$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa File: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (raw, json) Hash identifier: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8= Subject key identifier: EC:57:DB:A2:0D:CE:90:E0:A0:93:49:31:59:D8:26:34:0D:25:15:2C Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 55C93ECD8E5A89CDF0E5A377B333C4FF66EC7ED4 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa Signing time: Sat 31 May 2025 02:00:00 +0000 ROA not before: Sat 31 May 2025 01:55:00 +0000 ROA not after: Sat 30 May 2026 02:00:00 +0000 asID: 142327 IP address blocks: 103.168.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c9:3e:cd:8e:5a:89:cd:f0:e5:a3:77:b3:33:c4:ff:66:ec:7e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: May 31 01:55:00 2025 GMT Not After : May 30 02:00:00 2026 GMT Subject: CN=EC57DBA20DCE90E0A093493159D826340D25152C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f4:01:fe:39:3c:54:70:99:9c:57:a7:7d:24: 35:48:74:8a:d1:d7:c5:67:89:c6:4b:d2:e5:e1:c5: 35:6a:5d:82:8d:0b:12:dc:18:07:82:09:20:99:b4: 82:cb:7d:ae:43:07:cf:ba:6b:c5:65:61:be:9b:af: f7:72:01:e8:67:65:bc:34:c7:c9:8a:65:46:3c:c1: c3:fd:a0:ab:1f:55:0c:82:e3:e9:88:7c:cf:29:bf: fc:f4:e1:53:77:5f:15:28:58:c9:24:db:73:bd:45: 24:16:34:95:db:b3:ca:8c:6c:9d:33:8a:9f:a2:7a: a3:23:fb:f1:74:ab:80:60:55:8f:56:d6:0e:1a:34: d2:3d:7f:a4:73:65:47:68:45:6a:7f:8c:54:0f:80: c6:3a:37:8b:eb:2d:2a:01:5b:43:f8:d3:2f:2c:ea: 6d:9d:e1:40:04:0d:0c:fb:22:13:c3:8a:b9:9f:b1: 71:66:d5:8c:bb:e3:6d:79:b5:d4:50:8e:11:6a:c7: 28:0f:b8:b8:88:48:f1:b0:33:4e:00:65:41:96:cf: d8:98:9a:4f:fb:3d:58:cd:69:7b:55:a7:14:c2:c0: 7f:4c:2e:82:09:99:b8:53:01:78:0b:55:bb:88:e2: 22:32:af:d7:e3:ca:2c:c5:1b:c2:53:0d:a4:68:0e: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:57:DB:A2:0D:CE:90:E0:A0:93:49:31:59:D8:26:34:0D:25:15:2C X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.250.0/23 Signature Algorithm: sha256WithRSAEncryption 90:f5:f9:05:66:54:4e:d0:41:57:f8:48:f4:5f:ad:a9:83:5d: 0e:6e:d6:15:b3:2d:16:61:98:54:a8:26:24:51:8b:79:cd:56: 2e:cf:14:36:b7:69:c8:29:66:23:d6:43:3e:d7:6f:21:55:c4: 92:d4:53:e6:44:05:50:9a:87:cb:c0:2e:9e:5e:4b:ca:ee:a6: 95:d8:2d:c4:73:00:39:6e:08:bd:b9:a6:c5:8c:aa:1d:c5:b0: 8a:97:df:23:b8:59:14:d4:34:1e:d8:e3:9c:dd:31:ad:1d:f5: 87:f8:82:a5:b9:cb:e2:ba:3f:60:b4:23:92:71:9a:c9:82:3b: a5:49:e3:f8:35:14:8f:6d:6c:a0:91:37:0b:1b:b5:c5:b0:0d: 4b:d7:da:fd:84:c7:24:db:5f:d1:06:f1:bd:ae:3c:46:45:8b: a2:5d:48:cf:03:a4:4d:a5:b5:a3:63:e3:44:35:ea:f3:9a:60: c2:e9:f9:c1:b3:0d:c7:f5:0e:05:7e:78:65:53:89:8d:6b:0c: a2:5e:a0:1b:29:c4:91:4d:c5:af:f1:0a:aa:d2:2a:cf:d6:23: 2a:14:8c:12:9c:1b:81:30:95:62:4c:9a:65:c0:d3:68:07:60: 7e:bd:ad:e6:22:10:e3:16:ef:55:22:fa:93:50:97:19:33:98: c6:6e:33:cd -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVck+zY5aic3w5aN3szPE/2bsftQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTA1MzEwMTU1MDBaFw0yNjA1MzAwMjAwMDBaMDMxMTAvBgNV BAMTKEVDNTdEQkEyMERDRTkwRTBBMDkzNDkzMTU5RDgyNjM0MEQyNTE1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl9AH+OTxUcJmcV6d9JDVIdIrR 18VnicZL0uXhxTVqXYKNCxLcGAeCCSCZtILLfa5DB8+6a8VlYb6br/dyAehnZbw0 x8mKZUY8wcP9oKsfVQyC4+mIfM8pv/z04VN3XxUoWMkk23O9RSQWNJXbs8qMbJ0z ip+ieqMj+/F0q4BgVY9W1g4aNNI9f6RzZUdoRWp/jFQPgMY6N4vrLSoBW0P40y8s 6m2d4UAEDQz7IhPDirmfsXFm1Yy74215tdRQjhFqxygPuLiISPGwM04AZUGWz9iY mk/7PVjNaXtVpxTCwH9MLoIJmbhTAXgLVbuI4iIyr9fjyizFG8JTDaRoDu8xAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7Ffbog3OkOCgk0kxWdgmNA0lFSwwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzOGQ1ODBiLTQ1MmUtNDJkNy1i MDQxLTkwMWRjMzNkNjg1Ny8wLzMxMzAzMzJlMzEzNjM4MmUzMjM1MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqPowDQYJ KoZIhvcNAQELBQADggEBAJD1+QVmVE7QQVf4SPRframDXQ5u1hWzLRZhmFSoJiRR i3nNVi7PFDa3acgpZiPWQz7XbyFVxJLUU+ZEBVCah8vALp5eS8ruppXYLcRzADlu CL25psWMqh3FsIqX3yO4WRTUNB7Y45zdMa0d9Yf4gqW5y+K6P2C0I5JxmsmCO6VJ 4/g1FI9tbKCRNwsbtcWwDUvX2v2ExyTbX9EG8b2uPEZFi6JdSM8DpE2ltaNj40Q1 6vOaYMLp+cGzDcf1DgV+eGVTiY1rDKJeoBspxJFNxa/xCqrSKs/WIyoUjBKcG4Ew lWJMmmXA02gHYH69reYiEOMW71Ui+pNQlxkzmMZuM80= -----END CERTIFICATE-----Generated at Sat Jun 7 06:01:19 2025 by rpki-client