$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa File: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (raw, json) Hash identifier: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I= Subject key identifier: F3:6B:14:E6:79:FA:13:17:97:A2:82:F1:11:C8:A6:70:08:B7:55:62 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 1FEAE365D0241C5B86521235D5092737F6E385F7 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa Signing time: Wed 25 Jun 2025 14:01:16 +0000 ROA not before: Wed 25 Jun 2025 13:56:16 +0000 ROA not after: Wed 24 Jun 2026 14:01:16 +0000 asID: 132639 IP address blocks: 103.129.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 13:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ea:e3:65:d0:24:1c:5b:86:52:12:35:d5:09:27:37:f6:e3:85:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Jun 25 13:56:16 2025 GMT Not After : Jun 24 14:01:16 2026 GMT Subject: CN=F36B14E679FA131797A282F111C8A67008B75562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:dc:5e:53:02:93:27:40:21:1c:80:15:3a: 10:65:cf:14:70:1c:76:30:e5:78:bd:4a:43:7d:f9: 58:5c:80:89:07:94:be:e5:0a:82:ec:f7:6c:cc:73: 43:f6:85:2e:e6:0a:8c:25:87:3f:5e:ea:73:eb:d8: c0:e0:b3:2e:1f:b1:25:a9:13:c8:b7:cc:08:49:6c: 67:00:47:93:69:59:71:5b:0d:36:0b:17:49:fc:c4: 6f:dd:c2:14:ed:5d:3d:6b:95:75:cb:02:01:d8:59: 5a:44:90:53:74:c6:ed:e2:dd:66:be:86:32:05:50: 9a:1d:8c:23:dd:36:05:96:ba:2e:ef:81:ed:86:b9: b0:e6:49:63:e7:03:2f:a8:52:08:aa:0b:8f:dc:47: 02:fa:55:95:b0:d1:fd:26:fe:d9:36:10:cb:a0:3e: 6e:c0:3d:3b:c1:69:15:05:63:46:6b:0e:3e:23:17: e2:de:4f:e3:9c:41:4f:8e:b2:f6:7e:8b:08:4d:f8: 28:c9:37:2e:7d:41:7e:10:50:0c:fd:ec:78:ec:83: a7:14:ff:4b:3f:7c:12:bf:ed:9b:0f:3d:e0:29:26: 9d:05:19:83:39:bb:db:18:f5:7a:19:15:e8:d1:81: d5:6f:98:c5:49:e2:e1:4e:f2:67:b3:86:72:69:f4: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6B:14:E6:79:FA:13:17:97:A2:82:F1:11:C8:A6:70:08:B7:55:62 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.230.0/24 Signature Algorithm: sha256WithRSAEncryption 08:bf:c5:45:52:f4:4e:4e:9b:9e:1e:e2:15:31:41:c2:e6:9f: b6:15:39:71:d7:af:6b:76:2e:9d:17:26:af:88:34:9a:78:20: 7e:bd:ff:ab:a2:f7:38:0d:87:66:89:a7:02:8d:7e:81:e0:e5: a5:1a:a0:dd:3c:b9:7a:0c:e7:f9:60:f9:19:a2:64:01:25:67: 78:e6:79:e8:22:09:d4:5b:6e:ae:cb:62:8f:7a:ab:2b:80:d4: b9:03:35:a0:cd:1e:6c:e1:0b:98:b6:25:0d:fb:b7:48:c8:e4: 69:5c:c3:db:4f:3e:5d:f8:d6:9b:48:84:9b:d1:87:91:ad:1d: 5e:2d:84:ec:07:9c:ae:95:f7:af:24:46:6a:9f:86:b7:e7:15: b1:5b:cf:c6:8d:52:29:98:c7:da:71:a5:99:37:0d:a4:f8:d3: 0d:29:cc:69:0c:02:80:b8:19:b8:72:8f:02:f4:0b:c0:e0:b0: 40:78:e0:ba:1b:30:76:bb:a0:da:0c:93:86:fc:27:da:6e:ab: 4f:a0:b2:f4:a8:04:74:4f:77:51:96:22:9c:78:dc:a4:b2:86: a6:fb:0c:41:bc:c6:22:c5:04:bd:53:80:44:cd:e7:5c:41:49: fd:f1:44:57:3e:c4:c6:29:d9:f6:59:e6:ea:bc:22:f1:53:e0: fd:78:71:6e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUH+rjZdAkHFuGUhI11QknN/bjhfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTA2MjUxMzU2MTZaFw0yNjA2MjQxNDAxMTZaMDMxMTAvBgNV BAMTKEYzNkIxNEU2NzlGQTEzMTc5N0EyODJGMTExQzhBNjcwMDhCNzU1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYdxeUwKTJ0AhHIAVOhBlzxRw HHYw5Xi9SkN9+VhcgIkHlL7lCoLs92zMc0P2hS7mCowlhz9e6nPr2MDgsy4fsSWp E8i3zAhJbGcAR5NpWXFbDTYLF0n8xG/dwhTtXT1rlXXLAgHYWVpEkFN0xu3i3Wa+ hjIFUJodjCPdNgWWui7vge2GubDmSWPnAy+oUgiqC4/cRwL6VZWw0f0m/tk2EMug Pm7APTvBaRUFY0ZrDj4jF+LeT+OcQU+OsvZ+iwhN+CjJNy59QX4QUAz97Hjsg6cU /0s/fBK/7ZsPPeApJp0FGYM5u9sY9XoZFejRgdVvmMVJ4uFO8mezhnJp9Mc9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU82sU5nn6ExeXooLxEcimcAi3VWIwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYTQyNzQyLTg5ZDItNDliYi04 YTNlLTI5NGMzNjg5NzFmNS8wLzMxMzAzMzJlMzEzMjM5MmUzMjMzMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzIzNjMzMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABngeYwDQYJ KoZIhvcNAQELBQADggEBAAi/xUVS9E5Om54e4hUxQcLmn7YVOXHXr2t2Lp0XJq+I NJp4IH69/6ui9zgNh2aJpwKNfoHg5aUaoN08uXoM5/lg+RmiZAElZ3jmeegiCdRb bq7LYo96qyuA1LkDNaDNHmzhC5i2JQ37t0jI5Glcw9tPPl341ptIhJvRh5GtHV4t hOwHnK6V968kRmqfhrfnFbFbz8aNUimYx9pxpZk3DaT40w0pzGkMAoC4GbhyjwL0 C8DgsEB44LobMHa7oNoMk4b8J9puq0+gsvSoBHRPd1GWIpx43KSyhqb7DEG8xiLF BL1TgETN51xBSf3xRFc+xMYp2fZZ5uq8IvFT4P14cW4= -----END CERTIFICATE-----Generated at Thu Jul 3 21:27:58 2025 by rpki-client