$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa File: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (raw, json) Hash identifier: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ= Subject key identifier: 4B:02:6E:27:0E:0C:21:27:4B:1E:65:17:8E:E5:6A:6C:90:A0:43:6E Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 3793CB1660A77A1650005AA5F9B2453C39BEA0AA Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa Signing time: Thu 12 Jun 2025 05:00:01 +0000 ROA not before: Thu 12 Jun 2025 04:55:01 +0000 ROA not after: Thu 11 Jun 2026 05:00:01 +0000 asID: 136865 IP address blocks: 103.102.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:93:cb:16:60:a7:7a:16:50:00:5a:a5:f9:b2:45:3c:39:be:a0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Jun 12 04:55:01 2025 GMT Not After : Jun 11 05:00:01 2026 GMT Subject: CN=4B026E270E0C21274B1E65178EE56A6C90A0436E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:df:75:03:b8:a9:e6:ed:cb:97:65:4b:da:2a: 47:c5:e1:62:af:ed:a8:12:8c:a9:1c:1a:7e:94:b7: a3:48:62:45:90:91:a6:d4:86:fe:a4:14:1d:88:18: a8:89:a8:7e:ef:c2:51:0b:38:a3:01:fe:c4:29:a5: 3f:32:88:8d:18:fb:01:3c:10:a1:48:7e:16:38:db: 84:94:df:7a:48:bd:28:ae:58:fa:4c:7f:70:60:e5: 25:82:6f:43:90:32:dd:1f:b1:8a:96:b1:97:5c:35: ca:95:49:8a:b2:ab:ae:fd:00:87:2e:9b:b4:bd:0e: b3:ea:ba:d5:0c:d0:8a:b4:4a:65:e2:cf:44:c2:64: af:02:fe:6c:0d:e4:b8:6c:5c:d1:a8:1e:fa:15:ff: fd:f3:bb:b7:3c:8a:fb:c8:60:22:f8:a9:39:85:d1: 59:d5:54:80:d6:07:85:de:04:2a:80:83:3f:7f:15: 7a:3e:cd:70:d0:97:44:d7:aa:fc:4f:f5:60:81:0a: 08:dd:76:50:c7:95:ef:f0:df:d4:47:3f:0c:f1:9a: cf:03:4b:1c:2a:26:44:bc:63:75:4c:7a:db:5d:99: 70:90:ea:6d:45:ae:a5:17:e8:81:ab:ed:c3:c4:44: df:b5:5f:a1:7a:92:4d:f5:8b:bc:50:d1:42:f7:03: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:02:6E:27:0E:0C:21:27:4B:1E:65:17:8E:E5:6A:6C:90:A0:43:6E X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.12.0/24 Signature Algorithm: sha256WithRSAEncryption a8:66:43:be:88:54:ca:e3:60:52:9d:ad:e1:62:08:b0:98:9d: c2:c1:a7:a1:8d:bb:27:4e:c0:8a:c7:fc:12:a4:2c:71:56:a6: 44:29:73:60:bb:60:62:29:7f:e2:4b:2b:79:9f:c3:31:a2:34: 8b:19:67:74:1a:94:59:d3:c5:0a:a3:e5:22:6b:b5:0b:b9:d3: 1d:01:a1:d4:6b:e0:eb:ae:90:64:16:c1:7a:0a:94:10:80:5a: 81:45:07:c5:f8:4b:aa:a7:2e:83:ba:4b:e6:83:20:61:4a:41: d2:58:9e:f4:82:c8:bf:e6:73:1e:84:71:d7:5a:88:8c:cc:f2: c3:e9:10:b9:b9:ae:9b:11:b7:c8:25:65:5f:53:a5:e7:ae:ab: 14:48:b1:dd:78:0a:f9:e6:3d:7f:a2:4e:40:1d:7b:e0:96:2b: 89:c6:d8:d8:e5:b6:88:c1:a1:5a:3c:74:75:93:a2:25:e7:bb: ee:fe:a9:18:a4:34:f5:01:0a:be:e4:27:63:cd:be:3e:1a:48: 35:7d:75:a8:da:1f:3d:2e:2b:ca:a5:fc:62:3b:fa:90:e1:24: 4c:48:4c:31:0e:83:9b:4e:cc:4c:6e:7e:29:a4:0b:e4:c1:3b: 65:fb:cd:f6:04:5b:f8:20:10:f7:83:1a:99:df:cd:0f:bf:3a: 68:94:76:6c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUN5PLFmCnehZQAFql+bJFPDm+oKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTA2MTIwNDU1MDFaFw0yNjA2MTEwNTAwMDFaMDMxMTAvBgNV BAMTKDRCMDI2RTI3MEUwQzIxMjc0QjFFNjUxNzhFRTU2QTZDOTBBMDQzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg33UDuKnm7cuXZUvaKkfF4WKv 7agSjKkcGn6Ut6NIYkWQkabUhv6kFB2IGKiJqH7vwlELOKMB/sQppT8yiI0Y+wE8 EKFIfhY424SU33pIvSiuWPpMf3Bg5SWCb0OQMt0fsYqWsZdcNcqVSYqyq679AIcu m7S9DrPqutUM0Iq0SmXiz0TCZK8C/mwN5LhsXNGoHvoV//3zu7c8ivvIYCL4qTmF 0VnVVIDWB4XeBCqAgz9/FXo+zXDQl0TXqvxP9WCBCgjddlDHle/w39RHPwzxms8D SxwqJkS8Y3VMettdmXCQ6m1FrqUX6IGr7cPERN+1X6F6kk31i7xQ0UL3AxPpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSwJuJw4MISdLHmUXjuVqbJCgQ24wHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmODZiMTJlLWU1NzQtNDI2Yi1h YTZiLTQ5MzllM2IwMzBiYS8wLzMxMzAzMzJlMzEzMDMyMmUzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2YMMA0GCSqG SIb3DQEBCwUAA4IBAQCoZkO+iFTK42BSna3hYgiwmJ3CwaehjbsnTsCKx/wSpCxx VqZEKXNgu2BiKX/iSyt5n8MxojSLGWd0GpRZ08UKo+Uia7ULudMdAaHUa+DrrpBk FsF6CpQQgFqBRQfF+Euqpy6DukvmgyBhSkHSWJ70gsi/5nMehHHXWoiMzPLD6RC5 ua6bEbfIJWVfU6XnrqsUSLHdeAr55j1/ok5AHXvgliuJxtjY5baIwaFaPHR1k6Il 57vu/qkYpDT1AQq+5Cdjzb4+Gkg1fXWo2h89LivKpfxiO/qQ4SRMSEwxDoObTsxM bn4ppAvkwTtl+832BFv4IBD3gxqZ380PvzpolHZs -----END CERTIFICATE-----Generated at Mon Jun 30 14:00:49 2025 by rpki-client