$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa File: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: ctlL63La/nA2o80IyG4Gn5yERO9Svxh3VS6Tj8PS2Bk= Subject key identifier: 3A:5D:5B:68:A2:75:0C:17:98:A0:0E:BF:4D:8F:F9:A8:BD:EA:22:ED Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 2DF10CBD3E1134DB3E8CD516964CF8D3763BFD50 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa Signing time: Mon 02 Jun 2025 02:05:07 +0000 ROA not before: Mon 02 Jun 2025 02:00:07 +0000 ROA not after: Mon 01 Jun 2026 02:05:07 +0000 asID: 58477 IP address blocks: 103.56.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f1:0c:bd:3e:11:34:db:3e:8c:d5:16:96:4c:f8:d3:76:3b:fd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Jun 2 02:00:07 2025 GMT Not After : Jun 1 02:05:07 2026 GMT Subject: CN=3A5D5B68A2750C1798A00EBF4D8FF9A8BDEA22ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f6:a9:3c:cf:19:79:a5:13:81:18:a9:5a:e8: 7f:37:9a:89:fc:3f:d4:29:41:b2:6e:84:36:fe:da: a4:d6:a2:63:0c:5c:81:30:0f:4d:cc:f5:db:e8:03: 52:42:dc:99:4e:9f:9d:5a:eb:de:9f:eb:d0:dd:8b: 97:53:ff:f0:07:02:4d:19:a6:45:09:1e:d1:eb:7f: 08:07:05:05:16:95:69:49:cd:83:2d:c4:a4:e9:fc: 7b:79:d5:fb:a2:09:93:bd:38:93:4e:46:75:88:a6: cb:6c:ed:a5:ed:f5:d6:7f:0c:8e:28:e0:54:c2:4a: f9:97:37:c1:1f:22:1e:7b:58:b8:32:9f:aa:d5:b5: 63:6a:e6:7b:de:bf:9f:f9:13:58:0d:25:3e:a2:6e: f0:80:e0:23:45:68:4e:af:bb:09:4a:ba:69:42:e7: 5c:1f:42:55:47:fa:4c:09:5d:2f:66:73:79:64:d7: 3e:47:3a:38:50:24:dc:bf:2e:ce:47:f1:46:34:7d: 53:1f:c4:a6:76:02:5a:2c:b0:33:2b:c9:c9:d6:a4: 50:0d:22:75:b6:bf:2b:c6:67:64:ae:e8:c4:da:8c: b3:24:11:6c:6a:07:f3:00:66:ed:e1:e2:b0:42:09: 7f:eb:3e:ba:08:f5:68:9d:d9:da:19:91:09:fe:72: c5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5D:5B:68:A2:75:0C:17:98:A0:0E:BF:4D:8F:F9:A8:BD:EA:22:ED X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.206.0/24 Signature Algorithm: sha256WithRSAEncryption 34:03:45:c8:a5:85:36:90:14:00:0b:e5:5e:57:d6:7e:36:2e: b9:fd:bc:cb:b9:7e:46:6a:9f:f3:55:a2:e6:e6:ee:1f:30:7e: 06:cd:f8:8f:bb:62:70:7d:c3:4a:82:9e:f7:84:3e:30:d5:4e: 5a:12:4a:f4:4c:15:6c:c2:fb:22:e8:39:0a:2b:dc:93:c1:59: 21:74:26:98:1f:92:8b:a3:55:59:6f:99:f3:03:15:d3:16:26: 1f:cd:12:ac:cd:af:ee:61:cb:1c:b3:78:0b:8c:6b:dc:27:f5: 0e:28:ad:a2:04:2a:e1:a0:d4:10:34:fd:0d:32:ab:6b:21:76: a8:ca:8e:43:ba:00:3f:82:4b:b9:fd:16:ff:03:71:8b:83:c8: 2a:9c:9d:2e:87:47:c5:62:b5:e1:47:23:9c:12:d1:8d:f8:2f: 32:da:43:1c:1c:a4:1a:51:e2:ce:75:d0:0a:83:55:4e:07:b6: 48:cd:c2:cc:53:15:b7:a0:41:8d:9a:c1:92:14:85:81:4f:c0: ff:20:96:c8:1e:7d:d2:30:08:83:48:02:01:82:e9:5e:7a:e6: b2:a3:66:45:53:c4:86:2c:ef:e8:6f:97:7d:02:53:38:ab:6c: 58:b2:a7:73:75:6b:86:53:4c:28:02:12:e7:76:62:da:cf:79: 0e:5f:6d:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULfEMvT4RNNs+jNUWlkz403Y7/VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNTA2MDIwMjAwMDdaFw0yNjA2MDEwMjA1MDdaMDMxMTAvBgNV BAMTKDNBNUQ1QjY4QTI3NTBDMTc5OEEwMEVCRjREOEZGOUE4QkRFQTIyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn9qk8zxl5pROBGKla6H83mon8 P9QpQbJuhDb+2qTWomMMXIEwD03M9dvoA1JC3JlOn51a696f69Ddi5dT//AHAk0Z pkUJHtHrfwgHBQUWlWlJzYMtxKTp/Ht51fuiCZO9OJNORnWIpsts7aXt9dZ/DI4o 4FTCSvmXN8EfIh57WLgyn6rVtWNq5nvev5/5E1gNJT6ibvCA4CNFaE6vuwlKumlC 51wfQlVH+kwJXS9mc3lk1z5HOjhQJNy/Ls5H8UY0fVMfxKZ2AlossDMrycnWpFAN InW2vyvGZ2Su6MTajLMkEWxqB/MAZu3h4rBCCX/rProI9Wid2doZkQn+csXHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOl1baKJ1DBeYoA6/TY/5qL3qIu0wHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzZjhmNTVjLTllMzUtNGNlMi04 OTBmLTBkZTNlMjQwNDYxMS8wLzMxMzAzMzJlMzUzNjJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc4zjANBgkqhkiG 9w0BAQsFAAOCAQEANANFyKWFNpAUAAvlXlfWfjYuuf28y7l+Rmqf81Wi5ubuHzB+ Bs34j7ticH3DSoKe94Q+MNVOWhJK9EwVbML7Iug5Civck8FZIXQmmB+Si6NVWW+Z 8wMV0xYmH80SrM2v7mHLHLN4C4xr3Cf1DiitogQq4aDUEDT9DTKrayF2qMqOQ7oA P4JLuf0W/wNxi4PIKpydLodHxWK14UcjnBLRjfgvMtpDHBykGlHiznXQCoNVTge2 SM3CzFMVt6BBjZrBkhSFgU/A/yCWyB590jAIg0gCAYLpXnrmsqNmRVPEhizv6G+X fQJTOKtsWLKnc3VrhlNMKAIS53Zi2s95Dl9tqg== -----END CERTIFICATE-----Generated at Thu Jun 5 18:31:34 2025 by rpki-client