$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa File: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (raw, json) Hash identifier: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo= Subject key identifier: B5:9F:4E:8A:29:BD:DF:E6:D9:E5:A8:83:D0:56:B0:9D:69:F7:E9:D8 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 5B09EDA01B97C869C7D2656C4565C2973C85E9AD Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa Signing time: Wed 25 Jun 2025 14:01:16 +0000 ROA not before: Wed 25 Jun 2025 13:56:16 +0000 ROA not after: Wed 24 Jun 2026 14:01:16 +0000 asID: 132639 IP address blocks: 103.129.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 13:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:09:ed:a0:1b:97:c8:69:c7:d2:65:6c:45:65:c2:97:3c:85:e9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Jun 25 13:56:16 2025 GMT Not After : Jun 24 14:01:16 2026 GMT Subject: CN=B59F4E8A29BDDFE6D9E5A883D056B09D69F7E9D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:0c:8c:c7:7c:42:91:be:4f:71:a1:69:f7: 9c:cc:0e:ab:ae:46:40:6b:b9:8b:25:d6:74:1c:24: 8d:a5:f7:9b:41:e8:98:12:84:5d:d1:15:a9:a4:46: 79:dc:1f:1c:d9:20:d3:22:8d:ed:77:e1:8c:77:1e: 93:3a:ea:6f:de:85:f6:1e:55:fc:81:10:2c:f8:39: 7f:b2:df:65:46:8d:3e:27:a7:90:bd:40:2a:03:3e: c6:c9:8a:c8:05:e7:05:a7:a3:04:c9:e1:3e:34:b6: 3a:93:a1:12:cc:2a:1d:19:a4:7c:2f:1c:60:ff:33: 87:a8:08:1f:e5:90:5f:d3:3b:85:77:8a:b2:1a:fe: ab:9f:3d:52:18:66:1e:15:13:a2:3c:7c:94:10:2a: c2:34:b5:2d:6e:57:49:24:b7:f3:12:2d:6a:8e:5a: 5d:ef:5b:4e:ac:ef:6b:29:ad:09:51:d0:fd:22:dd: a2:6b:ab:d2:db:88:d3:da:26:63:e4:b5:13:09:78: 8a:16:38:fb:c4:a6:00:01:81:95:a0:7d:18:93:fb: b7:10:ec:39:08:e4:4a:cf:5d:3b:e8:0a:ef:6b:77: 50:ac:c2:c2:b5:c1:35:73:ca:5f:40:6c:65:e7:a3: fb:4e:65:43:81:30:42:cb:87:89:a5:0d:31:bf:dd: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9F:4E:8A:29:BD:DF:E6:D9:E5:A8:83:D0:56:B0:9D:69:F7:E9:D8 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.230.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:3f:98:0e:70:cc:cf:70:a1:13:05:d2:a0:04:4f:c1:c2:52: 42:7f:44:2d:42:c9:a5:14:a4:a0:38:77:20:40:5a:ef:46:63: 01:a9:ee:a8:43:9f:0b:3e:f3:db:c6:f4:6f:ad:09:9c:25:32: db:b7:1e:ab:8c:9d:4d:91:04:7e:6b:80:b1:25:4a:75:53:4b: 68:2b:a0:71:91:34:39:dd:aa:4e:95:b3:58:0e:18:c7:c7:38: 65:56:6a:8b:ee:dd:c8:13:9b:57:69:7c:c5:67:b0:e4:ff:ba: 99:1d:d4:59:1d:01:f4:eb:b6:78:b8:38:5c:12:2f:a8:5a:09: 1d:bb:ed:63:b6:a0:b3:4f:aa:99:c8:85:27:72:b4:23:d7:6f: ce:cd:98:68:0a:b4:72:7a:9a:e2:23:2c:30:47:d7:28:7a:45: 53:9d:c6:67:30:56:f7:b3:9e:81:21:d1:cb:66:f5:cf:85:50: 3b:1b:41:10:c1:24:31:d5:80:ba:15:93:14:8c:78:1c:ff:e0: 85:36:c8:40:7b:c2:fa:2c:62:db:71:60:aa:7a:c1:fd:d0:61: c7:cf:16:4b:d4:7e:be:a2:ab:88:a7:04:d2:01:d8:95:f7:40: 5d:2c:e3:49:36:03:34:c0:5e:27:5f:73:68:f3:2b:f8:cb:3a: 09:56:85:9e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWwntoBuXyGnH0mVsRWXClzyF6a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTA2MjUxMzU2MTZaFw0yNjA2MjQxNDAxMTZaMDMxMTAvBgNV BAMTKEI1OUY0RThBMjlCRERGRTZEOUU1QTg4M0QwNTZCMDlENjlGN0U5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIQyMx3xCkb5PcaFp95zMDquu RkBruYsl1nQcJI2l95tB6JgShF3RFamkRnncHxzZINMije134Yx3HpM66m/ehfYe VfyBECz4OX+y32VGjT4np5C9QCoDPsbJisgF5wWnowTJ4T40tjqToRLMKh0ZpHwv HGD/M4eoCB/lkF/TO4V3irIa/qufPVIYZh4VE6I8fJQQKsI0tS1uV0kkt/MSLWqO Wl3vW06s72sprQlR0P0i3aJrq9LbiNPaJmPktRMJeIoWOPvEpgABgZWgfRiT+7cQ 7DkI5ErPXTvoCu9rd1CswsK1wTVzyl9AbGXno/tOZUOBMELLh4mlDTG/3e/3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUtZ9Oiim93+bZ5aiD0FawnWn36dgwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYTQyNzQyLTg5ZDItNDliYi04 YTNlLTI5NGMzNjg5NzFmNS8wLzMxMzAzMzJlMzEzMjM5MmUzMjMzMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzIzNjMzMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFngeYwDQYJ KoZIhvcNAQELBQADggEBAD0/mA5wzM9woRMF0qAET8HCUkJ/RC1CyaUUpKA4dyBA Wu9GYwGp7qhDnws+89vG9G+tCZwlMtu3HquMnU2RBH5rgLElSnVTS2groHGRNDnd qk6Vs1gOGMfHOGVWaovu3cgTm1dpfMVnsOT/upkd1FkdAfTrtni4OFwSL6haCR27 7WO2oLNPqpnIhSdytCPXb87NmGgKtHJ6muIjLDBH1yh6RVOdxmcwVveznoEh0ctm 9c+FUDsbQRDBJDHVgLoVkxSMeBz/4IU2yEB7wvosYttxYKp6wf3QYcfPFkvUfr6i q4inBNIB2JX3QF0s40k2AzTAXidfc2jzK/jLOglWhZ4= -----END CERTIFICATE-----Generated at Wed Jul 2 16:07:07 2025 by rpki-client