$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa File: 3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa (raw, json) Hash identifier: 08jBcNx1kR5QT3XJw/Wus46y7ZQ7OENig0oq8qJMp8E= Subject key identifier: C2:DB:A0:B7:A3:0B:D3:FA:90:FC:58:A4:B2:61:4D:0F:FE:63:41:B2 Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 022108229116B35D0653B08BB831D2E84023E98E Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa Signing time: Tue 15 Jul 2025 03:55:31 +0000 ROA not before: Tue 15 Jul 2025 03:50:31 +0000 ROA not after: Tue 14 Jul 2026 03:55:31 +0000 asID: 139976 IP address blocks: 103.147.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:21:08:22:91:16:b3:5d:06:53:b0:8b:b8:31:d2:e8:40:23:e9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: Jul 15 03:50:31 2025 GMT Not After : Jul 14 03:55:31 2026 GMT Subject: CN=C2DBA0B7A30BD3FA90FC58A4B2614D0FFE6341B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:ab:b2:c1:e6:42:5e:da:98:35:a0:49:18: 4d:52:eb:6d:49:8f:0e:53:91:fd:77:71:98:c1:e2: 98:52:e6:d2:d7:76:a0:bf:19:de:f8:47:4b:d2:6b: 62:7f:30:fe:cc:46:8e:c0:06:b9:80:5c:7e:0c:a8: 28:36:ed:14:9b:27:81:af:50:54:98:2a:05:f0:88: 33:99:a3:d1:35:d7:fd:de:ba:85:c2:12:b7:92:49: 2b:7f:83:5d:15:12:cc:43:18:18:2d:62:5e:40:bd: 69:89:39:e0:b7:ba:4a:29:e7:aa:ce:9f:5c:54:92: dc:b3:5a:d4:f8:e8:08:51:fb:20:42:0c:2b:27:7d: a9:3e:00:93:6c:21:5a:75:8c:41:78:7a:69:37:7a: d0:66:65:19:42:3a:37:4e:d9:80:78:e7:0c:bb:ef: 4b:cf:7c:05:79:da:60:70:e2:58:b2:7d:d8:62:aa: 4c:36:6a:18:4f:73:f8:8d:31:54:ce:5d:1e:34:6b: 21:00:7d:af:6d:34:86:6b:08:b5:f1:f2:66:2f:b4: 78:b4:34:47:27:81:51:3b:8f:8f:9c:19:d9:7b:e1: 62:fa:e6:93:0f:f5:2c:cd:2a:ca:86:ef:c5:5c:3e: eb:6f:d9:9a:e1:9e:12:a1:91:31:7b:d7:1d:96:d9: f6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DB:A0:B7:A3:0B:D3:FA:90:FC:58:A4:B2:61:4D:0F:FE:63:41:B2 X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.254.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:7b:31:69:98:69:f8:82:ed:e7:b2:67:3c:d7:a4:ea:bb:b5: 9d:a2:02:cb:e9:50:fe:f4:30:3e:04:d4:0c:cc:2d:8d:49:77: 0a:d8:99:e0:e4:2c:74:d1:dc:db:39:89:86:ea:16:03:80:6b: 84:b7:9e:d2:fb:5f:c6:d5:e7:05:dd:bd:a8:b4:41:76:e6:df: ce:50:90:ff:e8:43:88:66:2c:59:ed:5a:27:58:94:42:9e:93: 16:b9:5e:3d:20:2f:35:67:be:32:86:63:2c:4d:d5:0f:0e:a3: b1:4f:94:40:56:d2:e1:a4:e0:54:aa:df:39:20:d2:b5:d3:a2: ce:8c:ff:05:9f:0d:c0:1c:12:74:60:10:d6:47:9e:af:f3:08: 63:ef:d4:0d:99:bc:21:0a:e8:e2:f9:6f:cc:a6:8b:52:07:3d: 47:f2:1c:7a:e8:5a:f0:b1:ed:a2:a7:22:e5:60:8b:d3:aa:42: 72:ca:40:07:e8:65:bb:d9:19:16:26:e8:37:80:20:ac:f2:8e: ab:64:d9:dc:4b:b3:af:41:1f:5d:d3:5b:15:5d:29:f4:fc:8f: 05:a6:7e:2e:0e:5b:e9:ab:35:17:99:67:21:15:41:19:3d:79: d5:c4:78:ca:34:22:bf:d4:64:52:c0:16:8a:7f:0e:88:01:3d: 5d:09:ec:c9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAiEIIpEWs10GU7CLuDHS6EAj6Y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNTA3MTUwMzUwMzFaFw0yNjA3MTQwMzU1MzFaMDMxMTAvBgNV BAMTKEMyREJBMEI3QTMwQkQzRkE5MEZDNThBNEIyNjE0RDBGRkU2MzQxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+auyweZCXtqYNaBJGE1S621J jw5Tkf13cZjB4phS5tLXdqC/Gd74R0vSa2J/MP7MRo7ABrmAXH4MqCg27RSbJ4Gv UFSYKgXwiDOZo9E11/3euoXCEreSSSt/g10VEsxDGBgtYl5AvWmJOeC3ukop56rO n1xUktyzWtT46AhR+yBCDCsnfak+AJNsIVp1jEF4emk3etBmZRlCOjdO2YB45wy7 70vPfAV52mBw4liyfdhiqkw2ahhPc/iNMVTOXR40ayEAfa9tNIZrCLXx8mYvtHi0 NEcngVE7j4+cGdl74WL65pMP9SzNKsqG78VcPutv2ZrhnhKhkTF71x2W2fa1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUwtugt6ML0/qQ/FiksmFND/5jQbIwHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwZTQ3NTBlLTQzOTMtNDNlYy05 YWI1LWQyNDdiYmMwN2Q4Ni8wLzMxMzAzMzJlMzEzNDM3MmUzMjM1MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM3MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnk/4wDQYJ KoZIhvcNAQELBQADggEBAGt7MWmYafiC7eeyZzzXpOq7tZ2iAsvpUP70MD4E1AzM LY1JdwrYmeDkLHTR3Ns5iYbqFgOAa4S3ntL7X8bV5wXdvai0QXbm385QkP/oQ4hm LFntWidYlEKekxa5Xj0gLzVnvjKGYyxN1Q8Oo7FPlEBW0uGk4FSq3zkg0rXTos6M /wWfDcAcEnRgENZHnq/zCGPv1A2ZvCEK6OL5b8ymi1IHPUfyHHroWvCx7aKnIuVg i9OqQnLKQAfoZbvZGRYm6DeAIKzyjqtk2dxLs69BH13TWxVdKfT8jwWmfi4OW+mr NReZZyEVQRk9edXEeMo0Ir/UZFLAFop/DogBPV0J7Mk= -----END CERTIFICATE-----Generated at Thu Jul 24 17:13:09 2025 by rpki-client