$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa File: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (raw, json) Hash identifier: aTbEH2RiVh4K07qhKRGxV184e2sOPaIMjUhuR94+WEU= Subject key identifier: 27:63:9E:BD:52:56:D3:F7:66:22:8A:C6:BD:4B:C5:5E:54:A6:74:9B Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 5203A3D111706757E905DE1F2A8C72005A761043 Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa Signing time: Mon 02 Jun 2025 02:04:23 +0000 ROA not before: Mon 02 Jun 2025 01:59:23 +0000 ROA not after: Mon 01 Jun 2026 02:04:23 +0000 asID: 131717 IP address blocks: 103.110.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:03:a3:d1:11:70:67:57:e9:05:de:1f:2a:8c:72:00:5a:76:10:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Jun 2 01:59:23 2025 GMT Not After : Jun 1 02:04:23 2026 GMT Subject: CN=27639EBD5256D3F766228AC6BD4BC55E54A6749B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:dc:06:59:b2:bf:31:bd:3b:aa:92:09:99: 21:d4:5d:7d:3e:1b:b6:a1:c2:80:db:c4:84:ec:76: 2b:ab:09:04:95:05:f2:ca:47:9d:94:1a:82:8a:b4: e6:97:f8:55:9c:b0:b4:3e:86:58:38:ff:55:9f:c9: 9e:9f:2a:0c:b3:ea:32:eb:c9:94:6a:f2:82:7b:fd: 5f:79:8f:69:4f:12:b5:68:45:53:f0:78:07:2d:63: b7:02:92:b0:cd:f0:77:a8:49:25:54:00:8a:e1:c7: ef:c5:cd:34:f1:b1:9f:d5:8c:78:90:36:23:75:f1: bc:be:9f:a8:9f:30:8c:7e:df:0a:48:72:ba:d2:89: 3d:32:28:92:fb:48:18:44:8b:79:53:61:14:e0:ae: bc:89:d5:da:a5:44:ed:16:73:b0:35:bf:50:e8:06: 1e:b4:95:ab:62:03:b0:00:02:5c:aa:77:98:22:2c: 82:0c:e5:c4:a8:36:af:7a:6d:f0:65:d2:10:84:d3: 41:32:03:59:8c:8b:3b:00:d5:c1:5e:67:04:e6:31: 5f:15:53:f1:c9:a4:77:d3:92:40:29:e8:de:cc:3b: a0:ab:22:df:23:58:a6:d9:96:59:ca:a2:65:de:9c: 0c:d9:ea:d6:be:dc:62:65:71:22:66:04:af:52:f6: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:63:9E:BD:52:56:D3:F7:66:22:8A:C6:BD:4B:C5:5E:54:A6:74:9B X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.8.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:5c:aa:04:e5:9d:b0:c6:49:ef:56:f2:48:40:57:e5:cd:1a: ba:bb:3a:e3:22:9d:a2:90:72:fb:79:06:0d:17:7f:72:b5:b6: ad:30:46:99:33:4f:68:8c:34:e3:c1:67:f5:9f:43:1e:c3:df: cf:e3:91:6f:c7:74:37:77:0b:68:9a:ff:8f:a8:88:81:5b:2d: f2:c7:46:7c:bf:78:c8:42:37:3c:5c:9e:da:3b:04:44:57:2b: 0f:dd:7c:db:df:3a:40:cb:bf:9d:ea:78:87:14:67:29:bd:28: d4:ef:95:a8:e7:eb:91:06:f7:d3:fe:5e:9a:ab:cc:5d:bc:22: d1:8e:61:25:5b:98:86:fb:04:f9:a1:1b:a3:5d:fd:76:81:9b: 6f:c3:b8:10:35:f7:53:58:4a:92:67:b7:ae:70:19:9a:f1:93: a7:b9:d5:33:9a:c0:0a:17:eb:ea:42:c5:e8:df:4a:bf:47:5e: 89:d5:14:df:dd:d7:77:e4:9f:20:ce:a1:ce:65:6b:84:ac:03: 21:01:5d:6e:f3:e9:9a:5f:45:c8:db:ef:24:2a:74:d1:16:27: bd:7b:e5:4f:fe:b5:f7:cc:4d:52:33:ba:d2:3d:90:2d:4f:cb: d4:d2:06:30:2c:30:3b:81:b6:17:1f:7c:3f:5b:a7:8c:40:74: 53:73:10:e4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUgOj0RFwZ1fpBd4fKoxyAFp2EEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTA2MDIwMTU5MjNaFw0yNjA2MDEwMjA0MjNaMDMxMTAvBgNV BAMTKDI3NjM5RUJENTI1NkQzRjc2NjIyOEFDNkJENEJDNTVFNTRBNjc0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7dwGWbK/Mb07qpIJmSHUXX0+ G7ahwoDbxITsdiurCQSVBfLKR52UGoKKtOaX+FWcsLQ+hlg4/1WfyZ6fKgyz6jLr yZRq8oJ7/V95j2lPErVoRVPweActY7cCkrDN8HeoSSVUAIrhx+/FzTTxsZ/VjHiQ NiN18by+n6ifMIx+3wpIcrrSiT0yKJL7SBhEi3lTYRTgrryJ1dqlRO0Wc7A1v1Do Bh60latiA7AAAlyqd5giLIIM5cSoNq96bfBl0hCE00EyA1mMizsA1cFeZwTmMV8V U/HJpHfTkkAp6N7MO6CrIt8jWKbZllnKomXenAzZ6ta+3GJlcSJmBK9S9iR5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJ2OevVJW0/dmIorGvUvFXlSmdJswHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkYTc3M2RkLTk1YWEtNDQ3ZS05 OTNkLTRjZjRhMTI3M2IzMS8wLzMxMzAzMzJlMzEzMTMwMmUzODJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMxMzMzMTM3MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmduCDANBgkqhkiG 9w0BAQsFAAOCAQEASlyqBOWdsMZJ71bySEBX5c0aurs64yKdopBy+3kGDRd/crW2 rTBGmTNPaIw048Fn9Z9DHsPfz+ORb8d0N3cLaJr/j6iIgVst8sdGfL94yEI3PFye 2jsERFcrD9182986QMu/nep4hxRnKb0o1O+VqOfrkQb30/5emqvMXbwi0Y5hJVuY hvsE+aEbo139doGbb8O4EDX3U1hKkme3rnAZmvGTp7nVM5rAChfr6kLF6N9Kv0de idUU393Xd+SfIM6hzmVrhKwDIQFdbvPpml9FyNvvJCp00RYnvXvlT/6198xNUjO6 0j2QLU/L1NIGMCwwO4G2Fx98P1unjEB0U3MQ5A== -----END CERTIFICATE-----Generated at Sat Jun 7 23:13:11 2025 by rpki-client