$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa File: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (raw, json) Hash identifier: bsXADU2MANDvYNrthrNZs3NmDaaJZRaO6UbqMjiPRtc= Subject key identifier: 5E:77:7B:B3:F8:A6:66:9F:D9:3A:95:81:72:50:EE:48:B7:B9:0C:50 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 3C61C6F2FF7198891717FFB1FD35C735AA6F8CF4 Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa Signing time: Wed 25 Jun 2025 10:00:01 +0000 ROA not before: Wed 25 Jun 2025 09:55:01 +0000 ROA not after: Wed 24 Jun 2026 10:00:01 +0000 asID: 138881 IP address blocks: 103.169.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:61:c6:f2:ff:71:98:89:17:17:ff:b1:fd:35:c7:35:aa:6f:8c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Jun 25 09:55:01 2025 GMT Not After : Jun 24 10:00:01 2026 GMT Subject: CN=5E777BB3F8A6669FD93A95817250EE48B7B90C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:6f:45:ef:fc:42:6f:5e:4f:3d:ed:3b:fc: 41:46:d9:e1:52:42:57:6c:f5:2e:a5:3f:00:39:57: 69:18:06:8a:3c:a1:bd:d9:b5:26:fa:d2:b9:d0:bd: 94:49:4b:9a:e5:af:6a:8c:3a:30:68:89:a3:03:aa: 62:41:6c:5f:7f:bf:b7:38:87:dc:2b:38:8a:49:28: 20:5b:c3:4c:de:03:2a:86:5d:f8:1e:bb:26:06:ca: bc:a7:50:4f:5f:8f:73:3e:02:b9:4a:4c:64:5e:b6: 35:78:79:17:5c:24:5e:34:05:c0:f0:91:a0:20:5f: e7:d2:6b:74:15:f0:17:23:de:38:93:88:6d:63:c3: 47:50:fa:88:18:37:be:f0:42:06:be:44:6b:47:f4: 2b:0e:77:b6:ab:6f:7a:e5:88:37:3f:30:e6:d3:a5: 50:3e:6d:5b:88:ed:9a:73:b0:17:fc:fd:12:de:ae: 61:ea:42:2a:c7:c6:bd:40:a2:48:b2:e8:09:8d:fa: e9:0e:12:e0:24:92:52:7a:79:ff:84:ab:c3:b5:74: 72:32:37:2d:b2:e0:2c:4f:e3:cb:6e:45:23:01:a5: 92:03:14:5e:6e:6b:12:8c:2f:05:a4:8f:0c:9b:ef: 8a:16:e8:9e:82:3a:7e:75:4a:0b:37:f9:59:bb:78: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:77:7B:B3:F8:A6:66:9F:D9:3A:95:81:72:50:EE:48:B7:B9:0C:50 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.238.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:7f:ae:90:8f:62:49:6a:01:c5:75:5f:23:1c:2c:d8:78:9b: 6c:15:e4:f9:6b:e7:96:7e:13:38:9e:60:68:2c:bb:3c:e4:a3: f7:c8:2a:5f:34:02:42:36:57:2a:1a:ad:f4:6b:1e:8b:28:b2: ec:44:7a:42:42:01:0d:0b:af:af:ab:8b:e4:03:90:6b:0d:91: 56:bc:85:82:71:89:00:d1:cd:5a:0d:b7:09:59:54:60:3c:21: 53:5c:b5:5c:6a:7b:d6:3a:a8:11:2e:08:93:fd:12:5d:39:26: a4:58:32:cd:3d:67:eb:fd:a5:b1:06:4b:0c:7d:f5:fc:64:66: be:9b:1d:0c:71:2c:11:a6:13:5a:75:54:dd:22:9f:83:4f:7c: 27:2c:97:d3:86:28:d2:1e:fa:3b:e0:00:e8:47:4a:5b:81:b4: f8:7a:cf:e0:13:8b:83:a9:9b:0e:b8:28:4b:c4:61:22:76:09: 2f:1c:1e:64:a3:92:6e:20:80:92:88:6a:16:1e:4b:83:f9:af: 02:bb:b7:73:6d:1d:b7:17:ff:1f:a4:6b:a8:35:91:71:34:e1: f8:4c:79:5e:15:d8:b8:96:03:b4:d6:0e:66:b5:b5:d0:01:1f: a4:ee:f2:1b:06:2b:9c:32:6c:f5:eb:19:6b:ab:70:0f:f0:50: 39:1b:a0:f2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPGHG8v9xmIkXF/+x/TXHNapvjPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNTA2MjUwOTU1MDFaFw0yNjA2MjQxMDAwMDFaMDMxMTAvBgNV BAMTKDVFNzc3QkIzRjhBNjY2OUZEOTNBOTU4MTcyNTBFRTQ4QjdCOTBDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoh29F7/xCb15PPe07/EFG2eFS Qlds9S6lPwA5V2kYBoo8ob3ZtSb60rnQvZRJS5rlr2qMOjBoiaMDqmJBbF9/v7c4 h9wrOIpJKCBbw0zeAyqGXfgeuyYGyrynUE9fj3M+ArlKTGRetjV4eRdcJF40BcDw kaAgX+fSa3QV8Bcj3jiTiG1jw0dQ+ogYN77wQga+RGtH9CsOd7arb3rliDc/MObT pVA+bVuI7ZpzsBf8/RLermHqQirHxr1Aokiy6AmN+ukOEuAkklJ6ef+Eq8O1dHIy Ny2y4CxP48tuRSMBpZIDFF5uaxKMLwWkjwyb74oW6J6COn51Sgs3+Vm7eGNrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXnd7s/imZp/ZOpWBclDuSLe5DFAwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxMWNhNjIwLWRhY2UtNGE5Zi1i OGU4LWEzYTJlNTgxNTAwZS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMzMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqe4wDQYJ KoZIhvcNAQELBQADggEBAD1/rpCPYklqAcV1XyMcLNh4m2wV5Plr55Z+EzieYGgs uzzko/fIKl80AkI2VyoarfRrHososuxEekJCAQ0Lr6+ri+QDkGsNkVa8hYJxiQDR zVoNtwlZVGA8IVNctVxqe9Y6qBEuCJP9El05JqRYMs09Z+v9pbEGSwx99fxkZr6b HQxxLBGmE1p1VN0in4NPfCcsl9OGKNIe+jvgAOhHSluBtPh6z+ATi4Opmw64KEvE YSJ2CS8cHmSjkm4ggJKIahYeS4P5rwK7t3NtHbcX/x+ka6g1kXE04fhMeV4V2LiW A7TWDma1tdABH6Tu8hsGK5wybPXrGWurcA/wUDkboPI= -----END CERTIFICATE-----Generated at Mon Jun 30 16:41:44 2025 by rpki-client