$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa File: 3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa (raw, json) Hash identifier: 1vmoTi/OQlBjTj5r4qfl1ZJAdqshu23eK0zIaK9DnNY= Subject key identifier: 9A:12:B3:EE:D0:58:E4:CD:1F:2C:E5:9B:71:C1:8F:FB:2A:46:DA:E7 Certificate issuer: /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Certificate serial: 4C51A585C3E189E2EA388EA51CE691DB646CA92E Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa Signing time: Fri 23 May 2025 10:00:00 +0000 ROA not before: Fri 23 May 2025 09:55:00 +0000 ROA not after: Fri 22 May 2026 10:00:00 +0000 asID: 150232 IP address blocks: 103.13.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:51:a5:85:c3:e1:89:e2:ea:38:8e:a5:1c:e6:91:db:64:6c:a9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B Validity Not Before: May 23 09:55:00 2025 GMT Not After : May 22 10:00:00 2026 GMT Subject: CN=9A12B3EED058E4CD1F2CE59B71C18FFB2A46DAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:62:8b:c0:37:ae:2b:16:9a:bc:71:d2:89: d4:c9:b7:aa:29:69:2b:b5:77:cf:b7:b6:e7:20:31: c4:72:5e:b3:13:41:6d:06:f0:47:1d:e0:dc:8c:0f: df:34:6b:8c:bd:d6:89:74:a0:be:8d:6c:55:d5:d5: 3d:6c:4b:1e:06:10:e1:ff:4d:92:3c:2a:a4:2f:f6: 41:bb:a5:32:8f:27:91:de:e4:2c:a3:6c:27:8d:52: 58:eb:15:c9:ba:f2:06:75:d8:89:dd:aa:b7:33:d0: eb:c2:73:67:f3:f5:99:e7:12:d6:89:c0:b7:c4:8c: 12:8a:04:ae:b2:05:ab:fa:27:ac:08:8b:5b:f9:10: 6e:03:65:5d:89:d8:c3:9f:5c:0c:9a:a3:7f:c6:b3: d6:5d:d5:f3:9d:32:85:2b:8f:1c:cd:e1:3d:d5:06: 18:05:dc:73:3a:f1:47:53:bc:5a:00:10:95:40:bb: 80:d1:d1:2e:2a:a1:10:92:01:1b:2d:c2:e6:8e:d5: 85:36:97:a7:d3:57:38:df:76:59:1c:88:b1:44:59: f7:90:22:57:90:e1:13:a1:da:4d:b1:22:a4:54:a8: 93:64:5c:0d:8d:9c:b4:b3:43:67:72:97:46:d8:de: e8:55:6f:64:93:7d:c7:7e:8a:c0:ff:83:c2:ed:62: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:12:B3:EE:D0:58:E4:CD:1F:2C:E5:9B:71:C1:8F:FB:2A:46:DA:E7 X509v3 Authority Key Identifier: keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233352e302f32342d3234203d3e20313530323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.235.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:93:af:79:bf:39:11:19:6b:39:22:bb:01:c1:52:1f:dd:51: 45:c2:31:aa:85:e5:d4:78:cd:d9:55:3d:bd:ba:9c:17:7f:77: 7d:a5:a2:61:ee:57:29:17:c9:77:d3:af:63:05:1c:d7:35:5f: c0:15:ae:7e:ad:d8:43:51:65:fb:06:4d:03:71:ee:fe:0c:22: da:7f:01:1c:f9:df:67:f9:5d:63:3d:29:57:d4:5d:06:58:3d: 3b:e5:df:62:ba:76:f1:a8:0b:5c:10:67:23:ae:a2:ba:36:ce: d2:a6:de:c4:26:28:36:52:fd:70:37:2e:ec:f9:c2:39:3c:8c: 94:5f:a4:a7:74:57:ae:62:6a:1b:3c:bc:ed:d8:52:76:83:42: 31:97:73:07:81:74:a2:19:bf:50:46:27:a1:65:87:88:04:e7: da:67:fd:6e:05:6f:a3:c6:dc:0a:06:39:f4:f5:ca:a5:6c:3e: 93:3f:a4:28:df:71:3c:0c:83:6d:5b:5c:fc:81:15:bf:94:22: 82:e4:93:18:46:b3:a7:cc:65:f3:dc:3e:aa:c8:fa:98:59:9f: 5c:f0:32:11:cb:14:5b:ce:37:ac:bb:5b:db:f4:b8:1b:08:0e: 29:bf:5b:cc:85:d1:75:ae:d9:a1:ec:0c:4f:d5:90:bb:66:78: 7a:38:0d:e6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTFGlhcPhieLqOI6lHOaR22RsqS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw N0VFODY2QjAeFw0yNTA1MjMwOTU1MDBaFw0yNjA1MjIxMDAwMDBaMDMxMTAvBgNV BAMTKDlBMTJCM0VFRDA1OEU0Q0QxRjJDRTU5QjcxQzE4RkZCMkE0NkRBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswWKLwDeuKxaavHHSidTJt6op aSu1d8+3tucgMcRyXrMTQW0G8Ecd4NyMD980a4y91ol0oL6NbFXV1T1sSx4GEOH/ TZI8KqQv9kG7pTKPJ5He5CyjbCeNUljrFcm68gZ12Indqrcz0OvCc2fz9ZnnEtaJ wLfEjBKKBK6yBav6J6wIi1v5EG4DZV2J2MOfXAyao3/Gs9Zd1fOdMoUrjxzN4T3V BhgF3HM68UdTvFoAEJVAu4DR0S4qoRCSARstwuaO1YU2l6fTVzjfdlkciLFEWfeQ IleQ4ROh2k2xIqRUqJNkXA2NnLSzQ2dyl0bY3uhVb2STfcd+isD/g8LtYr03AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmhKz7tBY5M0fLOWbccGP+ypG2ucwHwYDVR0j BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2 QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF ODY2Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhYzRkNzVlLTNkYTgtNDk5MC04 MDQyLTdlMGVjZjU5ZjEzYi8wLzMxMzAzMzJlMzEzMzJlMzIzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw3rMA0GCSqG SIb3DQEBCwUAA4IBAQB7k695vzkRGWs5IrsBwVIf3VFFwjGqheXUeM3ZVT29upwX f3d9paJh7lcpF8l3069jBRzXNV/AFa5+rdhDUWX7Bk0Dce7+DCLafwEc+d9n+V1j PSlX1F0GWD075d9iunbxqAtcEGcjrqK6Ns7Spt7EJig2Uv1wNy7s+cI5PIyUX6Sn dFeuYmobPLzt2FJ2g0Ixl3MHgXSiGb9QRiehZYeIBOfaZ/1uBW+jxtwKBjn09cql bD6TP6Qo33E8DINtW1z8gRW/lCKC5JMYRrOnzGXz3D6qyPqYWZ9c8DIRyxRbzjes u1vb9LgbCA4pv1vMhdF1rtmh7AxP1ZC7Znh6OA3m -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:36 2025 by rpki-client