$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32322d3234203d3e203535373031.roa File: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (raw, json) Hash identifier: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44= Subject key identifier: 0C:16:5F:5A:2F:A7:C0:59:29:B7:E7:EF:23:8D:C6:53:48:39:FF:78 Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 519D7ABF740EDD7E0B95E0947550F8B431180B11 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32322d3234203d3e203535373031.roa Signing time: Mon 23 Jun 2025 07:26:31 +0000 ROA not before: Mon 23 Jun 2025 07:21:31 +0000 ROA not after: Mon 22 Jun 2026 07:26:31 +0000 asID: 55701 IP address blocks: 103.31.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9d:7a:bf:74:0e:dd:7e:0b:95:e0:94:75:50:f8:b4:31:18:0b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Jun 23 07:21:31 2025 GMT Not After : Jun 22 07:26:31 2026 GMT Subject: CN=0C165F5A2FA7C05929B7E7EF238DC6534839FF78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:ca:29:40:2c:5d:de:35:87:3a:25:ba:95: d6:0f:7b:e5:fc:5a:62:21:98:76:8e:ed:3e:49:40: 73:5a:a3:af:88:b2:24:1d:15:68:ca:56:95:c9:40: 8e:5c:89:54:54:77:99:7f:f3:32:5a:cb:2f:a5:3f: c7:74:b3:5e:d5:c3:06:b2:25:ce:b7:9a:1a:5d:20: b9:9d:15:4c:83:02:c6:14:57:23:29:a3:99:e9:8d: f3:65:92:ef:6d:35:7d:b3:a6:1c:c6:77:62:3c:7b: 2f:41:c6:ef:74:d8:d2:b4:f6:d3:8c:c9:0d:c2:65: e3:01:0e:e8:3d:c2:e0:37:57:8e:ed:bc:d7:56:2b: 94:ec:2d:45:7a:c5:7d:8e:7d:e7:28:53:c7:fd:77: 4f:14:ef:04:d6:9f:9e:c2:d5:ef:71:77:60:42:25: 86:c5:0b:89:42:97:0d:f9:a2:bd:e3:e3:d2:f7:3c: 53:d0:27:ff:5e:4d:35:7a:0b:9f:79:1e:00:a0:64: c9:70:0e:e8:7a:11:57:f4:70:ac:8e:d9:3d:ba:e7: ba:a1:ad:19:43:3a:3d:de:b7:89:57:11:b9:db:54: b7:c3:80:3e:b6:b0:70:28:4f:e9:27:0f:5c:4e:1b: c3:42:c6:83:e7:48:83:b3:2c:35:d8:bb:3f:8f:da: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:16:5F:5A:2F:A7:C0:59:29:B7:E7:EF:23:8D:C6:53:48:39:FF:78 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233322e302f32322d3234203d3e203535373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.232.0/22 Signature Algorithm: sha256WithRSAEncryption b6:34:c0:97:6e:fe:54:55:2a:15:5b:48:c3:a4:7b:bb:51:5c: 81:30:87:55:fe:5b:2c:59:e1:b1:11:43:14:f0:c4:6c:d9:0e: 23:15:ff:7f:ed:59:0f:e6:9e:24:93:72:7d:4c:71:3f:26:bb: e0:3c:56:7f:62:4e:6f:af:b7:52:1c:0e:5a:25:a6:c8:dd:a2: c0:26:b0:15:df:20:95:97:29:dc:14:a4:3d:8a:40:93:85:06: a4:2c:7b:23:02:bf:77:7e:a4:9d:a0:4b:70:2c:87:1d:9e:6b: 63:a1:74:55:2a:68:d0:58:19:a8:02:ca:30:ee:9b:93:12:d3: 0b:49:61:e1:62:eb:9f:46:49:53:0f:55:ad:a1:85:a2:47:de: 1f:0a:9e:c7:17:58:8d:30:46:d7:8b:41:54:88:6f:e6:78:c4: be:fb:f0:fb:21:e7:22:aa:58:09:16:ba:2e:cc:04:09:4e:99: c8:fc:a7:cd:7a:82:bb:b6:93:5b:7d:21:2c:56:85:47:13:63: 3a:2c:21:28:e6:8d:18:69:d3:27:bb:8e:f2:3c:ba:29:55:88: c5:f1:c3:b7:b4:75:a0:f3:1f:d1:d0:e6:da:e4:7b:b9:4c:eb: 62:f3:e7:d7:bd:a8:9b:69:15:f9:42:7f:d5:b7:a2:c3:f8:dc: b4:27:cb:b3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUZ16v3QO3X4LleCUdVD4tDEYCxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTA2MjMwNzIxMzFaFw0yNjA2MjIwNzI2MzFaMDMxMTAvBgNV BAMTKDBDMTY1RjVBMkZBN0MwNTkyOUI3RTdFRjIzOERDNjUzNDgzOUZGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChL8opQCxd3jWHOiW6ldYPe+X8 WmIhmHaO7T5JQHNao6+IsiQdFWjKVpXJQI5ciVRUd5l/8zJayy+lP8d0s17Vwway Jc63mhpdILmdFUyDAsYUVyMpo5npjfNlku9tNX2zphzGd2I8ey9Bxu902NK09tOM yQ3CZeMBDug9wuA3V47tvNdWK5TsLUV6xX2OfecoU8f9d08U7wTWn57C1e9xd2BC JYbFC4lClw35or3j49L3PFPQJ/9eTTV6C595HgCgZMlwDuh6EVf0cKyO2T2657qh rRlDOj3et4lXEbnbVLfDgD62sHAoT+knD1xOG8NCxoPnSIOzLDXYuz+P2prZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDBZfWi+nwFkpt+fvI43GU0g5/3gwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05 NTBlLThiZThlMTVmZDNlZS8wLzMxMzAzMzJlMzMzMTJlMzIzMzMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcf6DANBgkqhkiG 9w0BAQsFAAOCAQEAtjTAl27+VFUqFVtIw6R7u1FcgTCHVf5bLFnhsRFDFPDEbNkO IxX/f+1ZD+aeJJNyfUxxPya74DxWf2JOb6+3UhwOWiWmyN2iwCawFd8glZcp3BSk PYpAk4UGpCx7IwK/d36knaBLcCyHHZ5rY6F0VSpo0FgZqALKMO6bkxLTC0lh4WLr n0ZJUw9VraGFokfeHwqexxdYjTBG14tBVIhv5njEvvvw+yHnIqpYCRa6LswECU6Z yPynzXqCu7aTW30hLFaFRxNjOiwhKOaNGGnTJ7uO8jy6KVWIxfHDt7R1oPMf0dDm 2uR7uUzrYvPn172om2kV+UJ/1beiw/jctCfLsw== -----END CERTIFICATE-----Generated at Mon Jun 30 03:34:20 2025 by rpki-client