$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa File: 3130312e302e342e302f32322d3234203d3e203438343635.roa (raw, json) Hash identifier: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0= Subject key identifier: 7E:68:13:9E:16:5F:7E:43:BD:F9:81:03:8D:36:C8:C7:67:2D:0A:D3 Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 04A24D415136ED071126E628EE2F1AE1B233CFA4 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa Signing time: Mon 16 Jun 2025 04:02:22 +0000 ROA not before: Mon 16 Jun 2025 03:57:22 +0000 ROA not after: Mon 15 Jun 2026 04:02:22 +0000 asID: 48465 IP address blocks: 101.0.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a2:4d:41:51:36:ed:07:11:26:e6:28:ee:2f:1a:e1:b2:33:cf:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Jun 16 03:57:22 2025 GMT Not After : Jun 15 04:02:22 2026 GMT Subject: CN=7E68139E165F7E43BDF981038D36C8C7672D0AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:a3:ef:09:68:14:5e:dc:1f:1b:9c:50:e2: 97:52:c2:23:c3:29:8b:3d:ef:77:e9:4c:c2:8b:3e: 53:2a:35:34:d5:ce:9a:9f:a7:22:bb:fc:35:b4:5a: 8d:d1:90:7d:80:d1:02:71:3d:ad:1e:19:30:51:0f: 77:aa:61:cd:9e:c7:75:2c:c6:e2:09:4b:d9:a3:d3: 56:0c:2c:b9:6f:b5:31:15:0b:8e:7c:9c:d7:89:ed: 94:37:67:31:be:60:1b:3c:e4:be:c7:23:2c:6b:83: ef:ee:23:f3:f4:83:4b:d7:f4:ef:d0:62:cf:bd:37: bd:75:7b:e0:11:ef:a7:4c:c0:ee:16:43:26:92:99: cf:c7:fc:e9:11:57:7d:4a:e2:90:66:cb:b7:31:c4: 88:58:aa:09:2d:98:cd:14:79:08:7a:5c:79:21:64: 66:77:94:36:d5:cb:d6:be:6a:78:7e:1c:48:0a:bd: 4b:a9:97:37:b4:3c:f9:fd:5c:d1:c2:e8:28:4e:25: 85:6b:9d:b1:b4:75:9d:da:c8:a2:8e:05:a6:65:c1: 2f:35:80:2c:cc:59:66:d8:b6:d6:e6:4a:33:4e:e6: 0d:dc:1e:60:0a:4d:8e:f7:e9:e2:40:47:5d:e5:64: ce:34:5a:bc:bc:63:f5:0b:93:8e:87:c4:62:02:fc: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:68:13:9E:16:5F:7E:43:BD:F9:81:03:8D:36:C8:C7:67:2D:0A:D3 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203438343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.0.4.0/22 Signature Algorithm: sha256WithRSAEncryption 87:40:04:c4:69:bf:25:15:27:07:6b:6a:a3:3f:4a:3b:81:ea: 36:0d:f9:41:8b:85:4f:98:1b:3c:ab:1f:f4:09:a1:3b:6b:13: e4:2a:51:e9:f3:91:b1:ed:33:c6:58:3e:18:68:23:c8:75:43: 00:57:ba:85:b7:90:1a:1d:91:e3:bc:1d:92:af:ed:42:0b:4c: a4:de:5d:9d:09:db:de:f1:94:b7:11:bc:c8:c0:fa:50:c4:19: fa:97:e9:eb:69:e4:79:26:f4:9c:2d:7c:87:dd:7f:21:6f:85: 7b:e3:a5:50:46:94:97:f0:b4:42:52:48:f8:be:68:ea:9d:0e: b5:68:1f:d8:28:27:0f:69:ce:08:8d:86:59:7f:f5:80:15:66: 4a:e4:7b:d0:76:30:1c:b1:b5:77:73:94:97:29:50:93:92:1d: ad:b2:c7:b6:89:ee:2f:3b:7c:11:a8:05:bf:35:4e:e3:7d:5e: 92:e8:03:11:f4:2e:56:55:a3:e3:97:1d:69:91:f5:84:97:2a: 65:95:d7:60:70:2d:7c:54:c3:6b:8f:19:54:73:22:71:dd:72: a6:26:be:e7:61:2b:85:40:ed:10:46:eb:ea:de:89:29:75:78: 7d:6d:ca:11:b6:33:99:0a:02:ff:eb:93:f9:54:94:3a:d6:75: c8:6c:b8:79 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUBKJNQVE27QcRJuYo7i8a4bIzz6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNTA2MTYwMzU3MjJaFw0yNjA2MTUwNDAyMjJaMDMxMTAvBgNV BAMTKDdFNjgxMzlFMTY1RjdFNDNCREY5ODEwMzhEMzZDOEM3NjcyRDBBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVqPvCWgUXtwfG5xQ4pdSwiPD KYs973fpTMKLPlMqNTTVzpqfpyK7/DW0Wo3RkH2A0QJxPa0eGTBRD3eqYc2ex3Us xuIJS9mj01YMLLlvtTEVC458nNeJ7ZQ3ZzG+YBs85L7HIyxrg+/uI/P0g0vX9O/Q Ys+9N711e+AR76dMwO4WQyaSmc/H/OkRV31K4pBmy7cxxIhYqgktmM0UeQh6XHkh ZGZ3lDbVy9a+anh+HEgKvUuplze0PPn9XNHC6ChOJYVrnbG0dZ3ayKKOBaZlwS81 gCzMWWbYttbmSjNO5g3cHmAKTY736eJAR13lZM40Wry8Y/ULk46HxGIC/ENjAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUfmgTnhZffkO9+YEDjTbIx2ctCtMwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvMzEzMDMxMmUzMDJlMzQyZTMwMmYzMjMyMmQzMjM0 MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZQAEMA0GCSqGSIb3DQEBCwUA A4IBAQCHQATEab8lFScHa2qjP0o7geo2DflBi4VPmBs8qx/0CaE7axPkKlHp85Gx 7TPGWD4YaCPIdUMAV7qFt5AaHZHjvB2Sr+1CC0yk3l2dCdve8ZS3EbzIwPpQxBn6 l+nraeR5JvScLXyH3X8hb4V746VQRpSX8LRCUkj4vmjqnQ61aB/YKCcPac4IjYZZ f/WAFWZK5HvQdjAcsbV3c5SXKVCTkh2tsse2ie4vO3wRqAW/NU7jfV6S6AMR9C5W VaPjlx1pkfWElypllddgcC18VMNrjxlUcyJx3XKmJr7nYSuFQO0QRuvq3okpdXh9 bcoRtjOZCgL/65P5VJQ61nXIbLh5 -----END CERTIFICATE-----Generated at Mon Jun 30 03:44:24 2025 by rpki-client