$ rpki-client -vvf repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa File: 3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa (raw, json) Hash identifier: eZnK2eskkU6AREBsLNvr+wfApR29iHfhfxaLS8JDmM4= Subject key identifier: C9:07:EE:CF:14:E2:BC:5F:B0:78:97:90:E1:81:4D:AE:04:B2:CE:A6 Certificate issuer: /CN=63A008B749DB87C773CA05C5DF448BCA5357BB01 Certificate serial: 5B2D3A85A49AAA7AD7D69D30B91894F415CD4F00 Authority key identifier: 63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa Signing time: Sat 14 Jun 2025 11:00:00 +0000 ROA not before: Sat 14 Jun 2025 10:55:00 +0000 ROA not after: Sat 13 Jun 2026 11:00:00 +0000 asID: 141969 IP address blocks: 103.166.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2d:3a:85:a4:9a:aa:7a:d7:d6:9d:30:b9:18:94:f4:15:cd:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63A008B749DB87C773CA05C5DF448BCA5357BB01 Validity Not Before: Jun 14 10:55:00 2025 GMT Not After : Jun 13 11:00:00 2026 GMT Subject: CN=C907EECF14E2BC5FB0789790E1814DAE04B2CEA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:b1:3c:03:fe:78:1c:07:77:b9:d0:b1:2a: 21:4f:e6:06:17:8b:b4:de:65:a1:51:f4:5a:d5:52: 76:62:ec:8c:12:ef:fe:96:c4:2f:6b:a4:03:b2:c3: b3:32:ce:ea:35:2a:7c:a1:fb:84:d4:4d:85:01:2b: 73:c6:90:31:11:db:49:ba:76:de:7c:ba:9c:e7:42: 52:ee:4e:87:e1:fc:9d:b8:12:a0:04:3f:29:13:3d: 3d:a6:ba:66:cb:95:5f:30:ab:c8:8e:74:c3:df:e7: 2a:35:72:ac:8c:ab:2d:62:0f:25:54:6d:89:a9:0b: 24:a4:43:a3:bd:0c:a7:88:22:7f:5c:ff:4a:27:84: fa:53:f2:3c:19:02:14:52:c4:cf:69:a9:8d:f5:f8: bf:27:dd:75:0b:96:3d:17:10:1d:ed:01:3b:25:af: d1:b6:88:82:a4:ee:5d:78:a5:c1:c1:8b:e4:57:37: d7:f4:3f:ea:37:30:c4:f9:c3:51:73:67:2b:13:05: 45:5d:dd:66:6a:fa:b7:34:35:b1:f3:b4:34:af:fe: 5b:13:54:9a:b6:61:62:90:e4:78:38:16:18:aa:24: 09:d2:4c:0b:bd:d6:23:65:18:74:d1:51:68:73:3a: 76:6e:67:bd:18:38:78:01:a5:c1:da:a4:32:94:74: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:07:EE:CF:14:E2:BC:5F:B0:78:97:90:E1:81:4D:AE:04:B2:CE:A6 X509v3 Authority Key Identifier: keyid:63:A0:08:B7:49:DB:87:C7:73:CA:05:C5:DF:44:8B:CA:53:57:BB:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/63A008B749DB87C773CA05C5DF448BCA5357BB01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63A008B749DB87C773CA05C5DF448BCA5357BB01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f9002d-9267-4f8b-859a-dfa7d89143b4/0/3130332e3136362e3234302e302f32342d3234203d3e20313431393639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.240.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ed:35:b8:c2:02:a0:9d:32:de:8c:a5:97:22:70:9b:23:ca: 1e:57:cb:52:3f:46:c4:75:45:0b:4e:03:1a:76:dc:75:bf:a0: 47:e4:23:38:bb:97:c5:2e:93:12:b8:65:4f:ac:be:2d:a1:19: 5e:40:f6:00:e2:f0:6b:12:fc:df:d7:9b:13:27:59:37:5f:86: 93:ba:87:b7:e2:4d:1e:c7:b9:d4:09:8e:a5:9b:55:96:e6:77: cc:6e:bb:e8:ba:45:14:3d:84:3e:2f:2e:a8:27:ef:12:33:c1: 8d:7d:c2:b6:6c:09:d7:d7:ce:f8:e2:a6:dd:d0:c8:4a:78:d6: 6d:f0:ba:53:0c:9e:61:1d:7d:33:76:dd:3d:d2:ef:7c:ad:b9: 91:b0:70:65:dc:fe:96:1e:21:43:e8:d0:26:84:cc:a1:b2:9f: fb:72:22:9b:af:34:c9:29:38:62:92:26:e3:4e:ad:3b:47:43: 71:e1:cc:b3:cb:c3:cf:24:32:f1:54:62:97:29:f6:9c:44:40: 22:91:7c:12:2f:76:87:15:2f:da:6d:b2:aa:d0:fc:0b:c9:04: df:1c:fb:ca:c7:73:44:f4:2b:40:79:74:85:a6:01:19:bc:0d: 1f:c5:da:d4:96:5e:37:80:17:a8:97:d0:f9:42:12:00:a9:c5: e6:dd:dd:42 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWy06haSaqnrX1p0wuRiU9BXNTwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhCQ0E1 MzU3QkIwMTAeFw0yNTA2MTQxMDU1MDBaFw0yNjA2MTMxMTAwMDBaMDMxMTAvBgNV BAMTKEM5MDdFRUNGMTRFMkJDNUZCMDc4OTc5MEUxODE0REFFMDRCMkNFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStrE8A/54HAd3udCxKiFP5gYX i7TeZaFR9FrVUnZi7IwS7/6WxC9rpAOyw7Myzuo1Knyh+4TUTYUBK3PGkDER20m6 dt58upznQlLuTofh/J24EqAEPykTPT2mumbLlV8wq8iOdMPf5yo1cqyMqy1iDyVU bYmpCySkQ6O9DKeIIn9c/0onhPpT8jwZAhRSxM9pqY31+L8n3XULlj0XEB3tATsl r9G2iIKk7l14pcHBi+RXN9f0P+o3MMT5w1FzZysTBUVd3WZq+rc0NbHztDSv/lsT VJq2YWKQ5Hg4FhiqJAnSTAu91iNlGHTRUWhzOnZuZ70YOHgBpcHapDKUdIT5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyQfuzxTivF+weJeQ4YFNrgSyzqYwHwYDVR0j BBgwFoAUY6AIt0nbh8dzygXF30SLylNXuwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWY5MDAyZC05MjY3LTRmOGItODU5YS1kZmE3ZDg5MTQzYjQvMC82M0EwMDhCNzQ5 REI4N0M3NzNDQTA1QzVERjQ0OEJDQTUzNTdCQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNBMDA4Qjc0OURCODdDNzczQ0EwNUM1REY0NDhCQ0E1MzU3 QkIwMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjkwMDJkLTkyNjctNGY4Yi04 NTlhLWRmYTdkODkxNDNiNC8wLzMxMzAzMzJlMzEzNjM2MmUzMjM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpvAwDQYJ KoZIhvcNAQELBQADggEBAIHtNbjCAqCdMt6MpZcicJsjyh5Xy1I/RsR1RQtOAxp2 3HW/oEfkIzi7l8UukxK4ZU+svi2hGV5A9gDi8GsS/N/XmxMnWTdfhpO6h7fiTR7H udQJjqWbVZbmd8xuu+i6RRQ9hD4vLqgn7xIzwY19wrZsCdfXzvjipt3QyEp41m3w ulMMnmEdfTN23T3S73ytuZGwcGXc/pYeIUPo0CaEzKGyn/tyIpuvNMkpOGKSJuNO rTtHQ3HhzLPLw88kMvFUYpcp9pxEQCKRfBIvdocVL9ptsqrQ/AvJBN8c+8rHc0T0 K0B5dIWmARm8DR/F2tSWXjeAF6iX0PlCEgCpxebd3UI= -----END CERTIFICATE-----Generated at Tue Jul 1 11:47:15 2025 by rpki-client