$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa File: 3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (raw, json) Hash identifier: 6u0QjcaXuZCe/xDwNoPsOwMyKh9MBkPufQ0B3cPlReE= Subject key identifier: A5:4A:CD:9C:D9:46:9B:3C:4F:76:1E:2E:6B:0D:18:6A:D8:CD:C6:B0 Certificate issuer: /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Certificate serial: 28C5F342513EE86898053E322D928BFC3B6C58C8 Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa Signing time: Mon 02 Jun 2025 02:04:34 +0000 ROA not before: Mon 02 Jun 2025 01:59:34 +0000 ROA not after: Mon 01 Jun 2026 02:04:34 +0000 asID: 63497 IP address blocks: 103.134.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c5:f3:42:51:3e:e8:68:98:05:3e:32:2d:92:8b:fc:3b:6c:58:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D Validity Not Before: Jun 2 01:59:34 2025 GMT Not After : Jun 1 02:04:34 2026 GMT Subject: CN=A54ACD9CD9469B3C4F761E2E6B0D186AD8CDC6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:c4:ad:f4:f8:e5:68:b6:d1:86:d7:e8:81: 2d:c6:ae:f1:9b:18:fc:22:de:45:42:ca:97:60:b0: 14:44:c0:2e:f1:73:bd:8a:3f:dc:22:ca:77:b0:db: 23:0b:7a:41:4d:97:50:6d:36:b4:54:c9:36:97:05: 92:a0:9a:15:12:d1:d6:a9:bf:f4:b3:31:70:21:f3: 06:73:e2:55:03:82:cb:5e:a1:e5:96:1b:ae:95:6c: 4c:21:e2:8c:12:c8:f0:b8:94:d9:20:71:a2:33:5d: 0b:e8:a0:fd:52:b4:e7:2d:30:b8:87:05:e2:77:16: 66:2d:38:ee:a5:29:bc:8d:03:9b:19:c4:fd:ed:43: 79:51:1f:f0:af:6a:39:7c:9d:29:41:28:96:8b:21: c9:d8:0f:d3:a6:ee:63:66:c9:d8:09:df:6f:1b:61: 8d:fb:75:a5:46:c6:bc:74:d0:42:64:13:8b:cd:f8: 87:a7:17:05:b2:b9:1b:3b:ee:af:36:fe:5c:a8:5b: 4c:b2:aa:ab:7c:2d:27:f6:6d:61:7a:17:07:79:04: e8:06:9e:d6:f2:f2:e3:3f:8c:f9:19:32:eb:2f:b7: f0:2c:99:e7:aa:7d:df:04:f7:48:68:73:a1:0d:64: d9:7d:39:98:a2:18:66:0a:61:2f:d4:ba:78:e2:4f: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4A:CD:9C:D9:46:9B:3C:4F:76:1E:2E:6B:0D:18:6A:D8:CD:C6:B0 X509v3 Authority Key Identifier: keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.106.0/23 Signature Algorithm: sha256WithRSAEncryption 09:d3:37:04:59:40:ef:7b:47:56:fd:a7:c8:83:44:86:8b:c6: 47:c6:e0:5f:ed:d5:7a:81:ad:4c:2a:a6:73:b7:3c:c9:ca:3d: 00:5b:69:98:67:c3:eb:2c:82:2a:8e:0e:69:71:8c:52:12:b4: 4b:f9:a6:79:d2:14:50:62:f7:bf:7b:c8:08:b4:63:71:b1:0d: 2d:a1:f3:2c:38:dd:0c:be:2c:de:4d:6c:d3:01:80:7a:f4:43: 41:00:24:34:f3:14:03:f3:d2:74:ae:75:97:56:84:33:a0:9c: 1c:b0:24:b5:01:ff:a8:49:61:f0:5d:55:15:7e:59:85:3d:bb: 6a:ac:7d:89:76:50:b1:13:08:e3:1b:2a:09:84:15:18:18:ba: ba:45:7d:ef:01:7b:5f:83:f7:ab:ed:2b:de:e1:05:1f:a2:86: 20:5f:60:46:be:02:56:31:9f:7e:33:20:ab:7e:07:9d:3b:84: 70:f8:3e:55:02:ba:30:e4:e1:ff:74:ab:b8:17:a9:1b:bc:5c: d2:d8:9c:c8:bc:5e:ad:00:81:94:99:40:b8:04:52:a2:ab:76: c1:2f:13:51:d3:59:a4:dc:99:07:28:14:d2:8a:d0:d2:88:95: 6f:a7:87:5b:af:ee:2d:2f:a7:6f:88:2e:a7:3b:ac:ec:37:e5: 4c:c9:98:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKMXzQlE+6GiYBT4yLZKL/DtsWMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVF NzRFMkE2RDAeFw0yNTA2MDIwMTU5MzRaFw0yNjA2MDEwMjA0MzRaMDMxMTAvBgNV BAMTKEE1NEFDRDlDRDk0NjlCM0M0Rjc2MUUyRTZCMEQxODZBRDhDREM2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7MSt9PjlaLbRhtfogS3GrvGb GPwi3kVCypdgsBREwC7xc72KP9wiynew2yMLekFNl1BtNrRUyTaXBZKgmhUS0dap v/SzMXAh8wZz4lUDgsteoeWWG66VbEwh4owSyPC4lNkgcaIzXQvooP1StOctMLiH BeJ3FmYtOO6lKbyNA5sZxP3tQ3lRH/Cvajl8nSlBKJaLIcnYD9Om7mNmydgJ328b YY37daVGxrx00EJkE4vN+IenFwWyuRs77q82/lyoW0yyqqt8LSf2bWF6Fwd5BOgG ntby8uM/jPkZMusvt/Asmeeqfd8E90hoc6ENZNl9OZiiGGYKYS/UunjiTx/JAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpUrNnNlGmzxPdh4uaw0YatjNxrAwHwYDVR0j BBgwFoAUlegA6/9kcJiSy1dB2e3HXudOKm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmI1YWUxZS1iZTY2LTRhMzAtYTk0OC03ZDQ3OGMyMmVhMmIvMC85NUU4MDBFQkZG NjQ3MDk4OTJDQjU3NDFEOUVEQzc1RUU3NEUyQTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVFODAwRUJGRjY0NzA5ODkyQ0I1NzQxRDlFREM3NUVFNzRF MkE2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2YjVhZTFlLWJlNjYtNGEzMC1h OTQ4LTdkNDc4YzIyZWEyYi8wLzMxMzAzMzJlMzEzMzM0MmUzMTMwMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4ZqMA0GCSqG SIb3DQEBCwUAA4IBAQAJ0zcEWUDve0dW/afIg0SGi8ZHxuBf7dV6ga1MKqZztzzJ yj0AW2mYZ8PrLIIqjg5pcYxSErRL+aZ50hRQYve/e8gItGNxsQ0tofMsON0Mvize TWzTAYB69ENBACQ08xQD89J0rnWXVoQzoJwcsCS1Af+oSWHwXVUVflmFPbtqrH2J dlCxEwjjGyoJhBUYGLq6RX3vAXtfg/er7Sve4QUfooYgX2BGvgJWMZ9+MyCrfged O4Rw+D5VArow5OH/dKu4F6kbvFzS2JzIvF6tAIGUmUC4BFKiq3bBLxNR01mk3JkH KBTSitDSiJVvp4dbr+4tL6dviC6nO6zsN+VMyZjQ -----END CERTIFICATE-----Generated at Sat Jun 7 23:09:14 2025 by rpki-client