$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/3130332e3135382e39382e302f32332d3234203d3e203338373736.roa File: 3130332e3135382e39382e302f32332d3234203d3e203338373736.roa (raw, json) Hash identifier: g4/2gGmpn32hkKxV0sqfqROaCQsBlE1YLxPaRAMg4a0= Subject key identifier: 68:64:72:3E:D0:87:43:77:5D:79:03:90:EF:81:79:2B:F8:12:18:D3 Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 1E23FB11599718C98DEC73F5479D32BA82F6EB70 Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/3130332e3135382e39382e302f32332d3234203d3e203338373736.roa Signing time: Sun 15 Jun 2025 10:20:04 +0000 ROA not before: Sun 15 Jun 2025 10:15:04 +0000 ROA not after: Sun 14 Jun 2026 10:20:04 +0000 asID: 38776 IP address blocks: 103.158.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:23:fb:11:59:97:18:c9:8d:ec:73:f5:47:9d:32:ba:82:f6:eb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Jun 15 10:15:04 2025 GMT Not After : Jun 14 10:20:04 2026 GMT Subject: CN=6864723ED08743775D790390EF81792BF81218D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:36:df:91:b9:1d:b3:cf:09:59:68:98:14:50: 64:76:97:89:1b:4b:be:14:19:36:52:af:14:35:2a: af:d2:00:62:62:23:1c:85:9f:4b:cd:00:88:80:2b: 21:cd:df:02:a5:ff:db:01:8b:cc:d0:23:0f:c4:d2: 45:bd:87:3b:2b:ee:51:19:28:48:f3:6a:01:c4:3f: a0:d9:c4:92:33:d1:fb:80:52:ce:67:93:e2:89:d0: 22:bb:91:94:1f:2b:77:fa:f7:60:11:f0:ab:81:cc: 4c:d2:6b:75:37:2e:d9:aa:39:bc:14:bf:b3:04:66: c5:f4:c7:4e:81:d4:fc:36:c8:84:ea:48:a4:e6:73: 85:b0:f6:1d:80:57:13:e5:9a:1c:a3:10:67:fc:85: 97:36:65:70:2d:35:5c:ca:63:8e:5f:90:2a:6c:56: 4b:5a:50:b6:ea:f5:73:16:d0:2b:f4:e9:73:91:5f: ac:33:92:95:7c:4c:eb:34:f5:5f:c3:09:e9:b8:ec: 1f:55:f8:27:a0:28:12:8c:10:0d:6c:de:5e:44:f1: 1f:60:02:cf:02:dd:57:8b:a6:e3:4e:4d:87:0b:2f: f7:58:49:15:cc:73:f9:28:89:e5:fd:af:20:3f:23: 1a:f0:0f:fb:a1:bc:b0:f9:5c:54:1f:cb:79:08:2d: a7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:72:3E:D0:87:43:77:5D:79:03:90:EF:81:79:2B:F8:12:18:D3 X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/3130332e3135382e39382e302f32332d3234203d3e203338373736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.98.0/23 Signature Algorithm: sha256WithRSAEncryption 23:75:67:ab:e1:46:7b:f2:4d:f3:5e:b3:31:bb:06:c1:65:c1: ac:f9:58:5f:d1:58:76:19:39:a8:3e:ba:6b:d5:a7:98:30:39: 0a:98:2e:1f:55:9a:31:9d:c4:e6:15:b8:2d:a2:20:60:5f:e0: 30:65:d0:96:03:ce:54:57:78:0e:a0:3d:0d:0d:e0:14:86:41: 6b:21:91:50:5a:a7:02:6a:49:b1:d0:9d:36:df:08:e7:63:ec: 7c:2a:4a:a3:b8:b9:29:ac:1d:18:b2:77:d8:55:e2:04:5e:89: d4:6c:1d:f1:4d:fb:b2:bf:8d:4f:d3:13:c2:dc:2f:b7:02:7e: 98:3b:74:c9:72:4c:02:26:81:cd:86:43:c5:ff:37:96:d0:72: f9:d1:9a:72:8d:14:df:a9:37:51:84:c4:8a:80:4f:1a:17:f4: 00:38:08:62:8a:5d:94:d0:53:5a:02:1e:22:89:5f:15:3c:03: 18:9f:6d:e7:74:17:0a:f5:d3:5a:6c:5b:dd:3d:96:52:bd:4c: 17:f3:6f:69:22:89:9a:c1:52:fb:0d:7b:d5:d3:6c:09:06:ba: 31:bd:98:c4:30:64:94:3f:49:bc:60:e3:81:44:06:77:6e:46: db:60:6a:a9:78:3e:64:5b:42:f9:ea:68:22:65:ec:12:ea:6f: 75:18:f7:1e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHiP7EVmXGMmN7HP1R50yuoL263AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNTA2MTUxMDE1MDRaFw0yNjA2MTQxMDIwMDRaMDMxMTAvBgNV BAMTKDY4NjQ3MjNFRDA4NzQzNzc1RDc5MDM5MEVGODE3OTJCRjgxMjE4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNt+RuR2zzwlZaJgUUGR2l4kb S74UGTZSrxQ1Kq/SAGJiIxyFn0vNAIiAKyHN3wKl/9sBi8zQIw/E0kW9hzsr7lEZ KEjzagHEP6DZxJIz0fuAUs5nk+KJ0CK7kZQfK3f692AR8KuBzEzSa3U3LtmqObwU v7MEZsX0x06B1Pw2yITqSKTmc4Ww9h2AVxPlmhyjEGf8hZc2ZXAtNVzKY45fkCps VktaULbq9XMW0Cv06XORX6wzkpV8TOs09V/DCem47B9V+CegKBKMEA1s3l5E8R9g As8C3VeLpuNOTYcLL/dYSRXMc/koieX9ryA/IxrwD/uhvLD5XFQfy3kILadRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUaGRyPtCHQ3ddeQOQ74F5K/gSGNMwHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNjg1MDBjLTQ5ZjgtNGYwMS04 Nzc0LWY3YzMxNjRhMGE1OC8wLzMxMzAzMzJlMzEzNTM4MmUzOTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzMzODM3MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeeYjANBgkqhkiG 9w0BAQsFAAOCAQEAI3Vnq+FGe/JN816zMbsGwWXBrPlYX9FYdhk5qD66a9WnmDA5 CpguH1WaMZ3E5hW4LaIgYF/gMGXQlgPOVFd4DqA9DQ3gFIZBayGRUFqnAmpJsdCd Nt8I52PsfCpKo7i5KawdGLJ32FXiBF6J1Gwd8U37sr+NT9MTwtwvtwJ+mDt0yXJM AiaBzYZDxf83ltBy+dGaco0U36k3UYTEioBPGhf0ADgIYopdlNBTWgIeIolfFTwD GJ9t53QXCvXTWmxb3T2WUr1MF/NvaSKJmsFS+w171dNsCQa6Mb2YxDBklD9JvGDj gUQGd25G22BqqXg+ZFtC+epoImXsEupvdRj3Hg== -----END CERTIFICATE-----Generated at Tue Jul 1 10:20:39 2025 by rpki-client