$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3131382e39312e3134302e302f32322d3234203d3e203633353032.roa File: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (raw, json) Hash identifier: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q= Subject key identifier: 27:D2:A1:7B:DD:6B:BE:00:FE:D6:5A:E3:B7:0E:F3:87:D0:A1:F8:2E Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 0603DBD225B4DD2B31AE0F926637167F213E921C Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3131382e39312e3134302e302f32322d3234203d3e203633353032.roa Signing time: Sat 12 Jul 2025 09:00:00 +0000 ROA not before: Sat 12 Jul 2025 08:55:00 +0000 ROA not after: Sat 11 Jul 2026 09:00:00 +0000 asID: 63502 IP address blocks: 118.91.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:03:db:d2:25:b4:dd:2b:31:ae:0f:92:66:37:16:7f:21:3e:92:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Jul 12 08:55:00 2025 GMT Not After : Jul 11 09:00:00 2026 GMT Subject: CN=27D2A17BDD6BBE00FED65AE3B70EF387D0A1F82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:15:57:55:36:7f:a3:24:db:a5:70:79:b8: 79:2c:15:7c:36:57:c1:30:cd:16:b5:5b:dd:d2:86: 7e:ef:ed:c7:ee:4e:79:86:f3:2a:38:f1:78:4c:b1: 82:4f:e2:0b:d3:0a:ca:2a:84:48:56:b0:13:64:5e: 8f:a1:ea:37:b3:91:af:40:51:0b:b5:61:7c:cf:34: 6a:b6:11:f0:93:17:8e:15:80:34:44:81:40:2c:81: 63:fe:d5:69:ca:c0:0a:19:ab:08:eb:87:44:d2:88: 32:3b:f5:22:69:0e:10:db:a3:db:ee:c1:83:55:6d: 28:ca:e9:b1:ba:c7:4e:c6:72:d6:92:a8:88:a9:e0: de:73:20:17:2d:f6:6d:5e:8d:a3:5f:cb:c5:61:4a: 1b:e4:55:ba:ee:2b:f6:d2:c0:4b:98:00:a6:14:b8: 19:4d:28:e3:a8:fc:02:ba:f6:a3:ce:4f:5c:4d:65: ff:9b:9d:8e:a4:ec:7f:cf:76:13:21:86:f0:b0:0a: 0e:3d:b8:b8:02:40:e3:16:50:7e:85:57:d6:18:34: 6a:38:17:59:97:58:ac:44:88:46:26:f4:98:d2:46: 7e:01:22:43:c0:28:a6:f6:8e:59:97:d7:83:68:95: 61:c7:81:c8:e4:f1:8d:b1:97:9d:97:1f:f3:0a:05: e7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:A1:7B:DD:6B:BE:00:FE:D6:5A:E3:B7:0E:F3:87:D0:A1:F8:2E X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/3131382e39312e3134302e302f32322d3234203d3e203633353032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.91.140.0/22 Signature Algorithm: sha256WithRSAEncryption 79:c4:10:da:61:a3:2b:9d:c2:28:ae:71:6c:10:6b:84:01:f3: c2:53:9d:d8:ff:50:94:20:c5:24:1a:c5:5d:1f:74:da:72:f1: 1c:b9:a6:79:a5:01:75:86:1a:f8:65:69:13:37:40:b0:96:b2: 13:86:59:12:73:c4:f4:b9:6b:12:d5:54:ad:93:54:cc:64:df: 4f:7a:9c:48:54:32:29:38:7a:8a:89:6f:48:4c:ad:bb:08:60: e4:3d:d4:21:e4:92:4c:0f:d5:69:b3:be:e7:70:1e:f0:88:ff: 27:de:dd:c3:81:7a:23:6a:24:9e:14:28:0b:8c:78:09:ab:ef: e0:2e:73:a3:7f:ae:b7:05:ca:fd:3d:08:f6:a2:1f:0b:d3:92: 9d:81:46:3a:15:10:dc:29:b3:f6:06:28:d9:be:60:dd:b1:a9: 16:6e:01:2e:cb:1d:f5:3c:53:b2:06:5f:53:80:67:55:8c:7b: 74:13:c6:99:31:10:d2:a2:a0:01:05:8b:41:21:7c:d0:56:41: b4:78:a4:bb:7a:53:2d:f9:c2:45:4c:a3:9b:0d:2b:47:e0:c9: fb:a8:5b:49:e9:70:73:6b:b1:82:bb:31:0a:2a:52:72:49:6b: 71:e8:1a:40:7d:41:c4:d7:dc:21:e7:2e:2e:d4:9b:9b:04:c8: 5f:13:e6:a6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBgPb0iW03Ssxrg+SZjcWfyE+khwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNTA3MTIwODU1MDBaFw0yNjA3MTEwOTAwMDBaMDMxMTAvBgNV BAMTKDI3RDJBMTdCREQ2QkJFMDBGRUQ2NUFFM0I3MEVGMzg3RDBBMUY4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHRVXVTZ/oyTbpXB5uHksFXw2 V8EwzRa1W93Shn7v7cfuTnmG8yo48XhMsYJP4gvTCsoqhEhWsBNkXo+h6jezka9A UQu1YXzPNGq2EfCTF44VgDREgUAsgWP+1WnKwAoZqwjrh0TSiDI79SJpDhDbo9vu wYNVbSjK6bG6x07GctaSqIip4N5zIBct9m1ejaNfy8VhShvkVbruK/bSwEuYAKYU uBlNKOOo/AK69qPOT1xNZf+bnY6k7H/PdhMhhvCwCg49uLgCQOMWUH6FV9YYNGo4 F1mXWKxEiEYm9JjSRn4BIkPAKKb2jlmX14NolWHHgcjk8Y2xl52XH/MKBeeBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJ9Khe91rvgD+1lrjtw7zh9Ch+C4wHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3OTJhNGNkLWRiYWMtNDNhYy04 MDYwLTJlOGQ0MmVhZTY1NS8wLzMxMzEzODJlMzkzMTJlMzEzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzYzMzM1MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnZbjDANBgkqhkiG 9w0BAQsFAAOCAQEAecQQ2mGjK53CKK5xbBBrhAHzwlOd2P9QlCDFJBrFXR902nLx HLmmeaUBdYYa+GVpEzdAsJayE4ZZEnPE9LlrEtVUrZNUzGTfT3qcSFQyKTh6iolv SEytuwhg5D3UIeSSTA/VabO+53Ae8Ij/J97dw4F6I2oknhQoC4x4Cavv4C5zo3+u twXK/T0I9qIfC9OSnYFGOhUQ3Cmz9gYo2b5g3bGpFm4BLssd9TxTsgZfU4BnVYx7 dBPGmTEQ0qKgAQWLQSF80FZBtHiku3pTLfnCRUyjmw0rR+DJ+6hbSelwc2uxgrsx CipScklrcegaQH1BxNfcIecuLtSbmwTIXxPmpg== -----END CERTIFICATE-----Generated at Sun Aug 10 03:44:01 2025 by rpki-client