$ rpki-client -vvf repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa File: 3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa (raw, json) Hash identifier: lkFPSA/0P6F0cE2k+qs5Hdu6hwn+gvFK2pZuPkqHwpw= Subject key identifier: F3:19:E8:97:2E:C9:E1:D0:0A:63:B5:7B:E0:9E:02:B2:5F:7E:04:A0 Certificate issuer: /CN=23F26F571E3865A06A13936555D8DAA27B433933 Certificate serial: 528F5FC429B6E7C0BA25FC327347D0A8173880C3 Authority key identifier: 23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa Signing time: Fri 20 Jun 2025 17:00:00 +0000 ROA not before: Fri 20 Jun 2025 16:55:00 +0000 ROA not after: Fri 19 Jun 2026 17:00:00 +0000 asID: 147078 IP address blocks: 103.173.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8f:5f:c4:29:b6:e7:c0:ba:25:fc:32:73:47:d0:a8:17:38:80:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23F26F571E3865A06A13936555D8DAA27B433933 Validity Not Before: Jun 20 16:55:00 2025 GMT Not After : Jun 19 17:00:00 2026 GMT Subject: CN=F319E8972EC9E1D00A63B57BE09E02B25F7E04A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f5:4a:b2:a1:d1:46:03:f4:be:e9:f7:83:2b: 31:35:01:e4:fe:16:2d:31:e6:99:b2:55:ec:e1:e9: 0d:09:30:7d:a2:73:cb:49:a0:75:31:21:6e:4c:ef: 1e:e7:92:50:bb:c8:09:0c:f3:e8:8c:70:83:9a:85: 0d:c3:1b:ea:63:32:bb:3d:3f:93:ed:45:9e:6d:d9: 55:5f:d5:1d:1e:8a:ad:33:48:13:e9:f3:2a:e1:88: e1:04:6d:a4:b8:ff:c7:10:6b:6d:13:75:1d:47:2c: ee:92:f9:5f:1a:08:8e:ff:18:1a:96:c2:ff:c1:52: e5:07:ec:5b:df:66:a3:99:71:16:67:53:32:74:8b: a3:87:a0:1c:5b:aa:8e:54:bb:36:2e:a0:58:fb:81: ca:d5:9a:f2:84:ad:94:03:d1:9b:b1:19:29:27:62: 43:e6:5e:ab:13:d5:12:5b:cb:74:d1:3e:75:09:65: 44:9a:59:dd:cf:1e:73:7c:62:47:27:87:25:7a:49: 3b:ad:d3:e9:30:2d:de:e0:25:12:1b:6b:c6:45:58: 10:14:52:f9:d2:2b:68:fe:67:c5:ec:70:ce:c6:b4: 97:57:af:37:68:da:48:d0:10:d0:96:ed:55:f8:35: 6d:a4:24:6f:bc:0f:e8:ac:56:b3:51:30:7f:5c:be: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:19:E8:97:2E:C9:E1:D0:0A:63:B5:7B:E0:9E:02:B2:5F:7E:04:A0 X509v3 Authority Key Identifier: keyid:23:F2:6F:57:1E:38:65:A0:6A:13:93:65:55:D8:DA:A2:7B:43:39:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/23F26F571E3865A06A13936555D8DAA27B433933.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23F26F571E3865A06A13936555D8DAA27B433933.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05efcbf0-66ec-48d3-b221-0f09686d5818/0/3130332e3137332e3133392e302f32342d3234203d3e20313437303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.139.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:3d:eb:8e:3e:54:0a:44:c6:76:33:c1:39:0d:35:a2:75:b2: 06:7b:b3:3f:c6:d8:0a:2f:aa:c9:d2:dd:fa:b4:45:45:4a:e4: 74:51:da:cf:66:69:d2:d4:6e:e5:76:5b:06:6e:1e:14:46:90: d5:c1:32:ed:9b:be:3d:13:26:91:8d:25:6d:61:44:ba:c7:1a: 92:0c:4a:aa:0f:5d:2a:a8:cc:44:3a:f5:85:c2:50:eb:5b:6f: 16:48:5a:0c:d3:7f:a3:5a:12:bb:37:93:80:d6:35:e4:c5:04: e5:c4:ae:08:74:11:6c:52:33:4d:a1:a6:04:b9:74:a3:f7:78: c9:d8:14:d7:47:bc:24:cf:2f:45:da:29:27:0f:60:a0:0b:e5: c3:bc:1c:93:db:af:03:12:33:4d:f3:0f:d3:fa:dc:18:f9:06: 53:98:c6:0c:3f:59:d6:01:cd:53:4f:c2:b1:91:3b:85:54:f8: 7f:37:78:84:fc:14:70:31:62:e7:83:88:fa:e3:60:40:d4:8d: b4:bd:d2:6b:7d:75:5f:96:6d:8c:90:3b:7a:ef:3f:6e:94:20: 73:f6:d9:6f:bf:78:89:90:e1:78:df:52:96:16:cf:18:7c:a8: 6d:37:eb:e5:1a:c9:b4:a2:e1:e3:98:54:35:f4:d1:e4:95:a5: 1a:2f:0c:c7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUo9fxCm258C6Jfwyc0fQqBc4gMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3 QjQzMzkzMzAeFw0yNTA2MjAxNjU1MDBaFw0yNjA2MTkxNzAwMDBaMDMxMTAvBgNV BAMTKEYzMTlFODk3MkVDOUUxRDAwQTYzQjU3QkUwOUUwMkIyNUY3RTA0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh9UqyodFGA/S+6feDKzE1AeT+ Fi0x5pmyVezh6Q0JMH2ic8tJoHUxIW5M7x7nklC7yAkM8+iMcIOahQ3DG+pjMrs9 P5PtRZ5t2VVf1R0eiq0zSBPp8yrhiOEEbaS4/8cQa20TdR1HLO6S+V8aCI7/GBqW wv/BUuUH7FvfZqOZcRZnUzJ0i6OHoBxbqo5UuzYuoFj7gcrVmvKErZQD0ZuxGSkn YkPmXqsT1RJby3TRPnUJZUSaWd3PHnN8YkcnhyV6STut0+kwLd7gJRIba8ZFWBAU UvnSK2j+Z8XscM7GtJdXrzdo2kjQENCW7VX4NW2kJG+8D+isVrNRMH9cvpaTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU8xnoly7J4dAKY7V74J4Csl9+BKAwHwYDVR0j BBgwFoAUI/JvVx44ZaBqE5NlVdjaontDOTMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVmY2JmMC02NmVjLTQ4ZDMtYjIyMS0wZjA5Njg2ZDU4MTgvMC8yM0YyNkY1NzFF Mzg2NUEwNkExMzkzNjU1NUQ4REFBMjdCNDMzOTMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNGMjZGNTcxRTM4NjVBMDZBMTM5MzY1NTVEOERBQTI3QjQz MzkzMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ZWZjYmYwLTY2ZWMtNDhkMy1i MjIxLTBmMDk2ODZkNTgxOC8wLzMxMzAzMzJlMzEzNzMzMmUzMTMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrYswDQYJ KoZIhvcNAQELBQADggEBAG09644+VApExnYzwTkNNaJ1sgZ7sz/G2AovqsnS3fq0 RUVK5HRR2s9madLUbuV2WwZuHhRGkNXBMu2bvj0TJpGNJW1hRLrHGpIMSqoPXSqo zEQ69YXCUOtbbxZIWgzTf6NaErs3k4DWNeTFBOXErgh0EWxSM02hpgS5dKP3eMnY FNdHvCTPL0XaKScPYKAL5cO8HJPbrwMSM03zD9P63Bj5BlOYxgw/WdYBzVNPwrGR O4VU+H83eIT8FHAxYueDiPrjYEDUjbS90mt9dV+WbYyQO3rvP26UIHP22W+/eImQ 4XjfUpYWzxh8qG036+UaybSi4eOYVDX00eSVpRovDMc= -----END CERTIFICATE-----Generated at Tue Jul 1 18:26:58 2025 by rpki-client