$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa File: 3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa (raw, json) Hash identifier: TYgLScTFuKC8omm7siiJ6BBmUOeK3WKjy8wvBn7N+2A= Subject key identifier: D2:AC:3E:3F:3E:77:A9:42:36:FC:31:BC:6B:5B:04:80:F4:DF:E5:22 Certificate issuer: /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Certificate serial: 227E2A741A2E7BCBB922359A7CFEF9325D935D36 Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa Signing time: Mon 02 Jun 2025 02:03:01 +0000 ROA not before: Mon 02 Jun 2025 01:58:01 +0000 ROA not after: Mon 01 Jun 2026 02:03:01 +0000 asID: 58495 IP address blocks: 103.247.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7e:2a:74:1a:2e:7b:cb:b9:22:35:9a:7c:fe:f9:32:5d:93:5d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6 Validity Not Before: Jun 2 01:58:01 2025 GMT Not After : Jun 1 02:03:01 2026 GMT Subject: CN=D2AC3E3F3E77A94236FC31BC6B5B0480F4DFE522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:71:f8:8b:49:f2:47:38:8f:88:da:66:38: 36:c8:a0:fd:39:89:d5:db:e6:2b:00:ba:d5:cd:f6: 8d:cb:55:49:35:97:60:6b:d7:38:4c:b2:90:e4:d6: 74:c6:4a:04:37:c5:db:f0:ce:a4:4c:ff:75:9a:8d: 56:b8:66:cb:6c:64:ef:87:01:77:cb:e6:bc:62:90: 7a:40:74:f0:10:d9:32:e8:e1:13:e4:91:7f:3f:03: c1:2c:03:54:fd:88:aa:59:ad:de:f7:2b:d7:3f:4f: 47:2f:49:05:70:8a:87:7b:45:28:cd:48:32:65:1a: 50:3c:7a:1e:7b:da:6a:2c:98:bb:a3:ae:93:c5:2c: 8f:01:5a:aa:c5:73:e6:ab:e4:a9:20:6d:93:5d:9a: 83:cb:b3:93:5a:8c:07:be:b3:3e:f5:5b:a0:7f:f4: 29:1a:73:87:66:33:f9:ec:b5:e9:94:b7:51:13:f7: 1e:3a:5f:08:65:23:f4:1e:56:60:0d:e9:44:1e:73: 4d:c5:45:35:b4:d7:7f:32:66:7d:60:6e:42:e8:97: 2d:74:8f:c4:62:66:70:1c:6b:d3:ea:af:2c:a0:ec: ee:34:a2:4e:7f:6c:e1:5f:d7:85:19:f4:29:35:07: 76:ee:10:44:20:1e:d7:91:27:5f:50:b1:6f:7e:4e: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AC:3E:3F:3E:77:A9:42:36:FC:31:BC:6B:5B:04:80:F4:DF:E5:22 X509v3 Authority Key Identifier: keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.216.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:9d:c0:8f:b2:25:38:1d:1c:27:75:4f:8c:c8:45:87:4a:b1: 53:ee:05:d8:75:e4:b2:99:86:6d:2c:a4:71:c0:c7:63:1c:ed: ce:1a:a8:f5:ae:c0:cc:01:ec:0b:fd:6b:bf:f4:74:60:2e:a0: 69:cf:cf:71:fc:60:90:51:30:ca:55:5f:e9:af:50:17:8e:14: 90:cc:35:73:e4:c1:70:ae:0e:95:a9:e2:d1:dc:65:23:4b:7d: f4:92:ec:f3:9f:d6:2d:b8:74:c5:36:7f:cd:92:2d:7c:78:42: 7e:4e:79:97:5c:29:7e:23:4e:5c:64:e5:2f:5a:79:11:b0:e9: bd:f6:c8:92:0f:68:74:f4:49:3f:4b:ed:27:d2:da:6a:8a:81: c0:f7:cb:45:bc:f1:1b:3a:d3:c0:e5:cf:ac:65:f6:e6:22:33: 77:45:ca:02:49:d9:5d:fa:7b:81:e5:35:d8:f4:26:aa:b2:63: 4e:f7:c1:2c:8b:46:5e:b1:12:f1:75:84:bd:a3:90:c8:73:9a: df:95:d7:6b:f7:ee:e6:91:d6:b6:53:7c:f4:c1:65:7e:c2:cf: ac:69:ee:7a:a9:6a:7d:e6:1b:86:21:e0:63:68:d8:ac:0b:39: 8d:89:fd:d1:dc:66:5f:5d:44:dc:5b:3b:9e:ea:c2:d7:a8:a2: 2f:ef:fc:ea -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIn4qdBoue8u5IjWafP75Ml2TXTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEz QTlDMjVDNjAeFw0yNTA2MDIwMTU4MDFaFw0yNjA2MDEwMjAzMDFaMDMxMTAvBgNV BAMTKEQyQUMzRTNGM0U3N0E5NDIzNkZDMzFCQzZCNUIwNDgwRjRERkU1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98nH4i0nyRziPiNpmODbIoP05 idXb5isAutXN9o3LVUk1l2Br1zhMspDk1nTGSgQ3xdvwzqRM/3WajVa4ZstsZO+H AXfL5rxikHpAdPAQ2TLo4RPkkX8/A8EsA1T9iKpZrd73K9c/T0cvSQVwiod7RSjN SDJlGlA8eh572mosmLujrpPFLI8BWqrFc+ar5KkgbZNdmoPLs5NajAe+sz71W6B/ 9Ckac4dmM/nstemUt1ET9x46XwhlI/QeVmAN6UQec03FRTW0138yZn1gbkLoly10 j8RiZnAca9Pqryyg7O40ok5/bOFf14UZ9Ck1B3buEEQgHteRJ19QsW9+Tt5BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0qw+Pz53qUI2/DG8a1sEgPTf5SIwHwYDVR0j BBgwFoAUblU0q6bvPJjI0M9Dd5XSWjqcJcYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjkxNzc3ZS1jZGI0LTQ4OTctYjI4Ny1lNThlNDI0YzE5OWQvMC82RTU1MzRBQkE2 RUYzQzk4QzhEMENGNDM3Nzk1RDI1QTNBOUMyNUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU1NTM0QUJBNkVGM0M5OEM4RDBDRjQzNzc5NUQyNUEzQTlD MjVDNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2OTE3NzdlLWNkYjQtNDg5Ny1i Mjg3LWU1OGU0MjRjMTk5ZC8wLzMxMzAzMzJlMzIzNDM3MmUzMjMxMzYyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM4MzQzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ/fYMA0GCSqG SIb3DQEBCwUAA4IBAQBPncCPsiU4HRwndU+MyEWHSrFT7gXYdeSymYZtLKRxwMdj HO3OGqj1rsDMAewL/Wu/9HRgLqBpz89x/GCQUTDKVV/pr1AXjhSQzDVz5MFwrg6V qeLR3GUjS330kuzzn9YtuHTFNn/Nki18eEJ+TnmXXCl+I05cZOUvWnkRsOm99siS D2h09Ek/S+0n0tpqioHA98tFvPEbOtPA5c+sZfbmIjN3RcoCSdld+nuB5TXY9Caq smNO98Esi0ZesRLxdYS9o5DIc5rflddr9+7mkda2U3z0wWV+ws+sae56qWp95huG IeBjaNisCzmNif3R3GZfXUTcWzue6sLXqKIv7/zq -----END CERTIFICATE-----Generated at Fri Jun 6 17:05:42 2025 by rpki-client