$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa File: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (raw, json) Hash identifier: SPW5Gl3BeUVHO5fIh7gLc9Co4QXzBznSK3/ByXd6mfU= Subject key identifier: 67:3E:44:12:52:8F:86:9D:DF:E4:4F:0E:08:F9:BF:2B:54:45:DF:36 Certificate issuer: /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Certificate serial: 6D0BE183062C405F8CAD2FC4C4F5934BD2A4E756 Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa Signing time: Wed 18 Jun 2025 06:00:02 +0000 ROA not before: Wed 18 Jun 2025 05:55:02 +0000 ROA not after: Wed 17 Jun 2026 06:00:02 +0000 asID: 142396 IP address blocks: 103.172.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 18:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0b:e1:83:06:2c:40:5f:8c:ad:2f:c4:c4:f5:93:4b:d2:a4:e7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094 Validity Not Before: Jun 18 05:55:02 2025 GMT Not After : Jun 17 06:00:02 2026 GMT Subject: CN=673E4412528F869DDFE44F0E08F9BF2B5445DF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:7b:a9:c8:7b:e4:25:d9:4f:8e:1f:e1:e8: 6c:36:fe:55:a1:79:83:17:6a:53:f9:67:38:9e:47: 53:31:06:e3:a0:7f:6c:34:5d:16:65:ed:19:13:b3: 38:38:30:95:16:95:ed:14:9e:31:2a:a5:09:7d:43: f9:0c:55:15:22:3f:fe:e3:9f:0e:bb:1c:51:03:e4: c3:dc:fa:ba:f1:2e:4c:e2:c7:a8:f8:a4:0a:10:31: aa:ef:d2:d6:11:86:46:6b:8a:68:75:d5:5b:52:d1: 43:40:98:83:1a:35:cf:d9:6c:5e:2d:10:4f:03:11: 30:a1:1d:d7:fe:f8:7a:40:21:c2:92:c7:c4:3d:ba: d3:c7:0f:03:6a:ec:c3:fe:28:1d:08:df:ee:a4:f5: e0:c5:00:59:1d:e4:d9:19:02:d5:7e:37:aa:e9:e0: f7:b6:b1:4c:a1:af:56:e3:40:55:f3:e5:46:dd:9b: e0:1c:fb:b8:d2:b9:b0:53:45:bf:be:ad:77:f3:93: fa:05:92:85:0d:40:3e:8d:34:54:82:d4:11:5b:df: cf:82:a8:13:20:af:f9:80:73:c2:e4:28:31:73:18: bb:87:0c:68:cd:de:25:d8:9a:c5:9c:38:a4:20:ae: 8f:ca:9a:5f:a1:d7:35:d7:15:92:c8:dc:f7:7c:26: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3E:44:12:52:8F:86:9D:DF:E4:4F:0E:08:F9:BF:2B:54:45:DF:36 X509v3 Authority Key Identifier: keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.170.0/24 Signature Algorithm: sha256WithRSAEncryption 53:82:4f:67:35:f7:33:d9:c1:32:67:39:95:27:80:3e:61:d2: c7:0d:b5:3c:31:89:c9:42:db:4e:ff:d5:cd:03:f3:d9:08:b8: 98:91:88:72:55:bd:0c:07:f7:e2:95:c4:11:c7:df:57:dd:42: c6:d4:6e:3c:8a:b1:ed:c2:29:15:bd:26:62:59:c7:f4:f5:78: d3:85:ba:ea:7b:81:6e:06:1f:d8:32:09:62:59:09:c2:cf:85: 3c:a7:5b:86:5b:92:8d:5f:b1:29:f3:16:15:4c:05:93:2a:4b: 62:b4:1d:c5:58:f6:ec:2d:b4:f4:8b:c0:d1:a1:32:80:e5:38: 52:b4:a6:96:b9:68:3b:5c:ec:79:10:d4:f6:31:73:9a:b0:5d: d6:73:fa:6a:43:d1:da:bc:81:1b:48:67:a5:23:ef:77:e3:0b: 76:08:63:5c:03:b7:ed:9e:a3:d4:06:c6:cb:9a:c9:64:3e:31: 63:9b:a2:6e:d1:18:d0:6b:1f:3b:01:ef:53:16:22:5e:b9:13: 35:11:f6:7b:af:ea:63:5e:05:1e:aa:68:a9:d3:de:e2:35:16: 49:71:e0:d0:63:bf:39:a5:f7:45:d8:fe:09:c9:ae:d4:2a:a9: 70:2a:65:02:49:df:f7:e0:81:66:6b:64:47:d2:a6:25:04:a1: 44:3c:53:7e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUbQvhgwYsQF+MrS/ExPWTS9Kk51YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYw NTZERjA5NDAeFw0yNTA2MTgwNTU1MDJaFw0yNjA2MTcwNjAwMDJaMDMxMTAvBgNV BAMTKDY3M0U0NDEyNTI4Rjg2OURERkU0NEYwRTA4RjlCRjJCNTQ0NURGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf0nupyHvkJdlPjh/h6Gw2/lWh eYMXalP5ZzieR1MxBuOgf2w0XRZl7RkTszg4MJUWle0UnjEqpQl9Q/kMVRUiP/7j nw67HFED5MPc+rrxLkzix6j4pAoQMarv0tYRhkZrimh11VtS0UNAmIMaNc/ZbF4t EE8DETChHdf++HpAIcKSx8Q9utPHDwNq7MP+KB0I3+6k9eDFAFkd5NkZAtV+N6rp 4Pe2sUyhr1bjQFXz5Ubdm+Ac+7jSubBTRb++rXfzk/oFkoUNQD6NNFSC1BFb38+C qBMgr/mAc8LkKDFzGLuHDGjN3iXYmsWcOKQgro/Kml+h1zXXFZLI3Pd8JsEnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUZz5EElKPhp3f5E8OCPm/K1RF3zYwHwYDVR0j BBgwFoAUm/csi7fKNZvkZ0Grzk62nwVt8JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWRiNmM5Yi1kOGZjLTRkOGMtODBjYi1mZDIyNDEyMDhkZGUvMC85QkY3MkM4QkI3 Q0EzNTlCRTQ2NzQxQUJDRTRFQjY5RjA1NkRGMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUJGNzJDOEJCN0NBMzU5QkU0Njc0MUFCQ0U0RUI2OUYwNTZE RjA5NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxZGI2YzliLWQ4ZmMtNGQ4Yy04 MGNiLWZkMjI0MTIwOGRkZS8wLzMxMzAzMzJlMzEzNzMyMmUzMTM3MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrKowDQYJ KoZIhvcNAQELBQADggEBAFOCT2c19zPZwTJnOZUngD5h0scNtTwxiclC207/1c0D 89kIuJiRiHJVvQwH9+KVxBHH31fdQsbUbjyKse3CKRW9JmJZx/T1eNOFuup7gW4G H9gyCWJZCcLPhTynW4Zbko1fsSnzFhVMBZMqS2K0HcVY9uwttPSLwNGhMoDlOFK0 ppa5aDtc7HkQ1PYxc5qwXdZz+mpD0dq8gRtIZ6Uj73fjC3YIY1wDt+2eo9QGxsua yWQ+MWObom7RGNBrHzsB71MWIl65EzUR9nuv6mNeBR6qaKnT3uI1Fklx4NBjvzml 90XY/gnJrtQqqXAqZQJJ3/fggWZrZEfSpiUEoUQ8U34= -----END CERTIFICATE-----Generated at Mon Jun 30 08:47:19 2025 by rpki-client