$ rpki-client -vvf repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa File: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (raw, json) Hash identifier: mLhBYPkwACBbxlJsTnV03pPrOs7jfGDROaGC1YIb24I= Subject key identifier: 9E:9B:A4:E8:49:AC:1D:A3:E4:7F:43:9D:7C:BA:15:3F:76:27:E0:F0 Certificate issuer: /CN=D85F6D41E807D8825356A681A7518FA27664A965 Certificate serial: 2F52CB9B9A31C382029F2EC6A1302A628F0C06F5 Authority key identifier: D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa Signing time: Sat 26 Apr 2025 21:00:00 +0000 ROA not before: Sat 26 Apr 2025 20:55:00 +0000 ROA not after: Sat 25 Apr 2026 21:00:00 +0000 asID: 141983 IP address blocks: 103.167.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:52:cb:9b:9a:31:c3:82:02:9f:2e:c6:a1:30:2a:62:8f:0c:06:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F6D41E807D8825356A681A7518FA27664A965 Validity Not Before: Apr 26 20:55:00 2025 GMT Not After : Apr 25 21:00:00 2026 GMT Subject: CN=9E9BA4E849AC1DA3E47F439D7CBA153F7627E0F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:22:48:6e:15:0c:20:a5:3c:0d:ed:6d:54: 74:7b:5c:58:ee:95:4e:71:20:39:75:25:a9:aa:81: d2:a4:02:5f:5f:a8:61:11:5b:7e:1b:4e:87:8f:a6: 58:35:e0:2a:39:2d:73:04:fd:ca:de:55:16:4b:d9: 20:cf:29:f1:10:4c:0b:2f:77:6c:d0:d4:38:9b:fd: 1b:60:5d:7a:9c:49:be:04:02:75:6d:2e:1c:8c:ef: 10:ba:5a:54:2d:bd:3e:0f:84:b7:8c:c2:e1:cb:3d: a9:c2:7c:8e:1d:c6:c1:47:89:94:79:a8:1f:10:83: e5:60:a1:3a:fb:30:c1:8b:eb:1a:b0:86:fa:ea:3f: 58:27:7e:a0:2c:2a:ab:5f:ac:61:8b:d7:3e:d2:93: a3:a7:da:36:77:54:6c:fc:a6:cb:8a:eb:98:81:a8: ca:58:c1:02:25:78:bc:c7:b4:9b:9d:ed:b9:39:fa: 3c:69:64:fb:48:64:b5:0d:63:5b:c8:c2:71:db:f4: 6d:6e:26:b5:36:b5:ec:4f:eb:a7:61:ba:3d:7d:4e: 8b:7e:01:a5:7b:b2:36:d4:98:13:a0:73:23:38:95: 46:31:48:f6:d3:ae:d1:98:71:c4:25:2f:f3:19:41: 46:c7:e1:59:07:2a:8c:4d:5d:9f:3a:ac:76:dd:ca: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9B:A4:E8:49:AC:1D:A3:E4:7F:43:9D:7C:BA:15:3F:76:27:E0:F0 X509v3 Authority Key Identifier: keyid:D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.171.0/24 Signature Algorithm: sha256WithRSAEncryption 14:73:d2:6d:b3:83:07:db:19:1b:5d:58:05:00:d4:56:9a:1b: 4a:95:4f:5c:d0:9d:e8:77:8a:e1:8c:be:0d:74:e6:0d:49:c0: 4f:72:a4:41:16:54:f1:1a:3f:bf:ca:5b:6a:8f:4d:64:97:d4: de:85:eb:b7:84:de:ea:7b:ea:a7:e5:01:43:fa:62:fc:f3:79: 72:5a:80:9f:84:27:26:eb:5f:54:23:2b:03:c0:45:68:88:9d: 4e:a3:48:b2:1f:75:13:1b:5c:ca:97:56:7b:33:4a:98:03:28: 5b:8c:d5:cc:18:78:62:f6:36:e4:4d:f9:55:94:04:80:b7:41: 84:6b:3d:c2:bc:e9:04:99:2a:60:ff:4d:9d:ae:86:6f:41:ae: ff:70:15:fb:3f:97:1a:d8:3d:0e:99:85:7a:56:6d:40:b8:3f: 10:c3:32:f6:42:ba:d6:6a:e8:80:75:bb:cd:e7:02:c4:ef:c3: ad:b6:a8:77:95:de:b0:21:f2:1c:2a:44:b6:69:29:b2:b8:fc: 42:da:cd:59:af:04:f9:80:7b:d2:59:6b:96:a6:4b:2e:ba:11: bc:b6:3c:58:52:2e:39:a6:b7:f8:8b:78:84:17:8f:de:4d:db: 95:f0:ea:04:ad:09:6f:8d:fe:e5:43:89:fd:d7:33:52:3e:38: 89:17:89:0f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUL1LLm5oxw4ICny7GoTAqYo8MBvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3 NjY0QTk2NTAeFw0yNTA0MjYyMDU1MDBaFw0yNjA0MjUyMTAwMDBaMDMxMTAvBgNV BAMTKDlFOUJBNEU4NDlBQzFEQTNFNDdGNDM5RDdDQkExNTNGNzYyN0UwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uCJIbhUMIKU8De1tVHR7XFju lU5xIDl1JamqgdKkAl9fqGERW34bToePplg14Co5LXME/creVRZL2SDPKfEQTAsv d2zQ1Dib/RtgXXqcSb4EAnVtLhyM7xC6WlQtvT4PhLeMwuHLPanCfI4dxsFHiZR5 qB8Qg+VgoTr7MMGL6xqwhvrqP1gnfqAsKqtfrGGL1z7Sk6On2jZ3VGz8psuK65iB qMpYwQIleLzHtJud7bk5+jxpZPtIZLUNY1vIwnHb9G1uJrU2texP66dhuj19Tot+ AaV7sjbUmBOgcyM4lUYxSPbTrtGYccQlL/MZQUbH4VkHKoxNXZ86rHbdyiztAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUnpuk6EmsHaPkf0OdfLoVP3Yn4PAwHwYDVR0j BBgwFoAU2F9tQegH2IJTVqaBp1GPonZkqWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmJlZGYzYS1kN2QxLTQ5YTYtOTNlZC1iMjc3ZjFmN2E2ZWIvMC9EODVGNkQ0MUU4 MDdEODgyNTM1NkE2ODFBNzUxOEZBMjc2NjRBOTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3NjY0 QTk2NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2YmVkZjNhLWQ3ZDEtNDlhNi05 M2VkLWIyNzdmMWY3YTZlYi8wLzMxMzAzMzJlMzEzNjM3MmUzMTM3MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp6swDQYJ KoZIhvcNAQELBQADggEBABRz0m2zgwfbGRtdWAUA1FaaG0qVT1zQneh3iuGMvg10 5g1JwE9ypEEWVPEaP7/KW2qPTWSX1N6F67eE3up76qflAUP6YvzzeXJagJ+EJybr X1QjKwPARWiInU6jSLIfdRMbXMqXVnszSpgDKFuM1cwYeGL2NuRN+VWUBIC3QYRr PcK86QSZKmD/TZ2uhm9Brv9wFfs/lxrYPQ6ZhXpWbUC4PxDDMvZCutZq6IB1u83n AsTvw622qHeV3rAh8hwqRLZpKbK4/ELazVmvBPmAe9JZa5amSy66Eby2PFhSLjmm t/iLeIQXj95N25Xw6gStCW+N/uVDif3XM1I+OIkXiQ8= -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:33 2025 by rpki-client