$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa File: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (raw, json) Hash identifier: brSZ0m97l9z7YCV2zCWTUJDAsUOi5NNl8YP1n7Hn+04= Subject key identifier: A6:3B:49:3B:5F:FB:5D:F4:10:10:30:01:D3:8B:85:F1:54:EA:AD:50 Certificate issuer: /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Certificate serial: 52C17A11214D6864307135A1FC3768C0681A27A9 Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa Signing time: Mon 02 Jun 2025 02:04:50 +0000 ROA not before: Mon 02 Jun 2025 01:59:50 +0000 ROA not after: Mon 01 Jun 2026 02:04:50 +0000 asID: 63872 IP address blocks: 103.52.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 13:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c1:7a:11:21:4d:68:64:30:71:35:a1:fc:37:68:c0:68:1a:27:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19 Validity Not Before: Jun 2 01:59:50 2025 GMT Not After : Jun 1 02:04:50 2026 GMT Subject: CN=A63B493B5FFB5DF410103001D38B85F154EAAD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:04:b8:bb:db:6a:e2:6d:a1:73:a3:3c:7d: bb:7e:c5:a8:7b:ad:67:2e:5f:ff:9d:dd:ef:20:3b: e1:08:d8:09:68:46:66:23:8f:61:e1:19:2d:2f:27: 41:a0:71:19:76:48:d5:0f:34:23:42:8b:70:12:71: 2c:7d:f1:e4:b6:d7:cb:00:73:83:15:9a:c6:fa:93: 1b:d6:bc:db:b8:bd:c3:cc:d6:a4:d9:90:78:fa:e3: e4:af:91:b0:57:d0:d6:44:64:0c:93:e1:7c:96:0e: 26:60:02:ff:aa:b8:fc:31:aa:47:03:35:c1:f0:35: 75:62:ef:5a:fe:5a:4e:a6:f2:d2:5a:55:a3:63:9a: ef:31:b5:a0:29:26:fc:39:7d:ab:fb:67:23:6d:d5: 87:c5:fd:b9:20:4a:1c:24:e8:a4:33:1a:62:21:f6: aa:8c:6a:2c:20:20:54:3e:e3:99:36:d7:ba:3a:e4: d3:a7:1a:8c:63:16:81:96:d0:90:a2:53:52:2d:2a: f7:36:74:6b:19:29:2c:01:d9:55:f8:69:c7:2b:3a: 2a:25:77:84:4a:55:26:da:56:b7:c5:9f:24:ac:da: f9:d2:b1:10:ac:f3:04:35:ad:70:32:14:ee:e5:39: 08:b3:eb:44:ea:8c:01:35:93:9b:84:55:7d:40:37: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:49:3B:5F:FB:5D:F4:10:10:30:01:D3:8B:85:F1:54:EA:AD:50 X509v3 Authority Key Identifier: keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137302e302f32332d3233203d3e203633383732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.170.0/23 Signature Algorithm: sha256WithRSAEncryption 63:2b:30:3f:cb:28:e3:1d:36:2c:c5:c3:59:0f:c3:a6:45:e2: bc:53:8c:2d:b4:3a:17:fe:de:76:b4:53:cd:d2:ca:eb:aa:0c: 4f:23:e1:d3:cf:36:80:e1:95:b5:2a:02:b8:ab:d0:47:00:59: 72:27:b3:ac:75:e4:c6:29:fa:16:f1:8e:50:20:18:3a:02:85: 09:05:80:ff:fd:56:f5:d0:e9:35:97:62:27:74:ce:d0:0f:a1: e2:6f:c7:7f:99:57:88:0a:c6:8e:65:b5:e2:82:30:df:68:7b: 54:53:26:6d:58:ff:2d:90:5c:8c:a4:a5:15:60:d4:a8:b8:66: 6a:8f:31:64:15:f2:9b:12:1f:70:e0:d6:82:97:f8:67:95:54: 19:4d:0e:83:f5:30:99:3a:9a:72:8e:2a:71:18:17:e8:dc:d6: 06:d8:1c:09:06:ce:33:57:2b:2d:95:31:52:77:a1:ff:7e:33: ba:68:ef:d2:47:e9:30:1e:6c:a3:93:94:25:b1:58:56:97:ac: f0:6e:30:bb:63:cb:54:0a:62:b0:ce:fc:b6:fa:38:72:5e:1e: 67:41:75:5e:e0:88:83:a4:13:53:8b:6a:27:46:aa:a6:21:1f: 8b:7e:e5:11:e3:73:22:92:f3:8d:e7:48:bd:46:e1:81:ab:43: d9:10:3d:ca -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUsF6ESFNaGQwcTWh/DdowGgaJ6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy N0JFN0IxOTAeFw0yNTA2MDIwMTU5NTBaFw0yNjA2MDEwMjA0NTBaMDMxMTAvBgNV BAMTKEE2M0I0OTNCNUZGQjVERjQxMDEwMzAwMUQzOEI4NUYxNTRFQUFENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ggS4u9tq4m2hc6M8fbt+xah7 rWcuX/+d3e8gO+EI2AloRmYjj2HhGS0vJ0GgcRl2SNUPNCNCi3AScSx98eS218sA c4MVmsb6kxvWvNu4vcPM1qTZkHj64+SvkbBX0NZEZAyT4XyWDiZgAv+quPwxqkcD NcHwNXVi71r+Wk6m8tJaVaNjmu8xtaApJvw5fav7ZyNt1YfF/bkgShwk6KQzGmIh 9qqMaiwgIFQ+45k217o65NOnGoxjFoGW0JCiU1ItKvc2dGsZKSwB2VX4accrOiol d4RKVSbaVrfFnySs2vnSsRCs8wQ1rXAyFO7lOQiz60TqjAE1k5uEVX1ANxbVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpjtJO1/7XfQQEDAB04uF8VTqrVAwHwYDVR0j BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF N0IxOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2YmIzMzNjLTk4MmItNGZjZS1h YzgxLWJjMDY5MjI5ZTI0My8wLzMxMzAzMzJlMzUzMjJlMzEzNzMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzYzMzM4MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc0qjANBgkqhkiG 9w0BAQsFAAOCAQEAYyswP8so4x02LMXDWQ/DpkXivFOMLbQ6F/7edrRTzdLK66oM TyPh0882gOGVtSoCuKvQRwBZciezrHXkxin6FvGOUCAYOgKFCQWA//1W9dDpNZdi J3TO0A+h4m/Hf5lXiArGjmW14oIw32h7VFMmbVj/LZBcjKSlFWDUqLhmao8xZBXy mxIfcODWgpf4Z5VUGU0Og/UwmTqaco4qcRgX6NzWBtgcCQbOM1crLZUxUneh/34z umjv0kfpMB5so5OUJbFYVpes8G4wu2PLVApisM78tvo4cl4eZ0F1XuCIg6QTU4tq J0aqpiEfi37lEeNzIpLzjedIvUbhgatD2RA9yg== -----END CERTIFICATE-----Generated at Sat Jun 7 05:51:49 2025 by rpki-client