$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32342d3234203d3e2034373837.roa File: 3131342e3139392e3131342e302f32342d3234203d3e2034373837.roa (raw, json) Hash identifier: nEx2BAPeGBK9Og0/E+C2MkYbF1XzgsuuJpzuPNvovcY= Subject key identifier: 55:73:E3:48:84:FF:50:D5:82:5C:09:14:4C:81:40:C4:6C:B6:F0:CF Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Certificate serial: 3DCA0EBA9433483D6CC4CA5ECA6CD690620AC918 Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32342d3234203d3e2034373837.roa Signing time: Tue 05 Aug 2025 02:57:03 +0000 ROA not before: Tue 05 Aug 2025 02:52:03 +0000 ROA not after: Tue 04 Aug 2026 02:57:03 +0000 asID: 4787 IP address blocks: 114.199.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ca:0e:ba:94:33:48:3d:6c:c4:ca:5e:ca:6c:d6:90:62:0a:c9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Validity Not Before: Aug 5 02:52:03 2025 GMT Not After : Aug 4 02:57:03 2026 GMT Subject: CN=5573E34884FF50D5825C09144C8140C46CB6F0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:9b:57:34:6d:55:c4:e7:30:27:90:b0:9b: 0c:b6:8b:a8:80:66:23:37:83:4f:96:c1:eb:f1:29: 31:a5:f0:f8:58:ab:ec:fe:0c:ce:e7:42:6e:80:aa: e0:6e:a4:05:b4:89:09:7b:76:91:11:80:dc:06:e2: 01:88:8d:a7:06:0e:bb:ca:20:07:c9:7f:d6:42:27: 21:d6:60:e3:b4:14:74:89:71:d4:a6:b9:5f:a7:03: 49:2f:b8:27:5f:0f:ed:50:2e:84:e6:c4:52:a7:f0: 07:e6:ef:4e:22:6c:01:00:26:07:2e:f2:71:73:a3: 1d:8a:2e:7a:3a:44:40:98:37:bb:a5:39:69:64:9c: aa:d9:ef:ff:f9:8e:38:99:c9:41:79:82:ef:5f:b5: 52:75:72:56:2c:70:e9:36:a3:59:9a:b9:4f:45:1a: 03:10:9b:6b:ed:90:65:5c:ca:dd:b3:9c:30:cf:42: 48:92:01:a3:65:d6:c4:d7:01:41:ce:65:a4:ef:27: f7:48:bd:70:ed:b5:68:e1:2c:f9:2f:d5:cb:37:77: 73:f9:94:e4:8b:2a:c2:c2:54:be:38:3e:08:71:8f: 83:24:c0:ab:a2:c5:2c:79:e3:e3:33:22:3b:67:cb: c7:c2:a3:a5:7b:61:c0:0c:ca:35:05:56:6c:eb:41: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:73:E3:48:84:FF:50:D5:82:5C:09:14:4C:81:40:C4:6C:B6:F0:CF X509v3 Authority Key Identifier: keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131342e302f32342d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.114.0/24 Signature Algorithm: sha256WithRSAEncryption b4:a8:0e:a4:32:72:63:9c:52:1b:2e:ef:be:d2:ba:b7:8c:3f: c9:30:99:5e:b0:a1:20:4d:69:3b:81:d6:3c:bf:16:80:56:b0: 48:24:04:91:d9:e9:d7:60:71:8b:b6:0c:c4:f1:19:44:94:c4: 50:d0:f5:dd:ae:e0:a5:fc:73:80:1e:40:68:51:aa:29:8b:dc: 3c:aa:57:1c:14:1b:b6:14:13:c9:da:c4:f9:c0:e1:44:3b:89: af:57:59:3f:17:68:1c:ed:8f:5d:99:1d:2d:a2:3f:ad:42:64: 29:ea:26:9f:2d:68:6b:c5:a6:32:8a:ed:eb:fd:2e:cb:98:03: 7f:c3:c1:ca:00:97:6e:de:d6:82:6b:94:26:ca:d0:e1:97:9a: a2:53:02:3a:3f:9b:b6:04:16:d9:12:10:26:e6:64:cf:e7:c4: 0b:84:bd:91:fd:cb:f0:e9:af:25:7f:4c:ac:c3:ab:96:0c:83: 04:a9:37:14:36:2e:37:bf:e3:6a:e7:35:4e:4c:5b:e0:0c:35: 8e:f4:59:a5:30:ca:be:c0:75:63:cf:6b:a1:40:75:d1:b7:c0: 11:76:ce:ea:d5:08:36:c6:05:d3:d0:04:32:c6:79:b3:a1:26: 59:46:26:06:a9:1e:a1:b1:50:03:db:f5:c7:1f:16:a0:64:26: 3f:47:7a:33 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPcoOupQzSD1sxMpeymzWkGIKyRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0 NkE4MzcwMjAeFw0yNTA4MDUwMjUyMDNaFw0yNjA4MDQwMjU3MDNaMDMxMTAvBgNV BAMTKDU1NzNFMzQ4ODRGRjUwRDU4MjVDMDkxNDRDODE0MEM0NkNCNkYwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavJtXNG1VxOcwJ5Cwmwy2i6iA ZiM3g0+WwevxKTGl8PhYq+z+DM7nQm6AquBupAW0iQl7dpERgNwG4gGIjacGDrvK IAfJf9ZCJyHWYOO0FHSJcdSmuV+nA0kvuCdfD+1QLoTmxFKn8Afm704ibAEAJgcu 8nFzox2KLno6RECYN7ulOWlknKrZ7//5jjiZyUF5gu9ftVJ1clYscOk2o1mauU9F GgMQm2vtkGVcyt2znDDPQkiSAaNl1sTXAUHOZaTvJ/dIvXDttWjhLPkv1cs3d3P5 lOSLKsLCVL44Pghxj4MkwKuixSx54+MzIjtny8fCo6V7YcAMyjUFVmzrQTSlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVXPjSIT/UNWCXAkUTIFAxGy28M8wHwYDVR0j BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1 NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4 MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05 ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMxMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHLHcjANBgkqhkiG 9w0BAQsFAAOCAQEAtKgOpDJyY5xSGy7vvtK6t4w/yTCZXrChIE1pO4HWPL8WgFaw SCQEkdnp12Bxi7YMxPEZRJTEUND13a7gpfxzgB5AaFGqKYvcPKpXHBQbthQTydrE +cDhRDuJr1dZPxdoHO2PXZkdLaI/rUJkKeomny1oa8WmMort6/0uy5gDf8PBygCX bt7WgmuUJsrQ4ZeaolMCOj+btgQW2RIQJuZkz+fEC4S9kf3L8OmvJX9MrMOrlgyD BKk3FDYuN7/jauc1Tkxb4Aw1jvRZpTDKvsB1Y89roUB10bfAEXbO6tUINsYF09AE MsZ5s6EmWUYmBqkeobFQA9v1xx8WoGQmP0d6Mw== -----END CERTIFICATE-----Generated at Thu Aug 7 20:25:53 2025 by rpki-client