$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: T4C3MMp63InRug/QevDWZdbJWb02Vgv8N7qON1zbfOM= Subject key identifier: 05:1C:2C:E7:D2:84:FB:FC:5B:47:1F:18:A2:3F:D2:7B:A5:DD:02:26 Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: CC41F754EF86AF7FD58746772FA5FD0F8E8ADC Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa Signing time: Sun 23 Mar 2025 06:00:02 +0000 ROA not before: Sun 23 Mar 2025 05:55:02 +0000 ROA not after: Sun 22 Mar 2026 06:00:02 +0000 asID: 9341 IP address blocks: 119.252.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 06:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cc:41:f7:54:ef:86:af:7f:d5:87:46:77:2f:a5:fd:0f:8e:8a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 23 05:55:02 2025 GMT Not After : Mar 22 06:00:02 2026 GMT Subject: CN=051C2CE7D284FBFC5B471F18A23FD27BA5DD0226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:13:91:32:30:60:e5:9f:30:3e:7c:74:6c: a6:5f:b1:c8:e1:eb:79:43:5a:7a:84:40:88:09:12: 1a:1a:ed:82:8f:c4:3f:48:5d:b9:96:b0:a2:96:fd: 31:1f:22:18:4c:d7:ab:1b:3f:6c:1b:f0:c6:5c:77: c9:76:cc:55:40:58:aa:0a:b2:45:04:89:12:d5:41: 0d:2a:d4:d4:31:07:f4:d7:64:59:25:58:87:1c:27: 32:42:68:c1:f1:37:75:36:43:f0:18:07:20:cc:7e: 2a:b4:5b:14:56:ed:87:57:54:68:81:de:ed:e7:0d: d9:c3:ad:c2:06:f2:65:06:9e:c7:45:2e:2d:59:04: 42:c0:ab:e8:e8:1a:da:24:67:00:a3:b4:91:e5:99: 3d:28:e1:36:a4:ee:22:56:25:69:a4:e4:a7:68:93: 0c:d6:06:ec:f5:07:73:20:f0:21:8e:eb:bb:6a:8f: 90:f1:55:a5:48:27:3a:f5:ff:b1:63:8f:4a:e1:5d: fd:82:ba:8f:57:e6:d2:1d:81:c7:80:a7:ea:4a:c2: 91:9f:a5:0e:71:5d:ab:ac:bd:1f:d4:96:ac:77:8e: 3e:ec:07:8d:b0:01:d2:22:54:4b:94:6a:cd:93:18: 49:3d:dc:54:56:2c:8e:1b:ea:81:d0:97:ab:57:83: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:2C:E7:D2:84:FB:FC:5B:47:1F:18:A2:3F:D2:7B:A5:DD:02:26 X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.162.0/24 Signature Algorithm: sha256WithRSAEncryption ab:1e:c7:a4:d8:0b:76:45:e7:f0:be:64:d8:32:be:61:47:23: 21:6e:4b:10:50:ea:03:64:c2:2e:d3:e8:be:f9:50:e1:46:da: 1d:a6:08:97:7b:15:3d:e0:44:76:83:0f:05:45:6f:29:b8:73: f0:79:cc:ef:f5:29:56:b1:7e:ac:63:b8:02:be:ed:00:a7:c1: 49:49:42:de:84:43:bf:d9:67:32:25:e2:8f:c0:a8:5a:8d:44: 91:46:fe:6c:2e:3a:3f:42:4d:6c:f4:b4:19:30:42:d0:e1:f4: f7:5b:f5:98:ef:c0:4b:f9:50:26:86:84:0e:24:54:b6:3c:f7: 3e:48:11:db:3c:aa:d8:67:fb:f5:9a:63:e9:4b:45:18:ef:7f: 58:48:65:2d:dc:73:89:85:f3:d6:9c:ab:a9:7a:cb:04:b1:c3: 09:f4:ef:22:7a:7a:69:04:8d:ae:1e:aa:71:97:ff:ab:80:e7: 00:61:18:57:a8:ea:15:a0:31:13:8d:88:b4:c4:0f:5c:06:43: c3:be:70:5d:74:38:6a:33:54:52:b1:05:fe:23:f4:5a:8d:4a: d8:3b:e9:e5:26:db:15:20:4c:6e:99:e6:fb:5b:f0:71:9d:26: b8:77:fe:fe:5d:d4:d7:fd:85:50:75:ff:97:12:50:03:bb:75: 97:ef:1f:f2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUAMxB91Tvhq9/1YdGdy+l/Q+OitwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTAzMjMwNTU1MDJaFw0yNjAzMjIwNjAwMDJaMDMxMTAvBgNV BAMTKDA1MUMyQ0U3RDI4NEZCRkM1QjQ3MUYxOEEyM0ZEMjdCQTVERDAyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ehORMjBg5Z8wPnx0bKZfscjh 63lDWnqEQIgJEhoa7YKPxD9IXbmWsKKW/TEfIhhM16sbP2wb8MZcd8l2zFVAWKoK skUEiRLVQQ0q1NQxB/TXZFklWIccJzJCaMHxN3U2Q/AYByDMfiq0WxRW7YdXVGiB 3u3nDdnDrcIG8mUGnsdFLi1ZBELAq+joGtokZwCjtJHlmT0o4Tak7iJWJWmk5Kdo kwzWBuz1B3Mg8CGO67tqj5DxVaVIJzr1/7Fjj0rhXf2Cuo9X5tIdgceAp+pKwpGf pQ5xXausvR/Ulqx3jj7sB42wAdIiVEuUas2TGEk93FRWLI4b6oHQl6tXgwdXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUBRws59KE+/xbRx8Yoj/Se6XdAiYwHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM2MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8ojANBgkqhkiG 9w0BAQsFAAOCAQEAqx7HpNgLdkXn8L5k2DK+YUcjIW5LEFDqA2TCLtPovvlQ4Uba HaYIl3sVPeBEdoMPBUVvKbhz8HnM7/UpVrF+rGO4Ar7tAKfBSUlC3oRDv9lnMiXi j8CoWo1EkUb+bC46P0JNbPS0GTBC0OH091v1mO/AS/lQJoaEDiRUtjz3PkgR2zyq 2Gf79Zpj6UtFGO9/WEhlLdxziYXz1pyrqXrLBLHDCfTvInp6aQSNrh6qcZf/q4Dn AGEYV6jqFaAxE42ItMQPXAZDw75wXXQ4ajNUUrEF/iP0Wo1K2Dvp5SbbFSBMbpnm +1vwcZ0muHf+/l3U1/2FUHX/lxJQA7t1l+8f8g== -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:26 2025 by rpki-client