:dd: 1a:8e:a2:f4:62:fb:55:0e:9e:e2:d7:bd:53:78:0d: b0:19:1c:02:f9:9a:56:b5:bd:03:bc:df:7b:37:21: a1:a7:46:5a:4c:3a:97:87:e8:7f:e2:4a:14:df:9e: 34:ac:04:73:39:91:38:61:5a:2a:eb:54:86:2c:5a: f3:cb:e8:43:f0:25:ba:a4:1e:1c:43:f1:d2:5a:67: 87:39:c3:a1:a3:d9:50:22:8c:14:1c:20:d5:a1:5d: c3:18:64:04:32:08:40:8e:a1:2a:58:9b:e1:30:6f: 63:03:04:43:fe:f4:87:bb:eb:90:55:75:4f:ad:04: 5b:0c:7b:ca:04:06:3c:63:94:ab:7e:fc:58:12:fa: bb:e6:bf:d3:2d:fa:b9:2d:85:ab:92:a5:97:48:b5: 1a:b0:f2:2c:37:95:b1:dc:4a:16:38:fa:23:15:1a: 69:05:39:8f:9f:67:7c:d3:77:e2:99:e3:be:0c:05: ae:8c:9e:df:34:c1:2b:5b:c7:c5:b2:d4:64:d4:e5: 36:db:71:0c:14:b7:10:2d:ef:24:dd:32:ec:db:9c: 21:09:a2:66:ad:53:89:15:93:7a:f0:4e:cf:8f:43: 96:6d:42:9a:7b:de:89:35:87:d7:05:41:8c:b8:e3: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E9:39:4A:8D:F0:3A:B2:F6:34:8A:E2:9C:3A:7C:A5:8A:ED:96:5B X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131382e302f32342d3234203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 117.74.118.0/24 Signature Algorithm: sha256WithRSAEncryption 93:a2:90:00:7c:70:fd:87:23:9a:b9:75:ba:3e:9e:5c:82:ce: 68:bc:03:d6:1e:21:49:b5:87:c4:0d:b9:54:6a:5e:ea:92:f0: 28:90:57:5d:12:0f:c6:75:f5:a1:51:19:85:a5:1f:91:de:b8: 99:7a:42:81:1c:20:bc:2f:65:ed:93:2d:6a:6f:f2:33:9b:29: 1f:88:f6:fa:06:d8:06:52:35:24:b2:0b:fe:7a:66:2a:3d:34: 7a:0c:fe:17:a6:3a:0b:82:0a:3a:38:27:33:38:16:1a:41:33: 51:9f:c0:6f:ac:ba:86:cd:05:14:09:85:84:27:7a:08:46:e0: 02:e9:46:88:a5:65:e4:47:32:de:37:28:c8:29:b0:a7:8e:06: 2e:02:98:42:c1:c2:59:c7:60:0f:3f:9a:a3:34:f8:49:5d:f9: 2a:07:ba:c7:5c:cb:f7:aa:3e:2b:3b:08:6f:dc:55:27:86:b9: 52:7f:3f:65:22:e7:91:d2:19:2e:a0:76:b6:0e:6b:ec:75:01: 02:3b:6e:1e:92:04:f1:84:59:29:63:a3:e3:ff:e3:c9:5a:28: 2c:69:c1:0f:3d:9a:b5:09:e7:de:82:07:fc:a0:fe:4e:84:35: f4:3e:74:9a:29:fa:93:e5:64:55:60:3e:1b:23:50:ee:c6:74: b6:ff:23:0c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFt+MI1GbBjzAydKViG8MxGzqWukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTA3MDQxNDU1MDJaFw0yNjA3MDMxNTAwMDJaMDMxMTAvBgNV BAMTKEM0RTkzOTRBOERGMDNBQjJGNjM0OEFFMjlDM0E3Q0E1OEFFRDk2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDadY21hM8zZsspnbp03RqOovRi +1UOnuLXvVN4DbAZHAL5mla1vQO833s3IaGnRlpMOpeH6H/iShTfnjSsBHM5kThh WirrVIYsWvPL6EPwJbqkHhxD8dJaZ4c5w6Gj2VAijBQcINWhXcMYZAQyCECOoSpY m+Ewb2MDBEP+9Ie765BVdU+tBFsMe8oEBjxjlKt+/FgS+rvmv9Mt+rkthauSpZdI tRqw8iw3lbHcShY4+iMVGmkFOY+fZ3zTd+KZ474MBa6Mnt80wStbx8Wy1GTU5Tbb cQwUtxAt7yTdMuzbnCEJomatU4kVk3rwTs+PQ5ZtQpp73ok1h9cFQYy4412hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUxOk5So3wOrL2NIrinDp8pYrtllswHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMxMzEzNzJlMzczNDJlMzEzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKdjANBgkqhkiG 9w0BAQsFAAOCAQEAk6KQAHxw/Ycjmrl1uj6eXILOaLwD1h4hSbWHxA25VGpe6pLw KJBXXRIPxnX1oVEZhaUfkd64mXpCgRwgvC9l7ZMtam/yM5spH4j2+gbYBlI1JLIL /npmKj00egz+F6Y6C4IKOjgnMzgWGkEzUZ/Ab6y6hs0FFAmFhCd6CEbgAulGiKVl 5Ecy3jcoyCmwp44GLgKYQsHCWcdgDz+aozT4SV35Kge6x1zL96o+KzsIb9xVJ4a5 Un8/ZSLnkdIZLqB2tg5r7HUBAjtuHpIE8YRZKWOj4//jyVooLGnBDz2atQnn3oIH /KD+ToQ19D50min6k+VkVWA+GyNQ7sZ0tv8jDA== -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:41 2025 by rpki-client