$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/3130332e3136392e322e302f32332d3234203d3e203137393935.roa File: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc= Subject key identifier: 09:85:2B:18:CB:B8:D5:70:FE:54:17:52:B3:ED:0B:BA:DD:D9:30:62 Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 54122C566794CD24088BFB0E54E70038C45D5775 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/3130332e3136392e322e302f32332d3234203d3e203137393935.roa Signing time: Fri 04 Jul 2025 11:02:24 +0000 ROA not before: Fri 04 Jul 2025 10:57:24 +0000 ROA not after: Fri 03 Jul 2026 11:02:24 +0000 asID: 17995 IP address blocks: 103.169.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:12:2c:56:67:94:cd:24:08:8b:fb:0e:54:e7:00:38:c4:5d:57:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Jul 4 10:57:24 2025 GMT Not After : Jul 3 11:02:24 2026 GMT Subject: CN=09852B18CBB8D570FE541752B3ED0BBADDD93062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:e3:21:3f:49:18:9b:86:1b:16:84:6b:a1: 1f:f0:bd:c5:4c:d3:6c:b3:3b:4a:64:72:29:1e:e0: de:3c:bf:43:58:7e:3c:ee:39:f4:38:d4:e8:ee:a3: bb:9f:88:f7:1f:c5:24:08:16:e4:03:be:61:79:af: 56:be:b6:af:15:e3:4f:bd:3d:7e:e6:aa:65:ab:6f: 5a:4d:c9:fb:71:56:ce:bf:59:c3:80:0c:45:51:79: 7b:dc:5a:9c:0a:12:c9:07:ab:1a:68:c8:ee:37:f8: b3:db:4a:fa:7d:1c:0f:34:6a:5b:ce:c3:7d:27:65: 25:c1:93:36:51:3c:e3:58:81:f2:30:42:77:73:b7: cf:d6:16:ea:cc:c6:d1:f7:75:72:c7:d4:40:2b:9c: 5a:e1:e6:bb:d4:ea:79:e3:1b:0c:51:87:d6:27:dc: f3:d0:0b:2e:e9:8b:a9:56:65:7e:5f:c1:d8:a6:db: 13:6b:93:16:55:ff:49:85:28:31:80:82:ac:0d:af: da:5d:e5:f0:a2:24:c4:bf:f3:ae:be:27:21:b1:6c: 43:11:1c:db:6d:77:23:19:6a:20:38:b3:20:5f:2b: 40:6e:64:8e:3f:7e:d4:e7:b2:74:a2:f4:26:9d:44: 59:70:8e:d2:93:b8:1e:09:25:bc:b8:b3:5f:67:19: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:85:2B:18:CB:B8:D5:70:FE:54:17:52:B3:ED:0B:BA:DD:D9:30:62 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/3130332e3136392e322e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.2.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:90:75:7c:d5:5e:42:60:d6:28:90:ec:47:70:d0:86:5d:8e: 02:e4:6e:08:5f:7c:e0:60:d4:c0:04:f0:e0:8b:1b:e9:3c:be: 7d:a2:82:bb:95:37:60:2d:36:1c:cb:5a:26:1f:fd:1d:e3:98: 9f:61:15:67:ce:47:f5:a7:c9:f6:b9:5d:44:ed:9e:a8:8d:00: 30:b5:af:68:1e:5c:31:1d:37:0f:ec:34:24:2a:bc:68:7b:0b: b7:82:57:8f:78:b1:bb:cf:9f:5e:c7:91:39:20:39:e1:b7:84: c4:7f:7f:35:24:3b:fa:97:01:dc:9c:95:10:db:0d:5c:aa:03: 60:f4:7f:f8:9f:d7:4b:66:c6:4e:74:1b:39:b7:ff:f9:df:15: 72:ea:3b:c1:78:71:d5:34:d8:0d:dd:d7:29:e3:02:27:e3:ff: 6a:d3:40:1c:10:15:ae:bb:19:ed:54:5a:5a:8f:ea:2a:47:c0: d7:23:98:ef:11:44:d6:16:46:19:b3:d9:5b:68:0c:30:b4:5f: b2:9f:d3:e3:9f:ec:a5:91:03:bd:35:ef:04:df:ad:b9:05:30: 36:cc:f4:84:3c:0f:05:9b:cc:19:67:72:70:c1:d8:6a:91:43: b6:b6:e9:02:0a:df:c9:6e:38:6e:f6:8b:ce:5e:e3:bf:f4:25: 84:00:31:9d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUVBIsVmeUzSQIi/sOVOcAOMRdV3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTA3MDQxMDU3MjRaFw0yNjA3MDMxMTAyMjRaMDMxMTAvBgNV BAMTKDA5ODUyQjE4Q0JCOEQ1NzBGRTU0MTc1MkIzRUQwQkJBREREOTMwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahuMhP0kYm4YbFoRroR/wvcVM 02yzO0pkcike4N48v0NYfjzuOfQ41Ojuo7ufiPcfxSQIFuQDvmF5r1a+tq8V40+9 PX7mqmWrb1pNyftxVs6/WcOADEVReXvcWpwKEskHqxpoyO43+LPbSvp9HA80alvO w30nZSXBkzZRPONYgfIwQndzt8/WFurMxtH3dXLH1EArnFrh5rvU6nnjGwxRh9Yn 3PPQCy7pi6lWZX5fwdim2xNrkxZV/0mFKDGAgqwNr9pd5fCiJMS/866+JyGxbEMR HNttdyMZaiA4syBfK0BuZI4/ftTnsnSi9CadRFlwjtKTuB4JJby4s19nGai5AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUCYUrGMu41XD+VBdSs+0Lut3ZMGIwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyY2Q5Y2VhLTNiZjQtNGE5Yy1h ZWU2LTAwMzM5YzA2NTUwYi8wLzMxMzAzMzJlMzEzNjM5MmUzMjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzczOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqQIwDQYJKoZIhvcN AQELBQADggEBAHyQdXzVXkJg1iiQ7Edw0IZdjgLkbghffOBg1MAE8OCLG+k8vn2i gruVN2AtNhzLWiYf/R3jmJ9hFWfOR/Wnyfa5XUTtnqiNADC1r2geXDEdNw/sNCQq vGh7C7eCV494sbvPn17HkTkgOeG3hMR/fzUkO/qXAdyclRDbDVyqA2D0f/if10tm xk50Gzm3//nfFXLqO8F4cdU02A3d1ynjAifj/2rTQBwQFa67Ge1UWlqP6ipHwNcj mO8RRNYWRhmz2VtoDDC0X7Kf0+Of7KWRA7017wTfrbkFMDbM9IQ8DwWbzBlncnDB 2GqRQ7a26QIK38luOG72i85e47/0JYQAMZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:38 2025 by rpki-client