$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e31392e38302e302f32342d3234203d3e20313332363339.roa File: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (raw, json) Hash identifier: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM= Subject key identifier: 46:FE:89:7B:81:1D:FA:50:13:0D:3E:DB:21:83:71:8F:B1:4A:8B:7F Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 2E798422A4851D494C67FAF0ABAB6C09670AD1FB Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e31392e38302e302f32342d3234203d3e20313332363339.roa Signing time: Wed 25 Jun 2025 14:01:16 +0000 ROA not before: Wed 25 Jun 2025 13:56:16 +0000 ROA not after: Wed 24 Jun 2026 14:01:16 +0000 asID: 132639 IP address blocks: 103.19.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:79:84:22:a4:85:1d:49:4c:67:fa:f0:ab:ab:6c:09:67:0a:d1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Jun 25 13:56:16 2025 GMT Not After : Jun 24 14:01:16 2026 GMT Subject: CN=46FE897B811DFA50130D3EDB2183718FB14A8B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:37:7b:1e:9b:1e:d0:cb:48:41:4b:db:ad: dc:12:0c:aa:7c:86:4a:55:36:13:55:8b:8c:84:33: d5:aa:75:41:59:4e:96:4d:c3:b2:bf:51:70:10:4b: c2:0f:be:ea:74:fd:9b:e6:77:e5:2e:13:0a:dd:52: 6d:60:7d:5c:e9:49:e8:a5:4b:03:76:71:d3:98:ab: ae:c3:0c:18:fc:52:0a:e6:15:fd:22:28:c1:c7:d1: ee:3f:ef:5e:06:80:92:23:7a:da:09:2d:7e:4a:3e: b5:1a:e0:3d:91:ee:ea:f9:2a:84:9c:d0:bb:52:00: f2:49:5a:10:0a:f0:24:de:eb:8b:d9:57:c2:31:be: 81:de:68:16:16:4b:5b:70:68:ca:c8:0f:fe:8f:28: 51:58:79:33:1c:6f:6b:5a:1b:8d:4c:bc:01:df:e5: 4d:36:dd:73:78:21:d3:6c:b6:d9:8b:c2:c0:46:21: f0:14:45:41:16:39:3c:0e:bf:e9:39:25:34:4f:57: 8c:6c:3e:4f:fb:04:2e:d5:9f:d5:24:95:94:94:d0: 9a:de:19:42:3f:36:87:88:35:3a:ee:c8:7c:bb:ac: 11:92:2d:da:8f:17:3a:e4:23:aa:90:e0:b6:cd:5a: 20:96:1b:f0:65:bb:14:c7:7c:f4:64:0a:69:b4:aa: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:89:7B:81:1D:FA:50:13:0D:3E:DB:21:83:71:8F:B1:4A:8B:7F X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/3130332e31392e38302e302f32342d3234203d3e20313332363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.80.0/24 Signature Algorithm: sha256WithRSAEncryption 89:f9:94:86:45:6e:5f:4e:82:e7:36:5d:70:bb:77:76:a6:65: d4:82:5f:66:ab:cf:25:ec:7b:2a:98:d7:50:ac:f9:1a:f6:0f: b2:37:96:fb:5b:99:76:b5:88:7e:a9:fe:d3:46:8a:3b:de:84: 6d:4c:1e:cf:34:71:32:ec:a4:c0:96:33:73:bc:3e:da:31:c4: 22:52:03:d0:9f:18:f1:be:bb:13:f8:36:c9:09:a9:ad:e5:04: 85:58:85:df:a8:30:0f:e2:ce:e4:2c:33:39:d0:9c:ce:9b:8a: 79:10:4b:4a:12:ed:dd:dc:64:78:7e:c4:2d:78:5e:9c:72:14: 88:9e:86:43:03:d3:71:2a:eb:6f:e6:50:9a:ad:64:92:32:b8: 58:f3:fa:57:11:0e:da:5a:58:50:98:e9:ad:27:54:45:b9:1a: 9e:68:94:26:ea:78:c1:19:0a:40:f1:96:9b:1b:71:33:73:b6: 00:db:e0:2f:b2:50:8a:6f:47:82:f5:03:a8:75:a3:7a:f7:fb: b8:06:5e:45:29:20:62:73:91:9e:ea:8d:ce:49:9a:12:3e:4a: d3:20:39:fc:4d:e5:45:b1:9e:7b:08:2d:e6:16:f4:0b:f0:fc: 70:51:7d:81:b2:20:c7:37:1d:1d:0c:d9:d8:37:a1:25:77:0c: cf:80:44:84 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULnmEIqSFHUlMZ/rwq6tsCWcK0fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTA2MjUxMzU2MTZaFw0yNjA2MjQxNDAxMTZaMDMxMTAvBgNV BAMTKDQ2RkU4OTdCODExREZBNTAxMzBEM0VEQjIxODM3MThGQjE0QThCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/Td7Hpse0MtIQUvbrdwSDKp8 hkpVNhNVi4yEM9WqdUFZTpZNw7K/UXAQS8IPvup0/Zvmd+UuEwrdUm1gfVzpSeil SwN2cdOYq67DDBj8UgrmFf0iKMHH0e4/714GgJIjetoJLX5KPrUa4D2R7ur5KoSc 0LtSAPJJWhAK8CTe64vZV8IxvoHeaBYWS1twaMrID/6PKFFYeTMcb2taG41MvAHf 5U023XN4IdNsttmLwsBGIfAURUEWOTwOv+k5JTRPV4xsPk/7BC7Vn9UklZSU0Jre GUI/NoeINTruyHy7rBGSLdqPFzrkI6qQ4LbNWiCWG/BluxTHfPRkCmm0qpsFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQURv6Je4Ed+lATDT7bIYNxj7FKi38wHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYTQyNzQyLTg5ZDItNDliYi04 YTNlLTI5NGMzNjg5NzFmNS8wLzMxMzAzMzJlMzEzOTJlMzgzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcTUDANBgkqhkiG 9w0BAQsFAAOCAQEAifmUhkVuX06C5zZdcLt3dqZl1IJfZqvPJex7KpjXUKz5GvYP sjeW+1uZdrWIfqn+00aKO96EbUwezzRxMuykwJYzc7w+2jHEIlID0J8Y8b67E/g2 yQmpreUEhViF36gwD+LO5CwzOdCczpuKeRBLShLt3dxkeH7ELXhenHIUiJ6GQwPT cSrrb+ZQmq1kkjK4WPP6VxEO2lpYUJjprSdURbkanmiUJup4wRkKQPGWmxtxM3O2 ANvgL7JQim9HgvUDqHWjevf7uAZeRSkgYnORnuqNzkmaEj5K0yA5/E3lRbGeewgt 5hb0C/D8cFF9gbIgxzcdHQzZ2DehJXcMz4BEhA== -----END CERTIFICATE-----Generated at Wed Jul 2 06:39:01 2025 by rpki-client