$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa File: 3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa (raw, json) Hash identifier: qqfzsjlYqjPxNhzC0UkUL2m+zHonm3K6iD+8hUdOJig= Subject key identifier: 98:D8:EA:8D:5F:7B:D3:04:08:76:98:6C:FA:AF:A1:C2:F7:8B:DF:18 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 1FB86E8EE6329BF5FA99033A7A7A95FF0A463B22 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa Signing time: Sat 21 Jun 2025 08:00:02 +0000 ROA not before: Sat 21 Jun 2025 07:55:02 +0000 ROA not after: Sat 20 Jun 2026 08:00:02 +0000 asID: 139949 IP address blocks: 103.25.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b8:6e:8e:e6:32:9b:f5:fa:99:03:3a:7a:7a:95:ff:0a:46:3b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Jun 21 07:55:02 2025 GMT Not After : Jun 20 08:00:02 2026 GMT Subject: CN=98D8EA8D5F7BD3040876986CFAAFA1C2F78BDF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:ab:89:8f:c8:7f:61:b3:79:75:79:f6:56: 5f:c1:8f:37:67:f2:39:f1:90:a9:3e:ed:b3:53:37: 13:25:8c:70:e2:00:a8:70:1d:9d:43:71:e7:d2:16: b6:c8:ef:9d:26:c0:c9:0d:c7:b6:73:ef:1d:88:c1: dd:62:b3:bb:0d:d6:00:0e:d1:b2:ef:ac:86:0a:bf: 75:27:66:82:eb:97:7d:4a:68:fd:be:fd:78:25:fa: 59:4d:c3:32:bd:15:0e:2a:c5:91:10:70:27:e6:53: cb:b2:2c:87:3a:7c:29:3e:8b:ec:de:cd:ba:76:6a: 01:40:34:72:6f:cf:1a:e8:77:4a:0f:34:47:52:c4: b9:6a:68:81:e5:1a:99:14:d1:c5:72:41:98:da:97: a3:4a:c6:96:21:4b:20:c0:d4:18:37:b6:2d:ff:28: 33:fb:64:90:e4:3e:6c:dd:cf:78:4e:a2:53:52:2f: 13:02:6b:2b:e1:fb:af:36:ba:60:7f:c8:d0:37:bf: 2f:13:96:d3:25:4b:f1:d0:d0:f8:f0:50:54:b0:1c: 4c:cf:ae:d6:df:51:68:7d:25:0d:94:d9:02:49:b8: 6d:60:a9:12:4b:6d:8d:a3:a8:c0:58:42:8e:af:b7: 1b:1b:ff:80:0a:d7:fe:8a:21:97:e6:ae:bf:5d:d3: 1a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:EA:8D:5F:7B:D3:04:08:76:98:6C:FA:AF:A1:C2:F7:8B:DF:18 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.108.0/24 Signature Algorithm: sha256WithRSAEncryption a4:b3:46:43:af:8a:3d:83:dd:66:7f:73:9b:03:f9:a3:40:6c: 33:26:99:0c:fd:bd:4f:de:79:ac:91:a1:a4:da:6d:74:9e:ef: 80:eb:c4:e1:e8:c3:00:8b:18:7f:40:22:5a:1e:12:2d:72:1b: d7:8c:23:90:75:5b:62:4f:f5:d0:de:16:6d:48:cc:5f:d3:68: fd:a7:ce:9e:1b:68:19:2f:b4:45:ed:18:cf:db:c5:f5:cf:05: 77:8a:65:1c:bd:94:ef:18:36:30:1c:9a:56:e3:13:cf:d7:b3: 0e:81:ed:cf:50:db:ed:b7:b5:7d:9c:a7:35:6a:49:ad:97:e4: 70:cd:d3:56:64:eb:96:0f:4e:a2:ba:c2:d4:ab:e1:3f:2d:20: 4e:f1:30:ca:5d:33:ef:70:c1:e1:e2:c5:24:5b:af:6e:0d:9b: 49:bd:12:17:c4:d4:ad:d2:f7:2c:a4:f1:7f:4c:ce:86:d4:04: e6:a2:be:44:73:68:c2:c3:03:05:1a:b1:27:cc:b4:d8:37:a5: e0:ef:60:11:27:b4:bb:3e:7f:96:cc:ee:32:77:e9:a0:9e:0d: 0f:9c:f3:ab:22:9f:92:c9:c6:a0:a3:60:76:07:72:e9:79:27: 06:2a:e9:b8:6c:45:b7:21:5a:59:1c:01:9f:64:c9:9b:50:b4: 46:a7:64:c7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUH7hujuYym/X6mQM6enqV/wpGOyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTA2MjEwNzU1MDJaFw0yNjA2MjAwODAwMDJaMDMxMTAvBgNV BAMTKDk4RDhFQThENUY3QkQzMDQwODc2OTg2Q0ZBQUZBMUMyRjc4QkRGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpKuJj8h/YbN5dXn2Vl/Bjzdn 8jnxkKk+7bNTNxMljHDiAKhwHZ1DcefSFrbI750mwMkNx7Zz7x2Iwd1is7sN1gAO 0bLvrIYKv3UnZoLrl31KaP2+/Xgl+llNwzK9FQ4qxZEQcCfmU8uyLIc6fCk+i+ze zbp2agFANHJvzxrod0oPNEdSxLlqaIHlGpkU0cVyQZjal6NKxpYhSyDA1Bg3ti3/ KDP7ZJDkPmzdz3hOolNSLxMCayvh+682umB/yNA3vy8TltMlS/HQ0PjwUFSwHEzP rtbfUWh9JQ2U2QJJuG1gqRJLbY2jqMBYQo6vtxsb/4AK1/6KIZfmrr9d0xoPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmNjqjV970wQIdphs+q+hwveL3xgwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzAzMzJlMzIzNTJlMzEzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxlsMA0GCSqG SIb3DQEBCwUAA4IBAQCks0ZDr4o9g91mf3ObA/mjQGwzJpkM/b1P3nmskaGk2m10 nu+A68Th6MMAixh/QCJaHhItchvXjCOQdVtiT/XQ3hZtSMxf02j9p86eG2gZL7RF 7RjP28X1zwV3imUcvZTvGDYwHJpW4xPP17MOge3PUNvtt7V9nKc1akmtl+RwzdNW ZOuWD06iusLUq+E/LSBO8TDKXTPvcMHh4sUkW69uDZtJvRIXxNSt0vcspPF/TM6G 1ATmor5Ec2jCwwMFGrEnzLTYN6Xg72ARJ7S7Pn+WzO4yd+mgng0PnPOrIp+Sycag o2B2B3LpeScGKum4bEW3IVpZHAGfZMmbULRGp2TH -----END CERTIFICATE-----Generated at Tue Jul 1 00:53:03 2025 by rpki-client