$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: 1jcj5y534Ovu2YHmHHhnL080+SRSLvj+r70RPCDA3TM= Subject key identifier: 60:23:FA:EF:92:22:B0:28:08:86:49:68:E7:67:B9:73:36:FD:58:CF Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 3781543AE542BC3D8FBE70ACC39AD89941757D97 Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa Signing time: Sun 23 Mar 2025 04:00:01 +0000 ROA not before: Sun 23 Mar 2025 03:55:01 +0000 ROA not after: Sun 22 Mar 2026 04:00:01 +0000 asID: 9341 IP address blocks: 119.252.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 06:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:81:54:3a:e5:42:bc:3d:8f:be:70:ac:c3:9a:d8:99:41:75:7d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 23 03:55:01 2025 GMT Not After : Mar 22 04:00:01 2026 GMT Subject: CN=6023FAEF9222B02808864968E767B97336FD58CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:60:9f:a2:c9:9c:b9:70:34:7f:02:2d:26: b7:86:c9:07:8e:e2:0b:32:29:fc:97:83:53:01:29: c5:40:87:f6:5e:2c:90:24:bd:36:4d:2f:8a:ff:43: 76:b5:7b:58:5f:79:9a:93:c1:84:5e:bf:cd:5b:a0: 05:c1:22:c0:4c:f4:b5:bd:78:d7:05:e4:01:68:a2: 46:71:77:54:9c:53:bb:80:dc:ce:30:37:17:c3:59: 92:82:71:4d:47:b1:f9:80:33:c8:01:08:12:eb:3c: e2:1f:65:15:f2:e2:51:a3:80:53:26:02:8d:f6:a9: 60:76:83:07:da:22:5c:fb:56:2b:11:0c:81:62:0a: b3:75:f8:8e:f8:a7:94:ba:25:7d:97:59:f7:d5:41: 93:34:2d:04:23:b2:9c:bd:51:72:a5:51:0a:ac:d7: 18:87:d0:a5:a0:c8:12:64:7b:cc:84:be:47:12:8f: 12:64:61:f5:c9:5d:9a:d4:ff:49:b0:e7:f3:62:e4: 4e:8a:62:b5:52:6c:aa:fa:67:37:d1:86:52:e7:59: 63:2b:46:28:87:27:46:fa:f4:07:a7:d1:20:08:3c: ce:24:63:a8:eb:d2:55:6c:48:22:58:f6:d7:a2:83: 86:87:ee:7c:17:3c:94:ef:04:43:b8:25:94:4b:05: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:23:FA:EF:92:22:B0:28:08:86:49:68:E7:67:B9:73:36:FD:58:CF X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137302e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.170.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:9d:a7:e3:ec:15:3c:d4:9a:7f:71:85:df:e6:63:6e:8d:86: ab:64:f4:11:ef:e4:a4:99:87:dc:c0:1a:ea:cc:87:39:6d:3c: 24:dd:8f:1c:b7:53:1c:d5:f0:70:af:ef:f1:06:24:96:9e:f4: 7e:d0:b2:75:fe:6d:54:e0:a6:10:b2:e4:eb:6b:83:25:91:1e: 3b:9f:10:b4:35:39:ac:e8:62:75:61:5b:7c:81:3f:f9:fb:1c: 25:bf:85:b5:b1:ce:8b:c1:97:a7:c4:7d:cf:62:1f:62:36:ea: 0d:21:b0:30:a4:f3:78:f7:63:a4:d6:37:ff:f8:95:e5:50:39: ca:f7:e8:7e:3d:8d:db:3d:0f:c1:6e:70:e0:54:26:07:4e:3e: 4f:a1:5b:df:33:5e:9a:ba:e4:aa:74:bd:f8:e2:54:05:60:05: 18:02:18:90:56:26:90:df:47:f8:cd:b9:59:8e:32:1c:61:79: d7:a7:22:d9:64:29:5e:c7:0a:14:7b:37:21:57:d9:f5:d6:2c: 18:5f:bf:c5:b3:cb:28:2b:31:d5:d0:1f:80:c3:9c:6c:bd:32: 26:71:5e:3d:81:60:79:fc:0b:17:a0:51:3f:5e:4a:d0:e0:43: 14:f1:47:e8:89:20:ec:f8:9a:60:fb:a9:5f:d9:82:3f:65:85: 5c:fb:80:e5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUN4FUOuVCvD2PvnCsw5rYmUF1fZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTAzMjMwMzU1MDFaFw0yNjAzMjIwNDAwMDFaMDMxMTAvBgNV BAMTKDYwMjNGQUVGOTIyMkIwMjgwODg2NDk2OEU3NjdCOTczMzZGRDU4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PmCfosmcuXA0fwItJreGyQeO 4gsyKfyXg1MBKcVAh/ZeLJAkvTZNL4r/Q3a1e1hfeZqTwYRev81boAXBIsBM9LW9 eNcF5AFookZxd1ScU7uA3M4wNxfDWZKCcU1HsfmAM8gBCBLrPOIfZRXy4lGjgFMm Ao32qWB2gwfaIlz7VisRDIFiCrN1+I74p5S6JX2XWffVQZM0LQQjspy9UXKlUQqs 1xiH0KWgyBJke8yEvkcSjxJkYfXJXZrU/0mw5/Ni5E6KYrVSbKr6ZzfRhlLnWWMr RiiHJ0b69Aen0SAIPM4kY6jr0lVsSCJY9teig4aH7nwXPJTvBEO4JZRLBVujAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYCP675IisCgIhklo52e5czb9WM8wHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8qjANBgkqhkiG 9w0BAQsFAAOCAQEAXZ2n4+wVPNSaf3GF3+Zjbo2Gq2T0Ee/kpJmH3MAa6syHOW08 JN2PHLdTHNXwcK/v8QYklp70ftCydf5tVOCmELLk62uDJZEeO58QtDU5rOhidWFb fIE/+fscJb+FtbHOi8GXp8R9z2IfYjbqDSGwMKTzePdjpNY3//iV5VA5yvfofj2N 2z0PwW5w4FQmB04+T6Fb3zNemrrkqnS9+OJUBWAFGAIYkFYmkN9H+M25WY4yHGF5 16ci2WQpXscKFHs3IVfZ9dYsGF+/xbPLKCsx1dAfgMOcbL0yJnFePYFgefwLF6BR P15K0OBDFPFH6Ikg7PiaYPupX9mCP2WFXPuA5Q== -----END CERTIFICATE-----Generated at Sat Apr 26 12:57:20 2025 by rpki-client