$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa File: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (raw, json) Hash identifier: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao= Subject key identifier: 14:20:40:17:E3:16:13:04:30:26:43:D1:AC:94:A1:AC:3C:8C:73:79 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 7EC3A83613920212F65D83E12D70415B5279304B Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa Signing time: Tue 03 Jun 2025 10:17:25 +0000 ROA not before: Tue 03 Jun 2025 10:12:25 +0000 ROA not after: Tue 02 Jun 2026 10:17:25 +0000 asID: 23954 IP address blocks: 103.191.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c3:a8:36:13:92:02:12:f6:5d:83:e1:2d:70:41:5b:52:79:30:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Jun 3 10:12:25 2025 GMT Not After : Jun 2 10:17:25 2026 GMT Subject: CN=14204017E3161304302643D1AC94A1AC3C8C7379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:af:b9:09:50:c0:cc:be:cc:12:a4:86:9d: 26:cd:8a:bd:75:c4:b5:f0:87:ab:5c:eb:8e:3f:30: 7a:e3:47:e2:22:ad:8d:5f:ff:a7:a3:2f:d2:fe:02: 30:4d:8e:e1:5d:07:18:6c:a7:c3:39:21:31:9c:7e: a4:63:ec:fb:12:51:13:a0:e0:dd:d1:18:22:b6:e5: 14:e1:44:13:dd:13:b3:e8:62:2c:fe:b3:71:13:23: 71:0e:64:74:ef:7d:4e:52:0c:77:c7:e8:eb:d8:13: 81:e3:de:40:ad:46:82:36:99:f1:a7:94:ee:22:18: 90:81:e8:ae:c9:b7:5b:fb:33:ca:6d:ce:76:bb:b8: 91:8c:a0:7e:a0:5c:42:04:22:a9:2a:39:57:e6:5e: b4:6d:5d:42:79:f4:e4:4f:08:45:fb:22:9c:29:a5: d6:ce:38:67:f5:99:9e:d4:f4:2c:f6:8e:10:ba:cf: ba:a0:95:c2:da:e7:1e:82:29:2b:a7:8b:3c:67:c3: 07:58:5f:58:d3:66:56:44:2e:d5:52:52:c6:9d:49: 4f:23:0c:46:09:42:18:92:19:96:3d:87:20:4e:92: 0d:5b:73:ff:65:39:8c:d4:81:b8:3b:12:09:b4:2c: 6c:50:81:23:36:b5:53:7a:14:04:c5:42:3f:1b:7e: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:20:40:17:E3:16:13:04:30:26:43:D1:AC:94:A1:AC:3C:8C:73:79 X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.126.0/23 Signature Algorithm: sha256WithRSAEncryption 61:f5:9b:a0:a1:7c:f4:e3:8d:b7:2d:9a:bb:09:f6:10:c9:1b: 3e:30:1c:0b:43:4f:e2:34:6a:26:1e:32:be:35:f3:4b:72:e0: 0d:39:67:83:0d:e0:b4:3d:e2:82:15:04:72:62:3a:ff:f0:53: 9a:0f:7d:bd:a2:c6:f2:19:1b:af:48:0f:be:5b:aa:22:45:86: a1:87:03:05:39:4d:ac:a0:11:d2:2d:3e:68:20:2f:6d:e4:43: f8:f3:9d:ca:ea:00:b6:b5:23:2e:a5:f9:1d:87:a3:3e:08:da: 36:4d:67:c7:cf:82:97:9c:42:f7:9e:a6:bd:fa:3e:13:b6:ab: 65:e4:74:6d:ca:21:8d:7e:b8:2c:ef:23:e7:61:0e:a9:94:99: 29:6f:1d:0e:a5:2c:c8:24:d3:4e:cc:81:9a:31:8d:80:45:82: 9a:09:99:ef:44:16:09:b4:1c:24:ae:90:33:7d:62:e9:f6:d0: d3:d3:e9:5f:08:28:14:f1:16:99:e3:3c:4e:94:ad:38:3d:c3: 8a:d9:b7:6e:94:7e:6a:0f:c4:1f:17:7e:54:d7:f9:07:67:dd: 32:20:a3:9b:e8:5b:54:f4:d5:fa:4a:b3:12:a5:a1:bb:11:bd: 88:b5:13:dd:99:6b:51:be:69:c3:cf:15:a4:96:05:3e:74:f5: 54:92:11:21 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfsOoNhOSAhL2XYPhLXBBW1J5MEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNTA2MDMxMDEyMjVaFw0yNjA2MDIxMDE3MjVaMDMxMTAvBgNV BAMTKDE0MjA0MDE3RTMxNjEzMDQzMDI2NDNEMUFDOTRBMUFDM0M4QzczNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnK+5CVDAzL7MEqSGnSbNir11 xLXwh6tc644/MHrjR+IirY1f/6ejL9L+AjBNjuFdBxhsp8M5ITGcfqRj7PsSUROg 4N3RGCK25RThRBPdE7PoYiz+s3ETI3EOZHTvfU5SDHfH6OvYE4Hj3kCtRoI2mfGn lO4iGJCB6K7Jt1v7M8ptzna7uJGMoH6gXEIEIqkqOVfmXrRtXUJ59ORPCEX7Ipwp pdbOOGf1mZ7U9Cz2jhC6z7qglcLa5x6CKSunizxnwwdYX1jTZlZELtVSUsadSU8j DEYJQhiSGZY9hyBOkg1bc/9lOYzUgbg7Egm0LGxQgSM2tVN6FATFQj8bfmNxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFCBAF+MWEwQwJkPRrJShrDyMc3kwHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiMDA3NGNmLTc2ZGQtNDA5Ny1h MTliLWUzN2U2Mjg1OGIyNC8wLzMxMzAzMzJlMzEzOTMxMmUzMTMyMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMjMzMzkzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ79+MA0GCSqG SIb3DQEBCwUAA4IBAQBh9ZugoXz04423LZq7CfYQyRs+MBwLQ0/iNGomHjK+NfNL cuANOWeDDeC0PeKCFQRyYjr/8FOaD329osbyGRuvSA++W6oiRYahhwMFOU2soBHS LT5oIC9t5EP4853K6gC2tSMupfkdh6M+CNo2TWfHz4KXnEL3nqa9+j4Ttqtl5HRt yiGNfrgs7yPnYQ6plJkpbx0OpSzIJNNOzIGaMY2ARYKaCZnvRBYJtBwkrpAzfWLp 9tDT0+lfCCgU8RaZ4zxOlK04PcOK2bdulH5qD8QfF35U1/kHZ90yIKOb6FtU9NX6 SrMSpaG7Eb2ItRPdmWtRvmnDzxWklgU+dPVUkhEh -----END CERTIFICATE-----Generated at Sat Jun 7 23:07:55 2025 by rpki-client