$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa File: 3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: dR7+852VUYMn4fPUNZ2fWlk8p0lZW3oI9L4SbwpsDws= Subject key identifier: 84:AE:FD:87:FF:02:7F:A7:31:AC:B5:86:2E:73:B6:5B:91:59:A9:9F Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D Certificate serial: 77AD571118FB6C9D5AFCC8682C8E3120CCE4789E Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa Signing time: Sun 23 Mar 2025 06:00:02 +0000 ROA not before: Sun 23 Mar 2025 05:55:02 +0000 ROA not after: Sun 22 Mar 2026 06:00:02 +0000 asID: 9341 IP address blocks: 119.252.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 06:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ad:57:11:18:fb:6c:9d:5a:fc:c8:68:2c:8e:31:20:cc:e4:78:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61566F205F7037962069571320603B274357CC6D Validity Not Before: Mar 23 05:55:02 2025 GMT Not After : Mar 22 06:00:02 2026 GMT Subject: CN=84AEFD87FF027FA731ACB5862E73B65B9159A99F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:0e:08:4d:c1:e3:e3:29:c7:dd:5c:cf:a7: 14:5a:cf:69:e3:83:4c:76:9e:47:4e:b8:15:f6:d7: d6:a0:3c:e1:d0:9d:75:bf:b2:7b:c3:50:21:57:1c: 26:d5:23:4e:93:7f:00:be:57:fb:0e:8e:59:70:70: fb:57:56:14:a4:4a:5d:31:83:2a:e5:e6:ec:68:76: a1:85:10:69:f0:e5:00:b1:e8:c9:35:8c:06:9a:23: fb:68:ec:40:7f:46:ca:b9:fd:a0:b4:94:9d:41:f5: 57:b6:2c:37:e0:c8:79:82:ec:1a:76:2c:29:70:64: 40:7a:a4:c1:95:43:74:21:86:05:2a:cd:e1:b6:dc: 9c:2e:a6:f9:fb:55:75:d2:0b:ba:be:76:86:57:0b: b5:1c:8e:be:9e:fa:d0:8c:80:25:25:95:bc:72:68: 5d:bc:db:d7:92:f1:e9:5f:12:35:ce:d3:fc:c2:fb: ca:7c:22:61:cc:90:6e:6e:7e:42:b7:de:77:6d:55: 02:48:f1:ed:d6:86:0b:cf:0a:2b:c7:de:e1:cd:da: 7d:b7:ae:2f:0c:ca:32:c7:29:a7:11:0a:36:a2:91: 66:d4:14:e2:bc:65:88:00:04:27:25:ba:56:e2:af: db:d8:1f:b8:a3:fa:38:a1:da:20:49:87:aa:bc:31: 32:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:FD:87:FF:02:7F:A7:31:AC:B5:86:2E:73:B6:5B:91:59:A9:9F X509v3 Authority Key Identifier: keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137342e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.252.174.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:5e:b7:8a:40:f7:40:5b:61:86:39:63:67:9c:df:1e:d9:a3: 6a:e4:ec:f2:e5:dc:77:f0:45:98:ad:83:52:e2:45:d5:53:1b: 66:75:3c:36:b3:5f:4d:32:a8:d3:7d:7b:af:29:1d:c4:27:be: 0b:08:a6:a6:d9:9f:1f:0f:8a:ff:db:69:9f:cc:cd:85:6d:7b: 75:ae:8f:76:d4:94:35:fc:8d:28:cd:4f:3a:39:db:13:5d:49: 9e:ed:25:4d:7f:47:2a:ec:80:19:db:ed:b9:3c:3b:0c:a4:61: 41:da:8a:45:27:a0:1c:76:84:05:04:b7:f4:8b:0d:57:16:20: 33:c8:12:e2:15:ca:13:0e:4e:3f:21:9b:4a:58:79:73:32:20: c8:b5:ba:3a:82:6d:0b:a6:56:e7:0e:2c:ae:39:c7:3c:f7:23: 85:09:94:db:b0:36:13:c4:60:f3:fd:21:d8:3e:77:12:ab:1b: 11:cf:8d:67:66:f3:ec:45:fc:9b:50:e6:e3:76:9b:a1:99:1a: ef:ba:0d:58:32:ad:dd:da:1f:48:fa:f1:93:15:23:06:62:46: 3f:9c:63:76:91:03:34:2f:d6:c7:9d:eb:22:e9:1c:ee:58:8b: a6:e7:75:96:f2:54:d0:c3:2d:15:3f:c3:f0:12:f9:42:df:7e: 93:4c:f3:b5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUd61XERj7bJ1a/MhoLI4xIMzkeJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0 MzU3Q0M2RDAeFw0yNTAzMjMwNTU1MDJaFw0yNjAzMjIwNjAwMDJaMDMxMTAvBgNV BAMTKDg0QUVGRDg3RkYwMjdGQTczMUFDQjU4NjJFNzNCNjVCOTE1OUE5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3g4ITcHj4ynH3VzPpxRaz2nj g0x2nkdOuBX219agPOHQnXW/snvDUCFXHCbVI06TfwC+V/sOjllwcPtXVhSkSl0x gyrl5uxodqGFEGnw5QCx6Mk1jAaaI/to7EB/Rsq5/aC0lJ1B9Ve2LDfgyHmC7Bp2 LClwZEB6pMGVQ3QhhgUqzeG23Jwupvn7VXXSC7q+doZXC7Ucjr6e+tCMgCUllbxy aF2829eS8elfEjXO0/zC+8p8ImHMkG5ufkK33ndtVQJI8e3WhgvPCivH3uHN2n23 ri8MyjLHKacRCjaikWbUFOK8ZYgABCclulbir9vYH7ij+jih2iBJh6q8MTLnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUhK79h/8Cf6cxrLWGLnO2W5FZqZ8wHwYDVR0j BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3 Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04 YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzEzOTJlMzIzNTMyMmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHf8rjANBgkqhkiG 9w0BAQsFAAOCAQEADV63ikD3QFthhjljZ5zfHtmjauTs8uXcd/BFmK2DUuJF1VMb ZnU8NrNfTTKo0317rykdxCe+CwimptmfHw+K/9tpn8zNhW17da6PdtSUNfyNKM1P OjnbE11Jnu0lTX9HKuyAGdvtuTw7DKRhQdqKRSegHHaEBQS39IsNVxYgM8gS4hXK Ew5OPyGbSlh5czIgyLW6OoJtC6ZW5w4srjnHPPcjhQmU27A2E8Rg8/0h2D53Eqsb Ec+NZ2bz7EX8m1Dm43aboZka77oNWDKt3dofSPrxkxUjBmJGP5xjdpEDNC/Wx53r Iukc7liLpud1lvJU0MMtFT/D8BL5Qt9+k0zztQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:16 2025 by rpki-client