$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa File: 3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa (raw, json) Hash identifier: SP7Vczz+6iJdkBg+Pm02fK5fUh9ipxxjJbwoliQlUe0= Subject key identifier: 30:77:A7:0C:35:2F:70:F0:35:64:8F:7F:D3:D5:B9:3F:EA:2E:DF:07 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 30A92B6B6D0B0CBC5001668AE628C8005246AB9D Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa Signing time: Fri 20 Jun 2025 18:00:00 +0000 ROA not before: Fri 20 Jun 2025 17:55:00 +0000 ROA not after: Fri 19 Jun 2026 18:00:00 +0000 asID: 147078 IP address blocks: 103.173.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a9:2b:6b:6d:0b:0c:bc:50:01:66:8a:e6:28:c8:00:52:46:ab:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Jun 20 17:55:00 2025 GMT Not After : Jun 19 18:00:00 2026 GMT Subject: CN=3077A70C352F70F035648F7FD3D5B93FEA2EDF07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ce:9b:b9:df:3a:27:95:4e:a5:21:ed:33:e3: 59:e2:f3:92:30:f5:12:a0:18:b6:c4:2f:33:6a:6e: 3b:ea:8f:b9:0a:a6:ab:83:d9:c4:43:61:98:75:77: b1:ee:5a:1b:5b:c6:f4:9d:e0:32:31:1e:fc:73:58: c8:cb:d1:a7:5f:d6:32:e9:4a:f1:aa:50:2b:73:60: 21:bb:e7:9c:aa:90:cb:d6:5b:d8:ec:8b:e5:cd:f7: 86:4b:7e:32:2d:b6:68:8f:22:2d:bd:c7:81:ff:ee: ee:32:43:9b:12:92:1b:ff:c6:97:01:18:c0:e0:bf: 97:a8:49:54:10:e2:5d:35:f4:b3:39:e8:7b:a6:c7: 4b:51:57:23:3b:a2:33:30:3c:8a:89:0e:e3:86:ab: bf:95:8a:ae:ce:8d:f1:3f:e1:50:08:87:bc:32:6d: 4e:ca:d0:3e:25:9c:2d:ba:65:72:75:b3:3d:90:0b: ae:5e:bc:45:a5:2c:6e:e1:98:fa:e3:77:3a:90:af: af:40:91:f1:bc:aa:2a:b3:cb:7a:cb:14:42:c9:5d: 90:55:b3:b8:e0:ac:48:06:19:02:21:35:e4:0a:70: 50:59:60:db:9d:0a:14:08:85:94:2a:ea:85:f9:16: a5:f7:93:52:06:e9:b1:51:d6:90:8d:ca:b9:3b:1e: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:77:A7:0C:35:2F:70:F0:35:64:8F:7F:D3:D5:B9:3F:EA:2E:DF:07 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133382e302f32332d3233203d3e20313437303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.138.0/23 Signature Algorithm: sha256WithRSAEncryption 76:1d:a1:bc:f0:3d:92:6e:4b:47:bd:87:1c:a2:0b:89:44:bf: 84:cf:d1:23:ba:bd:e7:a6:76:40:c2:78:f7:d7:3f:7e:2b:27: 81:f1:5c:e2:73:18:57:6c:0b:27:54:1c:35:30:4c:75:0a:20: 31:5a:b8:4b:93:f2:32:91:b5:f8:1e:84:c9:e3:9d:cc:fb:b2: ad:ac:56:45:ec:35:3c:1b:d8:65:88:9f:84:b1:a2:37:9b:2c: ac:d2:67:5b:20:5a:d3:5e:6b:5d:d3:b5:ad:12:77:81:47:2c: 63:a0:b6:0e:b9:3c:bb:a0:ff:b9:3a:38:0f:e2:fc:be:c7:c0: 52:70:07:8f:b3:ed:3c:95:35:e9:ff:f2:8b:7b:58:90:5b:54: ed:1c:a2:06:cc:73:cd:e2:27:3e:07:a9:17:8a:d6:60:da:d0: 95:ec:03:b1:b9:5a:1c:77:1c:cb:df:cb:2f:3e:de:1e:c7:ba: 96:dd:ff:87:af:0f:fb:a2:37:ef:7e:64:58:d3:89:56:97:78: a7:67:cf:cf:72:cd:00:a8:14:8c:37:29:ac:46:11:b6:5a:ac: bd:44:8d:98:30:f1:09:54:41:92:51:f5:15:96:bd:84:7e:6f: 0f:fb:d7:a1:dc:58:c9:5a:f0:ba:2d:d9:75:a6:bf:b5:20:cd: d3:90:8b:d0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMKkra20LDLxQAWaK5ijIAFJGq50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTA2MjAxNzU1MDBaFw0yNjA2MTkxODAwMDBaMDMxMTAvBgNV BAMTKDMwNzdBNzBDMzUyRjcwRjAzNTY0OEY3RkQzRDVCOTNGRUEyRURGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzpu53zonlU6lIe0z41ni85Iw 9RKgGLbELzNqbjvqj7kKpquD2cRDYZh1d7HuWhtbxvSd4DIxHvxzWMjL0adf1jLp SvGqUCtzYCG755yqkMvWW9jsi+XN94ZLfjIttmiPIi29x4H/7u4yQ5sSkhv/xpcB GMDgv5eoSVQQ4l019LM56Humx0tRVyM7ojMwPIqJDuOGq7+Viq7OjfE/4VAIh7wy bU7K0D4lnC26ZXJ1sz2QC65evEWlLG7hmPrjdzqQr69AkfG8qiqzy3rLFELJXZBV s7jgrEgGGQIhNeQKcFBZYNudChQIhZQq6oX5FqX3k1IG6bFR1pCNyrk7Hnk7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUMHenDDUvcPA1ZI9/09W5P+ou3wcwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ZWZjYmYwLTY2ZWMtNDhkMy1i MjIxLTBmMDk2ODZkNTgxOC8wLzMxMzAzMzJlMzEzNzMzMmUzMTMzMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzczMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrYowDQYJ KoZIhvcNAQELBQADggEBAHYdobzwPZJuS0e9hxyiC4lEv4TP0SO6veemdkDCePfX P34rJ4HxXOJzGFdsCydUHDUwTHUKIDFauEuT8jKRtfgehMnjncz7sq2sVkXsNTwb 2GWIn4SxojebLKzSZ1sgWtNea13Tta0Sd4FHLGOgtg65PLug/7k6OA/i/L7HwFJw B4+z7TyVNen/8ot7WJBbVO0cogbMc83iJz4HqReK1mDa0JXsA7G5Whx3HMvfyy8+ 3h7Hupbd/4evD/uiN+9+ZFjTiVaXeKdnz89yzQCoFIw3KaxGEbZarL1EjZgw8QlU QZJR9RWWvYR+bw/716HcWMla8Lot2XWmv7UgzdOQi9A= -----END CERTIFICATE-----Generated at Tue Jul 1 06:57:16 2025 by rpki-client