$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa File: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (raw, json) Hash identifier: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4= Subject key identifier: 53:08:DA:F0:17:3A:36:24:B5:C1:2A:13:1C:F5:B1:D8:40:1A:37:51 Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 576093CEA315CFEDE5EB3D91767486BF0A5FD243 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa Signing time: Tue 10 Jun 2025 11:00:00 +0000 ROA not before: Tue 10 Jun 2025 10:55:00 +0000 ROA not after: Tue 09 Jun 2026 11:00:00 +0000 asID: 141621 IP address blocks: 103.161.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 00:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:60:93:ce:a3:15:cf:ed:e5:eb:3d:91:76:74:86:bf:0a:5f:d2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Jun 10 10:55:00 2025 GMT Not After : Jun 9 11:00:00 2026 GMT Subject: CN=5308DAF0173A3624B5C12A131CF5B1D8401A3751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:2c:a7:bb:1b:e5:b6:0e:93:ce:95:cb:63: 2f:57:19:84:ef:0b:7d:eb:f2:f3:0b:e6:2c:69:64: 5d:cc:d8:40:09:95:ea:d3:9e:f4:fa:60:42:1a:7d: 5b:8c:b0:39:35:25:da:d6:67:86:9f:db:6d:c9:bb: 43:e0:ac:9a:fb:45:4d:ee:5d:51:df:36:6c:e8:da: 71:3b:43:ef:69:c8:9d:b8:9d:ea:bd:7c:dd:35:0a: 71:2d:a7:58:7c:b2:0f:07:73:bd:38:37:a6:0c:3b: 21:17:df:3e:a2:a4:41:05:38:1f:de:2d:30:42:b8: b2:01:86:cf:39:f8:55:1e:cd:8a:c3:2c:60:82:45: cd:67:e4:06:fa:b2:ec:b3:23:05:2b:86:0e:30:0d: 6c:1c:6c:db:55:28:07:a7:a4:10:08:da:32:a5:85: 7b:d6:96:9c:9b:9c:8f:3f:fe:01:24:91:5e:79:2d: 43:b1:7d:98:fd:71:3e:b1:eb:ee:b4:25:14:f2:65: e5:dc:13:9b:06:0e:fa:f8:b2:4c:ec:ae:c7:d3:f5: ac:1e:03:4e:d7:41:ee:9b:fd:40:ec:32:f0:13:22: d7:d4:a5:f8:e8:4a:3e:9a:7f:b1:06:6e:81:18:6d: 71:8f:0c:10:91:e0:0c:78:fb:82:76:c6:f0:89:e0: 45:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:08:DA:F0:17:3A:36:24:B5:C1:2A:13:1C:F5:B1:D8:40:1A:37:51 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.164.0/23 Signature Algorithm: sha256WithRSAEncryption 96:81:bb:3a:13:bf:54:ed:66:d9:da:66:dd:bb:d6:bd:40:f7: 77:5e:a3:0e:fa:df:89:53:ac:8c:f7:e5:72:7d:7e:1f:d1:00: 2d:49:b5:26:45:44:94:b1:f9:9d:d2:92:92:3b:d5:00:f5:6c: 7b:3f:20:00:eb:86:5d:2b:1e:df:7d:1a:65:f3:de:dd:cd:ce: 3c:e9:1f:06:e6:fc:be:2e:4e:81:6a:70:5f:c9:dd:4b:34:d1: de:f6:d2:1c:e7:c5:05:61:52:84:83:82:34:dc:62:13:67:29: 00:6e:1a:4d:08:23:21:07:a4:27:f9:23:74:a8:10:36:8c:e1: ae:33:36:a7:54:39:89:7d:93:3a:2b:01:65:5b:c5:37:87:cd: ba:5e:4d:c6:d3:01:73:26:8c:79:98:be:8d:2d:6d:6d:57:fb: cb:8a:91:b3:ef:12:0c:f0:07:3d:2e:35:5d:83:ad:0f:a1:b8: a9:94:4e:95:bd:60:ac:a1:86:ab:3e:0d:7d:40:f7:33:a0:8e: b9:32:7f:a3:98:85:68:77:cb:f3:03:07:4f:f7:3b:ab:50:8e: 46:8a:05:25:8c:83:b9:77:bf:1e:b3:04:e6:85:79:2d:de:b1: ae:a3:9f:bf:fd:25:95:65:36:c6:08:1e:0a:cf:72:6e:9b:7c: 4a:dd:38:51 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUV2CTzqMVz+3l6z2RdnSGvwpf0kMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNTA2MTAxMDU1MDBaFw0yNjA2MDkxMTAwMDBaMDMxMTAvBgNV BAMTKDUzMDhEQUYwMTczQTM2MjRCNUMxMkExMzFDRjVCMUQ4NDAxQTM3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Qyynuxvltg6TzpXLYy9XGYTv C33r8vML5ixpZF3M2EAJlerTnvT6YEIafVuMsDk1JdrWZ4af223Ju0PgrJr7RU3u XVHfNmzo2nE7Q+9pyJ24neq9fN01CnEtp1h8sg8Hc704N6YMOyEX3z6ipEEFOB/e LTBCuLIBhs85+FUezYrDLGCCRc1n5Ab6suyzIwUrhg4wDWwcbNtVKAenpBAI2jKl hXvWlpybnI8//gEkkV55LUOxfZj9cT6x6+60JRTyZeXcE5sGDvr4skzsrsfT9awe A07XQe6b/UDsMvATItfUpfjoSj6af7EGboEYbXGPDBCR4Ax4+4J2xvCJ4EXLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUUwja8Bc6NiS1wSoTHPWx2EAaN1EwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i ZTU3LTg2NjVhN2EwNGJiMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoaQwDQYJ KoZIhvcNAQELBQADggEBAJaBuzoTv1TtZtnaZt271r1A93deow7634lTrIz35XJ9 fh/RAC1JtSZFRJSx+Z3SkpI71QD1bHs/IADrhl0rHt99GmXz3t3NzjzpHwbm/L4u ToFqcF/J3Us00d720hznxQVhUoSDgjTcYhNnKQBuGk0IIyEHpCf5I3SoEDaM4a4z NqdUOYl9kzorAWVbxTeHzbpeTcbTAXMmjHmYvo0tbW1X+8uKkbPvEgzwBz0uNV2D rQ+huKmUTpW9YKyhhqs+DX1A9zOgjrkyf6OYhWh3y/MDB0/3O6tQjkaKBSWMg7l3 vx6zBOaFeS3esa6jn7/9JZVlNsYIHgrPcm6bfErdOFE= -----END CERTIFICATE-----Generated at Wed Oct 29 10:44:51 2025 by rpki-client