$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32342d3234203d3e203338373533.roa File: 3131392e3131302e38362e302f32342d3234203d3e203338373533.roa (raw, json) Hash identifier: yqUv0AOhCRZbCK6iB07qF8S+vPKTTJ32MVzsXvnxnlI= Subject key identifier: 0B:64:DB:D2:8D:31:C3:46:6D:DF:85:0A:76:0C:26:13:84:D3:61:38 Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 2A9E6A79EFD1DED3ED9A33A6AA9CA70802520703 Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32342d3234203d3e203338373533.roa Signing time: Tue 05 Aug 2025 03:00:01 +0000 ROA not before: Tue 05 Aug 2025 02:55:01 +0000 ROA not after: Tue 04 Aug 2026 03:00:01 +0000 asID: 38753 IP address blocks: 119.110.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 15:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9e:6a:79:ef:d1:de:d3:ed:9a:33:a6:aa:9c:a7:08:02:52:07:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Aug 5 02:55:01 2025 GMT Not After : Aug 4 03:00:01 2026 GMT Subject: CN=0B64DBD28D31C3466DDF850A760C261384D36138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:9c:51:ba:f6:cd:61:48:29:82:6b:2b:44: 7d:32:3b:50:34:18:7b:73:a5:64:4e:9d:23:17:3d: 7d:09:64:bb:4c:a0:33:77:9e:42:57:b5:03:b3:8a: e9:56:b0:e6:7c:97:a4:0c:f8:f2:c0:83:f2:26:50: 69:a1:05:18:e2:0a:ba:0a:a0:1b:84:d5:1e:f2:a4: eb:14:ce:7f:cb:ac:5b:93:a8:c4:65:4c:a0:85:0f: 81:dc:db:8f:2b:04:99:43:c9:f6:a5:f3:07:7e:b9: 35:3f:f8:21:1b:58:a2:8f:7f:56:32:71:6b:30:f1: ef:cd:ad:4a:be:6e:0f:c4:e3:d0:72:a3:c0:2b:6a: fe:88:df:ed:54:69:ea:6d:e4:e6:cf:3e:93:89:47: 78:3f:f6:ab:9b:16:ae:43:5a:6b:07:9b:59:19:da: 9f:14:09:60:67:59:53:0f:42:1f:ca:39:c3:4c:99: 41:cb:73:38:71:d8:2f:37:c0:66:eb:f2:66:62:c2: c0:f0:f0:d2:41:5a:72:61:de:05:29:19:0c:62:7b: b9:71:88:1c:e6:8b:36:43:24:1d:6a:36:a7:ff:1a: 17:d8:59:e7:aa:1f:30:a0:18:e5:da:6b:23:23:2d: 9b:a0:21:5d:3f:4a:12:8c:71:07:51:15:93:de:29: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:64:DB:D2:8D:31:C3:46:6D:DF:85:0A:76:0C:26:13:84:D3:61:38 X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32342d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.86.0/24 Signature Algorithm: sha256WithRSAEncryption b8:66:1b:c6:8a:ca:93:95:f6:3b:33:e5:0f:72:f2:c2:ce:64: 61:65:8c:72:20:44:11:37:09:e2:d6:81:e1:39:39:a0:83:d1: 83:91:83:f0:d7:92:68:a9:6a:db:de:cf:f1:f1:0c:f3:3b:6d: 9e:0b:8f:3c:9e:95:5a:4e:14:b2:af:48:af:12:1b:06:7f:96: 85:88:b3:ac:a3:12:2c:85:1b:d8:44:51:bb:75:48:9e:1f:1b: 2b:a4:7b:53:23:9c:65:e5:d2:34:ce:b1:7f:97:7c:f9:9a:84: 02:4a:92:9b:e8:3a:52:05:72:92:01:0b:af:95:16:5c:23:0d: 7a:fa:85:f3:a1:d8:8e:12:82:95:b8:58:28:a6:df:d2:7c:2b: 3c:ff:96:13:2c:f0:9a:ff:c1:bb:34:e3:86:e8:f5:35:8e:34: a6:81:21:f9:b6:b6:f4:c9:4b:68:71:4b:c0:21:10:b9:13:74: bd:a2:24:02:f6:09:e1:77:c8:a5:fc:35:32:bc:ce:39:91:76: 0c:30:38:d3:d8:1a:f9:b0:40:cb:63:42:ee:0d:3a:43:e4:69: 43:13:fd:b5:08:27:24:e4:2d:91:d3:30:47:69:c7:8f:12:3e: ff:c7:2c:4e:82:b8:6d:86:94:46:2c:a3:35:0f:10:bd:ab:6f: ad:ed:02:80 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKp5qee/R3tPtmjOmqpynCAJSBwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTA4MDUwMjU1MDFaFw0yNjA4MDQwMzAwMDFaMDMxMTAvBgNV BAMTKDBCNjREQkQyOEQzMUMzNDY2RERGODUwQTc2MEMyNjEzODREMzYxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7JxRuvbNYUgpgmsrRH0yO1A0 GHtzpWROnSMXPX0JZLtMoDN3nkJXtQOziulWsOZ8l6QM+PLAg/ImUGmhBRjiCroK oBuE1R7ypOsUzn/LrFuTqMRlTKCFD4Hc248rBJlDyfal8wd+uTU/+CEbWKKPf1Yy cWsw8e/NrUq+bg/E49Byo8Arav6I3+1Uaept5ObPPpOJR3g/9qubFq5DWmsHm1kZ 2p8UCWBnWVMPQh/KOcNMmUHLczhx2C83wGbr8mZiwsDw8NJBWnJh3gUpGQxie7lx iBzmizZDJB1qNqf/GhfYWeeqHzCgGOXaayMjLZugIV0/ShKMcQdRFZPeKdPdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUC2Tb0o0xw0Zt34UKdgwmE4TTYTgwHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i NmMyLTQyYWI4YjQ3NjI0OS8wLzMxMzEzOTJlMzEzMTMwMmUzODM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHduVjANBgkqhkiG 9w0BAQsFAAOCAQEAuGYbxorKk5X2OzPlD3Lyws5kYWWMciBEETcJ4taB4Tk5oIPR g5GD8NeSaKlq297P8fEM8zttnguPPJ6VWk4Usq9IrxIbBn+WhYizrKMSLIUb2ERR u3VInh8bK6R7UyOcZeXSNM6xf5d8+ZqEAkqSm+g6UgVykgELr5UWXCMNevqF86HY jhKClbhYKKbf0nwrPP+WEyzwmv/BuzTjhuj1NY40poEh+ba29MlLaHFLwCEQuRN0 vaIkAvYJ4XfIpfw1MrzOOZF2DDA409ga+bBAy2NC7g06Q+RpQxP9tQgnJOQtkdMw R2nHjxI+/8csToK4bYaURiyjNQ8Qvatvre0CgA== -----END CERTIFICATE-----Generated at Sun Aug 10 03:45:10 2025 by rpki-client