$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa File: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (raw, json) Hash identifier: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo= Subject key identifier: F4:D5:72:44:87:83:1B:B2:59:CB:8F:F3:73:70:DF:0C:B2:EA:A1:D2 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 4CFC6459A1DC383DD47B605A2E8DE437B82A0F76 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa Signing time: Fri 16 May 2025 10:00:02 +0000 ROA not before: Fri 16 May 2025 09:55:02 +0000 ROA not after: Fri 15 May 2026 10:00:02 +0000 asID: 17440 IP address blocks: 103.209.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fc:64:59:a1:dc:38:3d:d4:7b:60:5a:2e:8d:e4:37:b8:2a:0f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: May 16 09:55:02 2025 GMT Not After : May 15 10:00:02 2026 GMT Subject: CN=F4D5724487831BB259CB8FF37370DF0CB2EAA1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:d9:24:1b:64:97:69:bf:02:1f:e8:ea:a3: 69:7a:07:8b:bd:01:a4:f8:ec:af:32:94:ff:d1:2b: 44:6d:2c:12:a7:23:45:34:2d:fa:dc:13:2d:21:5b: 31:b1:12:5b:4f:50:04:dd:c7:e0:31:2d:82:47:e4: 3e:29:92:60:57:42:77:cc:50:c8:dc:23:ce:45:b9: d1:19:e9:50:d4:f8:e3:28:29:57:ad:96:fb:f2:a8: 47:48:76:1e:36:b7:92:d4:84:58:80:4f:5d:54:a2: 72:da:a0:f9:62:77:d6:fd:6d:99:bc:f1:c9:01:a2: a1:c3:45:e6:45:b6:be:72:9b:60:91:e5:4e:eb:6a: ce:72:e8:e8:d2:ea:d2:7f:ad:61:30:ba:a1:65:f0: 7d:32:f1:fb:55:61:2d:2e:00:44:64:a4:b6:fb:ca: de:55:72:de:2b:97:b9:2a:e4:62:80:4e:66:5f:b4: 90:3d:7e:b6:23:b1:95:22:28:34:16:76:d3:c8:c3: 55:90:3e:b4:09:e3:fa:24:85:b7:16:f5:ee:8f:f8: 33:05:78:b4:00:a9:1d:26:c1:5c:7f:e3:c1:31:36: 57:0f:c7:9e:3c:51:bf:94:2b:4a:e8:b8:b4:11:98: 8d:ec:1e:ea:30:70:c3:3b:15:56:60:b4:82:13:1d: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D5:72:44:87:83:1B:B2:59:CB:8F:F3:73:70:DF:0C:B2:EA:A1:D2 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.250.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:0c:a0:1e:8e:e9:31:88:cf:7e:63:b4:8b:2a:a8:88:e1:7c: 5e:03:97:ea:f1:4e:51:ef:a0:59:b5:54:96:ec:09:5d:c1:96: b1:66:ca:a7:09:20:86:80:84:63:b7:d1:b9:83:9b:30:ff:8d: 74:05:e7:29:88:37:b8:c9:7d:2c:a9:41:02:70:df:62:7c:09: 5f:fe:41:21:a8:ea:27:92:de:74:6c:a4:10:71:0c:fe:67:55: 1c:8e:e7:35:44:cf:6c:7f:a7:3f:3d:01:9c:3d:11:28:da:31: cd:b6:7c:86:7f:b2:54:86:3d:87:40:15:c7:8f:e9:78:e8:ec: de:16:57:5a:64:a1:54:20:1f:a2:3d:24:db:b2:28:58:42:11: f8:ef:0f:f8:34:9e:d2:e1:80:9f:75:19:c8:68:37:45:60:5a: 53:d3:c7:49:fe:57:be:54:1f:d8:a8:fc:19:75:9a:df:71:4a: 8e:bc:05:51:65:7e:18:ae:8b:91:b6:4d:07:76:bc:d6:fa:84: 39:d2:7e:3f:a8:d7:53:0a:67:45:5e:15:53:48:3a:81:be:0d: 53:72:bf:79:b6:e5:ce:d9:f2:06:8f:f9:24:45:c9:1f:17:03: 00:aa:60:b1:44:74:5b:ef:26:c3:8c:87:ff:e3:85:36:f1:bf: ac:d1:9b:75 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTPxkWaHcOD3Ue2BaLo3kN7gqD3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTA1MTYwOTU1MDJaFw0yNjA1MTUxMDAwMDJaMDMxMTAvBgNV BAMTKEY0RDU3MjQ0ODc4MzFCQjI1OUNCOEZGMzczNzBERjBDQjJFQUExRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNdkkG2SXab8CH+jqo2l6B4u9 AaT47K8ylP/RK0RtLBKnI0U0LfrcEy0hWzGxEltPUATdx+AxLYJH5D4pkmBXQnfM UMjcI85FudEZ6VDU+OMoKVetlvvyqEdIdh42t5LUhFiAT11UonLaoPlid9b9bZm8 8ckBoqHDReZFtr5ym2CR5U7ras5y6OjS6tJ/rWEwuqFl8H0y8ftVYS0uAERkpLb7 yt5Vct4rl7kq5GKATmZftJA9frYjsZUiKDQWdtPIw1WQPrQJ4/okhbcW9e6P+DMF eLQAqR0mwVx/48ExNlcPx548Ub+UK0rouLQRmI3sHuowcMM7FVZgtIITHcjtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9NVyRIeDG7JZy4/zc3DfDLLqodIwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9H6MA0GCSqG SIb3DQEBCwUAA4IBAQArDKAejukxiM9+Y7SLKqiI4XxeA5fq8U5R76BZtVSW7Ald wZaxZsqnCSCGgIRjt9G5g5sw/410BecpiDe4yX0sqUECcN9ifAlf/kEhqOonkt50 bKQQcQz+Z1Ucjuc1RM9sf6c/PQGcPREo2jHNtnyGf7JUhj2HQBXHj+l46OzeFlda ZKFUIB+iPSTbsihYQhH47w/4NJ7S4YCfdRnIaDdFYFpT08dJ/le+VB/YqPwZdZrf cUqOvAVRZX4YrouRtk0HdrzW+oQ50n4/qNdTCmdFXhVTSDqBvg1Tcr95tuXO2fIG j/kkRckfFwMAqmCxRHRb7ybDjIf/44U28b+s0Zt1 -----END CERTIFICATE-----Generated at Sun Jun 8 18:07:29 2025 by rpki-client