$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa File: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo= Subject key identifier: B1:BC:7C:95:CF:50:7E:43:68:CC:DC:E9:F9:84:FC:52:1C:D3:5B:4F Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 6BD609B73E4F122590D9F9B697B7559122D21B92 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa Signing time: Sat 21 Jun 2025 06:00:01 +0000 ROA not before: Sat 21 Jun 2025 05:55:01 +0000 ROA not after: Sat 20 Jun 2026 06:00:01 +0000 asID: 131111 IP address blocks: 103.174.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 15:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d6:09:b7:3e:4f:12:25:90:d9:f9:b6:97:b7:55:91:22:d2:1b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Jun 21 05:55:01 2025 GMT Not After : Jun 20 06:00:01 2026 GMT Subject: CN=B1BC7C95CF507E4368CCDCE9F984FC521CD35B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:93:41:5b:20:79:01:6d:c2:e3:cb:fd:e3:b7: 37:a0:0a:22:fa:17:98:c2:b9:9d:94:6f:95:10:1c: c9:40:98:7d:71:53:b2:f0:fa:54:42:bb:dc:49:b7: 37:3d:7d:47:20:ee:09:e2:9f:12:01:d7:38:01:f7: 99:fa:be:f2:9a:0c:48:8c:61:5d:42:71:1b:7c:df: ff:87:8e:da:da:89:4c:19:87:2f:76:4a:0e:a6:7b: b4:bc:c7:62:b9:7c:fa:a4:bc:1b:c1:67:51:26:a2: d2:bd:46:96:dd:98:ca:7c:4f:6b:9a:d6:e8:19:c8: 94:8c:7b:47:80:76:52:1e:69:a7:17:8a:6a:e6:fe: 4b:70:2e:a3:41:65:26:ba:5a:da:d2:ad:55:a4:f8: cd:49:65:70:6f:45:ae:c0:de:06:39:73:a3:bd:2b: 7b:d3:99:97:fb:6d:5d:1c:b8:09:e0:d3:00:b0:de: 4d:56:09:7d:53:c1:4b:0c:15:4b:99:b3:57:f1:8d: 48:fc:92:57:ee:77:3b:38:ae:bd:35:62:c6:11:82: c6:fb:d6:70:21:8d:f5:29:68:5e:95:91:cc:b8:54: 53:b1:c3:43:d2:80:bb:c2:a9:1e:1a:4c:b2:2d:40: fa:d5:b8:6f:9d:de:ee:2f:95:58:d4:3e:ad:d7:d8: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BC:7C:95:CF:50:7E:43:68:CC:DC:E9:F9:84:FC:52:1C:D3:5B:4F X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.36.0/23 Signature Algorithm: sha256WithRSAEncryption b8:47:81:24:b5:1a:46:69:ec:24:d0:c9:42:a2:07:9b:51:dd: c1:5e:19:b3:24:65:d5:d1:7e:5e:f8:7c:6d:e9:d4:d9:cd:c7: 11:18:34:28:bf:e7:92:f1:de:da:15:70:58:67:aa:8c:ee:06: 66:26:71:04:73:ba:8e:10:f0:59:72:7a:e9:10:d0:f6:bf:38: c0:a4:1a:3e:a5:45:d4:f9:9d:8c:07:b4:4a:3b:41:41:99:34: 8d:28:7c:49:c9:50:bb:28:8f:d7:5b:cc:b3:ac:c7:df:43:be: c3:28:bf:a5:1b:d0:f2:44:15:f1:02:69:42:c7:ee:e4:fb:ee: b7:e5:e1:64:d6:c3:a5:96:86:e5:f6:39:37:1f:15:ff:8e:5b: 6d:f8:d5:ef:03:22:45:3d:a3:db:78:32:84:46:47:8a:3a:99: 2e:f3:18:07:9c:3b:0b:7f:97:74:3e:12:54:1d:05:ba:3b:ee: 02:d7:1c:15:93:5a:a3:0c:16:45:40:f7:a6:04:99:87:43:5f: a7:b8:e9:c4:4c:ca:81:11:2a:8d:c5:78:2e:34:78:12:58:81: 43:65:73:01:0b:62:90:7c:d5:ce:5f:a2:bd:3d:9b:4e:8c:c7: 01:60:f4:66:26:ba:6f:b7:38:4a:a8:08:e0:e9:c9:ad:14:63: 07:93:06:ba -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa9YJtz5PEiWQ2fm2l7dVkSLSG5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTA2MjEwNTU1MDFaFw0yNjA2MjAwNjAwMDFaMDMxMTAvBgNV BAMTKEIxQkM3Qzk1Q0Y1MDdFNDM2OENDRENFOUY5ODRGQzUyMUNEMzVCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChk0FbIHkBbcLjy/3jtzegCiL6 F5jCuZ2Ub5UQHMlAmH1xU7Lw+lRCu9xJtzc9fUcg7gninxIB1zgB95n6vvKaDEiM YV1CcRt83/+HjtraiUwZhy92Sg6me7S8x2K5fPqkvBvBZ1EmotK9RpbdmMp8T2ua 1ugZyJSMe0eAdlIeaacXimrm/ktwLqNBZSa6WtrSrVWk+M1JZXBvRa7A3gY5c6O9 K3vTmZf7bV0cuAng0wCw3k1WCX1TwUsMFUuZs1fxjUj8klfudzs4rr01YsYRgsb7 1nAhjfUpaF6Vkcy4VFOxw0PSgLvCqR4aTLItQPrVuG+d3u4vlVjUPq3X2PPBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsbx8lc9QfkNozNzp+YT8UhzTW08wHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0YTIzYzRlLTM5MzItNDNiZC04 MTc2LWY2MjUxZGRlYTg0Mi8wLzMxMzAzMzJlMzEzNzM0MmUzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ64kMA0GCSqG SIb3DQEBCwUAA4IBAQC4R4EktRpGaewk0MlCogebUd3BXhmzJGXV0X5e+Hxt6dTZ zccRGDQov+eS8d7aFXBYZ6qM7gZmJnEEc7qOEPBZcnrpEND2vzjApBo+pUXU+Z2M B7RKO0FBmTSNKHxJyVC7KI/XW8yzrMffQ77DKL+lG9DyRBXxAmlCx+7k++635eFk 1sOllobl9jk3HxX/jltt+NXvAyJFPaPbeDKERkeKOpku8xgHnDsLf5d0PhJUHQW6 O+4C1xwVk1qjDBZFQPemBJmHQ1+nuOnETMqBESqNxXguNHgSWIFDZXMBC2KQfNXO X6K9PZtOjMcBYPRmJrpvtzhKqAjg6cmtFGMHkwa6 -----END CERTIFICATE-----Generated at Tue Jul 1 18:43:27 2025 by rpki-client