$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa File: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (raw, json) Hash identifier: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs= Subject key identifier: B4:6E:83:5C:3A:E8:B4:20:2D:96:AC:B8:E6:87:15:3B:E8:71:D0:6B Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 2DCA7E8F0B3D5CE6C59477F4F2A9519CF4947D4C Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa Signing time: Fri 13 Jun 2025 15:00:00 +0000 ROA not before: Fri 13 Jun 2025 14:55:00 +0000 ROA not after: Fri 12 Jun 2026 15:00:00 +0000 asID: 141622 IP address blocks: 103.161.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 13:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ca:7e:8f:0b:3d:5c:e6:c5:94:77:f4:f2:a9:51:9c:f4:94:7d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Jun 13 14:55:00 2025 GMT Not After : Jun 12 15:00:00 2026 GMT Subject: CN=B46E835C3AE8B4202D96ACB8E687153BE871D06B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:d6:98:57:d3:70:19:7e:53:f3:a7:a8:cb: 2f:69:e3:fc:79:ca:e8:18:6f:51:55:80:27:6f:3b: 73:a0:24:cb:dc:54:90:17:61:11:72:d7:86:d7:d5: 36:c7:00:4d:f2:f0:d6:2c:f4:96:ad:fe:d3:43:b6: e6:c2:40:20:8b:1c:c6:6d:5b:48:7c:38:c8:4c:7d: b2:38:33:3f:38:9d:a5:12:a2:79:f7:02:97:d2:0d: 44:7a:fc:74:b9:cb:30:31:70:e6:fb:9b:79:0a:08: c3:17:98:e1:32:50:b8:40:9c:53:36:a5:74:32:fe: e3:d0:d8:3b:43:3b:4d:7a:b5:cc:38:ed:7b:25:af: e9:45:86:45:28:58:d2:4b:cd:66:45:2a:88:77:aa: 99:85:22:5d:98:db:27:64:f9:1b:98:d0:d9:62:90: d0:5d:d6:3d:9b:52:05:0b:01:76:c4:05:e6:3e:7b: a2:48:ce:b8:58:92:7f:fa:28:89:1b:95:f7:30:6c: 0c:11:f3:d9:ab:c2:24:9c:d7:e8:44:5f:47:55:24: f8:b5:6a:67:66:b5:21:fa:ca:d9:50:90:b6:7c:1d: d6:2d:e6:b6:18:4b:d7:4e:6e:4d:4c:1b:b9:5b:b1: 92:bb:c0:dc:14:48:83:6e:a3:c0:f1:bc:9f:cc:9a: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6E:83:5C:3A:E8:B4:20:2D:96:AC:B8:E6:87:15:3B:E8:71:D0:6B X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.195.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:68:a1:cf:79:c0:c4:9b:e8:09:c8:9a:4b:bd:43:a3:29:2e: 8f:ef:f4:1b:b6:e0:01:2d:3e:f5:62:76:47:46:e2:1c:a0:89: 2d:96:bb:2c:24:42:5b:cf:57:0a:57:82:54:e1:2a:59:a6:1d: ff:3c:ed:ed:36:27:2f:cb:8b:01:7a:e0:23:b8:a6:24:1b:8c: 36:d2:2f:94:b2:c0:20:ba:c2:11:af:28:7f:54:6c:dd:84:64: 78:06:00:88:bc:7a:f6:dd:8a:a7:47:9f:37:eb:dc:0c:7b:af: f7:30:92:22:54:5f:3b:9a:ee:8d:77:13:86:12:d8:46:5e:8b: 6d:2e:7a:71:0a:8a:51:93:a2:08:36:00:a6:a6:71:f2:02:ff: e1:e9:0e:18:b4:67:e5:ee:f3:eb:9e:df:90:a4:14:6e:fa:69: a1:1d:b3:38:a6:5e:38:f0:57:f4:54:01:77:cc:5b:a7:02:7c: 34:c4:a7:a0:28:aa:1d:10:8b:26:53:ab:8f:1f:5a:27:3c:58: 8f:19:90:9c:b1:39:35:71:11:e7:a8:ac:20:d5:97:81:b9:23: 5a:38:c5:fb:69:90:3c:ab:67:7e:11:55:f8:9f:f9:55:71:c2: c3:0b:71:08:4c:0e:9c:10:5b:ab:b7:00:30:1e:b7:7d:74:ef: bf:c5:85:6d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULcp+jws9XObFlHf08qlRnPSUfUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTA2MTMxNDU1MDBaFw0yNjA2MTIxNTAwMDBaMDMxMTAvBgNV BAMTKEI0NkU4MzVDM0FFOEI0MjAyRDk2QUNCOEU2ODcxNTNCRTg3MUQwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn39aYV9NwGX5T86eoyy9p4/x5 yugYb1FVgCdvO3OgJMvcVJAXYRFy14bX1TbHAE3y8NYs9Jat/tNDtubCQCCLHMZt W0h8OMhMfbI4Mz84naUSonn3ApfSDUR6/HS5yzAxcOb7m3kKCMMXmOEyULhAnFM2 pXQy/uPQ2DtDO016tcw47Xslr+lFhkUoWNJLzWZFKoh3qpmFIl2Y2ydk+RuY0Nli kNBd1j2bUgULAXbEBeY+e6JIzrhYkn/6KIkblfcwbAwR89mrwiSc1+hEX0dVJPi1 amdmtSH6ytlQkLZ8HdYt5rYYS9dObk1MG7lbsZK7wNwUSINuo8DxvJ/MmiJrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUtG6DXDrotCAtlqy45ocVO+hx0GswHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmZiMjI4LWZkMDUtNGFmZC04 N2JkLWVkNTgwYjU1MDM2Zi8wLzMxMzAzMzJlMzEzNjMxMmUzMTM5MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnocMwDQYJ KoZIhvcNAQELBQADggEBAFtooc95wMSb6AnImku9Q6MpLo/v9Bu24AEtPvVidkdG 4hygiS2WuywkQlvPVwpXglThKlmmHf887e02Jy/LiwF64CO4piQbjDbSL5SywCC6 whGvKH9UbN2EZHgGAIi8evbdiqdHnzfr3Ax7r/cwkiJUXzua7o13E4YS2EZei20u enEKilGTogg2AKamcfIC/+HpDhi0Z+Xu8+ue35CkFG76aaEdszimXjjwV/RUAXfM W6cCfDTEp6Aoqh0QiyZTq48fWic8WI8ZkJyxOTVxEeeorCDVl4G5I1o4xftpkDyr Z34RVfif+VVxwsMLcQhMDpwQW6u3ADAet31077/FhW0= -----END CERTIFICATE-----Generated at Mon Jun 30 08:58:11 2025 by rpki-client