$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa File: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: Y6tvd+1XtHiukr4Lnc++EG2e4/MBcfeHFg9Xd0kGFMg= Subject key identifier: 39:7D:60:F5:CC:13:4B:D2:4D:81:34:ED:AE:65:59:64:84:DD:6F:07 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 0BD43D0A81E546C0985241AADFDE905C3DCEDFB6 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa Signing time: Mon 02 Jun 2025 02:05:07 +0000 ROA not before: Mon 02 Jun 2025 02:00:07 +0000 ROA not after: Mon 01 Jun 2026 02:05:07 +0000 asID: 58477 IP address blocks: 103.56.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d4:3d:0a:81:e5:46:c0:98:52:41:aa:df:de:90:5c:3d:ce:df:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jun 2 02:00:07 2025 GMT Not After : Jun 1 02:05:07 2026 GMT Subject: CN=397D60F5CC134BD24D8134EDAE65596484DD6F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:46:59:d2:4a:2f:75:6f:64:79:3d:12:a3: d3:b1:8b:a7:6c:cc:7a:96:4b:44:f8:ec:3d:f0:b2: e7:63:96:a2:69:eb:a4:4e:c5:8d:5f:30:37:40:2e: cd:e1:f7:7a:65:20:f5:1c:e5:51:c9:a8:32:93:14: 3d:9b:ba:7d:69:6e:41:a1:08:13:f9:13:cd:e2:23: 41:9b:86:fc:4e:a3:10:3e:68:85:5d:9c:d2:71:55: 3c:62:20:a8:95:88:9f:b5:0a:d6:89:7d:f7:0e:3e: 88:a5:b7:27:5a:77:86:1c:93:92:01:ef:49:ef:bf: 5d:dc:22:49:fc:e4:80:18:0a:8d:d4:1c:15:aa:46: 2c:8f:61:d1:db:33:48:cf:87:f1:d5:9b:b0:31:dd: dd:8c:b3:d9:a2:29:cd:73:9b:1f:cf:b2:12:bc:d5: 39:e1:fc:53:4c:77:83:77:26:90:bf:e1:01:dd:39: ea:6f:7a:7c:e4:e6:18:61:00:5c:4f:91:72:75:41: 96:1a:30:6c:3e:5c:25:36:61:ff:30:1a:d1:0e:9f: 2f:c3:87:06:ce:5c:19:c3:4d:f7:a2:55:e4:f1:ae: 79:68:ea:0f:24:f2:53:63:c5:51:6b:64:e0:7c:9d: 91:96:1b:a6:54:9b:32:84:ac:c9:a5:b7:63:0a:59: f4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7D:60:F5:CC:13:4B:D2:4D:81:34:ED:AE:65:59:64:84:DD:6F:07 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230352e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.205.0/24 Signature Algorithm: sha256WithRSAEncryption cc:1b:82:7e:af:d3:48:c1:c7:94:7c:88:6c:60:80:53:0a:b5: 6e:21:ca:b7:d6:c7:6e:9c:37:83:4d:22:f2:2d:d2:61:40:a2: ca:27:f0:3d:4c:c7:4d:8b:04:94:fb:d3:1d:a7:4a:5a:50:ee: 4d:aa:2d:01:ce:c7:58:ff:89:c7:d7:ec:53:78:fb:c3:74:dc: 9f:4c:6f:02:57:e5:04:ed:62:16:79:27:85:72:66:54:39:9c: 85:22:9e:2a:47:b2:5a:d4:1e:b2:61:7a:03:cb:21:0d:d5:7c: a4:f6:0c:85:eb:e4:d7:b1:da:e9:b0:1a:71:70:54:26:a0:8f: 26:87:8e:43:fb:f1:ac:c2:53:92:0c:20:4c:4e:b0:83:33:2e: b6:af:68:18:f4:7d:d1:75:f5:72:30:0d:e6:8f:41:87:53:7a: ad:4c:89:e4:55:29:df:cf:ad:b5:55:fe:6c:1e:de:a5:f0:dd: d5:b0:6b:44:45:e3:26:19:2e:22:a0:db:c9:67:3a:1b:41:78: 52:bb:a2:c5:9b:00:fd:86:f8:86:98:e8:c3:13:a7:57:05:e2: c4:68:25:aa:74:8d:d6:65:8f:06:f0:9f:00:30:8b:17:5f:72: 57:ee:a6:d5:e9:02:7d:f1:1e:ea:36:c7:7e:dd:c0:f1:20:ba: f0:dd:db:c8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC9Q9CoHlRsCYUkGq396QXD3O37YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTA2MDIwMjAwMDdaFw0yNjA2MDEwMjA1MDdaMDMxMTAvBgNV BAMTKDM5N0Q2MEY1Q0MxMzRCRDI0RDgxMzRFREFFNjU1OTY0ODRERDZGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9r0ZZ0kovdW9keT0So9Oxi6ds zHqWS0T47D3wsudjlqJp66ROxY1fMDdALs3h93plIPUc5VHJqDKTFD2bun1pbkGh CBP5E83iI0GbhvxOoxA+aIVdnNJxVTxiIKiViJ+1CtaJffcOPoiltydad4Yck5IB 70nvv13cIkn85IAYCo3UHBWqRiyPYdHbM0jPh/HVm7Ax3d2Ms9miKc1zmx/PshK8 1Tnh/FNMd4N3JpC/4QHdOepvenzk5hhhAFxPkXJ1QZYaMGw+XCU2Yf8wGtEOny/D hwbOXBnDTfeiVeTxrnlo6g8k8lNjxVFrZOB8nZGWG6ZUmzKErMmlt2MKWfRFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOX1g9cwTS9JNgTTtrmVZZITdbwcwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zTANBgkqhkiG 9w0BAQsFAAOCAQEAzBuCfq/TSMHHlHyIbGCAUwq1biHKt9bHbpw3g00i8i3SYUCi yifwPUzHTYsElPvTHadKWlDuTaotAc7HWP+Jx9fsU3j7w3Tcn0xvAlflBO1iFnkn hXJmVDmchSKeKkeyWtQesmF6A8shDdV8pPYMhevk17Ha6bAacXBUJqCPJoeOQ/vx rMJTkgwgTE6wgzMutq9oGPR90XX1cjAN5o9Bh1N6rUyJ5FUp38+ttVX+bB7epfDd 1bBrREXjJhkuIqDbyWc6G0F4UruixZsA/Yb4hpjowxOnVwXixGglqnSN1mWPBvCf ADCLF19yV+6m1ekCffEe6jbHft3A8SC68N3byA== -----END CERTIFICATE-----Generated at Thu Jun 5 18:31:40 2025 by rpki-client